DPI Practice Test 15 — 15 Questions

Question 1

An organization is evaluating its vendor risk management process using the 'Optimize and automate' guiding principle. Manual spreadsheet tracking of third-party compliance certificates has led to missed renewals. Which tool configuration best applies this principle?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Implement an automated vendor risk portal with automated alerting for certificate expirations and integrated scoring.. The 'Optimize and automate' guiding principle in DPI (Digital and Process Innovation) emphasizes using technology to streamline and automate repetitive, error-prone tasks. An automated vendor risk portal with alerting and integrated scoring directly applies this by replacing manual spreadsheet tracking with automated certificate expiration alerts and continuous risk scoring, reducing missed renewals and human error. This aligns with the principle's goal of improving efficiency, accuracy, and scalability in vendor risk management.

Answer

Switch from Excel spreadsheets to a shared Microsoft Word document.

Answer

Hire two additional compliance analysts to manually check spreadsheets daily.

Answer

Eliminate vendor risk reviews to speed up procurement.

Question 2

During a high-severity incident review in Jira Service Management, the incident commander realizes that strict adherence to an outdated change management compliance policy prevented a rapid hotfix. How should the 'Think and work holistically' principle be applied to resolve this GRC conflict?

Accepted Answer

Redesign the end-to-end value stream by integrating risk evaluation criteria directly into automated emergency change models.. Redesigning the end-to-end value stream by integrating risk evaluation criteria directly into automated emergency change models applies holistic thinking by addressing the root cause: the outdated policy that conflicts with rapid incident response. This approach balances compliance and speed by embedding risk assessment into the change process, enabling fast hotfixes while maintaining governance. It resolves the GRC conflict by aligning the value stream with both operational needs and risk management.

Answer

Bypass the change advisory board (CAB) entirely for all future incidents without updating the formal risk policy.

Answer

Escalate the compliance officer's authority to veto any emergency changes to protect system stability.

Answer

Outsource incident response to a third party to avoid internal policy conflicts.

Question 3

A company's internal audit department discovers that several cloud storage buckets on AWS are publicly accessible. The board demands immediate corrective action. Which DPI domain concept is primarily invoked here?

Accepted Answer

Governance oversight and risk management compliance. The discovery of publicly accessible cloud storage buckets represents a governance failure where oversight and risk management controls were not properly enforced. DPI's governance domain concept ensures that policies, controls, and compliance mechanisms are in place to manage risk across the organization. The board's demand for corrective action is a governance response to a risk management gap.

Answer

Agile software feature backlog grooming

Answer

Customer satisfaction survey distribution

Answer

Office supply inventory replenishment

Question 4

Which TWO of the following actions best demonstrate the principle 'Focus on value' in an IT governance framework? (Choose two.)

Accepted Answer

Measuring the success of a GRC program by the reduction of actual business risk and improved stakeholder trust.. Option B is correct because 'Focus on value' means governance and GRC efforts are judged by outcomes that matter to the business, such as measurable reduction of actual business risk and stronger stakeholder trust, rather than by activity volume or checkbox compliance. Option D is correct because directing security spending toward protecting critical customer data and core revenue-generating value streams aligns controls and investments with the organization's highest-value assets and mission, which is the essence of value-focused governance. The unmarked options fail this principle: A destroys value by eliminating risk management for short-term returns, C misallocates budget to paperwork instead of protecting systems, and E implements controls for auditor appeasement without regard to protecting business assets, which is compliance theater rather than value creation.

Answer

Eliminating all risk management activities to maximize short-term financial returns at any cost.

Answer

Spending 90% of the IT budget on administrative paperwork rather than system security.

Answer

Implementing compliance controls solely because an auditor asked for them, regardless of whether they protect business assets.

Question 5

An organization conducts a SWOT analysis (Strengths, Weaknesses, Opportunities, Threats) as part of a continual improvement assessment. The team identifies that a key competitor is releasing innovative AI-driven service desks, which threatens market share. In which SWOT category does this finding belong?

Accepted Answer

Threat. In SWOT analysis, a Threat is any external negative factor that could harm the organization's competitive position or performance. A competitor releasing innovative AI-driven service desks is an external development outside the organization's control that endangers market share, which is the textbook definition of a Threat. It is not internal (Strength/Weakness) and it is negative, not positive (Opportunity).

Answer

Opportunity

Answer

Strength

Answer

Weakness

Question 6

A transformation team is utilizing Jira Align to structure a multi-year organizational roadmap. According to ITIL 4 DPI, what is the primary role of planning in this context?

Accepted Answer

Determining how to use resources and map out actionable steps to achieve the vision. Planning establishes the path, resources, and timelines required to achieve the established direction.

Answer

Auditing historical incident trends to verify past SLA compliance

Answer

Providing the mandate and high-level governance rules for the portfolio

Answer

Executing automated software deployments via Jira CI/CD integrations

Question 7

An organization is evaluating its current value streams to plan for a major product launch. What is the most effective way to identify value-adding steps versus non-value-adding steps?

Accepted Answer

Evaluate each step from the perspective of what the customer is willing to pay for.. Value stream mapping distinguishes value-adding from non-value-adding steps by evaluating each activity from the customer's perspective — specifically, whether the customer would be willing to pay for it. Steps that directly transform the product or service toward what the customer values are value-adding; everything else (waiting, rework, approvals that don't change the outcome) is waste to be reduced or eliminated.

Answer

Focus solely on software development coding hours.

Answer

Ask internal managers which tasks take the most time to complete.

Answer

Assume all administrative sign-offs are critical value-add steps.

