ITIL 4 Foundation ITIL4F Questions 676–750 | Page 10/11

676

MCQmedium

Which ITIL 4 dimension includes the definition of workflows and the sequence of activities?

A.Value Streams and Processes

B.Partners and Suppliers

C.Information and Technology

D.Organisations and People

AnswerA

This dimension is fundamental to defining how an organization creates, delivers, and captures value. It encompasses the identification and optimization of all activities, workflows, inputs, and outputs that transform demand into value. Specifically, it details the sequence of steps and procedures required to achieve a specific outcome, making it the direct home for workflow definitions.

Why this answer

The ITIL 4 dimension 'Value Streams and Processes' is correct because it specifically encompasses the definition of workflows, the sequence of activities, and how work flows through the organization to create value. This dimension focuses on the end-to-end activities, process steps, and their interconnections, which directly includes defining the order and flow of tasks.

Exam trap

The trap here is that candidates often confuse 'Information and Technology' with process automation or workflow tools, but the dimension itself does not define the sequence of activities—it only provides the enabling technology for those processes.

How to eliminate wrong answers

Option B (Partners and Suppliers) is wrong because it deals with external relationships, contracts, and dependencies with third parties, not the internal sequencing of activities or workflows. Option C (Information and Technology) is wrong because it covers data, knowledge, and the technological infrastructure (e.g., systems, networks, applications) that support services, not the procedural flow of work. Option D (Organisations and People) is wrong because it focuses on roles, responsibilities, culture, and human resources, not the structured sequence of activities or process definitions.

Full explanation →

677

MCQeasy

Which practice is responsible for managing the lifecycle of all IT assets?

A.Change Enablement

B.Service Configuration Management

C.IT Asset Management

D.Deployment Management

AnswerC

IT Asset Management is the practice specifically designed to plan, monitor, and control the full lifecycle of all IT assets, both tangible and intangible. This encompasses everything from the initial acquisition and deployment, through maintenance and upgrades, to eventual retirement and disposal, ensuring value is realized, costs are optimized, and risks are mitigated. It focuses on the financial, contractual, and inventory aspects of assets to support effective service delivery and organizational objectives.

Why this answer

IT Asset Management (ITAM) is the correct practice because it is specifically responsible for managing the lifecycle of all IT assets, including financial, contractual, and inventory aspects from acquisition to disposal. This aligns with the ITIL 4 definition, which states ITAM oversees the entire lifecycle of assets to optimize value and control costs, unlike other practices that focus on changes, configurations, or deployments.

Exam trap

The trap here is that candidates confuse Service Configuration Management (which tracks CIs and their relationships) with IT Asset Management (which tracks the financial and contractual lifecycle), leading them to pick Option B because both involve inventory, but only ITAM covers the full lifecycle including cost and disposal.

How to eliminate wrong answers

Option A is wrong because Change Enablement manages the lifecycle of changes (e.g., RFCs, approvals, and risk assessment), not the lifecycle of IT assets themselves. Option B is wrong because Service Configuration Management manages configuration items (CIs) and their relationships within the CMDB, focusing on service model integrity rather than the financial or contractual lifecycle of assets. Option D is wrong because Deployment Management handles the movement of new or changed components to live environments (e.g., release packages, rollback plans), not the full asset lifecycle from procurement to retirement.

Full explanation →

678

MCQmedium

A user contacts the service desk to request a new laptop because their current one is outdated. According to ITIL 4, what type of record should be raised?

A.Problem record

B.Change request

C.Service request

D.Incident record

AnswerC

A service request is a formal request from a user for something that is a standard part of service delivery, such as requesting information, a standard change, or access to a service. Obtaining a new laptop falls squarely into this category as it is a pre-defined, pre-approved offering within the service catalog, designed for efficient and often automated fulfillment. This practice ensures consistent and timely provision of common user needs.

Why this answer

A service request is the correct record type because the user is asking for something standard and pre-approved, such as a new laptop, rather than reporting a fault or outage. In ITIL 4, service requests are a normal part of service delivery and are handled through the request management practice, not incident or problem management. The request may trigger a change later, but the initial record is a service request.

Exam trap

ITIL4F often tests the confusion between service requests and change requests, especially when fulfilling a request might involve a change; candidates must remember that the user-facing record is a service request, not a change.

How to eliminate wrong answers

Option A is wrong because a problem record is raised to investigate the root cause of one or more incidents, not to fulfill a standard user request. Option B is wrong because a change request is used when a modification to a service or infrastructure needs to be assessed, authorized, and scheduled; the user's laptop request is not itself a change, even if fulfillment might involve one. Option D is wrong because an incident record is for an unplanned interruption or degradation of a service, whereas the outdated laptop is not causing a service outage.

Full explanation →

679

MCQeasy

According to ITIL 4, what is value co-creation?

A.Value is created jointly by the provider and consumer

B.The consumer creates value independently

C.Value is determined solely by the provider

D.The provider creates all value for the consumer

AnswerA

In ITIL 4, value co-creation signifies that value is not solely delivered by the service provider but is actively shaped and realized through collaborative interactions between the provider and the consumer. Both parties contribute resources, capabilities, and knowledge throughout the service relationship, influencing the utility and warranty of the service. This joint effort ensures that the service truly enables the consumer's desired outcomes while the provider gains insights for continuous improvement.

Why this answer

Value co-creation in ITIL 4 is a core concept stating that value is not delivered by the provider alone but is jointly created through the interaction and collaboration between the service provider and the service consumer. This means the consumer actively contributes resources, such as requirements, feedback, or usage context, which shape the service outcome, while the provider facilitates value through service offerings. Option A correctly captures this mutual, dynamic relationship where both parties are essential for value realization.

Exam trap

The trap here is that candidates often confuse value co-creation with the traditional 'value delivery' model, mistakenly thinking the provider alone creates value (Option D) or that the consumer is passive, when ITIL 4 explicitly requires active consumer involvement for value to be realized.

How to eliminate wrong answers

Option B is wrong because it implies the consumer creates value independently, ignoring the provider's role in enabling and facilitating the service, which contradicts ITIL 4's principle of co-creation. Option C is wrong because it states value is determined solely by the provider, which disregards the consumer's perception and contribution, a key aspect of ITIL 4's service value system. Option D is wrong because it suggests the provider creates all value for the consumer, overlooking the consumer's active participation in defining requirements, using the service, and providing feedback that shapes outcomes.

Full explanation →

680

MCQmedium

A company introduces a new CRM system that reduces the time sales staff spend on data entry by 30%. According to ITIL 4, this is an example of which concept?

A.Output

B.Warranty

C.Outcome

D.Utility

AnswerC

An outcome is a result for a stakeholder enabled by one or more outputs. The 30% reduction in data entry time is a direct, measurable, and desired result experienced by the users, directly facilitated by the new CRM system. This improvement in efficiency represents the value realized by the business from the service, perfectly aligning with the definition of an outcome.

Why this answer

The 30% reduction in time spent on data entry represents a measurable improvement in business performance, which is the definition of an outcome in ITIL 4. An outcome is a result for a stakeholder enabled by one or more products or services, and here the new CRM system directly enables sales staff to achieve more value (faster data entry). This is distinct from an output (the CRM system itself or its features) or utility (the functionality that makes the reduction possible).

Exam trap

The trap here is that candidates confuse utility (the functionality that enables the benefit) with the outcome (the actual benefit achieved), leading them to select 'Utility' instead of 'Outcome' when the question explicitly describes a realized performance improvement.

How to eliminate wrong answers

Option A is wrong because an output is a tangible or intangible deliverable of an activity, such as the CRM software itself or a specific report, not the business result of reduced time. Option B is wrong because warranty refers to the assurance that a product or service will meet agreed-upon conditions (e.g., availability, capacity, continuity, security), not the performance improvement achieved. Option D is wrong because utility is the functionality offered by a product or service to meet a particular need (e.g., the CRM's ability to automate data entry), but the question asks for the concept representing the realized benefit (the 30% reduction), which is the outcome.

Full explanation →

681

Matchingmedium

Match each ITIL 4 service value chain activity to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Ensure shared understanding of vision, objectives, and direction

Continually improve products, services, and practices

Understand stakeholder needs and ensure transparency

Ensure services meet requirements and are ready for use

Acquire or create service components and make them available

Why these pairings

The six service value chain activities are Plan, Improve, Engage, Design & Transition, Obtain/Build, and Deliver & Support. Each has a distinct focus; common confusions involve mixing up the definitions of the latter three.

Full explanation →

682

MCQeasy

What is the PRIMARY purpose of the ITIL 4 Service Value System (SVS)?

A.To replace the ITIL 4 guiding principles

B.To specify the service value chain activities

C.To define all ITIL practices

D.To enable value co-creation through service management

AnswerD

The primary purpose of the ITIL 4 Service Value System (SVS) is to enable value co-creation through a holistic approach to service management. It achieves this by integrating various components—guiding principles, governance, the service value chain, practices, and continual improvement—into a unified system. This comprehensive model ensures that all organizational activities are aligned towards delivering tangible outcomes and value for stakeholders, fostering a collaborative environment for service delivery.

Why this answer

The ITIL 4 Service Value System (SVS) is designed as an overarching model that describes how all components and activities of an organization work together to facilitate value co-creation. Its primary purpose is to enable value co-creation through service management by integrating the guiding principles, governance, service value chain, practices, and continual improvement into a cohesive system, rather than focusing on a single component like the value chain or practices.

Exam trap

The trap here is that candidates often mistake a component of the SVS (like the service value chain or practices) for its primary purpose, failing to recognize that the SVS is an integrated system designed for value co-creation, not just a list of activities or definitions.

How to eliminate wrong answers

Option A is wrong because the SVS does not replace the guiding principles; instead, it incorporates them as a key component that guides all activities within the system. Option B is wrong because specifying the service value chain activities is only one part of the SVS, not its primary purpose; the SVS encompasses the entire organizational capability to co-create value, including governance, principles, and practices. Option C is wrong because the SVS does not define all ITIL practices; practices are defined separately in the ITIL 4 framework, and the SVS provides the structure within which these practices operate to support value co-creation.

Full explanation →

683

Multi-Selecthard

Which THREE of the following are ITIL 4 guiding principles? (Choose three.)

Select 3 answers

A.Focus on value

B.Keep it simple and practical

C.Automate everything

D.Reduce silos

E.Start where you are

AnswersA, B, E

This is a core ITIL 4 Guiding Principle. It emphasizes that all activities performed by the organization should directly or indirectly create value for stakeholders, including customers, users, and the organization itself. Value can be defined subjectively by the recipient, so understanding the customer's perspective and desired outcomes is paramount to effective service management and ensures efforts are purposeful.

Why this answer

'Focus on value' is one of the seven ITIL 4 guiding principles, emphasizing that all activities should directly contribute to value creation for stakeholders. This principle ensures that every process, service, and improvement is measured against the value it delivers, avoiding wasted effort on non-value-adding activities.

Exam trap

The trap here is that candidates often confuse the ITIL 4 guiding principles with other ITIL concepts or generic best practices, such as assuming 'Automate everything' is a principle when the actual principle is 'Optimize and automate', or mistaking 'Reduce silos' for the correct principle 'Collaborate and promote visibility'.

Full explanation →

684

MCQmedium

Which ITIL 4 practice is primarily concerned with identifying the root cause of incidents?

A.Incident Management

B.Change Enablement

C.Problem Management

D.Service Request Management

AnswerC

Problem Management owns the investigation of underlying causes, recording and managing problems and known errors to prevent recurrence. Incident Management restores service quickly, whereas root cause analysis sits squarely with Problem Management, matching the stem's requirement to identify the cause rather than resolve the symptom.

Why this answer

Problem Management is the ITIL 4 practice focused on identifying the root cause of incidents to prevent recurrence. While Incident Management restores normal service operation, Problem Management conducts root cause analysis (RCA) to eliminate underlying defects, aligning with the ITIL 4 Service Value System's objective of continual improvement.

Exam trap

PeopleCert often tests the distinction between Incident Management and Problem Management, trapping candidates who confuse 'restoring service' with 'finding the root cause'—the key is that Incident Management is reactive and time-sensitive, while Problem Management is analytical and preventive.

How to eliminate wrong answers

Option A is wrong because Incident Management is concerned with restoring service as quickly as possible, not with root cause analysis; its primary goal is incident resolution, not RCA. Option B is wrong because Change Enablement manages the lifecycle of changes to IT services, ensuring they are assessed, approved, and implemented, but it does not investigate root causes of incidents. Option D is wrong because Service Request Management handles pre-defined, low-risk user requests (e.g., password resets), not the analysis of underlying incident causes.

Full explanation →

685

MCQmedium

An organization wants to improve its service delivery. According to ITIL 4, which concept emphasizes that the service consumer also contributes to value creation?

A.Service offering

B.Service relationship

C.Value co-creation

D.Outcome management

AnswerC

Value co-creation is a fundamental ITIL 4 concept emphasizing that value is not simply delivered to consumers but is actively and jointly created with them. It explicitly recognizes the consumer's active participation through their resources, capabilities, and understanding of their own context, which are essential inputs alongside the provider's services to realize desired outcomes and achieve value. This directly addresses the consumer's active role in improving service delivery.

Why this answer

Value co-creation (C) is the correct answer because ITIL 4 explicitly defines value co-creation as the joint activities performed by a service provider and a service consumer to create value. This concept emphasizes that the service consumer is not a passive recipient but an active contributor, meaning that without the consumer's participation (e.g., providing requirements, using the service correctly, or giving feedback), value cannot be fully realized. In the context of improving service delivery, this means the organization must engage consumers in the service relationship to ensure outcomes are achieved.

Exam trap

The trap here is that candidates often confuse 'service relationship' (the structure) with 'value co-creation' (the active process), leading them to pick B because they think the relationship itself implies consumer contribution, but ITIL 4 distinguishes that the relationship enables co-creation, not that it is the concept emphasizing the consumer's role.

How to eliminate wrong answers

Option A is wrong because a service offering describes the formal description of one or more services designed to address the needs of a target consumer group, but it does not inherently emphasize the consumer's active role in value creation. Option B is wrong because a service relationship is the cooperation between a service provider and a service consumer, which is a necessary condition for value co-creation, but the question specifically asks for the concept that emphasizes the consumer's contribution, which is value co-creation itself, not the relationship. Option D is wrong because outcome management focuses on defining, measuring, and achieving desired business outcomes, but it does not directly address the consumer's active participation in the value creation process.

