ITIL4F ITIL Management Practices — Timed 40 Questions

Question 1

A service desk team is overwhelmed by repeated incidents caused by a known software bug that the vendor has not yet patched. The IT manager wants to reduce the number of incidents without waiting for the vendor. Which ITIL practice would directly help in reducing the impact of this known issue?

Accepted Answer

Create a known error record in Problem Management and provide a workaround. Option B is correct because Problem Management aims to identify the root cause of incidents and provide workarounds or permanent solutions. In this scenario, documenting a known workaround for the bug and communicating it to the service desk would reduce incident handling time and customer impact. Option A is wrong because Incident Management focuses on restoring normal service quickly, not on preventing recurring incidents. Option C is wrong because Change Enablement is used to implement changes, not to address known errors proactively. Option D is wrong because Service Level Management deals with agreements and targets, not technical workarounds.

Answer

Renegotiate service level targets with the customer in Service Level Management

Answer

Implement a faster incident resolution process in Incident Management

Answer

Submit a change request to Change Enablement to replace the software

Question 2

A company is designing a new service and wants to ensure that all IT services are described in a consistent manner. Which practice provides the framework for documenting service descriptions, including their functional and operational characteristics?

Accepted Answer

Service Catalog Management. Service Catalog Management is the correct practice because it provides the single source of consistent information on all agreed services, ensuring that every service is described with its functional and operational characteristics in a standardized format. This practice defines the service catalog structure, which includes service descriptions, service level agreements, and operational details, enabling consistent documentation across the IT organization.

Answer

Service Configuration Management

Answer

Service Level Management

Answer

IT Asset Management

Question 3

An organization wants to improve its ability to detect and respond to security incidents. Which practice should be enhanced to achieve this objective?

Accepted Answer

Information Security Management. Enhancing Information Security Management (ISM) directly improves an organization's ability to detect and respond to security incidents because ISM defines the policies, controls, and monitoring mechanisms (e.g., SIEM rules, intrusion detection signatures, and incident response playbooks) that enable proactive threat detection and structured response. While Incident Management handles the lifecycle of an incident once detected, ISM is the practice that establishes the security posture and detection capabilities in the first place.

Answer

Problem Management

Answer

Availability Management

Answer

Incident Management

Question 4

A service provider is implementing a new monitoring tool to track the performance of critical services. The tool will send alerts when performance thresholds are breached. Which practice is primarily responsible for defining these thresholds and acting on the alerts to ensure service performance?

Accepted Answer

Monitoring and Event Management. Monitoring and Event Management is the practice responsible for defining performance thresholds and acting on alerts because it systematically monitors services, detects threshold breaches as events, and triggers automated or manual responses to maintain service performance. The new monitoring tool directly implements this practice by generating alerts when predefined thresholds are exceeded, enabling proactive management of service health.

Answer

Service Level Management

Answer

Availability Management

Answer

Service Desk

Question 5

A company is undergoing a major organizational change that will affect several IT services. The change manager wants to ensure that all changes are assessed for risk and that the change schedule is maintained. Which practice provides the formal process for managing changes in a controlled manner?

Accepted Answer

Change Enablement. Change Enablement is the ITIL 4 practice that provides the formal, controlled process for assessing, approving, and scheduling changes to IT services. It ensures that all changes are evaluated for risk, and that the change schedule is maintained, which directly addresses the change manager's requirements.

Answer

Deployment Management

Answer

Release Management

Answer

Transition Planning and Support

Question 6

Which TWO of the following are objectives of Supplier Management?

Accepted Answer

Ensure that suppliers and their services are aligned with the business needs and objectives. Supplier Management aims to ensure that suppliers and their services are aligned with the business needs and objectives, which is a core objective stated in the ITIL 4 framework. This alignment ensures that the organization obtains value from its suppliers while meeting strategic goals. Option A directly reflects this objective, making it correct.

Answer

Define and agree on service level targets with customers

Answer

Manage the financial assets of the organization

Answer

Manage the service desk to handle supplier-related incidents

Question 7

Which THREE of the following are key activities of Service Configuration Management?

Accepted Answer

Identifying and documenting configuration items (CIs). Option A is correct because identifying and documenting configuration items (CIs) is a foundational activity of Service Configuration Management. It ensures that all components of the IT infrastructure, including hardware, software, and documentation, are uniquely identified and recorded in the configuration management database (CMDB) to support control and traceability.

Answer

Authorizing and scheduling changes to CIs

Answer

Defining service level targets with customers

Question 8

Refer to the exhibit. The service desk has resolved a high-priority incident by restarting the mail server, but the problem record shows three related incidents. What should the problem manager do next?

