DPI Practice Test 15 — 15 Questions

Question 1

An enterprise risk management (ERM) framework requires annual risk assessments across 500 IT services. The process takes 6 months, rendering the output obsolete by completion. Which ITIL 4 principle-driven strategy resolves this GRC flaw?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Replace annual monolithic risk reviews with continuous, automated risk monitoring integrated into CI/CD pipelines.. A 6-month monolithic risk cycle is inefficient. Shifting to continuous, iterative risk assessments aligns with 'Progress iteratively with feedback' and 'Optimize and automate'.

Answer

Conduct risk assessments only when a severe regulatory fine is issued.

Answer

Hire 10 more risk analysts to complete the annual spreadsheets in 3 weeks.

Answer

Abolish the ERM framework and rely entirely on intuition during major incidents.

Question 2

An IT strategy plan includes migrating core systems to the cloud. During value stream planning, the team identifies that legacy monolithic applications cannot be deployed incrementally. What is the recommended strategic planning adjustment?

Accepted Answer

Incorporate architectural refactoring (such as the strangler fig pattern) into the value stream plan.. When legacy monoliths block incremental value stream delivery, planning must include refactoring the monolith into microservices or strangler patterns to enable flow.

Answer

Lift-and-shift the monolith without changes and accept longer deployment lead times.

Answer

Cancel the cloud migration and maintain on-premise hardware indefinitely.

Answer

Deploy the monolith manually once every five years.

Question 3

A service provider is designing a new value stream for incident management. During value stream planning, which approach best ensures that waste is minimized and flow is maximized?

Accepted Answer

Analyzing the current state value stream to identify constraints, bottlenecks, and non-value-adding activities.. Value stream mapping identifies steps that add value versus waste, allowing teams to optimize flow and eliminate bottlenecks.

Answer

Automating all processes immediately before analyzing the current workflow.

Answer

Eliminating customer feedback loops to speed up internal processing times.

Answer

Mapping every single administrative approval step as a critical value-adding activity.

Question 4

A project manager wants to build early momentum for a new IT service management initiative by identifying enthusiastic supporters. What role should these supporters play in the communication plan?

Accepted Answer

Act as change champions who advocate for the value stream and provide peer-level support.. Early adopters and change champions act as trusted peers who help advocate for the change and gather local feedback.

Answer

Take over all administrative payroll duties for the entire IT department.

Answer

Write all enterprise software code without peer review.

Answer

Enforce strict compliance by auditing peer computer screens daily.

Question 5

Which TWO of the following indicators suggest an organization is failing to apply 'Think and work holistically'? (Choose two.)

Accepted Answer

The security team creates impenetrable firewalls without consulting the usability needs of customer-facing application teams.. Options A and C indicate siloed thinking and lack of holistic visibility across the organization.

Answer

Incident management post-mortems involve all stakeholder groups to determine root causes.

Answer

Cloud migration strategies take into account cost, security, operational readiness, and business value simultaneously.

Answer

The organization maintains regular communication channels between legal, HR, and IT departments.

Question 6

During a high-severity incident review in Jira Service Management, the incident commander realizes that strict adherence to an outdated change management compliance policy prevented a rapid hotfix. How should the 'Think and work holistically' principle be applied to resolve this GRC conflict?

Accepted Answer

Redesign the end-to-end value stream by integrating risk evaluation criteria directly into automated emergency change models.. Holistic thinking requires looking at the end-to-end value stream rather than isolated department silos (IT vs Compliance). Modifying the policy to include expedited emergency change paths links speed with governance.

Answer

Bypass the change advisory board (CAB) entirely for all future incidents without updating the formal risk policy.

Answer

Escalate the compliance officer's authority to veto any emergency changes to protect system stability.

Answer

Outsource incident response to a third party to avoid internal policy conflicts.

Question 7

A company is implementing ISO/IEC 27001 information security controls. Instead of trying to certify all 114 controls across 50 business units simultaneously, the CISO selects 10 critical controls for the core payment platform first. Which guiding principles are primarily being utilized?

Accepted Answer

Progress iteratively with feedback AND Focus on value. Selecting a subset of controls for a core platform is 'Progress iteratively with feedback' combined with 'Focus on value' (starting with payment platform value).

Answer

Start where you are AND Collaborate and promote visibility

Answer

Optimize and automate AND Keep it simple and practical

Answer

Think and work holistically AND Start where you are

Question 8

An executive team is assessing the relationship between governance and management in their digital transformation program. Which THREE statements correctly describe this relationship within ITIL 4 DPI?

Accepted Answer

Governance and management are distinct but complementary organizational functions. Governance sets direction and evaluates performance; management executes under governance; both are essential and must collaborate effectively.

Answer

Management operates independently with zero oversight from governance

Answer

Governance is responsible for writing daily operational code and deploying patches

Question 9

A service desk team is undergoing a major restructure, and morale is dropping due to uncertainty about job security. The change manager wants to establish a reliable feedback channel. Which mechanism best aligns with ITIL 4 effective communication?