Full explanation →

686

MCQeasy

What is the purpose of a service level agreement (SLA)?

A.To document the internal targets for the IT department

B.To define the technical specifications of a service

C.To describe the services available in the service catalogue

D.To negotiate and agree on service level targets with the customer

AnswerD

This option is correct because a Service Level Agreement (SLA) serves as a formal, negotiated document between a service provider and a customer. Its core purpose is to clearly define, agree upon, and document the specific service level targets, responsibilities, and expectations for a particular service. This agreement ensures mutual understanding and provides a basis for measuring, monitoring, and reporting service performance from the customer's perspective.

Why this answer

The purpose of a Service Level Agreement (SLA) is to formally negotiate and document the agreed service level targets between the service provider and the customer. This ensures both parties have a clear, measurable understanding of service expectations, such as availability, response times, and resolution times, which are directly tied to business needs.

Exam trap

The trap here is that candidates confuse an SLA with internal targets (Option A) or technical specs (Option B), but ITIL 4 explicitly distinguishes SLAs as customer-facing agreements focused on outcomes, not internal operations or technical details.

How to eliminate wrong answers

Option A is wrong because an SLA is not an internal document for the IT department; internal targets are documented in an Operational Level Agreement (OLA) or a underpinning contract, not the SLA. Option B is wrong because technical specifications of a service are defined in the Service Design Package (SDP) or technical documentation, not in an SLA, which focuses on performance and outcomes rather than technical details. Option C is wrong because the service catalogue describes the available services and their details, but the SLA is a separate agreement that defines the specific targets for those services, not a description of the catalogue itself.

Full explanation →

687

Multi-Selecthard

Which THREE of the following are activities of the ITIL Service Value Chain?

Select 3 answers

A.Audit

B.Improve

C.Monitor and control

D.Plan

E.Engage

AnswersB, D, E

Improve is an activity of the service value chain.

Why this answer

(Improve) is correct because the ITIL Service Value Chain defines six core activities: Plan, Improve, Engage, Design & Transition, Obtain/Build, and Deliver & Support. 'Improve' is the activity responsible for continual improvement of products, services, and practices across the entire value chain, ensuring alignment with changing business needs.

Exam trap

The trap here is that candidates confuse common IT management terms like 'Audit' or 'Monitor and control' with the official ITIL Service Value Chain activities, which are strictly limited to the six defined in the ITIL 4 Foundation syllabus.

Full explanation →

688

MCQmedium

A monitoring tool detects that a server's CPU usage has exceeded 90% for 10 minutes. According to ITIL 4, this event is classified as which type?

A.Exception

B.Critical

C.Informational

D.Warning

AnswerD

A warning event is specifically designed to indicate that a predefined threshold has been breached, signaling a potential issue that requires attention before it escalates into a service degradation or failure. Detecting high CPU usage falls precisely into this category, as it provides an early alert, enabling proactive intervention to prevent a more severe incident. This allows operations teams to investigate and mitigate the cause before an actual service impact occurs, aligning with proactive service management principles.

Why this answer

In ITIL 4 event management, events are classified by significance: informational events are routine notifications, warnings indicate a threshold has been approached or exceeded but service is not yet critically impacted, and exceptions indicate a service has failed or breached a critical threshold. A CPU exceeding 90% for 10 minutes is a threshold breach that signals potential degradation but not yet a service failure, which maps to a warning. Critical is not a standard ITIL 4 event classification — ITIL uses informational, warning, and exception.

Exam trap

ITIL4F often tests the three event types (informational, warning, exception) and candidates frequently select 'critical' because it is a familiar severity term from incident management, even though it is not an ITIL 4 event classification.

How to eliminate wrong answers

Option A is wrong because an exception in ITIL 4 denotes a service failure or a breach of a critical threshold that requires immediate action — a 90% CPU reading is a precursor, not a failure. Option B is wrong because 'critical' is not one of the three ITIL 4 event types (informational, warning, exception); it is a priority or severity label used in incident management, not event classification. Option C is wrong because informational events are routine status notifications that require no action — a sustained 90% CPU threshold breach is actionable and therefore not merely informational.

Full explanation →

689

Multi-Selecthard

Which THREE of the following are purposes of the 'Design and Transition' value chain activity?

Select 3 answers

A.To ensure that services and products are designed with appropriate architecture and technology

B.To ensure a shared understanding of the current status and improvement direction

C.To ensure that new or changed services are introduced smoothly into the live environment

D.To ensure that services and products meet stakeholder requirements for quality, costs, and time to market

E.To ensure the continual improvement of products and services

AnswersA, C, D

This is a core purpose of the "Design and Transition" value chain activity, which involves creating the detailed specifications and blueprints for new or changed services. It ensures that the underlying technical architecture, infrastructure, applications, and data structures are robust, scalable, and align with organizational standards and strategic objectives. This foundational design work is critical before any development or deployment can commence effectively.

Why this answer

The 'Design and Transition' value chain activity ensures that services and products are designed with appropriate architecture and technology, aligning with stakeholder requirements for quality, costs, and time to market. This includes defining technical specifications, selecting suitable technologies, and ensuring the design supports operational needs.

Exam trap

The trap here is confusing the purposes of 'Design and Transition' with those of 'Improve', as candidates often mistakenly attribute continual improvement or shared understanding of status to the design phase rather than the improvement activity.

Full explanation →

690

Multi-Selectmedium

Which TWO of the following are examples of outcomes enabled by an IT service?

Select 2 answers

A.Improved employee satisfaction

B.Reduced operational risk

C.A backup file

D.A monthly financial report

E.A processed sales transaction

AnswersA, B

Improved employee satisfaction represents a desired result for the organization's stakeholders, specifically its employees, indicating a positive change in their experience and engagement. It signifies a valuable effect achieved through effective service consumption, contributing to broader organizational objectives like productivity and retention. This outcome is a direct measure of value realization, far beyond a mere deliverable.

Why this answer

Improved employee satisfaction is an outcome enabled by an IT service because it represents a measurable business benefit that results from the service's functionality. For example, a self-service HR portal that allows employees to update personal details and request leave without manual intervention directly leads to higher satisfaction by reducing friction and wait times. This outcome is not the service itself but the positive business result achieved through its use.

Exam trap

The trap here is confusing outputs (tangible deliverables like reports, files, or transactions) with outcomes (the business benefits or changes in state that those outputs enable), leading candidates to select options C, D, or E as outcomes instead of outputs.

Full explanation →

691

Multi-Selectmedium

Which TWO of the following are reasons why all Four Dimensions must be considered when designing a service?

Select 2 answers

A.It is impossible to deliver a service without considering all four

B.Neglecting a dimension can lead to poor service quality or failure

C.Regulatory bodies require documentation of all four dimensions

D.Changes in one dimension often require adjustments in others

E.The dimensions are independent and must each be optimised separately

AnswersB, D

Each of the four dimensions is a critical component of a holistic service management system, and overlooking any one can severely compromise service delivery. For instance, neglecting "Organizations and People" can result in skill gaps or cultural resistance, while ignoring "Information and Technology" can lead to outdated systems or security vulnerabilities. Similarly, failing to manage "Partners and Suppliers" can cause supply chain disruptions, and poor "Value Streams and Processes" create inefficiencies. Consequently, such oversights directly impair the service's ability to provide value and maintain quality, often leading to outright failure.

Why this answer

Neglecting any of the Four Dimensions (Organizations & People, Information & Technology, Partners & Suppliers, Value Streams & Processes) can directly lead to poor service quality or outright service failure. For example, if the Information & Technology dimension is ignored, the service may lack necessary security controls or capacity, causing outages. ITIL 4 emphasizes that all dimensions must be balanced to ensure the service meets its agreed utility and warranty requirements.

Exam trap

The trap here is that candidates assume the Four Dimensions are optional or independent, but ITIL 4 explicitly states they are all interrelated and must be considered together to avoid service failures.

Full explanation →

692

MCQeasy

What is the difference between an SLA and an OLA?

A.SLA covers availability, OLA covers security

B.SLA is with the customer, OLA is with another internal department

C.SLA is for services, OLA is for projects

D.SLA is internal, OLA is external

AnswerB

This statement accurately defines the core difference. A Service Level Agreement (SLA) is a formal agreement between a service provider and its customer, detailing the service to be provided and the agreed-upon service levels. In contrast, an Operational Level Agreement (OLA) is an internal agreement between different departments or teams within the same service provider organization, outlining their responsibilities to support the delivery of a service and ensure the external SLA can be met.

Why this answer

A Service Level Agreement (SLA) is a documented agreement between a service provider and a customer that defines the level of service expected, while an Operational Level Agreement (OLA) is an internal agreement between IT support teams or departments within the same organization to support the SLA. The core distinction is the external vs. internal nature of the parties involved: the SLA faces the customer, and the OLA supports the SLA through internal coordination.

Exam trap

The trap here is that candidates confuse the direction of the agreement, often thinking an SLA is internal and an OLA is external, or they mistakenly associate the terms with specific metrics like availability vs. security rather than the relationship between parties.

How to eliminate wrong answers

Option A is wrong because both SLA and OLA can cover availability and security; the difference is not about specific metrics but about the parties involved. Option C is wrong because both SLA and OLA are used for ongoing services, not projects; projects are governed by project charters or contracts, not SLAs or OLAs. Option D is wrong because it reverses the relationship: an SLA is external (with the customer), and an OLA is internal (between internal departments).

Full explanation →

693

MCQmedium

An organization uses a combination of in-house and outsourced IT services. Which dimension is most relevant to managing the relationship with the outsourced provider?

A.Partners and Suppliers

B.Organisations and People

C.Value Streams and Processes

D.Information and Technology

AnswerA

The Partners and Suppliers dimension specifically addresses the relationships an organization has with external entities that are involved in the design, development, deployment, delivery, support, and/or continual improvement of services. When an organization uses a combination of in-house and outsourced services, this dimension is crucial for managing contracts, agreements, and the overall engagement with third-party providers. It ensures that external contributions are effectively integrated and aligned with the organization's service objectives, making it the correct choice for managing outsourced components.

Why this answer

The Partners and Suppliers dimension is specifically concerned with managing relationships with external entities that provide services or components. Since the question involves an outsourced provider, this dimension directly addresses how to integrate, govern, and collaborate with that third party to ensure service quality and alignment with organizational goals.

Exam trap

The trap here is that candidates confuse the 'Information and Technology' dimension with managing the outsourced provider, thinking that technology integration is the key focus, when in fact the relationship and contractual governance fall under Partners and Suppliers.

How to eliminate wrong answers

Option B (Organisations and People) is wrong because it focuses on internal roles, culture, and competencies, not on managing external provider relationships. Option C (Value Streams and Processes) is wrong because it deals with the flow of activities and workflows, not the contractual or relational aspects of outsourcing. Option D (Information and Technology) is wrong because it covers data, applications, and infrastructure, but does not address the governance or partnership with an external service provider.

Full explanation →

694

MCQeasy

What is the purpose of the Continual Improvement practice?

A.To manage the lifecycle of all IT assets

B.To align IT services with business needs through ongoing improvements

C.To ensure services are available as agreed

D.To manage the resolution of incidents

AnswerB

This is the correct purpose of the continual improvement practice. It ensures that an organization's services and practices are continuously aligned with evolving business needs and objectives, driving ongoing value co-creation. This practice employs a structured approach, often iterative, to identify and implement improvements across all aspects of the service value system, ensuring relevance and optimal performance over time.

Why this answer

The Continual Improvement practice ensures that IT services and processes remain aligned with evolving business needs by identifying and implementing ongoing improvements. It is a core ITIL 4 practice that drives value through iterative enhancements, not a one-time fix. This practice integrates with all other practices to close the loop on service performance and business alignment.

Exam trap

The trap here is that candidates confuse Continual Improvement with a reactive fix or a single project, when ITIL 4 defines it as a proactive, ongoing practice that applies to all services and processes, not just asset or incident management.

How to eliminate wrong answers

Option A is wrong because managing the lifecycle of all IT assets is the purpose of the IT Asset Management practice, not Continual Improvement. Option C is wrong because ensuring services are available as agreed is the purpose of the Service Availability Management practice. Option D is wrong because managing the resolution of incidents is the purpose of the Incident Management practice.

Full explanation →

695

MCQhard

You are the IT service manager for a mid-sized e-commerce company. The company has been experiencing intermittent service outages affecting the checkout process during peak hours. The monitoring system shows that the application server's CPU utilization spikes to 95% during these periods. The database server appears healthy. The incident management team has been creating multiple incidents for each outage, but no permanent fix has been implemented. The problem management team has identified that the application server's auto-scaling configuration is not triggering correctly due to a misconfigured threshold. However, changing the threshold requires a change request that must be approved by the Change Advisory Board (CAB), which meets only once a week. The business is losing revenue with each outage. What should you do first to minimize the impact of the issue while a permanent solution is being developed?

A.Expedite the change request by requesting an emergency change approval from the CAB chair

B.Implement a workaround by manually scaling the application server during peak hours to handle the load

C.Conduct a root cause analysis and document the problem in the known error database

D.Increase the priority of all related incidents to ensure faster response from the service desk

AnswerB

Implementing a workaround, such as manually scaling the application server, directly addresses the immediate symptom of performance degradation and its impact on revenue. This ITIL practice focuses on restoring service functionality as quickly as possible, even if the underlying root cause is not yet resolved. It provides immediate relief, mitigating financial losses and maintaining customer satisfaction while a more permanent solution is developed through formal change management.

Why this answer

Manually scaling the application server during peak hours provides an immediate workaround to handle the load, directly reducing the impact of the misconfigured auto-scaling threshold. This aligns with ITIL's guidance on using workarounds to restore service while a permanent fix is developed. The business is losing revenue with each outage, so the priority is to stabilize the service first, not to wait for a CAB meeting or to analyze the root cause.

Exam trap

The trap here is that candidates may confuse 'first response' with 'problem management' and choose root cause analysis (Option C), but ITIL emphasizes restoring service as the immediate priority before investigating the underlying cause.