Accepted Answer

Analyze the incidents to identify the root cause and define a workaround. Option A is correct because the problem manager's role is to analyze incidents linked to a problem record to identify the underlying root cause, not just resolve individual incidents. Restarting the mail server resolved the symptoms (the high-priority incident), but the problem record shows three related incidents, indicating a recurring underlying issue that requires root cause analysis (RCA) to prevent future occurrences. Defining a workaround is a standard interim step before a permanent solution is implemented, aligning with ITIL 4's problem management practice.

Answer

Escalate the problem to a higher priority

Answer

Close the problem record as the incidents are resolved

Answer

Implement a permanent solution immediately

Question 9

Refer to the exhibit. The monthly report shows that the availability target was met but the response time target was not. What should the service provider do to improve response time?

Accepted Answer

Analyze the incident from March 15 to identify the root cause of slow transactions. Option D is correct because the incident from March 15 is the only event where response time degraded (slow transactions), and analyzing its root cause is the proper ITIL problem management practice. Simply closing the incident (A) ignores the underlying issue, while adjusting targets (B, C) does not fix the actual performance problem. Root cause analysis (D) enables the service provider to identify and resolve the specific technical bottleneck, such as database contention or network latency, that caused the slow response.

Answer

Close the incident as it is resolved and focus on other issues

Answer

Increase the response time target to 99%

Answer

Adjust the availability target to 99.95%

Question 10

A service desk team is receiving an increasing number of incidents related to a recently deployed application. Initial analysis shows that many incidents are due to users not understanding how to use the application's new features. According to ITIL 4, which practice would be MOST effective in reducing these incidents?

Accepted Answer

Service Desk. The Service Desk practice is the correct answer because it serves as the single point of contact for users, providing guidance and support for application usage. By offering immediate assistance and training on new features, the service desk directly addresses the root cause of the incidents—user unfamiliarity—rather than just reacting to the symptoms. This proactive approach reduces the volume of incidents by improving user competence and confidence.

Answer

Incident Management

Answer

Change Enablement

Answer

Service Request Management

Question 11

An organization is designing a new service. The service owner wants to ensure that the service can be operated within agreed service levels. Which ITIL management practice should be applied to define the acceptable performance levels?

Accepted Answer

Service Level Management. Service Level Management (SLM) is the ITIL practice responsible for negotiating, agreeing, and documenting measurable service level targets (SLTs) with customers, and then monitoring and reporting on achievement against those targets. In this scenario, defining 'acceptable performance levels' directly corresponds to establishing SLTs within a Service Level Agreement (SLA), which is the core function of SLM.

Answer

Service Continuity Management

Answer

Capacity and Performance Management

Answer

Service Catalog Management

Question 12

A software company is experiencing frequent production outages due to unauthorized changes. Which practice should be implemented to improve control over changes?

Accepted Answer

Change Enablement. Change Enablement (option C) is the correct practice because it specifically governs the lifecycle of changes, including authorization, review, and control of changes to prevent unauthorized modifications. In a software company experiencing production outages due to unauthorized changes, implementing Change Enablement ensures that every change is assessed, approved, and logged before deployment, directly addressing the root cause of the outages.

Answer

Deployment Management

Answer

Release Management

Answer

Service Validation and Testing

Question 13

An IT team wants to prioritize incidents based on business impact and urgency. Which ITIL practice provides the framework for classifying and handling incidents?

Accepted Answer

Incident Management. Incident Management (D) is the correct ITIL practice because it provides the specific framework for classifying, prioritizing, and handling incidents based on business impact and urgency. This practice defines the lifecycle from detection through resolution, including categorization and prioritization matrices that directly address the scenario's requirement.

Answer

Problem Management

Answer

Service Desk

Answer

Event Management

Question 14

Which TWO of the following are purposes of the Supplier Management practice?

Accepted Answer

Ensure that suppliers and their services are managed appropriately. Option A is correct because the Supplier Management practice's primary purpose is to ensure that suppliers and the services they provide are managed appropriately to meet business needs. This includes overseeing supplier performance, contracts, and relationships to align with organizational objectives. The practice focuses on the overall governance and control of supplier engagements, not just specific activities like auditing or target setting.

