ITIL4F ITIL Management Practices — 30 Questions

Question 1

A company is designing a new service and wants to ensure that all IT services are described in a consistent manner. Which practice provides the framework for documenting service descriptions, including their functional and operational characteristics?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Service Catalog Management. Service Catalog Management is the correct practice because it provides the single source of consistent information on all agreed services, ensuring that every service is described with its functional and operational characteristics in a standardized format. This practice defines the service catalog structure, which includes service descriptions, service level agreements, and operational details, enabling consistent documentation across the IT organization.

Answer

Service Configuration Management

Answer

Service Level Management

Answer

IT Asset Management

Question 2

An organization wants to improve its ability to detect and respond to security incidents. Which practice should be enhanced to achieve this objective?

Accepted Answer

Information Security Management. Enhancing Information Security Management (ISM) directly improves an organization's ability to detect and respond to security incidents because ISM defines the policies, controls, and monitoring mechanisms (e.g., SIEM rules, intrusion detection signatures, and incident response playbooks) that enable proactive threat detection and structured response. While Incident Management handles the lifecycle of an incident once detected, ISM is the practice that establishes the security posture and detection capabilities in the first place.

Answer

Problem Management

Answer

Availability Management

Answer

Incident Management

Question 3

A service provider is implementing a new monitoring tool to track the performance of critical services. The tool will send alerts when performance thresholds are breached. Which practice is primarily responsible for defining these thresholds and acting on the alerts to ensure service performance?

Accepted Answer

Monitoring and Event Management. Monitoring and Event Management is the practice responsible for defining performance thresholds and acting on alerts because it systematically monitors services, detects threshold breaches as events, and triggers automated or manual responses to maintain service performance. The new monitoring tool directly implements this practice by generating alerts when predefined thresholds are exceeded, enabling proactive management of service health.

Answer

Service Level Management

Answer

Availability Management

Answer

Service Desk

Question 4

A company is undergoing a major organizational change that will affect several IT services. The change manager wants to ensure that all changes are assessed for risk and that the change schedule is maintained. Which practice provides the formal process for managing changes in a controlled manner?

Accepted Answer

Change Enablement. Change Enablement is the ITIL 4 practice that provides the formal, controlled process for assessing, approving, and scheduling changes to IT services. It ensures that all changes are evaluated for risk, and that the change schedule is maintained, which directly addresses the change manager's requirements.

Answer

Deployment Management

Answer

Release Management

Answer

Transition Planning and Support

Question 5

Which TWO of the following are objectives of Supplier Management?

Accepted Answer

Ensure that suppliers and their services are aligned with the business needs and objectives. Supplier Management aims to ensure that suppliers and their services are aligned with the business needs and objectives (Option A), which is a core objective stated in the ITIL 4 framework. This alignment ensures that the organization obtains value from its suppliers while meeting strategic goals. Furthermore, a key purpose of Supplier Management is to ensure that suppliers and their performance are managed appropriately to support the seamless provision of quality products and services (Option C). Both A and C directly reflect the strategic and tactical objectives of the Supplier Management practice in ITIL 4.

Answer

Define and agree on service level targets with customers

Answer

Manage the financial assets of the organization

Answer

Manage the service desk to handle supplier-related incidents

Question 6

Refer to the exhibit. The service desk has resolved a high-priority incident by restarting the mail server, but the problem record shows three related incidents. What should the problem manager do next?

Accepted Answer

Analyze the incidents to identify the root cause and define a workaround. The problem manager's role is to analyze incidents linked to a problem record to identify the underlying root cause, not just resolve individual incidents. Restarting the mail server resolved the symptoms (the high-priority incident), but the problem record shows three related incidents, indicating a recurring underlying issue that requires root cause analysis (RCA) to prevent future occurrences. Defining a workaround is a standard interim step before a permanent solution is implemented, aligning with ITIL 4's problem management practice.

Answer

Escalate the problem to a higher priority

Answer

Close the problem record as the incidents are resolved

Answer

Implement a permanent solution immediately

Question 7

Refer to the exhibit. The monthly report shows that the availability target was met but the response time target was not. What should the service provider do to improve response time?

Accepted Answer

Analyze the incident from March 15 to identify the root cause of slow transactions. The incident from March 15 is the only event where response time degraded (slow transactions), and analyzing its root cause is the proper ITIL problem management practice. Simply closing the incident (A) ignores the underlying issue, while adjusting targets (B, C) does not fix the actual performance problem. Root cause analysis (D) enables the service provider to identify and resolve the specific technical bottleneck, such as database contention or network latency, that caused the slow response.

Answer

Close the incident as it is resolved and focus on other issues

Answer

Increase the response time target to 99%

Answer

Adjust the availability target to 99.95%

Question 8

A service desk team is receiving an increasing number of incidents related to a recently deployed application. Initial analysis shows that many incidents are due to users not understanding how to use the application's new features. According to ITIL 4, which practice would be MOST effective in reducing these incidents?

