ITIL4F ITIL Management Practices — 50 Questions

Question 1

A service provider is implementing a new monitoring tool to track the performance of critical services. The tool will send alerts when performance thresholds are breached. Which practice is primarily responsible for defining these thresholds and acting on the alerts to ensure service performance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Monitoring and Event Management. Monitoring and Event Management is the practice responsible for defining performance thresholds and acting on alerts because it systematically monitors services, detects threshold breaches as events, and triggers automated or manual responses to maintain service performance. The new monitoring tool directly implements this practice by generating alerts when predefined thresholds are exceeded, enabling proactive management of service health.

Answer

Service Level Management

Answer

Availability Management

Answer

Service Desk

Question 2

Which TWO of the following are objectives of Supplier Management?

Accepted Answer

Ensure that suppliers and their services are aligned with the business needs and objectives. Supplier Management aims to ensure that suppliers and their services are aligned with the business needs and objectives (Option A), which is a core objective stated in the ITIL 4 framework. This alignment ensures that the organization obtains value from its suppliers while meeting strategic goals. Furthermore, a key purpose of Supplier Management is to ensure that suppliers and their performance are managed appropriately to support the seamless provision of quality products and services (Option C). Both A and C directly reflect the strategic and tactical objectives of the Supplier Management practice in ITIL 4.

Answer

Define and agree on service level targets with customers

Answer

Manage the financial assets of the organization

Answer

Manage the service desk to handle supplier-related incidents

Question 3

Refer to the exhibit. The service desk has resolved a high-priority incident by restarting the mail server, but the problem record shows three related incidents. What should the problem manager do next?

Accepted Answer

Analyze the incidents to identify the root cause and define a workaround. The problem manager's role is to analyze incidents linked to a problem record to identify the underlying root cause, not just resolve individual incidents. Restarting the mail server resolved the symptoms (the high-priority incident), but the problem record shows three related incidents, indicating a recurring underlying issue that requires root cause analysis (RCA) to prevent future occurrences. Defining a workaround is a standard interim step before a permanent solution is implemented, aligning with ITIL 4's problem management practice.

Answer

Escalate the problem to a higher priority

Answer

Close the problem record as the incidents are resolved

Answer

Implement a permanent solution immediately

Question 4

A service desk team is receiving an increasing number of incidents related to a recently deployed application. Initial analysis shows that many incidents are due to users not understanding how to use the application's new features. According to ITIL 4, which practice would be MOST effective in reducing these incidents?

Accepted Answer

Service Desk. The Service Desk practice is the correct answer because it serves as the single point of contact for users, providing guidance and support for application usage. By offering immediate assistance and training on new features, the service desk directly addresses the root cause of the incidents—user unfamiliarity—rather than just reacting to the symptoms. This proactive approach reduces the volume of incidents by improving user competence and confidence.

Answer

Incident Management

Answer

Change Enablement

Answer

Service Request Management

Question 5

Which TWO of the following are purposes of the Supplier Management practice?

Accepted Answer

Ensure that suppliers and their services are managed appropriately. The Supplier Management practice's primary purpose is to ensure that suppliers and the services they provide are managed appropriately to meet business needs (Option A). This includes overseeing supplier performance, contracts, and relationships to align with organizational objectives. Furthermore, a key aspect of managing suppliers appropriately is ensuring their offerings and operations are aligned with and actively support the organization's overall service strategy and the design of its services (Option E), thereby contributing to the seamless provision of quality products and services. The practice focuses on the overall governance and control of supplier engagements, not just specific activities like auditing or target setting.

Answer

Manage the performance of suppliers to meet business outcomes

Answer

Define and agree on service level targets with suppliers

Answer

Ensure that suppliers are audited regularly

Question 6

You are the IT service continuity manager for a financial services firm. The firm has a critical trading application that must be available during market hours. A recent risk assessment identified that the application's primary data center is in a flood-prone area. The recovery time objective (RTO) is 2 hours, and the recovery point objective (RPO) is 15 minutes. The current disaster recovery plan involves restoring the application from backups stored in a different region, which takes approximately 3 hours. The backup frequency is hourly. The firm is considering implementing a synchronous replication to a secondary data center to improve recovery times. However, the network latency between the two data centers is 10 milliseconds, which may impact application performance. What is the MOST appropriate action to ensure compliance with the RTO and RPO?