Answer

Manage the performance of suppliers to meet business outcomes

Answer

Define and agree on service level targets with suppliers

Answer

Ensure that suppliers are audited regularly

Question 15

You are the IT service manager for a mid-sized e-commerce company. The company has been experiencing intermittent service outages affecting the checkout process during peak hours. The monitoring system shows that the application server's CPU utilization spikes to 95% during these periods. The database server appears healthy. The incident management team has been creating multiple incidents for each outage, but no permanent fix has been implemented. The problem management team has identified that the application server's auto-scaling configuration is not triggering correctly due to a misconfigured threshold. However, changing the threshold requires a change request that must be approved by the Change Advisory Board (CAB), which meets only once a week. The business is losing revenue with each outage. What should you do first to minimize the impact of the issue while a permanent solution is being developed?

Accepted Answer

Implement a workaround by manually scaling the application server during peak hours to handle the load. Option B is correct because manually scaling the application server during peak hours provides an immediate workaround to handle the load, directly reducing the impact of the misconfigured auto-scaling threshold. This aligns with ITIL's guidance on using workarounds to restore service while a permanent fix is developed. The business is losing revenue with each outage, so the priority is to stabilize the service first, not to wait for a CAB meeting or to analyze the root cause.

Answer

Expedite the change request by requesting an emergency change approval from the CAB chair

Answer

Conduct a root cause analysis and document the problem in the known error database

Answer

Increase the priority of all related incidents to ensure faster response from the service desk

Question 16

You are the IT service continuity manager for a financial services firm. The firm has a critical trading application that must be available during market hours. A recent risk assessment identified that the application's primary data center is in a flood-prone area. The recovery time objective (RTO) is 2 hours, and the recovery point objective (RPO) is 15 minutes. The current disaster recovery plan involves restoring the application from backups stored in a different region, which takes approximately 3 hours. The backup frequency is hourly. The firm is considering implementing a synchronous replication to a secondary data center to improve recovery times. However, the network latency between the two data centers is 10 milliseconds, which may impact application performance. What is the MOST appropriate action to ensure compliance with the RTO and RPO?

Accepted Answer

Implement synchronous replication to the secondary data center and update the disaster recovery plan. The current recovery plan fails to meet the RTO of 2 hours (restore takes 3 hours) and the RPO of 15 minutes (hourly backups). Synchronous replication writes data to both data centers simultaneously, ensuring zero data loss (RPO=0) and enabling near-instant failover, which can achieve the 2-hour RTO. The 10 ms latency is acceptable for most trading applications and is a trade-off for meeting the critical recovery objectives.

Answer

Accept the current recovery plan as the risk is low and focus on improving the backup process

Answer

Implement asynchronous replication with a 5-minute lag and test if the RPO can be met

Answer

Increase the backup frequency to every 5 minutes and test the restore process to ensure it meets the RTO

Question 17

A retail company is experiencing frequent service outages during peak hours due to insufficient capacity. The IT team wants to implement a practice that ensures the service provider has the capacity to meet agreed service level targets cost-effectively and in a timely manner. Which ITIL management practice should they use?

Accepted Answer

Capacity and availability management. Capacity and availability management is the correct practice because it focuses on ensuring capacity meets current and future demands cost-effectively. Option A is wrong because it is not a single practice. Option B is wrong because availability management focuses on uptime, not capacity. Option D is wrong because monitoring and event management detects incidents but does not plan capacity.

Answer

Monitoring and event management

Answer

Availability management

Answer

Service level management and availability management

Question 18

Which TWO statements about the ITIL change enablement practice are CORRECT?

Accepted Answer

A change authority is a person or group that authorizes a change.. Option A is correct because the ITIL 4 definition of a change authority explicitly states it is a person or group responsible for authorizing a change. This aligns with the change enablement practice, which assigns authorization based on the change type and organizational policies, not on a single role like the CAB.

Answer

All changes must be approved by a change advisory board (CAB).

Answer

The change schedule is used to authorize changes.

Answer

Normal changes can be implemented without authorization if they are low risk.

Question 19

Refer to the exhibit. A change order to patch a security vulnerability on WebServer01 has been approved. The IT manager is the change authority. During implementation, it is discovered that the patch requires a reboot, which will cause an outage for the OrderApp application. What is the MOST appropriate action?

Accepted Answer

Inform the IT manager and ask for a decision on whether to proceed.. The change order was approved based on the original scope, which did not include a reboot. The discovery that a reboot is required introduces a new risk (application outage) that was not assessed during the initial approval. The IT manager, as the change authority, must be informed and make a decision on whether to proceed with the change under the new circumstances, in line with the ITIL 4 'change enablement' practice of managing risk and ensuring authorized decisions.

Answer

Escalate to the change advisory board (CAB) for a new approval.

Answer

Proceed with the change as planned, since the change is already approved.

Answer

Cancel the change and request a new one with updated information.

Question 20

Drag and drop the steps of the availability management process into the correct order.