ITIL4F ITIL Management Practices — 15 Questions

Question 1

A service desk team is overwhelmed by repeated incidents caused by a known software bug that the vendor has not yet patched. The IT manager wants to reduce the number of incidents without waiting for the vendor. Which ITIL practice would directly help in reducing the impact of this known issue?

Accepted Answer

Create a known error record in Problem Management and provide a workaround. Option B is correct because Problem Management aims to identify the root cause of incidents and provide workarounds or permanent solutions. In this scenario, documenting a known workaround for the bug and communicating it to the service desk would reduce incident handling time and customer impact. Option A is wrong because Incident Management focuses on restoring normal service quickly, not on preventing recurring incidents. Option C is wrong because Change Enablement is used to implement changes, not to address known errors proactively. Option D is wrong because Service Level Management deals with agreements and targets, not technical workarounds.

Answer

Renegotiate service level targets with the customer in Service Level Management

Answer

Implement a faster incident resolution process in Incident Management

Answer

Submit a change request to Change Enablement to replace the software

Question 2

A company is designing a new service and wants to ensure that all IT services are described in a consistent manner. Which practice provides the framework for documenting service descriptions, including their functional and operational characteristics?

Accepted Answer

Service Catalog Management. Service Catalog Management is the correct practice because it provides the single source of consistent information on all agreed services, ensuring that every service is described with its functional and operational characteristics in a standardized format. This practice defines the service catalog structure, which includes service descriptions, service level agreements, and operational details, enabling consistent documentation across the IT organization.

Answer

Service Configuration Management

Answer

Service Level Management

Answer

IT Asset Management

Question 3

An organization wants to improve its ability to detect and respond to security incidents. Which practice should be enhanced to achieve this objective?

Accepted Answer

Information Security Management. Enhancing Information Security Management (ISM) directly improves an organization's ability to detect and respond to security incidents because ISM defines the policies, controls, and monitoring mechanisms (e.g., SIEM rules, intrusion detection signatures, and incident response playbooks) that enable proactive threat detection and structured response. While Incident Management handles the lifecycle of an incident once detected, ISM is the practice that establishes the security posture and detection capabilities in the first place.

Answer

Problem Management

Answer

Availability Management

Answer

Incident Management

Question 4

A service provider is implementing a new monitoring tool to track the performance of critical services. The tool will send alerts when performance thresholds are breached. Which practice is primarily responsible for defining these thresholds and acting on the alerts to ensure service performance?

Accepted Answer

Monitoring and Event Management. Monitoring and Event Management is the practice responsible for defining performance thresholds and acting on alerts because it systematically monitors services, detects threshold breaches as events, and triggers automated or manual responses to maintain service performance. The new monitoring tool directly implements this practice by generating alerts when predefined thresholds are exceeded, enabling proactive management of service health.

Answer

Service Level Management

Answer

Availability Management

Answer

Service Desk

Question 5

A company is undergoing a major organizational change that will affect several IT services. The change manager wants to ensure that all changes are assessed for risk and that the change schedule is maintained. Which practice provides the formal process for managing changes in a controlled manner?

Accepted Answer

Change Enablement. Change Enablement is the ITIL 4 practice that provides the formal, controlled process for assessing, approving, and scheduling changes to IT services. It ensures that all changes are evaluated for risk, and that the change schedule is maintained, which directly addresses the change manager's requirements.

Answer

Deployment Management

Answer

Release Management

Answer

Transition Planning and Support

Question 6

Which TWO of the following are objectives of Supplier Management?

Accepted Answer

Ensure that suppliers and their services are aligned with the business needs and objectives. Supplier Management aims to ensure that suppliers and their services are aligned with the business needs and objectives, which is a core objective stated in the ITIL 4 framework. This alignment ensures that the organization obtains value from its suppliers while meeting strategic goals. Option A directly reflects this objective, making it correct.

Answer

Define and agree on service level targets with customers

Answer

Manage the financial assets of the organization

Answer

Manage the service desk to handle supplier-related incidents

Question 7

Which THREE of the following are key activities of Service Configuration Management?

Accepted Answer

Identifying and documenting configuration items (CIs). Option A is correct because identifying and documenting configuration items (CIs) is a foundational activity of Service Configuration Management. It ensures that all components of the IT infrastructure, including hardware, software, and documentation, are uniquely identified and recorded in the configuration management database (CMDB) to support control and traceability.

Answer

Authorizing and scheduling changes to CIs

Answer

Defining service level targets with customers

Question 8

Refer to the exhibit. The service desk has resolved a high-priority incident by restarting the mail server, but the problem record shows three related incidents. What should the problem manager do next?

Accepted Answer

Analyze the incidents to identify the root cause and define a workaround. Option A is correct because the problem manager's role is to analyze incidents linked to a problem record to identify the underlying root cause, not just resolve individual incidents. Restarting the mail server resolved the symptoms (the high-priority incident), but the problem record shows three related incidents, indicating a recurring underlying issue that requires root cause analysis (RCA) to prevent future occurrences. Defining a workaround is a standard interim step before a permanent solution is implemented, aligning with ITIL 4's problem management practice.