How to eliminate wrong answers

Option A is wrong because expediting an emergency change through the CAB chair still requires approval and coordination, which introduces delay; the question asks what to do 'first' to minimize impact, and a manual workaround can be implemented immediately without waiting for any approval process. Option C is wrong because conducting a root cause analysis and documenting the problem in the known error database is a problem management activity that does not directly address the ongoing outages; it is a longer-term step that should follow the immediate restoration of service. Option D is wrong because increasing the priority of incidents does not resolve the underlying capacity issue; it only triggers faster response from the service desk, but the service desk cannot fix the auto-scaling misconfiguration or manually scale the server.

Full explanation →

696

MCQmedium

In ITIL 4, which term describes the benefits that a service consumer receives from using a service?

A.Outcomes

B.Outputs

C.Warranty

D.Utility

AnswerA

In ITIL 4, outcomes represent the results achieved by a stakeholder, enabled by the service. These are the benefits, value, or objectives that a service helps a customer attain, rather than merely the service components themselves. For instance, a customer doesn't just want an email server (an output); they want effective communication (an outcome) facilitated by that server. Outcomes are central to understanding the true value proposition of a service.

Why this answer

In ITIL 4, 'outcomes' are defined as the results or benefits that a service consumer achieves from using a service, which directly support the consumer's business objectives. This is distinct from outputs, which are the tangible deliverables produced by the service. The correct answer is A because outcomes focus on the value realized by the consumer, not just the service's functionality or performance.

Exam trap

The trap here is that candidates often confuse 'utility' (the service's functionality) with 'outcomes' (the realized benefits), because both relate to value, but utility is a service attribute while outcomes are the consumer's achieved results.

How to eliminate wrong answers

Option B is wrong because 'outputs' refer to the tangible or intangible deliverables produced by a service activity (e.g., a report or processed transaction), not the benefits received by the consumer. Option C is wrong because 'warranty' describes the assurance that a service will meet agreed-upon availability, capacity, continuity, and security requirements, not the benefits themselves. Option D is wrong because 'utility' is the functionality offered by a service to meet a specific need, but it does not capture the realized benefits or value from the consumer's perspective.

Full explanation →

697

Multi-Selectmedium

Which THREE are examples of unplanned downtime that Availability Management seeks to minimize?

Select 3 answers

A.Scheduled maintenance

B.Hardware failure

C.Cyberattack causing service disruption

D.Planned upgrade of a server

E.Software bug causing service outage

AnswersB, C, E

Hardware failure, such as a disk crash, power supply malfunction, or memory error, is inherently an unplanned event that can lead to service disruption. These incidents occur without prior warning, necessitating immediate reactive measures to restore service functionality. The unpredictable nature of component breakdown makes it a prime example of unplanned downtime, directly impacting system availability without prior scheduling.

Why this answer

Availability Management aims to minimize unplanned downtime, which is any outage not scheduled or agreed in advance. Option B (Hardware failure) is correct because a sudden disk, PSU, or NIC failure is an unexpected event that directly reduces service availability and must be mitigated through redundancy, monitoring, and fast recovery. Option C (Cyberattack causing service disruption) is correct because a DDoS, ransomware, or intrusion-induced outage is unplanned and Availability Management addresses it via security controls, resilience, and incident response.

Option E (Software bug causing service outage) is correct because an unexpected defect that crashes a service or corrupts data is unplanned downtime requiring patching, testing, and rollback strategies. Options A (Scheduled maintenance) and D (Planned upgrade of a server) are not unplanned downtime; they are planned, pre-agreed activities typically handled by Change Management and excluded from the unplanned downtime that Availability Management seeks to minimize.

Exam trap

The trap is that candidates see 'maintenance' and 'upgrade' and assume any downtime counts; ITIL explicitly separates planned downtime (change management) from unplanned downtime (availability management), and the exam tests that distinction.

Full explanation →

698

MCQeasy

A help desk technician is troubleshooting an issue where users cannot access a critical application. The technician quickly restores service by rebooting the server. Which practice is being performed?

A.Service request management

B.Change enablement

C.Incident management

D.Problem management

AnswerC

Incident management is the practice of minimizing the negative impact of incidents by restoring normal service operation as quickly as possible. When a help desk technician is actively troubleshooting an issue, they are reacting to an unplanned interruption or reduction in the quality of a service, aiming to restore functionality for the user. This immediate, reactive response to an unexpected event perfectly aligns with the core objective of incident management.

Why this answer

The technician is reacting to an unplanned interruption of service (users cannot access a critical application) and quickly restoring service by rebooting the server. This aligns directly with the Incident Management practice, which aims to minimize the negative impact of incidents by restoring normal service operation as quickly as possible. The immediate reboot is a workaround to restore functionality, not a permanent fix, which is characteristic of incident handling.

Exam trap

The trap here is that candidates confuse the quick restoration action (reboot) with Problem Management, but ITIL 4 explicitly separates incident resolution (restore service) from problem investigation (find root cause), and the question describes only the restoration step.

How to eliminate wrong answers

Option A is wrong because Service Request Management handles pre-defined, low-risk requests from users (e.g., password resets, access requests), not unplanned outages requiring immediate restoration. Option B is wrong because Change Enablement manages the lifecycle of all changes to IT services with proper authorization and planning; a reactive reboot without a change request is not a controlled change. Option D is wrong because Problem Management seeks to identify and eliminate the root cause of incidents to prevent recurrence, whereas the technician is only restoring service without analyzing the underlying cause.

Full explanation →

699

MCQmedium

A company launches a new mobile app that meets all technical specifications, but users find it difficult to navigate and adoption is low. According to ITIL 4, the app has achieved an output but not an outcome. What does this illustrate?

A.Utility is present but warranty is missing

B.The service is fit for use but not fit for purpose

C.An output was produced but the desired outcome was not achieved

D.The service value chain is incomplete

AnswerC

An output is a tangible or intangible deliverable of an activity, such as the new mobile app itself, which was successfully launched and met technical specifications. An outcome, however, is the result for a stakeholder enabled by one or more outputs. Poor user adoption clearly indicates that the intended business result or value (e.g., increased customer engagement, market share) was not realized, despite the successful production of the app.

Why this answer

The app was launched and meets all technical specifications (output), but users find it difficult to navigate and adoption is low, meaning the desired business result (outcome) was not achieved. In ITIL 4, an output is a tangible deliverable (the app), while an outcome is the result for stakeholders (e.g., increased user engagement or productivity). This scenario directly illustrates that an output was produced but the desired outcome was not achieved, making option C correct.

Exam trap

The trap here is confusing 'output' with 'outcome' and misapplying the utility/warranty or fit-for-purpose/fit-for-use distinctions, leading candidates to pick option A or B when the core issue is that the desired business result was not achieved despite the technical deliverable being complete.

How to eliminate wrong answers

Option A is wrong because utility (functionality that meets user needs) is missing—users find the app difficult to navigate, so it does not provide the required functionality; warranty (assurance of availability, capacity, etc.) is not the issue here. Option B is wrong because 'fit for purpose' (utility) is absent since the app is hard to navigate, while 'fit for use' (warranty) is not the primary concern; the app is not fit for purpose. Option D is wrong because the service value chain (plan, improve, engage, design, transition, obtain/build, deliver/support) can be complete even if the outcome is not achieved; the issue is a failure in value co-creation, not an incomplete value chain.

Full explanation →

700

MCQeasy

Which ITIL guiding principle states that 'nothing should be done unless it adds value for the stakeholders'?

A.Optimise and automate

B.Focus on value

C.Collaborate and promote visibility

D.Keep it simple and practical

AnswerB

Focus on value directly satisfies the stem's constraint that nothing proceeds unless it benefits stakeholders. This principle requires every activity, process and decision to trace back to measurable stakeholder value, filtering out work that consumes resources without return. It is the only guiding principle that makes stakeholder benefit the explicit precondition for action.

Why this answer

The 'Focus on value' guiding principle is correct because it explicitly states that every activity, process, or service should deliver measurable value to stakeholders, including customers and users. In ITIL 4, this principle ensures that all improvements and operations are aligned with business outcomes, preventing wasteful efforts that do not contribute to perceived or actual value.

Exam trap

The trap here is that candidates often confuse 'Focus on value' with 'Optimise and automate' because both involve improving processes, but the key distinction is that value must be the driver before any optimisation or automation is considered.

How to eliminate wrong answers

Option A is wrong because 'Optimise and automate' focuses on improving efficiency and reducing manual effort through technology, not on the fundamental requirement of value delivery. Option C is wrong because 'Collaborate and promote visibility' addresses cross-team communication and transparency, not the direct mandate that actions must add stakeholder value. Option D is wrong because 'Keep it simple and practical' advocates for minimal complexity and pragmatic solutions, but does not specifically require that every action must add value for stakeholders.

Full explanation →

701

MCQmedium

A company is migrating its on-premise infrastructure to a public cloud provider. The IT team is concerned about losing control over data security and wants to ensure the cloud provider meets their security standards. Which dimension of service management is most relevant to this concern?

A.Value Streams and Processes

B.Partners and Suppliers

C.Organization and People

D.Information and Technology

AnswerB

This dimension specifically addresses the relationships an organization has with other organizations that are involved in the design, development, deployment, delivery, support, and/or continual improvement of services. It encompasses the management of contracts, agreements, and the integration of external services, such as those provided by a cloud infrastructure partner, to ensure they meet organizational requirements and contribute effectively to value creation. This is precisely where managing a cloud migration partner falls.

Why this answer

The Partners and Suppliers dimension covers the relationships and dependencies with external organizations, including cloud providers. When migrating to a public cloud, the IT team's concern about data security and control directly involves the provider's security standards, SLAs, and contractual obligations, making this dimension the most relevant.

Exam trap

The trap here is that candidates often confuse 'Information and Technology' as the correct dimension because data security sounds technical, but the question specifically asks about the provider's security standards, which is a supplier relationship issue, not an internal technology one.

How to eliminate wrong answers

Option A is wrong because Value Streams and Processes focus on how activities are coordinated to deliver value, not on external provider security controls. Option C is wrong because Organization and People deals with roles, responsibilities, and culture within the company, not the security standards of an external cloud provider. Option D is wrong because Information and Technology covers the internal data and systems architecture, but the concern here is about the provider's security, which falls under supplier management.

Full explanation →

702

MCQmedium

A company has implemented a new cloud-based email service that reduces the time employees spend managing their inboxes by 30%. Which ITIL 4 term best describes this reduction?

A.Utility

B.Warranty

C.Output

D.Outcome

AnswerD

An outcome is a result achieved by a stakeholder, enabled by one or more outputs. The 30% time reduction in employee time spent on email is a direct, measurable benefit and a positive change in state for the employees. This clearly represents the value realized by the users, aligning perfectly with the ITIL 4 definition of an outcome.

Why this answer

An outcome in ITIL 4 refers to a result or benefit delivered to stakeholders, such as improved productivity or reduced effort. The 30% reduction in time spent managing inboxes is a measurable business outcome achieved by using the new cloud-based email service, not a feature of the service itself.

Exam trap

The trap here is confusing utility (the service's features) with outcome (the business result), leading candidates to pick Option A when they see a functional improvement like 'reduces time' as a feature rather than a realized benefit.

How to eliminate wrong answers

Option A is wrong because utility is the functionality offered by a service (e.g., the ability to send, receive, and organize emails), not the resulting benefit like time savings. Option B is wrong because warranty ensures the service is available, secure, and reliable (e.g., uptime guarantees, data encryption), not the reduction in employee effort. Option C is wrong because output refers to the tangible deliverables of a service (e.g., number of emails processed or storage used), not the business impact or value realized.

Full explanation →

703

Multi-Selectmedium

Which TWO of the following best describe the nature of value in ITIL 4?

Select 2 answers

A.Value is perceived by the service consumer based on outcomes

B.Value is objective and measurable in monetary terms

C.Value is independent of the consumer's context

D.Value is determined solely by the service provider

E.Value is co-created through interaction between provider and consumer

AnswersA, E

Value, within the ITIL 4 framework, is fundamentally subjective and is determined by the service consumer's perception of whether their desired outcomes have been achieved. It is not an inherent quality of a service but rather a realization that occurs when the service enables the consumer to meet their objectives effectively, while also managing associated costs and risks from their perspective.

Why this answer

Option A is correct because ITIL 4 defines value as being perceived by the service consumer, and it is realized through the outcomes the consumer achieves, not merely through the outputs delivered. Option E is correct because ITIL 4 emphasizes that value is co-created through the interaction and relationship between the service provider and the service consumer, rather than being produced unilaterally. Options B, C, and D are incorrect because ITIL 4 rejects the idea that value is purely objective, monetary, context-independent, or determined solely by the provider; instead, value depends on the consumer's perception, context, and needs.

Exam trap

The trap here is that candidates often mistakenly think value is purely financial or objective (Option B) or that the provider alone defines it (Option D), ignoring the ITIL 4 emphasis on co-creation and consumer perception.

Full explanation →

704

MCQhard

An IT service manager notices that a new cloud-based monitoring tool provides real-time data but the security configuration is complex. Users are bypassing the tool because they find it difficult to use. Which ITIL 4 dimension is being neglected?

A.Partners and Suppliers

B.Organizations and People

C.Information and Technology

D.Value Streams and Processes

AnswerB

This dimension directly addresses the human element within service management, encompassing the organizational structure, culture, leadership, and the capabilities and competencies of all personnel. User rejection of a new cloud-based monitoring tool is a clear indicator of issues within this dimension, specifically concerning inadequate user training, poor communication regarding the change, or a failure to manage the transition effectively. Successful adoption hinges on ensuring users are prepared, willing, and able to utilize new technologies, which requires strong change management and user enablement strategies.

Why this answer

(Organizations and People) because the scenario describes users actively bypassing the tool due to its complexity, which is a direct failure in user adoption, training, and competency. ITIL 4 emphasizes that technology must be aligned with the people who use it; neglecting the human factor leads to shadow IT and reduced value. The security configuration being complex is a technology issue, but the root cause is that the organization did not ensure the tool was usable or that users had the necessary skills.