Accepted Answer

Implement synchronous replication to the secondary data center and update the disaster recovery plan. The current recovery plan fails to meet the RTO of 2 hours (restore takes 3 hours) and the RPO of 15 minutes (hourly backups). Synchronous replication writes data to both data centers simultaneously, ensuring zero data loss (RPO=0) and enabling near-instant failover, which can achieve the 2-hour RTO. The 10 ms latency is acceptable for most trading applications and is a trade-off for meeting the critical recovery objectives.

Answer

Accept the current recovery plan as the risk is low and focus on improving the backup process

Answer

Implement asynchronous replication with a 5-minute lag and test if the RPO can be met

Answer

Increase the backup frequency to every 5 minutes and test the restore process to ensure it meets the RTO

Question 7

Which TWO statements about the ITIL change enablement practice are CORRECT?

Accepted Answer

A change authority is a person or group that authorizes a change.. Option A is correct as per the ITIL 4 glossary definition of a change authority. Option E accurately reflects the purpose of the change enablement practice, which is to ensure changes are properly assessed, prioritized, and implemented in a controlled manner to maximize successful outcomes and minimize negative impact.

Answer

All changes must be approved by a change advisory board (CAB).

Answer

The change schedule is used to authorize changes.

Answer

Normal changes can be implemented without authorization if they are low risk.

Question 8

Match each ITIL 4 role to its responsibility.

Accepted Answer

Service Owner: Accountable for the overall delivery and improvement of a specific service.. In ITIL 4, the Service Owner is accountable for a specific service's delivery and improvement, while the Process Owner ensures a process is effective. The Change Authority authorizes changes, and the Service Desk Manager handles incidents and requests. In these options, two correct matches are provided, and two distractors swap definitions with other roles.

Answer

Service Owner: Authorizes changes to services and service components.

Answer

Process Owner: Manages the service desk team and ensures incidents and service requests are handled.

Question 9

What is the PRIMARY purpose of the Incident Management practice?

Accepted Answer

To restore normal service operation as quickly as possible. The primary purpose of Incident Management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations. This ensures that service availability and quality are maintained, aligning with the ITIL 4 guiding principle of 'Focus on Value' by prioritizing rapid recovery over root cause analysis.

Answer

To identify the root cause of incidents

Answer

To negotiate and agree on service level targets

Answer

To assess and authorize changes to services

Question 10

A service desk agent resolves a password reset request within 5 minutes. The customer is satisfied. Which two metrics are most relevant to measure this?

Accepted Answer

First Call Resolution (FCR) and Customer Satisfaction (CSAT). The password reset was resolved in 5 minutes, and the customer is satisfied. First Call Resolution (FCR) measures whether the issue was resolved on the first contact without escalation or callback, which applies here. Customer Satisfaction (CSAT) directly captures the customer's satisfaction with the service. Together, these two metrics best assess both the efficiency and quality of the resolution.

Answer

Customer Satisfaction (CSAT) and Mean Time to Respond

Answer

Mean Time Between Failures (MTBF) and Customer Satisfaction (CSAT)

Answer

Mean Time to Resolve (MTTR) and First Call Resolution (FCR)

Question 11

A monitoring tool detects that the CPU usage on a server has exceeded 90% for 10 minutes. According to ITIL 4, how should this event be classified?

Accepted Answer

Exception event. In ITIL 4, an exception event indicates that a service or component is operating outside its normal threshold and requires immediate attention. CPU usage exceeding 90% for 10 minutes is a clear deviation from the expected baseline, triggering an exception event that may lead to incident creation if it impacts service availability.

Answer

Incident

Answer

Informational event

Answer

Warning event

Question 12

What is the primary role of a service desk according to ITIL 4?

Accepted Answer

To provide a single point of contact for users. In ITIL 4, the service desk is defined as the single point of contact between the service provider and the users for day-to-day activities, such as logging incidents, handling service requests, and providing communication updates. Its primary role is to restore normal service operation as quickly as possible and to ensure user satisfaction, not to perform specialized technical or managerial tasks.

Answer

To authorize and schedule changes

Answer

To investigate the root cause of incidents

Answer

To negotiate service level agreements

Question 13

Which TWO of the following are purposes of the Problem Management practice?

Accepted Answer

To minimize the impact of incidents by identifying their root causes. Option A is correct because Problem Management focuses on finding the root cause of incidents and eliminating or mitigating them, which reduces their impact on services. Option B is correct because a core purpose of Problem Management is to prevent incidents from occurring in the first place or from recurring by addressing underlying causes. Option C is not correct because restoring normal service operation as quickly as possible is the purpose of Incident Management, not Problem Management. Option D is not correct because assessing and authorizing changes is the purpose of Change Control, not Problem Management. Option E is not correct because fulfilling service requests is the purpose of Request Fulfilment, not Problem Management.