Accepted Answer

Service Desk. The Service Desk practice is the correct answer because it serves as the single point of contact for users, providing guidance and support for application usage. By offering immediate assistance and training on new features, the service desk directly addresses the root cause of the incidents—user unfamiliarity—rather than just reacting to the symptoms. This proactive approach reduces the volume of incidents by improving user competence and confidence.

Answer

Incident Management

Answer

Change Enablement

Answer

Service Request Management

Question 9

An organization is designing a new service. The service owner wants to ensure that the service can be operated within agreed service levels. Which ITIL management practice should be applied to define the acceptable performance levels?

Accepted Answer

Service Level Management. Service Level Management (SLM) is the ITIL practice responsible for negotiating, agreeing, and documenting measurable service level targets (SLTs) with customers, and then monitoring and reporting on achievement against those targets. In this scenario, defining 'acceptable performance levels' directly corresponds to establishing SLTs within a Service Level Agreement (SLA), which is the core function of SLM.

Answer

Service Continuity Management

Answer

Capacity and Performance Management

Answer

Service Catalog Management

Question 10

A software company is experiencing frequent production outages due to unauthorized changes. Which practice should be implemented to improve control over changes?

Accepted Answer

Change Enablement. Change Enablement (option C) is the correct practice because it specifically governs the lifecycle of changes, including authorization, review, and control of changes to prevent unauthorized modifications. In a software company experiencing production outages due to unauthorized changes, implementing Change Enablement ensures that every change is assessed, approved, and logged before deployment, directly addressing the root cause of the outages.

Answer

Deployment Management

Answer

Release Management

Answer

Service Validation and Testing

Question 11

An IT team wants to prioritize incidents based on business impact and urgency. Which ITIL practice provides the framework for classifying and handling incidents?

Accepted Answer

Incident Management. Incident Management (D) is the correct ITIL practice because it provides the specific framework for classifying, prioritizing, and handling incidents based on business impact and urgency. This practice defines the lifecycle from detection through resolution, including categorization and prioritization matrices that directly address the scenario's requirement.

Answer

Problem Management

Answer

Service Desk

Answer

Event Management

Question 12

Which TWO of the following are purposes of the Supplier Management practice?

Accepted Answer

Ensure that suppliers and their services are managed appropriately. The Supplier Management practice's primary purpose is to ensure that suppliers and the services they provide are managed appropriately to meet business needs (Option A). This includes overseeing supplier performance, contracts, and relationships to align with organizational objectives. Furthermore, a key aspect of managing suppliers appropriately is ensuring their offerings and operations are aligned with and actively support the organization's overall service strategy and the design of its services (Option E), thereby contributing to the seamless provision of quality products and services. The practice focuses on the overall governance and control of supplier engagements, not just specific activities like auditing or target setting.

Answer

Manage the performance of suppliers to meet business outcomes

Answer

Define and agree on service level targets with suppliers

Answer

Ensure that suppliers are audited regularly

Question 13

You are the IT service manager for a mid-sized e-commerce company. The company has been experiencing intermittent service outages affecting the checkout process during peak hours. The monitoring system shows that the application server's CPU utilization spikes to 95% during these periods. The database server appears healthy. The incident management team has been creating multiple incidents for each outage, but no permanent fix has been implemented. The problem management team has identified that the application server's auto-scaling configuration is not triggering correctly due to a misconfigured threshold. However, changing the threshold requires a change request that must be approved by the Change Advisory Board (CAB), which meets only once a week. The business is losing revenue with each outage. What should you do first to minimize the impact of the issue while a permanent solution is being developed?

Accepted Answer

Implement a workaround by manually scaling the application server during peak hours to handle the load. Manually scaling the application server during peak hours provides an immediate workaround to handle the load, directly reducing the impact of the misconfigured auto-scaling threshold. This aligns with ITIL's guidance on using workarounds to restore service while a permanent fix is developed. The business is losing revenue with each outage, so the priority is to stabilize the service first, not to wait for a CAB meeting or to analyze the root cause.

Answer

Expedite the change request by requesting an emergency change approval from the CAB chair

Answer

Conduct a root cause analysis and document the problem in the known error database

Answer

Increase the priority of all related incidents to ensure faster response from the service desk

Question 14

You are the IT service continuity manager for a financial services firm. The firm has a critical trading application that must be available during market hours. A recent risk assessment identified that the application's primary data center is in a flood-prone area. The recovery time objective (RTO) is 2 hours, and the recovery point objective (RPO) is 15 minutes. The current disaster recovery plan involves restoring the application from backups stored in a different region, which takes approximately 3 hours. The backup frequency is hourly. The firm is considering implementing a synchronous replication to a secondary data center to improve recovery times. However, the network latency between the two data centers is 10 milliseconds, which may impact application performance. What is the MOST appropriate action to ensure compliance with the RTO and RPO?