Exam trap

The trap here is that candidates see 'security configuration is complex' and immediately assume the 'Information and Technology' dimension is the answer, but the question explicitly states users are bypassing the tool—a people and organizational issue, not a technology failure.

How to eliminate wrong answers

Option A (Partners and Suppliers) is wrong because the issue is not about external vendor contracts, supplier management, or third-party dependencies; the monitoring tool is cloud-based but the problem is internal user behavior. Option C (Information and Technology) is wrong because while the tool provides real-time data and has complex security settings, the dimension itself is not neglected—the technology works as designed; the neglect is in how people interact with it. Option D (Value Streams and Processes) is wrong because the processes for monitoring and incident detection may be defined, but the failure is not in the workflow or process design; it is in the lack of user competence and organizational support.

Full explanation →

705

Multi-Selectmedium

Which TWO of the following are part of the Information and Technology dimension according to ITIL 4?

Select 2 answers

A.Supplier contracts

B.Cloud computing

C.Data and information management

D.Process workflows

E.Organizational roles and responsibilities

AnswersB, C

Cloud computing represents a fundamental technological paradigm for delivering IT services, encompassing infrastructure, platforms, and software as a service. As a collection of technologies, applications, and infrastructure used to process, store, and deliver information, it directly falls under the "Information and Technology" dimension. This dimension specifically includes the technologies required to manage and provide services, making cloud solutions a prime example.

Why this answer

In ITIL 4, the Information and Technology dimension covers the information and knowledge, as well as the technologies, required for service management; option B (Cloud computing) is correct because cloud platforms are a key technology component of this dimension, enabling scalable infrastructure and service delivery. Option C (Data and information management) is also correct because managing data, information, and knowledge assets is the core focus of this dimension. Option A (Supplier contracts) belongs to the Partners and Suppliers dimension, which addresses relationships and agreements with external parties.

Option D (Process workflows) belongs to the Value Streams and Processes dimension, which covers how activities and workflows create value. Option E (Organizational roles and responsibilities) belongs to the Organizations and People dimension, which covers structure, culture, and roles.

Exam trap

PeopleCert often tests the distinction between the Four Dimensions, and the trap here is confusing the Partners and Suppliers dimension (Option A) or the Organizations and People dimension (Option E) with Information and Technology, as candidates may incorrectly associate contracts or roles with technology rather than their correct dimension.

Full explanation →

706

MCQhard

A service desk analyst receives a call from a user who cannot access the network drive. The analyst quickly resets the user's permissions and the issue is resolved. Which ITIL 4 practice is being demonstrated?

A.Change Enablement

B.Service Request Management

C.Problem Management

D.Incident Management

AnswerD

Incident Management is the practice of minimizing the negative impact of incidents by restoring normal service operation as quickly as possible. An incident is defined as an unplanned interruption to a service or a reduction in the quality of a service. A user unable to access a system directly fits this definition, making immediate restoration the core activity of Incident Management.

Why this answer

The analyst resolved an unplanned interruption to a service (network drive access) by restoring normal service operation as quickly as possible. This aligns with the Incident Management practice, which focuses on minimizing the negative impact of incidents by returning to normal service operation. The immediate reset of permissions is a standard incident resolution step, not a planned change or a service request.

Exam trap

The trap here is that candidates confuse a 'permission reset' with a 'service request' (Option B), but the key differentiator is that the user reported an unplanned interruption (cannot access), not a standard request for new access, making it an incident by definition.

How to eliminate wrong answers

Option A is wrong because Change Enablement manages the lifecycle of all changes to IT services, including assessment, authorization, and implementation of planned changes; resetting a user's permission is an unplanned, reactive action, not a pre-approved change. Option B is wrong because Service Request Management handles pre-defined, standardized requests from users (e.g., password resets, access requests) that follow an established, low-risk procedure; while a permission reset could be a service request, the context of a user 'cannot access' indicates an unplanned interruption, making it an incident. Option C is wrong because Problem Management aims to identify the root cause of one or more incidents and prevent recurrence; the analyst resolved the immediate issue without performing root cause analysis or implementing a permanent fix.

Full explanation →

707

MCQmedium

After a major incident, an IT team decides to analyze the root cause to prevent recurrence. Which practice is being applied?

A.Change Management

B.Service Desk

C.Incident Management

D.Problem Management

AnswerD

Problem Management is specifically designed to reduce the likelihood and impact of incidents by identifying actual and potential causes of incidents and managing workarounds and known errors. After a major incident, analyzing its root cause to prevent recurrence is a quintessential activity of Problem Management, aiming to find a permanent solution rather than just a quick fix or temporary workaround.

Why this answer

Problem Management (D) is correct because its primary purpose is to analyze the root cause of incidents and prevent recurrence. After a major incident, the team performs root cause analysis (RCA) to identify underlying issues and implement permanent fixes, which is a core activity of Problem Management, not Incident Management.

Exam trap

The trap here is confusing Incident Management (restoring service quickly) with Problem Management (preventing recurrence), as both deal with incidents but have distinct objectives and processes.

How to eliminate wrong answers

Option A is wrong because Change Management focuses on controlling and managing changes to IT services (e.g., RFCs, CAB approvals) to minimize risk, not on analyzing root causes of incidents. Option B is wrong because Service Desk acts as the single point of contact for users logging incidents and requests, handling initial triage and communication, but it does not perform root cause analysis. Option C is wrong because Incident Management aims to restore normal service operation as quickly as possible after an incident, reducing impact, but it does not involve deep root cause analysis or prevention of recurrence—that is the role of Problem Management.

Full explanation →

708

MCQmedium

A customer purchases a cloud storage service. The provider guarantees 99.9% uptime. This guarantee is an example of:

A.An outcome

B.Warranty

C.A service level agreement

D.Utility

AnswerB

Warranty refers to the assurance that a service will meet agreed requirements regarding its availability, capacity, continuity, and security. When a customer purchases a cloud storage service, the guarantee of its uptime and accessibility directly falls under the warranty aspect. This 'fit for use' characteristic ensures the service performs as expected, enabling the customer to utilize its functionality reliably and without undue interruption.

Why this answer

The 99.9% uptime guarantee is a commitment to the service's availability and performance characteristics, which aligns with the ITIL 4 definition of 'warranty' — the assurance that a service will meet agreed-upon conditions such as availability, capacity, continuity, and security. Warranty focuses on the 'how' of service delivery, ensuring the service is fit for use, whereas utility addresses the 'what' (functionality). This guarantee does not describe a desired business outcome (A), nor is it the entire service level agreement (C), which is a documented contract; it is a specific warranty element within or referenced by an SLA.

Exam trap

The trap here is that candidates confuse 'warranty' with 'service level agreement' (SLA), but an SLA is the formal contract that contains warranties, not the warranty itself — the question asks for the specific type of guarantee, not the document it resides in.

How to eliminate wrong answers

Option A is wrong because an outcome is a result or benefit delivered to the customer (e.g., 'reduced storage costs'), not a technical guarantee of uptime percentage. Option C is wrong because a service level agreement (SLA) is a broader document that may include multiple warranties, targets, and responsibilities, whereas the 99.9% uptime guarantee is a specific warranty clause within an SLA. Option D is wrong because utility refers to the functionality or 'fit for purpose' of the service (e.g., the ability to store and retrieve files), not the assurance of its availability or performance.

Full explanation →

709

MCQmedium

A service desk analyst receives a call from an executive who is unable to print from her laptop. The analyst resolves the issue by restarting the print spooler. According to ITIL 4, how should this interaction be recorded?

A.As a problem

B.As an incident

C.As a service request

D.As a change request

AnswerB

This situation should be classified as an incident because an incident is defined as an unplanned interruption to a service or a reduction in the quality of a service. The executive's printer not working represents an unexpected disruption to their ability to perform work, directly impacting their productivity. The primary goal of incident management is to restore normal service operation as quickly as possible to minimize business impact.

Why this answer

This interaction is recorded as an incident because the executive experienced an unplanned interruption to the printing service (failure to print), which directly aligns with the ITIL 4 definition of an incident: any unplanned reduction in service quality. Restarting the print spooler is a restoration action that returns the service to normal operation, not a permanent fix or a request for something new.

Exam trap

The trap here is that candidates confuse a 'service request' with any user call for help, but ITIL 4 strictly distinguishes between a request for something new (service request) and a report of a service failure (incident), even if the fix is simple like restarting a service.

How to eliminate wrong answers

Option A is wrong because a problem is the underlying root cause of one or more incidents, not the single event of a user being unable to print; recording this as a problem would imply a formal problem management investigation, which is not warranted for a simple spooler restart. Option C is wrong because a service request is a pre-defined, standardized request from a user for something new (e.g., access, information, a new printer driver), not a restoration of an existing service that has failed. Option D is wrong because a change request is a formal proposal to alter a controlled service or component (e.g., upgrading the print server OS), not a reactive fix to restore service after a failure.

Full explanation →

710

MCQmedium

Which ITIL 4 practice involves the detection, classification, and response to events?

A.Incident Management

B.Change Enablement

C.Problem Management

D.Monitoring and Event Management

AnswerD

The Monitoring and Event Management practice systematically observes services and service components, recording and reporting selected changes of state identified as events. It is specifically designed to detect events, make sense of them through classification, and determine the appropriate control action, which directly aligns with the question's premise. This practice provides the foundation for operational awareness and proactive intervention.

Why this answer

Monitoring and Event Management practice is responsible for detecting events, classifying them (informational, warning, exception), and responding appropriately.

Full explanation →

711

MCQmedium

Which document defines the agreed level of service between an IT provider and a customer?

A.Underpinning Contract (UC)

B.Service Level Agreement (SLA)

C.Operational Level Agreement (OLA)

D.Continual Improvement Register (CIR)

AnswerB

A Service Level Agreement (SLA) is the definitive document that formally establishes the agreed level of service between a service provider and its customer. It meticulously outlines the specific services to be delivered, the expected performance targets, responsibilities of both parties, and any associated penalties or rewards. This critical agreement ensures clear expectations and provides a measurable framework for service delivery and customer satisfaction.

Why this answer

The Service Level Agreement (SLA) is the formal document that specifies the agreed level of service between an IT provider and a customer, including metrics such as availability, response times, and resolution targets. In ITIL 4, the SLA is a key output of the service level management practice, defining measurable targets that the provider commits to meet. It is distinct from other agreements because it directly represents the customer-facing promise of service quality.

Exam trap

The trap here is that candidates often confuse the SLA with the OLA or UC, mistakenly thinking any 'agreement' between parties qualifies, but ITIL strictly differentiates based on the parties involved (customer vs. internal vs. supplier).

How to eliminate wrong answers

Option A is wrong because an Underpinning Contract (UC) is an agreement between the IT provider and a third-party supplier, not directly with the customer; it supports the SLA by ensuring external vendors meet their obligations. Option C is wrong because an Operational Level Agreement (OLA) is an internal agreement between teams within the same IT provider organization, defining how they will support the SLA, not a customer-facing document. Option D is wrong because the Continual Improvement Register (CIR) is a log of improvement opportunities and actions, not a service level agreement; it is used to track improvements, not define agreed service levels.

Full explanation →

712

MCQmedium

Which dimension is MOST concerned with the sourcing strategy for IT services?

A.Partners and Suppliers

B.Information and Technology

C.Value Streams and Processes

D.Organisations and People

AnswerA

This dimension explicitly addresses an organization's relationships with external entities that contribute to the design, development, delivery, support, and improvement of services. A sourcing strategy defines how and from whom an organization acquires components, services, or resources, making it a core concern of managing these critical third-party relationships and agreements. It encompasses decisions about insourcing, outsourcing, co-sourcing, and the selection of specific vendors, directly aligning with the strategic approach to external procurement.

Why this answer

The Partners and Suppliers dimension is most concerned with sourcing strategy because it directly addresses decisions about which external vendors, contractors, or cloud providers deliver IT services, including procurement, contract management, and outsourcing. Sourcing strategy involves evaluating build-vs-buy, multi-vendor integration, and supplier risk management, all of which fall under this dimension.

Exam trap

The trap here is that candidates often confuse the 'Information and Technology' dimension with sourcing decisions because technology procurement involves vendors, but the sourcing strategy itself is a distinct governance concern of the Partners and Suppliers dimension.

How to eliminate wrong answers

Option B (Information and Technology) is wrong because it focuses on the data, applications, and infrastructure used to deliver services, not on the strategic decisions about where to source those capabilities from. Option C (Value Streams and Processes) is wrong because it deals with the workflows, activities, and operational procedures that transform inputs into outputs, not with external sourcing relationships. Option D (Organisations and People) is wrong because it covers roles, responsibilities, culture, and skills within the service provider, not the external sourcing strategy for IT services.

Full explanation →

713

Multi-Selectmedium

Which TWO statements about the 'Start where you are' guiding principle are CORRECT?

Select 2 answers

A.It suggests ignoring previous investments to avoid bias

B.It involves assessing the current state before making changes

C.It recommends copying best practices from other organisations

D.It requires starting from scratch for every new initiative

E.It encourages leveraging what already works

AnswersB, E

This principle fundamentally requires a comprehensive assessment of the current state before initiating any changes or improvements. This involves meticulously evaluating existing services, processes, technology, people, and partners to understand their current performance, value, and interdependencies. Establishing this baseline is crucial for identifying what can be effectively leveraged, where genuine improvements are needed, and ensuring that any proposed changes are well-informed and strategically aligned with the organization's reality.

Why this answer

The 'Start where you are' guiding principle emphasizes assessing the current state of services, processes, and technologies before making improvements. This ensures that existing investments, capabilities, and data are understood, avoiding unnecessary rework and leveraging what already works.

Exam trap

The trap here is that candidates often confuse 'Start where you are' with 'Progress iteratively with feedback' or assume it means accepting poor practices, whereas the correct interpretation is to objectively measure and build upon existing assets without bias.

Full explanation →

714

MCQhard

An organization is evaluating its service performance. They measure that the IT system delivered 99.9% uptime, but users still report dissatisfaction with the service. According to ITIL 4, what explains this gap?