Question 8

When applying the ITIL Continual Improvement model, what is the primary purpose of asking 'What is the vision?'

Accepted Answer

To ensure that improvement initiatives align with business objectives and strategic context.. The first step of the ITIL Continual Improvement model asks 'What is the vision?' to ensure that improvement efforts are anchored to the organization's strategic direction and business objectives. Without this alignment, improvements may optimize the wrong things or deliver local gains that conflict with enterprise goals. It sets the context and scope for everything that follows in the improvement cycle.

Answer

To establish metrics for measuring past operational performance.

Answer

To identify root causes of recent major incidents.

Answer

To procure external toolsets for workflow automation.

Question 9

A service provider is designing a new value stream for incident management. During value stream planning, which approach best ensures that waste is minimized and flow is maximized?

Accepted Answer

Analyzing the current state value stream to identify constraints, bottlenecks, and non-value-adding activities.. Analyzing the current state value stream is the foundational step in value stream planning to identify constraints, bottlenecks, and non-value-adding activities. This analysis provides the data needed to target improvements, minimize waste, and maximize flow. Without understanding the current state, any automation or changes may not address the real issues and could even exacerbate waste.

Answer

Automating all processes immediately before analyzing the current workflow.

Answer

Eliminating customer feedback loops to speed up internal processing times.

Answer

Mapping every single administrative approval step as a critical value-adding activity.

Question 10

An IT strategy mandates a shift toward cloud-first infrastructure. During operational planning, managers realize staff lack necessary cloud architecture skills. What planning action should be taken?

Accepted Answer

Incorporate targeted training and upskilling programs into the operational plan.. When a strategic shift to cloud-first infrastructure reveals a skills gap, the operational plan must incorporate targeted training and upskilling so staff can execute the strategy. Strategy without capability development is just aspiration; the operational plan is where resource, timeline, and capability requirements are addressed. Training programs close the gap between current competencies and the competencies the strategy demands.

Answer

Outsource all IT management and fire the internal staff.

Answer

Abandon the cloud strategy immediately.

Answer

Force existing staff to figure it out without any training support.

Question 11

An executive team is designing a new digital product strategy. According to ITIL 4 DPI, what is the significance of the governance structure in enabling this strategy?

Accepted Answer

Governance ensures ethical value realization, risk optimization, and adherence to stakeholder expectations. Governance ensures that the strategy is directed, monitored, and evaluated to ensure compliance, value creation, and risk management.

Answer

Governance guarantees 100% immunity from external cyber attacks

Answer

Governance replaces the need for any operational management teams

Answer

Governance writes the software code and configures CI/CD pipelines in GitLab

Question 12

An organization is using the ITIL Continual Improvement Model. What is the first step in this model when initiating a new improvement effort?

Accepted Answer

What is the vision? (Establishing strategic alignment and context). The ITIL Continual Improvement Model begins with 'What is the vision?' because every improvement effort must be anchored to the organization's strategic direction, mission, and business objectives before any tactical work begins. This first step establishes the context, scope, and desired outcomes so that subsequent steps (current state, target state, plan, act, evaluate) remain aligned to value creation. Without a clear vision, improvement initiatives risk becoming disconnected technical exercises.

Answer

Who should be fired for last month's major incident?

Answer

What database management system is currently installed?

Answer

How many servers should we decommission today?

Question 13

An enterprise strategy committee is reviewing why previous improvement initiatives failed to deliver sustained value. According to ITIL 4 DPI key concepts, which TWO failures commonly undermine improvement efforts?

Accepted Answer

Failing to anchor improvements in a clear understanding of the current state and vision. Option A is correct because ITIL 4's DPI (Direct, Plan and Improve) emphasizes that improvement must start from a clear understanding of the current state and a defined vision of the desired outcome; without this anchor, initiatives drift and lose focus, which is a common cause of failure. Option D is correct because continual improvement in ITIL 4 is an ongoing organizational capability embedded in the value system, not a time-boxed project; treating it as a one-off effort means gains are not sustained once the project ends. Option B is not a failure but a success factor, since empirical data and customer feedback are essential to measuring value realization. Option C is also a success factor, as involving operational staff in workflow design improves relevance and adoption. Option E is likewise a success factor, because aligning improvement goals with strategic direction ensures improvements deliver real value.

Answer

Using empirical data and customer feedback to measure value realization

Answer

Involving operational staff directly in designing workflow improvements

Answer

Establishing clear alignment between improvement goals and the strategic direction

Question 14

A newly appointed Chief Transformation Officer wants to evaluate whether the organization's current improvement portfolio in ServiceNow Strategic Portfolio Management is delivering return on investment. According to DPI, which foundational question is being addressed?

Accepted Answer

Did we get there? (Evaluating progress and value realization against objectives). The DPI framework revolves around key questions such as 'Where are we now?', 'Where do we want to be?', and 'Did we get there?'

Answer

How many lines of code were written yesterday by junior developers?

Answer

What is the exact physical temperature of server rack 4?

Answer

Which external vendor provides the cheapest coffee for the breakroom?

Question 15

A company's risk management department operates independently of the enterprise architecture team. As a result, new software purchased by architecture frequently fails security risk reviews. Which guiding principle should be used to rectify this disconnect?

Accepted Answer

Collaborate and promote visibility. The disconnect is a communication and silo problem: risk management and architecture are not sharing information, so purchases fail reviews. 'Collaborate and promote visibility' directly addresses breaking silos and ensuring cross-team information flow. Applying this principle means architecture and risk teams work together early, so security requirements are known before purchases are made.

Answer

Focus on value

Answer

Optimize and automate

Answer

Keep it simple and practical