ITIL4F Practice Exam 67 — 20 Questions

Question 1

An organization has implemented a new incident management process that reduces mean time to restore service (MTRS). However, the change caused confusion among staff due to unclear role definitions. Which dimension was neglected?

Accepted Answer

Organisations and People. The confusion among staff due to unclear role definitions directly points to the 'Organizations and People' dimension, which covers roles, responsibilities, culture, and competencies. While the new incident management process improved MTRS (a process outcome), neglecting to define who does what undermines adoption and effectiveness, as people are the ones executing the process.

Answer

Value Streams and Processes

Answer

Information and Technology

Answer

Partners and Suppliers

Question 2

Which of the following is an example of an output?

Accepted Answer

A monthly financial report. An output is a tangible, deliverable result produced by an activity or process. A monthly financial report is a concrete, physical or electronic artifact that can be handed over, stored, and verified, making it a clear example of an output in ITIL 4.

Answer

Increased customer satisfaction

Answer

Improved employee morale

Answer

Reduced time to market

Question 3

A service provider guarantees 99.9% uptime for a critical application. This is an example of:

Accepted Answer

Warranty. A 99.9% uptime guarantee is a formal commitment to the availability and capacity of the service, which directly aligns with the ITIL 4 concept of 'Warranty'. Warranty ensures the service will be available, secure, and have sufficient capacity to meet agreed terms, often expressed as a Service Level Agreement (SLA) metric. This is distinct from 'Utility', which defines what the service does (its functionality), not how reliably it is delivered.

Answer

Utility

Answer

Outcome

Answer

Value

Question 4

Which of the following is a PESTLE factor?

Accepted Answer

Technological advancements. PESTLE is a strategic analysis framework used in the 'Four Dimensions of IT Service Management' to assess external factors that can impact service management. Technological advancements are explicitly one of the six PESTLE factors (Political, Economic, Social, Technological, Legal, Environmental), making option A correct because it directly corresponds to the 'Technological' dimension of the model.

Answer

Incident management procedures

Answer

Service level agreements

Answer

Organisational culture

Question 5

An IT team is designing a new service. They decide to reuse an existing process rather than creating a new one. Which ITIL guiding principle is being applied?

Accepted Answer

Start where you are. The principle 'Start where you are' advises leveraging existing assets, processes, and capabilities rather than building from scratch. By reusing an existing process for the new service, the team avoids unnecessary rework and reduces risk, directly applying this principle to optimize resource use.

Answer

Focus on value

Answer

Collaborate and promote visibility

Answer

Progress iteratively with feedback

Question 6

Which THREE of the following are consequences of neglecting the Information and Technology dimension?

Accepted Answer

Data security breaches. Neglecting the Information and Technology dimension directly leads to data security breaches because without proper security controls, encryption, and access management, sensitive data becomes exposed to unauthorized access or theft. Outdated technology results from failing to maintain hardware and software lifecycles, causing vulnerabilities and incompatibility with current standards. Inaccurate data arises when data management practices are ignored, leading to corruption, duplication, or loss of integrity across systems.

Answer

Inefficient workflows

Answer

Poor vendor relationships

Question 7

Which dimension of IT Service Management focuses on the culture, roles, and skills needed to deliver services?

Accepted Answer

Organisations and People. The 'Organisations and People' dimension is correct because it specifically addresses the human aspects of service management, including organizational culture, the structure of teams, and the competencies and roles required to design, deliver, and improve services. In ITIL 4, this dimension ensures that the right people with the right skills are in place and that the culture supports collaboration and continuous improvement, which is critical for effective service delivery.

Answer

Information and Technology

Answer

Partners and Suppliers

Answer

Value Streams and Processes

Question 8

A medium-sized e-commerce company uses a hybrid cloud infrastructure with on-premises servers and AWS. The service desk handles around 2000 tickets per month, but recently there has been a 30% increase in incidents related to 'application timeouts'. The operations team noticed that the on-premises application servers often reach 90% CPU utilization during peak hours, while the AWS instances are underutilized. The company has a policy to use AWS for auto-scaling, but the auto-scaling group is configured with a static threshold of 80% CPU and a cooldown period of 5 minutes. Additionally, the load balancer uses a round-robin algorithm, sending traffic equally to on-prem and cloud instances. The application is designed to be stateless. The company wants to resolve the timeouts using ITIL best practices, considering the four dimensions. What is the most appropriate course of action?