A.The service lacks warranty (fit for use)

B.The output (uptime) does not match the outcome (user satisfaction)

C.The service lacks utility (fit for purpose)

D.The service value chain is missing the 'Deliver and Support' activity

AnswerB

This option correctly identifies the core problem. An output is a tangible or intangible deliverable of an activity, such as the 99.9% uptime achieved by the service. An outcome, however, is the result achieved for a stakeholder, often enabled by outputs, like user satisfaction or business value. While the service's output (high uptime) is excellent, it is failing to translate into the desired outcome (user satisfaction), indicating a misalignment between technical performance and actual stakeholder needs or perceived value. This disconnect is a critical area for service improvement.

Why this answer

The gap exists because the organization is measuring an output (99.9% uptime) rather than the outcome (user satisfaction). In ITIL 4, outcomes are the results of using a service that deliver value to stakeholders, while outputs are the tangible deliverables. Even with high uptime, users may be dissatisfied if the service fails to meet their actual needs, such as slow response times, poor usability, or missing features, which are not captured by the uptime metric alone.

Exam trap

The trap here is that candidates confuse high availability (warranty) with user satisfaction (outcome), assuming that meeting a technical SLA automatically ensures value, when ITIL 4 emphasizes that value is defined by the user's perception of the outcome, not just the output.

How to eliminate wrong answers

Option A is wrong because warranty refers to the assurance that a service will meet agreed-upon conditions (e.g., availability, capacity, continuity, security), and 99.9% uptime actually demonstrates strong warranty; the issue is not about fit for use but about whether the service delivers the desired outcome. Option C is wrong because utility (fit for purpose) describes the functionality of the service, and the question does not indicate that the service lacks necessary features; the problem is that the measured output (uptime) does not align with the perceived value (outcome). Option D is wrong because the 'Deliver and Support' activity is part of the service value chain and is responsible for delivering the service; the gap here is not about missing a value chain activity but about a mismatch between the metric used (uptime) and the actual user experience.

Full explanation →

715

MCQeasy

Which ITIL 4 practice is responsible for ensuring that all IT assets are tracked and managed throughout their lifecycle?

A.Supplier Management

B.Service Configuration Management

C.Service Desk

D.IT Asset Management

AnswerD

IT Asset Management is the ITIL practice specifically responsible for planning, monitoring, and controlling the full lifecycle of all IT assets, from procurement through disposal. Its objective is to maximize value, control costs, manage risks, and support decision-making related to the acquisition, utilization, and retirement of hardware, software, and other IT infrastructure components. This holistic approach ensures assets are accounted for, optimized, and compliant throughout their entire lifespan, aligning with the question's intent.

Why this answer

IT Asset Management is the ITIL 4 practice whose explicit purpose is to plan and manage the full lifecycle of IT assets — from acquisition through disposal — ensuring they are tracked, accounted for, and their value realized. It maintains the asset inventory and financial/contractual records that underpin decisions about hardware, software, and related components. Service Configuration Management, by contrast, focuses on the relationships and configuration of CIs that deliver services, not on lifecycle tracking of the assets themselves.

Exam trap

ITIL4F often tests the overlap between Asset Management and Configuration Management, tricking candidates into choosing the configuration practice because both involve tracking items — the discriminator is lifecycle/financial tracking versus relationship/CI tracking.

How to eliminate wrong answers

Option A is wrong because Supplier Management governs relationships, performance, and contracts with external vendors — it does not track internal IT assets through their lifecycle. Option B is wrong because Service Configuration Management records and manages configuration items (CIs) and their relationships to support service delivery, not the acquisition-to-disposal lifecycle of assets. Option C is wrong because the Service Desk is the single point of contact for users to report incidents and requests; it performs no asset tracking or lifecycle management function.

Full explanation →

716

MCQmedium

An IT team is designing a new service and decides to use an external cloud provider for hosting. Which dimension should they primarily consider to manage this relationship?

A.Information and Technology

B.Value Streams and Processes

C.Partners and Suppliers

D.Organisations and People

AnswerC

The Partners and Suppliers dimension focuses on the relationships an organization has with other organizations that are involved in the design, development, deployment, delivery, support, and/or continual improvement of services. When an IT team is designing a new service, they must strategically decide which external entities will provide necessary components, capabilities, or expertise. This dimension directly addresses the critical decision of leveraging external resources and establishing collaborative agreements to support the new service.

Why this answer

The Partners and Suppliers dimension is primarily concerned with managing relationships with external entities that provide services or resources. Since the team is using an external cloud provider for hosting, this dimension directly addresses how to select, manage, and govern that supplier relationship, including contracts, SLAs, and risk management.

Exam trap

The trap here is that candidates confuse the technical hosting infrastructure (Information and Technology) with the relational and contractual aspects of using an external provider, leading them to select Option A instead of recognizing that supplier management is a distinct dimension.

How to eliminate wrong answers

Option A is wrong because the Information and Technology dimension focuses on the data, applications, and infrastructure used to deliver the service, not on managing the relationship with an external provider. Option B is wrong because Value Streams and Processes deals with how activities are organized and executed to create value, not with external supplier governance. Option D is wrong because Organizations and People covers roles, responsibilities, and culture within the IT team, not the management of external cloud providers.

Full explanation →

717

Multi-Selectmedium

Which TWO of the following are part of the Service Value System in ITIL 4?

Select 2 answers

A.Service Desk

B.Guiding Principles

C.Four Dimensions of Service Management

D.Service Value Chain

E.Service Portfolio

AnswersB, D

The Guiding Principles are one of the five components of the ITIL 4 Service Value System, alongside the Service Value Chain, practices, governance and continual improvement. They supply the shared recommendations that shape decisions and actions throughout the system.

Why this answer

In ITIL 4, the Service Value System (SVS) is the overarching model of how all the components and activities of an organization work together to facilitate value creation, and its core components include the Guiding Principles (option B) and the Service Value Chain (option D). The Guiding Principles are correct because they are one of the five central elements of the SVS, providing universal recommendations that guide an organization in all circumstances. The Service Value Chain is also correct because it is the central operating model of the SVS, defining the six key activities (Plan, Improve, Engage, Design and Transition, Obtain/Build, and Deliver and Support) that convert inputs into outputs and outcomes.

The Four Dimensions of Service Management (option C) are not part of the SVS itself; they are a separate but complementary ITIL 4 model that applies to the SVS and its components. The Service Desk (option A) is a practice (specifically part of the Service Desk practice within the general management practices), not an SVS component, and the Service Portfolio (option E) is likewise a management practice/artifact rather than a component of the Service Value System.

Exam trap

The trap here is that candidates often confuse the components of the Service Value System (Guiding Principles, Governance, Service Value Chain, Practices, Continual Improvement) with other ITIL 4 concepts like the Four Dimensions or specific practices (e.g., Service Desk, Service Portfolio), leading them to select options that are part of the broader ITIL framework but not explicitly listed as SVS components.

Full explanation →

718

MCQmedium

A supplier is consistently failing to meet contractual targets. Which practice is responsible for managing this?

A.IT Asset Management

B.Supplier Management

C.Service Level Management

D.Change Enablement

AnswerB

The Supplier Management practice is specifically designed to ensure that an organization's suppliers and their performance are managed appropriately to support the seamless provision of quality products and services. This includes establishing and maintaining strong relationships with suppliers, negotiating and managing contracts, monitoring their adherence to agreed-upon targets, and addressing any performance shortfalls. Therefore, a supplier consistently failing to meet contractual targets falls directly under the purview of this practice.

Why this answer

Supplier Management is the ITIL 4 practice responsible for managing suppliers and their performance to ensure they meet contractual targets. When a supplier consistently fails to meet these targets, the Supplier Management practice owns the process of monitoring, reporting, and initiating corrective actions or escalations, including contract termination if necessary. This practice directly handles supplier relationships, performance reviews, and compliance with agreed service levels.

Exam trap

The trap here is confusing Service Level Management (which manages customer-facing SLAs) with Supplier Management (which manages supplier contracts and performance), leading candidates to incorrectly select Option C when the issue is with a supplier, not an internal service commitment.

How to eliminate wrong answers

Option A is wrong because IT Asset Management focuses on managing the lifecycle of IT assets (hardware, software, licenses) and does not handle supplier performance or contractual compliance. Option C is wrong because Service Level Management is responsible for defining, negotiating, and monitoring service level agreements (SLAs) with customers, not managing supplier contracts or addressing supplier failures. Option D is wrong because Change Enablement controls the lifecycle of changes to IT services and infrastructure, and has no role in managing supplier contractual performance.

Full explanation →

719

MCQhard

A software release delivers a new feature (output) that improves customer satisfaction scores by 15% (outcome). Which statement correctly distinguishes output from outcome in this scenario?

A.Both the feature and satisfaction are outputs because they are measurable

B.The output is the improved customer satisfaction; the outcome is the new feature

C.The output is the new feature; the outcome is the improved customer satisfaction

D.Both are outcomes because they add value to the business

AnswerC

This option is correct because the new feature represents the direct, tangible deliverable produced by the software release, aligning perfectly with ITIL 4's definition of an output. The improved customer satisfaction, on the other hand, signifies the benefit or effect experienced by the customer as a result of that feature, which is the core definition of an outcome. This accurately distinguishes between what is produced and the resulting value for stakeholders.

Why this answer

In ITIL 4, an output is a tangible or intangible deliverable produced by a service or process, while an outcome is the result or benefit achieved for stakeholders. Here, the new feature is the direct output of the release, and the 15% improvement in customer satisfaction is the outcome—the value realized from using that feature. Option C correctly maps the feature to output and the satisfaction improvement to outcome.

Exam trap

The trap here is that candidates often assume anything measurable or valuable is an outcome, but ITIL 4 strictly separates the deliverable (output) from the resulting benefit (outcome). The incorrect options (like B) swap the labels to test this distinction.

How to eliminate wrong answers

Option A is wrong because it conflates measurability with the output/outcome distinction; both can be measurable, but outputs are deliverables (e.g., a feature) and outcomes are results (e.g., satisfaction change). Option B is wrong because it reverses the definitions, incorrectly labeling the improved satisfaction as the output and the feature as the outcome. Option D is wrong because it claims both are outcomes, ignoring that the feature itself is a direct product of the release (output), not a realized benefit.

Full explanation →

720

MCQmedium

A company implements a new monitoring tool that provides real-time alerts for server CPU usage. According to ITIL 4, which practice is primarily supported by this tool?

A.Problem management

B.Monitoring and event management

C.Incident management

D.Service desk

AnswerB

The Monitoring and Event Management practice systematically observes services and service components, and records and reports selected changes of state identified as events. Implementing a new monitoring tool that provides real-time alerts directly supports this practice by generating these crucial events, which are then analyzed, filtered, and often responded to automatically, to detect potential or actual service impairments and maintain service health. This practice is fundamental for proactive service management.

Why this answer

The monitoring tool provides real-time alerts for server CPU usage, which directly supports the Monitoring and Event Management practice. This practice is responsible for continuously monitoring services and IT components, detecting events (such as CPU threshold breaches), and generating alerts to trigger appropriate responses. The tool's core function—collecting metrics and notifying when predefined conditions are met—aligns exactly with the purpose of this practice.

Exam trap

The trap here is that candidates confuse 'monitoring and event management' with 'incident management' because alerts often lead to incidents, but the practice that directly owns the monitoring tool and its alerts is Monitoring and Event Management, not Incident Management.

How to eliminate wrong answers

Option A is wrong because Problem Management focuses on identifying the root cause of incidents and preventing recurrence, not on real-time monitoring of CPU usage; a CPU alert is an event, not a problem. Option C is wrong because Incident Management handles unplanned interruptions or service degradation, but the monitoring tool itself primarily supports event detection and alerting, not the end-to-end incident lifecycle (logging, categorization, resolution). Option D is wrong because the Service Desk is the single point of contact for users reporting issues or requests, not a practice that directly uses monitoring alerts; the tool supports technical teams, not the service desk's communication role.

Full explanation →

721

MCQmedium

A company offers a cloud storage service with a guaranteed uptime of 99.9% and data encryption at rest. A customer reports that the service is unavailable due to a server outage. According to ITIL 4, the service is failing to meet which aspect of service?

A.Output

B.Utility

C.Outcome

D.Warranty

AnswerD

Warranty refers to the assurance that a service will meet agreed-upon requirements, often described as "fit for use." This includes aspects like availability, capacity, security, and continuity. A guaranteed uptime for a cloud storage service is a direct component of its availability, and thus falls under warranty. An outage directly violates this guarantee, demonstrating a failure in the service's warranty to be available as promised.

Why this answer

The customer reports that the service is unavailable due to a server outage, which means the service is not accessible when needed. In ITIL 4, Warranty refers to the assurance that a service will meet agreed-upon conditions such as availability, capacity, continuity, and security. A guaranteed uptime of 99.9% is a warranty promise, and an outage causing unavailability directly violates that warranty, not the utility (which is about functionality).

Exam trap

The trap here is that candidates confuse 'Utility' (what the service does, like encryption) with 'Warranty' (how it is delivered, like uptime), because both are mentioned in the scenario, but the outage specifically tests the warranty aspect of availability.

How to eliminate wrong answers

Option A is wrong because 'Output' is not an ITIL 4 service dimension; it refers to the tangible result of an activity, not a service attribute like availability. Option B is wrong because Utility describes what the service does (its functionality, such as data encryption at rest), not its availability or reliability; the service still provides encryption when available, so utility is not failing. Option C is wrong because 'Outcome' refers to the business result achieved by using the service, not the operational availability; the customer may still achieve outcomes when the service is up, but the outage directly impacts warranty, not outcome.

Full explanation →

722

Multi-Selecthard

Which TWO of the following correctly distinguish between an output and an outcome?

Select 2 answers

A.An outcome is a deliverable; an output is a result

B.An output always has value to the consumer

C.An output is long-term; an outcome is short-term

D.An output is a tangible deliverable of an activity

E.An outcome is a result for a stakeholder

AnswersD, E

In ITIL 4, an output is defined as a tangible or intangible deliverable produced by the completion of an activity or a set of activities. These are the specific things created or provided, such as a new software module, a processed report, or a configured server. While they are necessary components, outputs themselves do not inherently guarantee value until they contribute to desired outcomes for stakeholders.

Why this answer

An output is defined in ITIL 4 as a tangible or intangible deliverable of an activity, such as a report, a server, or a completed ticket. Option E is correct because an outcome is a result for a stakeholder that is enabled by one or more outputs, focusing on the value or benefit achieved, not the deliverable itself.