Accepted Answer

Implement synchronous replication to the secondary data center and update the disaster recovery plan. The current recovery plan fails to meet the RTO of 2 hours (restore takes 3 hours) and the RPO of 15 minutes (hourly backups). Synchronous replication writes data to both data centers simultaneously, ensuring zero data loss (RPO=0) and enabling near-instant failover, which can achieve the 2-hour RTO. The 10 ms latency is acceptable for most trading applications and is a trade-off for meeting the critical recovery objectives.

Answer

Accept the current recovery plan as the risk is low and focus on improving the backup process

Answer

Implement asynchronous replication with a 5-minute lag and test if the RPO can be met

Answer

Increase the backup frequency to every 5 minutes and test the restore process to ensure it meets the RTO

Question 15

Which TWO statements about the ITIL change enablement practice are CORRECT?

Accepted Answer

A change authority is a person or group that authorizes a change.. Option A is correct as per the ITIL 4 glossary definition of a change authority. Option E accurately reflects the purpose of the change enablement practice, which is to ensure changes are properly assessed, prioritized, and implemented in a controlled manner to maximize successful outcomes and minimize negative impact.

Answer

All changes must be approved by a change advisory board (CAB).

Answer

The change schedule is used to authorize changes.

Answer

Normal changes can be implemented without authorization if they are low risk.

Question 16

Refer to the exhibit. A change order to patch a security vulnerability on WebServer01 has been approved. The IT manager is the change authority. During implementation, it is discovered that the patch requires a reboot, which will cause an outage for the OrderApp application. What is the MOST appropriate action?

Accepted Answer

Inform the IT manager and ask for a decision on whether to proceed.. The change order was approved based on the original scope, which did not include a reboot. The discovery that a reboot is required introduces a new risk (application outage) that was not assessed during the initial approval. The IT manager, as the change authority, must be informed and make a decision on whether to proceed with the change under the new circumstances, in line with the ITIL 4 'change enablement' practice of managing risk and ensuring authorized decisions.

Answer

Escalate to the change advisory board (CAB) for a new approval.

Answer

Proceed with the change as planned, since the change is already approved.

Answer

Cancel the change and request a new one with updated information.

Question 17

Match each ITIL 4 role to its responsibility.

Accepted Answer

Service Owner: Accountable for the overall delivery and improvement of a specific service.. In ITIL 4, the Service Owner is accountable for a specific service's delivery and improvement, while the Process Owner ensures a process is effective. The Change Authority authorizes changes, and the Service Desk Manager handles incidents and requests. In these options, two correct matches are provided, and two distractors swap definitions with other roles.

Answer

Service Owner: Authorizes changes to services and service components.

Answer

Process Owner: Manages the service desk team and ensures incidents and service requests are handled.

Question 18

What is the PRIMARY purpose of the Incident Management practice?

Accepted Answer

To restore normal service operation as quickly as possible. The primary purpose of Incident Management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations. This ensures that service availability and quality are maintained, aligning with the ITIL 4 guiding principle of 'Focus on Value' by prioritizing rapid recovery over root cause analysis.

Answer

To identify the root cause of incidents

Answer

To negotiate and agree on service level targets

Answer

To assess and authorize changes to services

Question 19

A user requests a new laptop for a new employee. According to ITIL 4, how should this request be classified?

Accepted Answer

Service request. The request for a new laptop for a new employee is a pre-defined, standardized request for a service or service component, which ITIL 4 classifies as a Service Request. This is because it follows an established procedure (e.g., ordering, provisioning, and configuring hardware) and does not involve restoring an unexpected outage or fixing a failure. The ITIL 4 Service Request Practice specifically covers such routine, low-risk, and low-cost requests that are part of normal service delivery.

Answer

Problem

Answer

Emergency change

Answer

Incident

Question 20

Which of the following is the correct sequence for the ITIL Continual Improvement Model?

Accepted Answer

What is the vision? → Where are we now? → Where do we want to be? → How do we get there? → Take action → Did we get there? → How do we keep the momentum going?. It follows the exact sequence prescribed by the ITIL 4 Continual Improvement Model: starting with 'What is the vision?' to align improvement with business strategy, then assessing the current state ('Where are we now?'), defining the target state ('Where do we want to be?'), planning the approach ('How do we get there?'), executing ('Take action'), verifying the outcome ('Did we get there?'), and finally embedding the change ('How do we keep the momentum going?'). This order ensures that improvement is driven by strategic intent before any analysis or action, which is a core principle of the ITIL 4 guiding concept 'Focus on value'.

Answer

What is the vision? → Where do we want to be? → Where are we now? → How do we get there? → Take action → Did we get there? → How do we keep the momentum going?

Answer

Where are we now? → What is the vision? → Where do we want to be? → How do we get there? → Take action → Did we get there? → How do we keep the momentum going?

Answer

What is the vision? → Where are we now? → How do we get there? → Where do we want to be? → Take action → Did we get there? → How do we keep the momentum going?