Answer

Escalate the problem to a higher priority

Answer

Close the problem record as the incidents are resolved

Answer

Implement a permanent solution immediately

Question 9

Refer to the exhibit. The monthly report shows that the availability target was met but the response time target was not. What should the service provider do to improve response time?

Accepted Answer

Analyze the incident from March 15 to identify the root cause of slow transactions. Option D is correct because the incident from March 15 is the only event where response time degraded (slow transactions), and analyzing its root cause is the proper ITIL problem management practice. Simply closing the incident (A) ignores the underlying issue, while adjusting targets (B, C) does not fix the actual performance problem. Root cause analysis (D) enables the service provider to identify and resolve the specific technical bottleneck, such as database contention or network latency, that caused the slow response.

Answer

Close the incident as it is resolved and focus on other issues

Answer

Increase the response time target to 99%

Answer

Adjust the availability target to 99.95%

Question 10

A service desk team is receiving an increasing number of incidents related to a recently deployed application. Initial analysis shows that many incidents are due to users not understanding how to use the application's new features. According to ITIL 4, which practice would be MOST effective in reducing these incidents?

Accepted Answer

Service Desk. The Service Desk practice is the correct answer because it serves as the single point of contact for users, providing guidance and support for application usage. By offering immediate assistance and training on new features, the service desk directly addresses the root cause of the incidents—user unfamiliarity—rather than just reacting to the symptoms. This proactive approach reduces the volume of incidents by improving user competence and confidence.

Answer

Incident Management

Answer

Change Enablement

Answer

Service Request Management

Question 11

An organization is designing a new service. The service owner wants to ensure that the service can be operated within agreed service levels. Which ITIL management practice should be applied to define the acceptable performance levels?

Accepted Answer

Service Level Management. Service Level Management (SLM) is the ITIL practice responsible for negotiating, agreeing, and documenting measurable service level targets (SLTs) with customers, and then monitoring and reporting on achievement against those targets. In this scenario, defining 'acceptable performance levels' directly corresponds to establishing SLTs within a Service Level Agreement (SLA), which is the core function of SLM.

Answer

Service Continuity Management

Answer

Capacity and Performance Management

Answer

Service Catalog Management

Question 12

A software company is experiencing frequent production outages due to unauthorized changes. Which practice should be implemented to improve control over changes?

Accepted Answer

Change Enablement. Change Enablement (option C) is the correct practice because it specifically governs the lifecycle of changes, including authorization, review, and control of changes to prevent unauthorized modifications. In a software company experiencing production outages due to unauthorized changes, implementing Change Enablement ensures that every change is assessed, approved, and logged before deployment, directly addressing the root cause of the outages.

Answer

Deployment Management

Answer

Release Management

Answer

Service Validation and Testing

Question 13

An IT team wants to prioritize incidents based on business impact and urgency. Which ITIL practice provides the framework for classifying and handling incidents?

Accepted Answer

Incident Management. Incident Management (D) is the correct ITIL practice because it provides the specific framework for classifying, prioritizing, and handling incidents based on business impact and urgency. This practice defines the lifecycle from detection through resolution, including categorization and prioritization matrices that directly address the scenario's requirement.

Answer

Problem Management

Answer

Service Desk

Answer

Event Management

Question 14

Which TWO of the following are purposes of the Supplier Management practice?

Accepted Answer

Ensure that suppliers and their services are managed appropriately. Option A is correct because the Supplier Management practice's primary purpose is to ensure that suppliers and the services they provide are managed appropriately to meet business needs. This includes overseeing supplier performance, contracts, and relationships to align with organizational objectives. The practice focuses on the overall governance and control of supplier engagements, not just specific activities like auditing or target setting.

Answer

Manage the performance of suppliers to meet business outcomes

Answer

Define and agree on service level targets with suppliers

Answer

Ensure that suppliers are audited regularly

Question 15

You are the IT service manager for a mid-sized e-commerce company. The company has been experiencing intermittent service outages affecting the checkout process during peak hours. The monitoring system shows that the application server's CPU utilization spikes to 95% during these periods. The database server appears healthy. The incident management team has been creating multiple incidents for each outage, but no permanent fix has been implemented. The problem management team has identified that the application server's auto-scaling configuration is not triggering correctly due to a misconfigured threshold. However, changing the threshold requires a change request that must be approved by the Change Advisory Board (CAB), which meets only once a week. The business is losing revenue with each outage. What should you do first to minimize the impact of the issue while a permanent solution is being developed?

Accepted Answer

Implement a workaround by manually scaling the application server during peak hours to handle the load. Option B is correct because manually scaling the application server during peak hours provides an immediate workaround to handle the load, directly reducing the impact of the misconfigured auto-scaling threshold. This aligns with ITIL's guidance on using workarounds to restore service while a permanent fix is developed. The business is losing revenue with each outage, so the priority is to stabilize the service first, not to wait for a CAB meeting or to analyze the root cause.

Answer

Expedite the change request by requesting an emergency change approval from the CAB chair

Answer

Conduct a root cause analysis and document the problem in the known error database

Answer

Increase the priority of all related incidents to ensure faster response from the service desk