Exam trap

The trap here is that candidates often confuse outputs with outcomes because they focus on deliverables rather than the value they enable, leading them to incorrectly select options that reverse the definitions or assume outputs always provide value.

Full explanation →

723

MCQmedium

An IT team is redesigning a process and decides to first check if any existing tools or procedures can be reused. Which ITIL 4 guiding principle are they applying?

A.Keep it simple and practical

B.Progress iteratively with feedback

C.Focus on value

D.Start where you are

AnswerD

The 'Start where you are' guiding principle explicitly instructs organizations to assess what already exists and can be reused or adapted before creating anything new. This encompasses existing services, processes, tools, people, and partnerships, recognizing that current solutions often have value that can be leveraged. For an IT team redesigning a process, this principle directly advises them to first review the current state, identify what works, and build upon or adapt those components to avoid unnecessary work and ensure continuity.

Why this answer

The 'Start where you are' guiding principle emphasizes leveraging existing services, processes, tools, and procedures before building new ones. By checking for reusable tools or procedures, the team avoids reinventing the wheel and reduces waste, directly aligning with this principle's focus on measuring and building upon current capabilities.

Exam trap

The trap here is that candidates confuse 'Start where you are' with 'Keep it simple and practical' because both involve avoiding unnecessary work, but the former specifically mandates an audit of existing assets while the latter focuses on design elegance and minimalism.

How to eliminate wrong answers

Option A is wrong because 'Keep it simple and practical' focuses on eliminating unnecessary complexity in design, not on reusing existing assets. Option B is wrong because 'Progress iteratively with feedback' emphasizes incremental improvements and continuous feedback loops, not an initial assessment of current resources. Option C is wrong because 'Focus on value' prioritizes delivering outcomes that matter to stakeholders, but does not specifically address the reuse of existing tools or procedures as a starting point.

Full explanation →

724

MCQeasy

Which of the following is the correct sequence for the ITIL Continual Improvement Model?

A.What is the vision? → Where do we want to be? → Where are we now? → How do we get there? → Take action → Did we get there? → How do we keep the momentum going?

B.Where are we now? → What is the vision? → Where do we want to be? → How do we get there? → Take action → Did we get there? → How do we keep the momentum going?

C.What is the vision? → Where are we now? → Where do we want to be? → How do we get there? → Take action → Did we get there? → How do we keep the momentum going?

D.What is the vision? → Where are we now? → How do we get there? → Where do we want to be? → Take action → Did we get there? → How do we keep the momentum going?

AnswerC

This sequence correctly represents the seven steps of the ITIL Continual Improvement Model. It logically progresses from establishing a clear vision, to assessing the current state, defining the target state, planning the necessary actions, executing those actions, verifying the achievement of objectives, and finally, sustaining the momentum for ongoing improvement. This structured approach ensures effective and continuous service improvement.

Why this answer

It follows the exact sequence prescribed by the ITIL 4 Continual Improvement Model: starting with 'What is the vision?' to align improvement with business strategy, then assessing the current state ('Where are we now?'), defining the target state ('Where do we want to be?'), planning the approach ('How do we get there?'), executing ('Take action'), verifying the outcome ('Did we get there?'), and finally embedding the change ('How do we keep the momentum going?'). This order ensures that improvement is driven by strategic intent before any analysis or action, which is a core principle of the ITIL 4 guiding concept 'Focus on value'.

Exam trap

The trap here is that candidates often confuse the ITIL Continual Improvement Model with the Deming Cycle (PDCA) or other improvement frameworks, leading them to start with 'Where are we now?' (Option B) or misorder the middle steps (Options A and D), but the ITIL 4 model explicitly mandates 'What is the vision?' as the first step to ensure strategic alignment before any assessment or planning.

How to eliminate wrong answers

Option A is wrong because it places 'Where do we want to be?' before 'Where are we now?', which violates the logical flow of first understanding the current state before defining the target state; in ITIL 4, you must assess the baseline before setting the improvement goal. Option B is wrong because it starts with 'Where are we now?' instead of 'What is the vision?', which omits the critical first step of establishing strategic alignment; without a vision, the improvement lacks direction and may not support business objectives. Option D is wrong because it swaps 'Where do we want to be?' and 'How do we get there?', placing the planning step before defining the target state; this is illogical because you cannot determine how to reach a goal without first specifying what that goal is.

Full explanation →

725

MCQmedium

An organization is migrating its CRM system to the cloud. The service owner insists on using a custom-designed solution to maintain full control, even though an off-the-shelf product would meet 90% of requirements at half the cost and with faster deployment. Which ITIL guiding principle is being violated?

A.Keep it simple and practical

B.Progress iteratively with feedback

C.Collaborate and promote visibility

D.Focus on value

AnswerD

The 'Focus on value' guiding principle is paramount in ITIL 4, dictating that all activities performed by the organization must directly or indirectly contribute to value for its stakeholders. In this scenario, choosing a custom solution that is more expensive and time-consuming than an off-the-shelf alternative offering sufficient functionality directly contradicts the objective of maximizing value. This principle mandates selecting the option that provides the best balance of cost, time, and required functionality to achieve the organization's strategic objectives efficiently.

Why this answer

The service owner is prioritizing a custom solution for control, ignoring that the off-the-shelf product delivers 90% of requirements at half the cost and faster deployment. This violates the 'Focus on value' principle, which requires all decisions to maximize value for stakeholders, not technical preferences. The custom approach introduces unnecessary cost, delay, and complexity without proportional benefit, directly contradicting value-driven outcomes.

Exam trap

The trap here is that candidates confuse 'Focus on value' with 'Keep it simple and practical,' but the question emphasizes cost and deployment speed as value metrics, not just complexity reduction.

How to eliminate wrong answers

Option A is wrong because 'Keep it simple and practical' is violated by the custom solution's complexity, but the core issue is the failure to prioritize value over control, not simplicity itself. Option B is wrong because 'Progress iteratively with feedback' relates to incremental delivery and continuous improvement, not the choice between custom and off-the-shelf solutions. Option C is wrong because 'Collaborate and promote visibility' concerns stakeholder communication and transparency, whereas the problem is a unilateral decision that ignores value optimization.

Full explanation →

726

Multi-Selecthard

Which THREE of the following are examples of risks that can be transferred or removed by using a service?

Select 3 answers

A.Hardware failure

B.Employee training on how to use the service

C.Data loss due to user mistake

D.Security breach of the provider's infrastructure

E.Compliance with data protection regulations

AnswersA, D, E

When a service provider delivers a service, they typically own and manage the underlying infrastructure, including all physical and virtual hardware components. The inherent risk of hardware failure, such as a server crash, disk malfunction, or network device outage, is therefore borne by the provider. This operational risk is transferred from the consumer to the provider as an integral part of the service agreement, making it a provider-managed responsibility.

Why this answer

Hardware failure is a risk that can be transferred to a service provider through a service contract. When using a cloud or managed service, the provider assumes responsibility for maintaining and replacing hardware, thus removing this risk from the customer. This is a core benefit of Infrastructure as a Service (IaaS) models.

Exam trap

The trap here is that candidates confuse activities or responsibilities (like training) with risks that can be transferred, or they assume all security and data risks are automatically transferred when using a service, ignoring shared responsibility models.

Full explanation →

727

MCQmedium

A company is implementing a new CRM system. They have selected the software and designed the workflows, but they have not yet defined the roles and responsibilities for using the system. Which dimension is being neglected?

A.Partners and Suppliers

B.Organisations and People

C.Value Streams and Processes

D.Information and Technology

AnswerB

Undefined roles and responsibilities fall squarely within the Organisations and People dimension, which covers the structure, roles, and culture needed to use a system. The stem's constraint — workflows designed but accountability unassigned — is precisely the people-and-roles gap this dimension addresses, not technology or process.

Why this answer

The question states that the software and workflows are already designed, but roles and responsibilities have not been defined. This directly addresses the 'Organisations and People' dimension, which covers roles, responsibilities, skills, and culture needed to operate the service. Neglecting this dimension means users will not know who performs which tasks, leading to confusion and operational failure despite having the right technology and processes.

Exam trap

The trap here is that candidates confuse 'Value Streams and Processes' (Option C) with the missing roles, but the question explicitly states workflows are already designed, so the gap is in the human side, not the process flow.

How to eliminate wrong answers

Option A is wrong because 'Partners and Suppliers' deals with external dependencies like vendors and contracts, not internal role definition. Option C is wrong because 'Value Streams and Processes' covers the workflows and activities, which the question explicitly states are already designed. Option D is wrong because 'Information and Technology' covers the software and data, which are already selected; the missing piece is the human element of who does what.

Full explanation →

728

Multi-Selecthard

Which TWO of the following are differences between Incident Management and Problem Management?

Select 2 answers

A.Incident Management is triggered by events, while Problem Management is triggered by changes

B.Incident Management aims to restore service as soon as possible, while Problem Management aims to identify the root cause

C.Incident Management focuses on individual disruptions, while Problem Management looks for underlying patterns

D.Incident Management is performed by the service desk only, while Problem Management is performed by technical teams

E.Incident Management does not use workarounds, while Problem Management does

AnswersB, C

Incident Management's primary objective is to restore normal service operation as quickly as possible, minimizing the business impact of an unplanned interruption. In contrast, Problem Management focuses on identifying the root cause of incidents, often after service has been restored, to prevent recurrence and improve overall service stability and reliability.

Why this answer

Option B is correct because Incident Management is oriented toward quickly restoring normal service (often via workarounds to meet SLAs), whereas Problem Management is oriented toward finding and eliminating the root cause of one or more incidents to prevent recurrence. Option C is correct because Incident Management handles individual disruptions as discrete events, while Problem Management analyzes multiple incidents to detect underlying patterns and systemic causes. Option A is wrong because Problem Management is typically triggered by recurring or major incidents (and by proactive analysis), not by changes; changes are handled by Change Management.

Option D is wrong because Incident Management is not limited to the service desk—technical and support teams also resolve incidents—and Problem Management is not exclusively performed by technical teams. Option E is wrong because Incident Management does use workarounds to restore service quickly; in fact, workarounds are a standard incident-handling technique, while Problem Management seeks permanent fixes.

Exam trap

ITIL4F often tests the distinction between Incident and Problem Management — candidates incorrectly assume Incident Management is only service desk or that Problem Management is triggered by changes, confusing it with Change Enablement.

Full explanation →

729

MCQeasy

According to ITIL 4, which role represents the service consumer who uses the service on a daily basis?

A.User

B.Service provider

C.Customer

D.Sponsor

AnswerA

In ITIL 4, the 'User' is the specific role that directly interacts with and utilizes a service to perform work or achieve a desired outcome. They are the individuals who consume the service's functionality and value on a day-to-day basis, making them the most direct representation of a service consumer in terms of actual usage and experience.

Why this answer

In ITIL 4, the 'user' is the specific role that represents the service consumer who actually utilizes the service on a daily basis to perform their tasks. This is distinct from the 'customer' who authorizes the service or the 'sponsor' who funds it. The user interacts directly with the service's functionality, such as logging into an application or accessing a network resource.

Exam trap

The trap here is that candidates often confuse 'user' with 'customer' because in everyday language they are used interchangeably, but ITIL 4 strictly separates them based on the role in the service relationship—the customer authorizes, the user consumes.

How to eliminate wrong answers

Option B is wrong because the 'service provider' is the organization or role that delivers the service, not the consumer who uses it daily. Option C is wrong because the 'customer' defines service requirements and authorizes the service agreement, but does not necessarily use the service operationally. Option D is wrong because the 'sponsor' authorizes the budget and funding for the service, but is not the daily consumer of the service output.

Full explanation →

730

MCQhard

An IT department is asked to deploy a critical security patch that must be implemented within 2 hours to address a zero-day vulnerability. The patch has been tested and approved for emergency use. According to ITIL 4, what type of change should be raised?

A.Standard change

B.Service request

C.Normal change

D.Emergency change

AnswerD

An emergency change is specifically designed for urgent situations where immediate action is required to restore service, mitigate a critical security threat, or address a major incident that poses a significant risk to the organization. A critical security patch, particularly one addressing a severe vulnerability that could lead to data breaches or service outages, falls squarely into this category, necessitating an expedited assessment and authorization process to ensure rapid deployment and minimize potential damage. This change type prioritizes speed to protect organizational assets and maintain business continuity.

Why this answer

An emergency change is required because the zero-day vulnerability demands immediate deployment of a critical security patch within 2 hours to mitigate an active threat. ITIL 4 defines an emergency change as one that must be implemented as soon as possible, often to resolve a major incident or security breach, and it follows a streamlined process with pre-approved authorization (e.g., via an emergency change advisory board). The patch has been tested and approved for emergency use, confirming it meets the criteria for this change type.

Exam trap

The trap here is that candidates confuse a standard change (pre-authorized for low-risk tasks) with an emergency change, failing to recognize that the 2-hour urgency and zero-day severity mandate the emergency change process, not a standard or normal change.

How to eliminate wrong answers

Option A is wrong because a standard change is a pre-authorized, low-risk change that follows a defined procedure (e.g., applying routine OS updates), but it is not designed for urgent, high-risk scenarios like a zero-day patch requiring deployment within 2 hours. Option B is wrong because a service request is a formal request from a user for something predefined (e.g., access to a system or information), not a change to the IT infrastructure like deploying a security patch. Option C is wrong because a normal change is a planned, non-urgent change that must go through the full change management process, including assessment and approval by a change advisory board, which cannot accommodate the 2-hour urgency of a zero-day vulnerability.

Full explanation →

731

Multi-Selecthard

Which THREE are key performance indicators (KPIs) for the Service Desk practice?

Select 3 answers

A.First Contact Resolution (FCR)

B.Mean Time to Resolve (MTTR)

C.Number of changes implemented

D.Percentage of SLA targets met

E.Customer Satisfaction (CSAT)

AnswersA, B, E

First Contact Resolution (FCR) is a highly valued Service Desk KPI that measures the percentage of incidents or service requests successfully resolved by the Service Desk agent during the initial interaction, without requiring further escalation or follow-up. Achieving a high FCR rate significantly enhances customer satisfaction by providing immediate solutions and also improves operational efficiency by reducing the workload from repeat contacts and subsequent escalations to other support tiers.

