ITIL4-DPI Direct, Plan and Improve Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Proceed with migration and prioritize latency reduction, addressing security issues only post-deployment.

  Why it's wrong here

  Post-deployment security remediation violates the policy requirement to maintain the current security posture throughout the process. Governance policies are mandatory constraints, not optional considerations. Neglecting security until after deployment introduces unacceptable risks and represents a failure to integrate compliance directly into the planning and improvement lifecycle.

• ✓

  Include security impact assessments and performance monitoring as integral parts of the migration project plan.

  Why this is correct

  Integrating security assessments and performance monitoring directly into the project plan ensures that the initiative remains compliant with the policy from inception. This proactive approach allows the team to manage both latency goals and security constraints simultaneously, providing the necessary evidence for governance oversight during the planning phase.

• ✗

  Request a policy waiver to focus entirely on latency reduction to expedite the cloud migration timeline.

  Why it's wrong here

  Seeking a waiver to bypass governance constraints undermines the intent of the policy. Policies are designed to protect the organization's assets and reputation. Bypassing them for the sake of speed creates significant long-term risk and suggests a poor understanding of the 'Govern' component in the DPI model.

• ✗

  Focus on cloud-native security features and assume they automatically meet all latency and policy requirements.

  Why it's wrong here

  Assuming that technological features automatically satisfy complex governance policies is a dangerous oversight. Security and performance require careful configuration and validation. Relying on assumptions without documented evidence or assessment ignores the responsibility of planning to verify that the chosen solutions will actually meet the defined strategic constraints.