Accepted Answer

Change the load balancer algorithm to least connections, adjust auto-scaling threshold to 70% CPU with a 2-minute cooldown, and update the incident management process to include a step for reviewing auto-scaling metrics.. Option A is correct because it addresses the root cause of the timeouts by fixing the load distribution (least connections algorithm directs traffic to less loaded instances) and tuning the auto-scaling threshold (70% CPU with 2-minute cooldown) to react faster to load spikes, while also embedding a review of auto-scaling metrics into the incident management process to align with the ITIL4 Four Dimensions (specifically Information & Technology and Processes). This directly resolves the imbalance where on-prem servers hit 90% CPU while AWS instances are underutilized, and the stateless application design supports this change.

Answer

Increase the CPU threshold for auto-scaling to 90% and reduce cooldown to 2 minutes, and retrain the operations team on monitoring tools.

Answer

Create a training program for developers to optimize application code to reduce CPU usage.

Answer

Move all application servers to AWS and decommission on-premises servers, simplifying infrastructure.

Question 9

A multinational retail company has recently migrated its e-commerce platform to a new cloud infrastructure. The IT operations team consists of 15 members distributed across three regions (Americas, EMEA, APAC). They use a centralized service desk tool that logs all incidents and service requests. Over the past month, the number of incidents has increased by 30%, primarily related to authentication failures and slow page load times. The service desk has been creating workarounds for each incident but has not yet identified any root causes. The IT manager wants to reduce the incident volume and improve service stability. The team is also under pressure to keep costs low. Which course of action should the IT manager take first?

Accepted Answer

Implement a problem management practice to analyze recurring incidents and find root causes. Option B is correct because the IT manager should first implement a problem management practice to systematically analyze the recurring authentication failures and slow page load times. This aligns with ITIL 4's guiding principle of 'focus on value' by addressing root causes rather than symptoms, reducing incident volume long-term without additional cost. The 30% incident increase and lack of root cause identification indicate a reactive approach, and problem management directly targets this gap to improve service stability.

Answer

Hire additional service desk agents to handle the increased incident volume

Answer

Conduct a training session for all IT staff on incident management best practices

Answer

Upgrade the service desk tool to automate incident resolution

Question 10

You are the IT service continuity manager for a financial services firm. The firm has a critical trading application that must be available during market hours. A recent risk assessment identified that the application's primary data center is in a flood-prone area. The recovery time objective (RTO) is 2 hours, and the recovery point objective (RPO) is 15 minutes. The current disaster recovery plan involves restoring the application from backups stored in a different region, which takes approximately 3 hours. The backup frequency is hourly. The firm is considering implementing a synchronous replication to a secondary data center to improve recovery times. However, the network latency between the two data centers is 10 milliseconds, which may impact application performance. What is the MOST appropriate action to ensure compliance with the RTO and RPO?

Accepted Answer

Implement synchronous replication to the secondary data center and update the disaster recovery plan. The current recovery plan fails to meet the RTO of 2 hours (restore takes 3 hours) and the RPO of 15 minutes (hourly backups). Synchronous replication writes data to both data centers simultaneously, ensuring zero data loss (RPO=0) and enabling near-instant failover, which can achieve the 2-hour RTO. The 10 ms latency is acceptable for most trading applications and is a trade-off for meeting the critical recovery objectives.