Answer

To restore normal service operation as quickly as possible

Answer

To assess and authorize changes

Answer

To fulfil service requests

Question 14

What is the PRIMARY purpose of the Incident Management practice?

Accepted Answer

To restore normal service operation as quickly as possible. The primary purpose of Incident Management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations. This ensures that service availability and quality are maintained, aligning with the ITIL 4 guiding principle of 'Focus on Value' by prioritizing rapid recovery over root cause analysis.

Answer

To manage the lifecycle of all changes

Answer

To identify the root cause of incidents

Answer

To negotiate and agree on service level targets

Question 15

A team is investigating a recurring incident and identifies a known error. According to ITIL 4, in which phase of Problem Management does this occur?

Accepted Answer

Problem Control. In ITIL 4, the identification of a known error occurs during the Problem Control phase (B). Problem Control involves analyzing problems to determine their root cause and identifying known errors. Once a known error is identified, it is passed to Error Control for ongoing management and resolution. However, the identification itself happens in Problem Control.

Answer

Problem Identification

Answer

Error Control

Answer

Incident Management

Question 16

Which THREE of the following are key activities in the ITIL 4 Continual Improvement model?

Accepted Answer

Evaluate the results. In the ITIL 4 Continual Improvement model, the key activities are: Define the vision (E), which establishes the desired end state and the scope of the improvement initiative; Evaluate the results (A), which measures whether the improvement actions achieved the intended outcomes and identifies further opportunities; and Take action (C), which executes the agreed improvements and embeds them into normal operations. These three steps form part of the model's iterative workflow alongside other steps such as gathering information, analyzing data, and prioritizing actions. Conduct a risk assessment (B) is a general management practice activity, not one of the named Continual Improvement model steps. Create a problem record (D) belongs to the Problem Management practice and is not part of the Continual Improvement model's defined activities.

Answer

Conduct a risk assessment

Answer

Create a problem record

Question 17

What is the PRIMARY purpose of the Incident Management practice?

Accepted Answer

To restore normal service operation as quickly as possible. The primary purpose of Incident Management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations. This ensures that service availability and quality are maintained, aligning with the ITIL 4 guiding principle of 'Focus on Value' by prioritizing rapid recovery over root cause analysis.

Answer

To find the root cause of incidents

Answer

To monitor and manage events throughout their lifecycle

Answer

To manage the lifecycle of all changes

Question 18

An IT service desk analyst receives a call that users cannot access the CRM system. What should they do FIRST according to ITIL 4?

Accepted Answer

Log an incident record. According to ITIL 4, the first action when a user reports an inability to access a service (like the CRM system) is to log an incident record. An incident is defined as an unplanned interruption or reduction in quality of an IT service, and the immediate priority is to restore normal service operation as quickly as possible. Logging the incident captures essential details (e.g., user identity, time, symptoms) and initiates the incident management process, which may include categorization, prioritization, and initial diagnosis.

Answer

Inform the customer that it is a known error

Answer

Submit a change request

Answer

Escalate to Problem Management

Question 19

In ITIL 4, what is the difference between Deployment Management and Release Management?

Accepted Answer

Release Management handles the build and testing; Deployment Management moves to production. Release Management handles the overall planning, building, testing, and scheduling of a release, while Deployment Management focuses specifically on the technical deployment of the release components into the production environment. In ITIL 4, Deployment Management is a separate practice that ensures the actual movement of software, hardware, or other assets to the live environment occurs reliably and with minimal disruption, whereas Release Management governs the end-to-end lifecycle of a release, including authorization and go/no-go decisions.

Answer

Deployment Management is part of Release Management

Answer

There is no difference

Answer

Deployment Management is only for hardware

Question 20

Which TWO of the following are types of events in Monitoring and Event Management?

Accepted Answer

Exception. In ITIL/Monitoring and Event Management, events are classified by significance, and the two recognized types among the options are Exception (A) and Warning (B). An Exception event indicates that a component or service is operating abnormally or has breached a defined threshold, requiring attention or intervention. A Warning event signals that a threshold is approaching but has not yet been breached, giving teams time to act before an exception occurs. The unmarked options do not belong: Informational (C) describes routine, non-actionable events rather than one of the two types asked for here, while Emergency (E) is not a standard event type in this classification scheme. Option D duplicates the correct Exception answer and is not a separate valid selection.

Answer

Informational

Answer

Exception

Answer

Emergency

Answer

Standard