Accepted Answer

Open Q&A drop-in sessions with leadership where staff can voice concerns and receive direct answers.. Effective communication in ITIL 4 requires two-way channels, such as regular 'ask me anything' sessions, rather than one-way broadcasts.

Answer

A strictly one-way executive broadcast newsletter published quarterly.

Answer

Posting static policy updates on the corporate intranet comment-disabled page.

Answer

An anonymous suggestion box with no commitment to reviewing or publishing responses.

Question 10

During the deployment of a new cloud-based Enterprise Resource Planning (ERP) platform, a regional office strongly resists abandoning their legacy spreadsheets, citing local workflow autonomy. According to organizational change management (OCM) methods, what is the best immediate approach for the change lead to take?

Accepted Answer

Engage the regional stakeholders to understand their specific workflow requirements and demonstrate how the ERP meets those needs.. Resistance should be investigated as a symptom of underlying concerns, not simply punished or ignored. Engaging resisters helps uncover valid operational gaps.

Answer

Bypass the regional office leadership entirely and disable access to the legacy spreadsheets at the network level.

Answer

Issue a formal compliance warning stating that continued use of legacy spreadsheets is a disciplinary offense.

Answer

Delay the global deployment indefinitely until the regional office voluntarily decides to change.

Question 11

An organization is establishing an enterprise GRC dashboard in PowerBI. The risk team wants to track 150 different Key Risk Indicators (KRIs). Executive leadership complains that the dashboard is overwhelming and useless for decision-making. Which guiding principle should be applied to redesign the dashboard?

Accepted Answer

Apply 'Focus on value' and 'Keep it simple and practical' to streamline the dashboard down to the critical few KRIs that directly impact strategic business objectives.. Too many metrics cause cognitive overload. Filtering down to the few vital metrics aligns with 'Focus on value' and 'Keep it simple and practical'.

Answer

Automate email alerts to send all 150 KRIs to executives every hour.

Answer

Add 50 more operational metrics to ensure absolute coverage of every IT asset.

Answer

Acknowledge the dashboard failure and abandon risk metric reporting entirely.

Question 12

A global bank is deploying a new AI-driven credit scoring system. The model's decision-making logic is a black box, creating potential regulatory compliance issues under fair lending laws. How should the enterprise apply ITIL guiding principles to address this GRC challenge?

Accepted Answer

Integrate Explainable AI (XAI) techniques, legal compliance reviews, and cross-functional validation into the model deployment lifecycle.. Explainable AI requires visibility, stakeholder collaboration, and holistic evaluation of regulatory impact. 'Collaborate and promote visibility' combined with risk governance is critical.

Answer

Deploy the black-box model immediately and address regulatory complaints only if auditors notice.

Answer

Outsource the credit scoring process entirely to an unregulated fintech startup.

Answer

Abandon all machine learning initiatives and return exclusively to manual paper-based scoring.

Question 13

An internal audit reveals that privileged access management (PAM) policies are frequently bypassed by systems administrators during critical outages. The security team wants to enforce rigid automated lockdowns. How should the 'Collaborate and promote visibility' and 'Think and work holistically' principles be combined to address this?

Accepted Answer

Engage system administrators and auditors together to design transparent, auditable 'break-glass' emergency access workflows.. Rigid lockdowns cause bypasses. Holistic thinking and collaboration require understanding *why* admins bypass controls during outages and co-creating break-glass procedures that maintain visibility without causing outages.

Answer

Outsource all outage troubleshooting to external vendors who are subject to PAM controls.

Answer

Suspend all PAM controls permanently so administrators can never be blocked during an outage.

Answer

Implement immediate automated termination for any admin who bypasses PAM, regardless of outage severity.

Question 14

A multinational organization is standardizing its IT operating model across culturally diverse regions. A centralized change plan fails in a specific subsidiary. What fundamental OCM error was likely made?

Accepted Answer

The change plan ignored local cultural nuances, communication norms, and regional stakeholder feedback.. Global change initiatives must account for local cultural nuances, regulatory environments, and regional communication norms rather than enforcing a rigid top-down model.

Answer

The project team failed to use agile software development methodologies for the hardware rollout.

Answer

The corporate intranet site used an outdated cascading style sheet design.

Answer

The IT service desk ticketing tool lacked automated incident routing rules.

Question 15

Which TWO of the following actions best demonstrate the ITIL 4 guiding principle 'Start where you are'? (Choose two.)

Accepted Answer

Conducting a baseline audit of existing legacy software before planning migration activities.. 'Start where you are' involves investigating the current state directly and reusing existing working practices. Options A and D directly reflect this.

Answer

Mapping out the complete end-to-end customer journey across multiple departments.

Answer

Establishing weekly cross-functional standup meetings between security and development teams.

Answer

Automating software deployment pipelines using GitHub Actions.