Why this answer

First Contact Resolution (FCR) (A) is a core Service Desk KPI because it measures the percentage of incidents or requests resolved during the initial interaction without escalation or callback, directly reflecting Service Desk efficiency and effectiveness. Mean Time to Resolve (MTTR) (B) is also a key Service Desk KPI, as it quantifies the average elapsed time from incident/request logging to resolution, indicating how quickly the desk restores service. Customer Satisfaction (CSAT) (E) is a key Service Desk KPI because it captures end-user perception of support quality, typically via post-interaction surveys, and reflects the user experience the desk delivers.

Number of changes implemented (C) is a change management metric, not a Service Desk performance indicator, and Percentage of SLA targets met (D) is a broader service-level or SLA management measure rather than a Service Desk-specific KPI.

Exam trap

ITIL4F often tests the confusion between Service Desk KPIs and other practice KPIs, such as change metrics, where candidates may incorrectly include number of changes or SLA targets as service desk KPIs.

Full explanation →

732

MCQhard

In the context of ITIL 4, which activity is part of Problem Management but NOT part of Incident Management?

A.Applying workarounds to restore service

B.Conducting root cause analysis

C.Logging and categorizing issues

D.Escalating issues to higher-level support

AnswerB

Conducting root cause analysis (RCA) is a fundamental and defining activity of Problem Management. Its purpose is to systematically investigate and identify the underlying causes of incidents, rather than just addressing their symptoms. This deep analysis aims to prevent future recurrences of incidents, distinguishing it from the immediate service restoration focus of Incident Management.

Why this answer

Root cause analysis is the defining activity of Problem Management: it seeks to identify and eliminate the underlying cause of one or more incidents. Incident Management focuses on restoring service quickly, often through workarounds, and does not own the deeper causal investigation. This makes root cause analysis the activity unique to Problem Management.

Exam trap

ITIL4F often tests the boundary between Incident and Problem Management, tricking candidates with activities like logging or escalation that occur in both — root cause analysis is the discriminator that belongs only to Problem Management.

How to eliminate wrong answers

Option A is wrong because applying workarounds to restore service is a core Incident Management activity — it is a temporary fix to get users working again, not a permanent problem resolution. Option C is wrong because logging and categorizing issues happens in both Incident and Problem Management as part of recording and classification. Option D is wrong because escalation to higher-level support occurs in Incident Management (functional or hierarchical escalation) and is not exclusive to Problem Management.

Full explanation →

733

MCQhard

A service desk receives multiple reports of a printer not working after a firmware update. The printer is restored by rolling back the update. Later, the same issue occurs on another printer after a similar update. What should be raised according to ITIL 4?

A.A problem record to investigate why the firmware update causes failure

B.An incident record for the second occurrence

C.A service request for printer maintenance

D.A change request to standardize firmware updates

AnswerA

When multiple incidents point to a common underlying cause, ITIL 4 mandates the creation of a problem record. This practice shifts focus from merely restoring service to conducting root cause analysis, aiming to identify and eliminate the fundamental reason for the recurring printer failures. Investigating why the firmware update consistently causes issues is crucial for preventing future incidents and improving overall service stability.

Why this answer

The same underlying failure (firmware update causing printer malfunction) has occurred multiple times, indicating a root cause that needs investigation. In ITIL 4, a problem record is raised to analyze the root cause of one or more incidents, not just to restore service. The first occurrence was handled as an incident, but the recurrence signals a problem that requires a permanent fix.

Exam trap

The trap here is that candidates often confuse a recurring incident with a problem, thinking a second incident record is sufficient, but ITIL 4 requires a problem record when the same issue repeats to drive root cause analysis and permanent resolution.

How to eliminate wrong answers

Option B is wrong because raising another incident for the second occurrence would only restore service again without addressing the root cause, violating the ITIL 4 principle of proactive problem management. Option C is wrong because a service request is for pre-defined, low-risk user requests like maintenance, not for investigating recurring failures that require root cause analysis. Option D is wrong because a change request to standardize firmware updates is a potential solution after the problem is understood, but the immediate need is to investigate why the update causes failure, not to implement a change.

Full explanation →

734

MCQmedium

Which of the following is a difference between a standard change and a normal change?

A.Normal changes require approval from the CAB, while standard changes do not require any approval

B.Standard changes can be implemented without a change request

C.Standard changes are always low risk, while normal changes are high risk

D.Standard changes are pre-approved and follow a predefined procedure

AnswerD

This statement accurately describes standard changes in ITIL 4. Standard changes are routine, low-risk, and have a well-understood implementation process, allowing them to be pre-authorized by the change authority. This pre-approval means they do not require additional authorization each time they are implemented, as long as they strictly follow their established, predefined procedure, which ensures efficiency and consistent execution.

Why this answer

Standard changes are pre-approved and have a defined procedure; normal changes require assessment and approval by a change authority.

Full explanation →

735

MCQeasy

What type of change is pre-authorized and has a defined procedure?

A.Optional change

B.Normal change

C.Emergency change

D.Standard change

AnswerD

Standard changes are low-risk, pre-authorized changes that are well-understood and have a fully documented, repeatable procedure. These changes are typically initiated as service requests and do not require additional authorization each time they are implemented, as the risk has been assessed and approved in advance. Their predictable nature allows for efficient, routine execution without the need for a change authority's individual approval.

Why this answer

A standard change is pre-authorized by change management and follows a defined, low-risk procedure that does not require additional approval each time it is executed. This aligns with the ITIL 4 definition of a standard change as a change that is well-understood, fully documented, and can be implemented without a formal change advisory board (CAB) meeting.

Exam trap

The trap here is that candidates confuse 'pre-authorized' with 'emergency' changes, thinking emergency changes bypass approval, but in reality emergency changes still require expedited authorization, while only standard changes are truly pre-approved with a fixed procedure.

How to eliminate wrong answers

Option A is wrong because 'optional change' is not a recognized ITIL 4 change type; ITIL defines standard, normal, and emergency changes. Option B is wrong because a normal change requires assessment and approval by the change authority (e.g., CAB) before implementation, not pre-authorization. Option C is wrong because an emergency change is implemented urgently to resolve an incident or critical issue, but it still requires expedited approval (e.g., via an emergency CAB) and does not have a fully pre-authorized, routine procedure.

Full explanation →

736

Multi-Selecthard

Which TWO of the following statements about Service Desk and Incident Management are correct?

Select 2 answers

A.Incident Management may use workarounds to restore service quickly

B.The Service Desk acts as the single point of contact for incident reporting

C.Incident Management focuses on finding the root cause of incidents

D.The Service Desk is responsible for root cause analysis

E.All service requests must be logged as incidents

AnswersA, B

Incident Management's primary objective is to restore normal service operation as quickly as possible, minimizing the business impact of service disruptions. To achieve this rapid restoration, it is entirely appropriate and often necessary to implement known workarounds. These temporary solutions allow users to continue working, even if the underlying problem remains unresolved, thereby reducing downtime and meeting service level targets.

Why this answer

The Service Desk is the single point of contact for incident reporting, making Option B correct. Incident Management focuses on restoring service quickly, often using workarounds, which makes Option A correct. Option C is false because finding root cause is the goal of Problem Management, not Incident Management.

Option D is false because the Service Desk does not perform root cause analysis. Option E is false because service requests are not necessarily logged as incidents; they are handled by Service Request Management.

Full explanation →

737

MCQeasy

Which of the following is a key activity of Problem Management?

A.Identifying the root cause of incidents

B.Authorizing changes

C.Fulfilling user requests

D.Restoring service as quickly as possible

AnswerA

Problem Management's primary objective is to reduce the likelihood and impact of incidents by identifying and resolving their underlying causes. This involves performing root cause analysis (RCA) to understand *why* incidents occur, often after Incident Management has restored service. By proactively eliminating these root causes, Problem Management prevents recurrence and improves overall service stability and reliability.

Why this answer

Problem Management aims to prevent incidents from recurring by identifying and eliminating their root causes. Identifying the root cause of incidents is a core activity of Problem Management, as it enables the creation of known errors and the implementation of permanent solutions. This distinguishes it from Incident Management, which focuses on restoring service quickly.

Exam trap

The trap here is that candidates confuse the goal of Incident Management (restoring service quickly) with the goal of Problem Management (finding root causes), leading them to select Option D.

How to eliminate wrong answers

Option B is wrong because authorizing changes is a key activity of Change Enablement, not Problem Management; Change Enablement manages the lifecycle of all changes to ensure they are assessed, authorized, and implemented with minimal risk. Option C is wrong because fulfilling user requests is the responsibility of Service Request Management, which handles pre-defined, low-risk requests like password resets or access provisioning. Option D is wrong because restoring service as quickly as possible is the primary objective of Incident Management, which focuses on minimizing downtime rather than analyzing underlying causes.

Full explanation →

738

Multi-Selecthard

Which TWO of the following are key measures used for the Service Desk practice?

Select 2 answers

A.Customer Satisfaction Score (CSAT)

B.First Contact Resolution (FCR)

C.Service Uptime

D.Mean Time to Repair (MTTR)

E.Number of changes implemented

AnswersA, B

Customer Satisfaction Score (CSAT) is a direct measure of how satisfied users are with the service desk's interactions, resolutions, and overall support experience. It typically involves surveying users immediately after an interaction to gauge their perception of the service quality, responsiveness, and helpfulness of the service desk agent. A high CSAT score indicates effective communication, efficient problem-solving, and a positive user journey, making it a crucial indicator of service desk performance.

Why this answer

Customer Satisfaction Score (CSAT) (A) is a key Service Desk measure because it directly captures users' perception of the support they received, which is the primary outcome the Service Desk practice aims to manage. First Contact Resolution (FCR) (B) is also a key Service Desk measure because it reflects how effectively the desk resolves incidents or requests at the first interaction without escalation or callbacks, a core efficiency and quality indicator for the practice. Service Uptime (C) is not a Service Desk measure; it is an availability metric typically owned by service level management or infrastructure/operations teams.

Mean Time to Repair (MTTR) (D) is an incident management or technical resolution metric, not a defining Service Desk practice measure. Number of changes implemented (E) belongs to change enablement, not the Service Desk practice.

Exam trap

PeopleCert often tests the distinction between Service Desk metrics (CSAT, FCR) and broader IT operations metrics (uptime, MTTR, change counts) to see if candidates confuse practice-specific measures with general IT performance indicators.

Full explanation →

739

MCQeasy

Which of the following BEST describes an 'output'?

A.The result of an activity that brings value to stakeholders

B.A tangible or intangible deliverable produced by a process

C.The value created through the use of a service

D.The amount of money saved by using a service

AnswerB

This is the precise ITIL 4 definition of an output. An output is a tangible or intangible deliverable that results directly from the execution of an activity or process. Examples include a new software release (tangible), a processed transaction, or a decision made (intangible). Outputs are the specific products or services that a service provider offers, which then enable consumers to achieve their desired outcomes.

Why this answer

In ITIL 4, an 'output' is defined as a tangible or intangible deliverable produced by a process. This is a foundational concept that distinguishes the immediate result of an activity (output) from the eventual value (outcome) that stakeholders perceive. Option B directly matches this definition, while the other options conflate outputs with outcomes or value.

Exam trap

The trap here is that candidates often confuse 'output' with 'outcome', selecting Option A because it sounds like a result, but ITIL 4 specifically defines output as the deliverable, not the value it brings.

How to eliminate wrong answers

Option A is wrong because it describes an 'outcome'—the result of an activity that brings value to stakeholders—not an 'output'. Option C is wrong because it describes the 'value' created through the use of a service, which is an outcome, not the deliverable itself. Option D is wrong because it describes a specific financial benefit (cost saving) that is a type of value or outcome, not the deliverable produced by a process.

Full explanation →

740

MCQhard

Which ITIL 4 practice is responsible for managing known errors and ensuring workarounds are documented?

A.Change Enablement

B.Incident Management

C.Problem Management

D.Service Request Management

AnswerC

Problem Management is the practice responsible for reducing the likelihood and impact of incidents by identifying and managing the causes of incidents and potential incidents. This includes the crucial 'error control' activity, where known errors are documented, their workarounds are managed, and permanent solutions are initiated. Therefore, managing known errors is a core responsibility of Problem Management.

Why this answer

Problem Management is the ITIL 4 practice responsible for managing known errors and ensuring workarounds are documented. It identifies the root causes of incidents, creates known error records in the Known Error Database (KEDB), and documents workarounds to reduce the impact of recurring issues, aligning with the ITIL 4 'Problem Management' practice definition.

Exam trap

The trap here is that candidates confuse Incident Management's focus on restoring service quickly with Problem Management's responsibility for documenting known errors and workarounds, leading them to select Incident Management instead of Problem Management.

How to eliminate wrong answers

Option A is wrong because Change Enablement manages the lifecycle of changes to IT services, not the documentation of known errors or workarounds. Option B is wrong because Incident Management focuses on restoring normal service operation as quickly as possible after an incident, not on managing known errors or documenting workarounds for root causes. Option D is wrong because Service Request Management handles pre-defined, standard user requests (e.g., password resets), not the identification and documentation of known errors or workarounds.

Full explanation →

741

MCQmedium

Which ITIL 4 practice is responsible for managing the lifecycle of all IT assets?

A.Service Configuration Management

B.Supplier Management

C.Capacity and Performance Management

D.IT Asset Management

AnswerD

The IT Asset Management practice is specifically responsible for planning, controlling, and protecting the full lifecycle of IT assets, from acquisition through disposal. This includes managing financial, contractual, and inventory aspects to maximize value, control costs, and mitigate risks associated with IT assets. It directly addresses the management of an asset's entire journey within the organization, aligning with the question's focus on "managing the lifecy" (lifecycle).

Why this answer

IT Asset Management (ITAM) is the ITIL 4 practice specifically responsible for managing the lifecycle of all IT assets, including hardware, software, and licenses, from acquisition to disposal. It ensures financial and contractual accountability, tracking assets through their entire lifecycle to optimize value and control costs.

Exam trap

The trap here is confusing Service Configuration Management with IT Asset Management, as both involve tracking items, but ITAM focuses on financial lifecycle and ownership, while Configuration Management focuses on technical service relationships.