Answer

Accept the current recovery plan as the risk is low and focus on improving the backup process

Answer

Implement asynchronous replication with a 5-minute lag and test if the RPO can be met

Answer

Increase the backup frequency to every 5 minutes and test the restore process to ensure it meets the RTO

Question 11

A financial services firm uses a legacy on-premise system for customer account management. The IT team is small, with three administrators responsible for all changes, incidents, and problems. Recently, a change to the system's database schema caused a major outage lasting 4 hours. The post-mortem revealed that the change was not properly tested and was implemented without approval. The IT manager wants to prevent such incidents in the future while maintaining agility. The team often needs to make urgent changes to fix critical bugs. What should the IT manager do?

Accepted Answer

Implement a change enablement practice with standard, normal, and emergency change types. Option A is correct because implementing a change enablement practice with standard, normal, and emergency change types provides a structured yet flexible framework. Standard changes (pre-approved, low-risk) allow routine tasks to proceed quickly, normal changes require approval and testing, and emergency changes can be fast-tracked with post-implementation review. This balances agility with control, directly addressing the root cause (untested, unapproved change) while enabling urgent bug fixes.

Answer

Require all changes to go through a change advisory board (CAB) meeting

Answer

Document the incident but take no further action to avoid bureaucracy

Answer

Restrict change implementation to only the senior administrator

Question 12

A medium-sized e-commerce company uses a legacy on-premise ordering system. The system experiences intermittent slowdowns during peak hours, causing customer frustration. The IT team has been asked to improve performance. They have identified that the database queries are inefficient and that the system's architecture is tightly coupled. The team proposes three options: (1) Rewrite the entire system using microservices on the cloud, (2) Optimize the most critical database queries and add caching, or (3) Replace the entire database with a NoSQL solution. The company has limited budget and cannot afford long downtime. Which course of action best aligns with the ITIL guiding principles?

Accepted Answer

Optimize the most critical database queries and add caching. Option D is correct because it aligns with the ITIL guiding principles of 'Start where you are' and 'Progress iteratively with feedback'. By optimizing the most critical database queries and adding caching, the company addresses the root cause of the performance issue (inefficient queries) with minimal cost and downtime, avoiding the high risk and expense of a full system rewrite or database replacement.

Answer

Rewrite the entire system using microservices on the cloud

Answer

Replace the entire database with a NoSQL solution

Answer

Do nothing and accept the performance issues

Question 13

You are the IT service manager for a medium-sized e-commerce company that processes online orders. The company uses a three-tier application architecture: a web server, an application server, and a database server. Recently, the company has been experiencing intermittent service degradation during peak hours (12:00-14:00 and 18:00-20:00), causing slow page loads and occasional timeouts. The monitoring system shows that CPU utilization on the application server spikes to 95% during these periods, while the web server and database server remain below 60%. The incident management team has been opening multiple tickets for the same issue, but each ticket is resolved by restarting the application server, which temporarily restores performance. The problem management team has been assigned to investigate the root cause. They have discovered that a recent software update to the application introduced a memory leak that gradually consumes resources until the server becomes overloaded. The development team has identified a fix but needs two weeks to fully test and deploy it. Meanwhile, the business is losing revenue due to poor performance. Which of the following actions should the problem management team take FIRST?

Accepted Answer

Implement a workaround, such as scheduling a restart of the application server every hour during peak times.. Option B is correct because the problem management team should first implement a workaround to restore service and minimize business impact while the permanent fix is being developed. Restarting the application server every hour during peak times directly addresses the memory leak symptom by freeing accumulated memory, preventing CPU saturation at 95% and avoiding timeouts. This aligns with ITIL 4's guidance to apply a workaround as an interim measure when a known error exists and a fix is pending.

Answer

Conduct a root cause analysis to fully understand the memory leak.

Answer

Increase the application server's CPU capacity to handle the load.

Answer

Escalate the incident to the service desk for faster resolution.

Question 14

A medium-sized e-commerce company has implemented ITIL 4 and uses the Service Value System (SVS) to manage its services. The company recently experienced a major incident where the checkout service became unavailable for two hours due to a failed deployment. The incident was resolved by rolling back the deployment. The IT manager wants to prevent similar incidents by improving the deployment practice. According to the ITIL 4 SVS, which component should the IT manager focus on to systematically improve the deployment process?

Accepted Answer

The continual improvement practice. The continual improvement practice is the correct focus because ITIL 4's SVS explicitly designates continual improvement as the mechanism for identifying and implementing systematic enhancements to processes, including deployment. In this scenario, the failed deployment caused a major incident, and the IT manager needs a structured, iterative approach to analyze root causes, define improvement objectives, and embed changes into the deployment practice. Without continual improvement, the organization lacks a formal feedback loop to prevent recurrence.

Answer

Governance

Answer

The guiding principles

Answer

The service value chain activities

Question 15

A global financial services firm is expanding its online trading platform to handle increased market volatility. The platform currently uses a monolithic architecture hosted in a private cloud. The IT team has noticed that during peak trading hours, the system experiences latency spikes and occasional timeouts. The business requires 99.99% uptime and rapid scaling to handle sudden volume surges. The team has been asked to propose improvements within the 'Information and Technology' dimension. They are evaluating several options. Which course of action best addresses the symptoms while aligning with the four dimensions?

Accepted Answer

Migrate to a microservices architecture using container orchestration and implement auto-scaling policies to handle demand spikes.. Option C directly addresses the root cause (monolithic architecture unable to scale dynamically) by migrating to microservices with container orchestration (e.g., Kubernetes) and auto-scaling policies. This aligns with the 'Information and Technology' dimension by redesigning the technology architecture to handle sudden volume surges, achieving 99.99% uptime through horizontal scaling and fault isolation, rather than vertical scaling or reactive processes.

Answer

Increase the capacity of existing servers by adding more CPU and RAM to handle peak loads.

Answer

Implement a new incident management process to reduce response times during outages.

Answer

Outsource the platform management to a third-party provider with proven uptime guarantees.

Question 16

You are the IT service manager for a mid-sized e-commerce company. The company has been experiencing intermittent service outages affecting the checkout process during peak hours. The monitoring system shows that the application server's CPU utilization spikes to 95% during these periods. The database server appears healthy. The incident management team has been creating multiple incidents for each outage, but no permanent fix has been implemented. The problem management team has identified that the application server's auto-scaling configuration is not triggering correctly due to a misconfigured threshold. However, changing the threshold requires a change request that must be approved by the Change Advisory Board (CAB), which meets only once a week. The business is losing revenue with each outage. What should you do first to minimize the impact of the issue while a permanent solution is being developed?

Accepted Answer

Implement a workaround by manually scaling the application server during peak hours to handle the load. Option B is correct because manually scaling the application server during peak hours provides an immediate workaround to handle the load, directly reducing the impact of the misconfigured auto-scaling threshold. This aligns with ITIL's guidance on using workarounds to restore service while a permanent fix is developed. The business is losing revenue with each outage, so the priority is to stabilize the service first, not to wait for a CAB meeting or to analyze the root cause.

Answer

Expedite the change request by requesting an emergency change approval from the CAB chair

Answer

Conduct a root cause analysis and document the problem in the known error database

Answer

Increase the priority of all related incidents to ensure faster response from the service desk

Question 17

A mid-sized e-commerce company, ShopFast, operates a 24/7 online store. Their IT service management is based on ITIL 4. Recently, they have been experiencing an increasing number of incidents where customers cannot complete purchases due to payment gateway timeouts. The payment gateway is provided by a third-party vendor, PaySecure. The IT team has checked the internal infrastructure and found no issues; network logs show that requests are reaching PaySecure but responses are delayed. The incident management process is followed, but each incident is handled individually without a systematic approach. The service level agreement (SLA) with PaySecure includes uptime guarantees, but the vendor claims the issue is on ShopFast's side. The IT manager wants to reduce the frequency and impact of these incidents. What is the BEST course of action?

Accepted Answer

Initiate a problem investigation to identify the root cause and work with PaySecure to implement a permanent solution.. Initiating a problem investigation (Option A) aligns with the ITIL 4 problem management practice, which aims to identify the root cause of recurring incidents. Since the internal infrastructure is healthy and the issue is with a third-party vendor's response delays, a systematic analysis with PaySecure is necessary to uncover the underlying cause (e.g., API timeout thresholds, network latency, or misconfigured retry logic) and implement a permanent fix, reducing incident frequency and impact.