How to eliminate wrong answers

Option A is wrong because Service Configuration Management manages configuration items (CIs) and their relationships in the CMDB, focusing on service model integrity rather than the financial lifecycle of assets. Option B is wrong because Supplier Management manages relationships with external suppliers and their performance, not the lifecycle of internal IT assets. Option C is wrong because Capacity and Performance Management ensures services and infrastructure meet current and future capacity and performance requirements, not asset lifecycle management.

Full explanation →

742

Drag & Dropmedium

Drag and drop the steps of the service level management process into the correct order.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

Service level management begins with defining requirements, then negotiating targets, documenting the SLA, monitoring, and reviewing.

Full explanation →

743

MCQeasy

According to ITIL 4, which of the following is an example of a service consumer?

A.A network engineer

B.A server administrator

C.A help desk technician

D.A user accessing the company email system

AnswerD

A user accessing the company email system directly utilizes the service to achieve a specific outcome, such as sending and receiving communications for their job. In this scenario, the user is the direct beneficiary of the value provided by the email service, making them a quintessential example of a service consumer. They are leveraging the service to perform their work, embodying the core definition of a consumer.

Why this answer

In ITIL 4, a service consumer is any entity that uses a service, which includes users who access IT services for their own purposes. Option D is correct because a user accessing the company email system is directly consuming the email service, making them a service consumer. This aligns with the ITIL 4 definition where service consumers can be customers, users, or sponsors.

Exam trap

The trap here is that candidates confuse job roles (like network engineer or help desk technician) with service consumption, forgetting that ITIL 4 defines service consumers strictly as those who use the service for outcomes, not those who deliver or support it.

How to eliminate wrong answers

Option A is wrong because a network engineer is typically a service provider role, responsible for managing network infrastructure, not consuming the service for personal or business outcomes. Option B is wrong because a server administrator is also a service provider role, focused on maintaining servers, not using the service as an end-user. Option C is wrong because a help desk technician is part of the service provider organization, providing support, not consuming the service for their own needs.

Full explanation →

744

MCQhard

An organization uses an external cloud provider for its email service. Which of the following risks is MOST likely transferred from the consumer to the provider?

A.Risk of non-compliance with industry regulations

B.Risk of data breach due to insider threats

C.Risk of service unavailability due to a natural disaster

D.Risk of hardware failure in the provider's data center

AnswerD

When an organization outsources its email services to an external cloud provider, the provider assumes full responsibility for the underlying physical infrastructure, including all servers, storage arrays, and networking hardware within their data centers. Consequently, the direct risk associated with the failure of any of this hardware, and the operational burden of its maintenance, repair, or replacement, is entirely transferred from the consumer to the cloud provider as part of the service agreement. The consumer is abstracted from these infrastructure-level concerns.

Why this answer

When an organization uses an external cloud provider for email services, the provider is responsible for the physical infrastructure, including servers, storage, and networking hardware. The risk of hardware failure in the provider's data center is therefore transferred to the provider, as they must maintain redundancy (e.g., RAID, UPS, failover clusters) and ensure service continuity under their SLA. This aligns with the ITIL 4 concept of 'shared responsibility' where the consumer retains risks related to data and compliance, while the provider assumes risks tied to the underlying technology stack.

Exam trap

Candidates often mistakenly believe that all risks (including compliance, insider threats, and disaster impact) are transferred to the cloud provider, ignoring the ITIL 4 concept that the consumer retains accountability for data governance, user behavior, and business continuity planning.

How to eliminate wrong answers

Option A is wrong because regulatory compliance (e.g., GDPR, HIPAA) remains a shared or consumer-owned risk; the consumer is ultimately accountable for how their data is handled, even if the provider offers compliance certifications. Option B is wrong because insider threats (e.g., malicious employees at the consumer organization) are not transferred to the provider; the consumer must manage access controls, authentication, and monitoring within their own user base. Option C is wrong because the risk of service unavailability due to a natural disaster is typically mitigated by the provider (e.g., geo-redundancy, disaster recovery plans), but it is not fully transferred—the consumer still bears the impact of downtime and must have their own business continuity plans; the provider assumes the operational risk, but the consequence risk remains with the consumer.

Full explanation →

745

MCQmedium

A user requests a password reset via the IT service portal. According to ITIL 4, what type of record should the service desk raise?

A.A change request

B.An incident record

C.A service request

D.A problem record

AnswerC

A service request is a formal request from a user for something standard that is part of the normal delivery of services. Password resets are typically pre-defined, low-risk, and frequently occurring actions that can be fulfilled quickly, often automated, and do not require extensive approval. They represent a request for a standard utility or access, aligning perfectly with the definition of a service request in ITIL 4.

Why this answer

A password reset is a standard, pre-approved request for a service that does not involve a failure or interruption. According to ITIL 4, this falls under a service request, which is defined as a formal request from a user for something to be provided – such as information, advice, or access to a service. The service desk should raise a service request record to track and fulfill this routine action.

Exam trap

The trap here is that candidates confuse a service request with an incident, thinking any user-reported issue is an incident, but ITIL 4 clearly distinguishes between a failure (incident) and a standard request for service (service request).

How to eliminate wrong answers

Option A is wrong because a change request is used for alterations to controlled IT infrastructure or services that could impact service availability or security, not for routine user actions like password resets. Option B is wrong because an incident record is reserved for unplanned interruptions or reductions in service quality, whereas a password reset is a planned, standard operation. Option D is wrong because a problem record is created to investigate the root cause of one or more incidents, not to fulfill a user's request for a standard service.

Full explanation →

746

MCQhard

An organisation is selecting a new cloud provider. The IT team evaluates two options: Provider A offers low cost but no disaster recovery; Provider B offers higher cost with guaranteed recovery time. According to ITIL 4, which statements about value are correct?

A.Provider A offers better value because cost is lower

B.Value cannot be compared because it is always subjective

C.Provider B offers better value if the organisation prioritises risk reduction over cost

D.Both providers offer the same value because they both provide cloud services

AnswerC

This statement is correct because ITIL 4 emphasizes that value is co-created and perceived through the consumer's specific lens, encompassing their desired outcomes, acceptable costs, and risk appetite. If an organization's strategic priorities heavily lean towards minimizing operational or security risks, a provider offering superior risk reduction capabilities, even if it entails a higher monetary cost, would deliver greater perceived value. This illustrates that value is a dynamic balance of utility, warranty, costs, and risks, tailored precisely to the consumer's unique context and priorities.

Why this answer

ITIL 4 defines value as the perceived benefits, utility, and warranty of a service. If the organisation prioritises risk reduction (warranty) over cost, Provider B's guaranteed recovery time delivers higher value by ensuring business continuity, even at a higher price. Value is not purely cost-based; it depends on stakeholder needs and outcomes.

Exam trap

The trap here is that candidates equate lower cost with better value, overlooking ITIL 4's principle that value is a balance of utility, warranty, cost, and risk, not just price.

How to eliminate wrong answers

Option A is wrong because it assumes lower cost always equals better value, ignoring that value in ITIL 4 includes utility (fit for purpose) and warranty (fit for use), such as disaster recovery guarantees. Option B is wrong because value is not purely subjective; it is co-created with stakeholders and can be compared based on agreed criteria like risk tolerance and service level agreements. Option D is wrong because both providers do not offer the same value; Provider A lacks disaster recovery, which may fail to meet the organisation's risk reduction needs, while Provider B provides that warranty, making their value different.

Full explanation →

747

MCQhard

A cloud service provider wants to introduce a new self-service portal for customers to manage their virtual machines. The project team proposes building a custom solution from scratch. Which ITIL guiding principle should the team apply first?

A.Start where you are

B.Keep it simple and practical

C.Focus on value

D.Progress iteratively with feedback

AnswerA

The "Start where you are" guiding principle dictates that organizations should assess their current state before initiating any new activity or improvement. For a cloud service provider introducing a new self-service portal, this means thoroughly evaluating existing self-service capabilities, underlying infrastructure, and customer interaction points to identify reusable components, existing strengths, and areas for improvement. This prevents redundant efforts, ensures efficient resource utilization, and builds upon a solid understanding of the current operational landscape rather than starting from scratch.

Why this answer

The 'Start where you are' principle is the correct first step because building a custom self-service portal from scratch without assessing existing capabilities, such as current VM management tools, APIs, or automation scripts, risks reinventing the wheel and wasting resources. The team should first evaluate what already exists (e.g., existing cloud orchestration platforms, monitoring systems, or customer-facing interfaces) to leverage or improve upon them, aligning with ITIL's guidance to avoid unnecessary duplication of effort.

Exam trap

The trap here is that candidates often jump to 'Focus on value' (Option C) because they think value is always the top priority, but ITIL4F emphasizes that you cannot deliver value effectively without first understanding and leveraging your existing assets and capabilities.

How to eliminate wrong answers

Option B (Keep it simple and practical) is wrong because while simplicity is important, it is not the first principle to apply; the team must first understand the current state before simplifying. Option C (Focus on value) is wrong because value is a core goal, but without knowing the starting point, the team cannot define what value means in context (e.g., whether existing tools already deliver value). Option D (Progress iteratively with feedback) is wrong because iteration requires a baseline to iterate from; starting with a custom build without assessing existing assets violates the principle of leveraging what already works.

Full explanation →

748

MCQhard

An organization wants to improve first-level resolution rate. Which practice should be primarily involved?

A.Monitoring and Event Management

B.Problem Management

C.Service Level Management

D.Service Desk

AnswerD

The Service Desk practice is specifically designed to be the single point of contact between the service provider and its users, aiming to restore normal service operation as quickly as possible. A core objective of an effective Service Desk is to maximize first-level resolution (FLR) or first contact resolution (FCR) by providing immediate support, access to comprehensive knowledge, and appropriate diagnostic tools. Therefore, any organizational effort to improve FLR directly involves enhancing the capabilities, processes, and resources of the Service Desk.

Why this answer

First-level resolution rate measures how many incidents are resolved at the first point of contact, which is the Service Desk's core responsibility. The Service Desk owns incident logging, initial diagnosis, and first-line resolution, so improving this metric is primarily a Service Desk practice concern.

Exam trap

ITIL4F often tests whether candidates confuse the practice that owns the metric (Service Desk) with practices that influence it indirectly (Problem Management, Service Level Management), tempting them to pick the 'root cause' practice instead of the frontline one.

How to eliminate wrong answers

Option A is wrong because Monitoring and Event Management detects and correlates events; it feeds incidents into the Service Desk but does not resolve them at first level. Option B is wrong because Problem Management addresses root causes of recurring incidents, which improves long-term resolution but not the first-contact resolution rate. Option C is wrong because Service Level Management defines and monitors SLAs/targets; it measures the metric but does not directly improve first-level resolution capability.

Full explanation →

749

MCQhard

An organisation adopts a new AI-based chatbot for customer support without considering the impact on existing support processes or staff roles. Which consequence is MOST likely according to ITIL 4?

A.Reduced operational costs immediately

B.Resistance from staff and confusion in service workflows

C.Increased compliance with data privacy regulations

D.Improved customer satisfaction due to faster responses

AnswerB

Implementing a new AI-based chatbot without adequate change management, stakeholder engagement, and process redesign inevitably leads to significant organizational friction. Staff may resist the change due to fear of job displacement, lack of understanding, or insufficient training, while existing service workflows become confused or break down as the new technology is shoehorned into unprepared processes. This directly impacts the 'Organizations and People' and 'Value Streams and Processes' dimensions of service management, hindering effective service delivery.

Why this answer

ITIL 4 emphasizes the Four Dimensions of Service Management, which include organizations and people, information and technology, partners and suppliers, and value streams and processes. Adopting a new AI chatbot without considering its impact on existing support processes or staff roles violates the 'organizations and people' and 'value streams and processes' dimensions, leading to resistance from staff due to role ambiguity and confusion in service workflows as processes are not adapted to the new technology.

Exam trap

The trap here is that candidates assume technology alone (faster responses) directly improves customer satisfaction, ignoring ITIL 4's holistic requirement to align all four dimensions—especially people and processes—to avoid disruption and resistance.

How to eliminate wrong answers

Option A is wrong because operational costs typically increase initially due to integration, training, and process re-engineering efforts, not immediately reduce. Option C is wrong because introducing AI without impact analysis often creates data privacy risks (e.g., mishandling customer data, non-compliance with GDPR) rather than increasing compliance. Option D is wrong because faster responses alone do not guarantee improved customer satisfaction if the chatbot provides incorrect answers or disrupts existing support workflows, leading to frustration.

Full explanation →

750

MCQeasy

What is the primary purpose of ITIL 4's Service Value System (SVS)?

A.To manage IT projects only

B.To define specific ITIL practices

C.To replace the ITIL 4 guiding principles

D.To enable co-creation of value through services

AnswerD

The Service Value System (SVS) is explicitly designed as a holistic operating model that integrates all components and activities necessary for an organization to create, deliver, and continually improve services. Its core purpose is to facilitate the co-creation of value with customers and other stakeholders by transforming demand into value. This comprehensive approach ensures that all organizational efforts are aligned towards achieving desired outcomes and realizing benefits through effective service management.

Why this answer

The primary purpose of ITIL 4's Service Value System (SVS) is to enable co-creation of value through services by providing a holistic, flexible framework that integrates all components and activities of an organization to deliver value. It aligns guiding principles, governance, service value chain, practices, and continual improvement to ensure value is co-created with stakeholders, not just delivered unilaterally.

Exam trap

The trap here is that candidates often confuse the SVS with a static set of practices or a project management framework, overlooking its core purpose of enabling dynamic value co-creation through an integrated, holistic system.

How to eliminate wrong answers

Option A is wrong because the SVS is not limited to managing IT projects; it encompasses the entire service management ecosystem, including operations, strategy, and continual improvement, far beyond project management. Option B is wrong because the SVS does not define specific ITIL practices; it provides a structure that integrates practices, but the practices themselves are defined separately in the ITIL 4 framework. Option C is wrong because the SVS does not replace the ITIL 4 guiding principles; instead, it incorporates them as a core component to guide all activities within the system.

Full explanation →

ITIL 4 Foundation (ITIL4F) — Questions 676–750