Answer

Replace PaySecure with a different payment gateway provider immediately.

Answer

Request PaySecure to improve their service without further analysis.

Answer

Increase the priority of payment-related incidents to ensure faster resolution.

Question 18

A large e-commerce company is experiencing slow response times on its website during peak shopping hours. The IT team has identified that the database server is under high CPU load. They have tried scaling up the server resources, but the issue persists. The team suspects that inefficient database queries are the cause. The service owner wants to implement a solution that aligns with the ITIL guiding principles. The company has a limited budget for this initiative. Which course of action should the team take to address the problem most effectively?

Accepted Answer

Analyze and optimize the slow database queries identified by the database administrator.. Option B is correct because the root cause is inefficient database queries, not insufficient hardware. Optimizing queries directly addresses the high CPU load by reducing the processing required per query, aligning with the ITIL guiding principle of 'Focus on Value' by solving the actual problem without unnecessary expenditure. This approach also respects the limited budget, as query optimization typically requires only DBA time rather than costly infrastructure upgrades.

Answer

Upgrade to a more powerful database server with more CPUs.

Answer

Implement a caching layer to reduce database load.

Answer

Hire a database consultant to review the entire database architecture.

Question 19

You are the IT service manager for a multinational corporation that provides financial services. The company recently acquired a smaller fintech startup. The startup has its own IT infrastructure and processes, which are very different from the parent company's. The parent company uses a centralized IT service management system based on ITIL, while the startup uses a lightweight, DevOps-oriented approach. The CEO wants to integrate the startup's IT operations into the parent company's ITSM tool as quickly as possible to gain visibility and control. The startup's team is resistant, arguing that the parent company's processes are too bureaucratic and will slow them down. The parent company's IT team is frustrated because the startup is not following the established incident and change management processes. You have been asked to propose a course of action that aligns with ITIL guiding principles. Which option should you choose?

Accepted Answer

Establish a joint team to map the startup's current processes to ITIL best practices, then create a lightweight, integrated process that satisfies both parties, and roll it out incrementally with feedback loops.. Option D is correct because it directly applies the ITIL guiding principles of 'Start where you are' (by mapping the startup's existing DevOps processes), 'Collaborate and promote visibility' (via a joint team), and 'Progress iteratively with feedback' (incremental rollout with feedback loops). This approach avoids the resistance and disruption of forced adoption while creating a lightweight integrated process that satisfies both the need for visibility and the startup's agility requirements.

Answer

Allow the startup to keep their own processes but require them to report incidents and changes via email to a central coordinator.

Answer

Create a separate ITSM instance for the startup with full autonomy, and do not integrate until the startup grows.

Answer

Require the startup to adopt the parent company's processes immediately, with a one-month transition period and training.

Question 20

You are the ITIL process owner for a mid-sized e-commerce company. The company is experiencing frequent service outages due to configuration changes being made without proper review. The current change management process requires all changes to be approved by the Change Manager, but many developers bypass it because they consider it too slow. The company wants to reduce outages while maintaining development velocity. You have been asked to recommend a change to the change management process that aligns with ITIL guiding principles. Which option should you choose?

Accepted Answer

Implement a pre-approved 'standard change' category for common, low-risk changes, and pilot it with one team before expanding.. Option B is correct because it directly applies the ITIL guiding principle 'Start where you are' by piloting a standard change category with one team, and 'Optimize and automate' by pre-approving low-risk changes to reduce delays. This balances the need to reduce outages (by maintaining review for non-standard changes) while preserving development velocity (by eliminating unnecessary approval steps for common, low-risk changes).

Answer

Increase the number of approval levels to ensure all changes are reviewed by multiple stakeholders.

Answer

Eliminate the change management process entirely for low-risk changes and rely on peer review.

Answer

Automate the entire change approval process using a tool that routes approvals automatically.