ITIL 4 Foundation ITIL4F Questions 76–150 | Page 2/11

MCQeasy

What is the role of the Service Desk in ITIL 4?

A.Authorizing and scheduling changes

B.Identifying root causes of incidents

C.Single point of contact for users reporting incidents and requests

D.Monitoring and reporting on service levels

AnswerC

The Service Desk serves as the crucial single point of contact (SPOC) between the service provider and its users. This central role ensures that users have one clear channel for reporting incidents, making service requests, and seeking information, thereby streamlining communication and improving user experience. By acting as the SPOC, the Service Desk facilitates efficient logging, initial assessment, and routing of all user interactions to the appropriate support teams or practices.

Why this answer

In ITIL 4, the Service Desk is the single point of contact (SPOC) between the service provider and its users, handling incident reports, service requests, and general communication. It owns the 'engage' and 'incident management' practice entry points, ensuring users have one consistent channel rather than contacting multiple technical teams. This role is foundational to the Service Desk practice within ITIL 4's Service Value System.

Exam trap

ITIL4F often tests the confusion between the Service Desk's SPOC role and the responsibilities of Problem Management (root cause) or Change Enablement (authorization), so candidates must map each activity to its correct practice.

How to eliminate wrong answers

Option A is wrong because authorizing and scheduling changes is the responsibility of Change Enablement (change authority), not the Service Desk. Option B is wrong because identifying root causes of incidents is the domain of Problem Management, which performs root cause analysis; the Service Desk only logs and escalates. Option D is wrong because monitoring and reporting on service levels is performed by Service Level Management and Continual Improvement practices, not the Service Desk.

Full explanation →

MCQeasy

Which ITIL 4 concept describes the functionality of a service, ensuring it meets the consumer's needs and has the required attributes?

A.Warranty

B.Output

C.Outcome

D.Utility

AnswerD

Utility defines what a service does — its functionality — and confirms it meets the consumer's needs with the required attributes, such as performance or capacity. This directly satisfies the stem's demand for the concept describing functionality, distinguishing it from warranty, which covers fitness for use.

Why this answer

Utility is the ITIL 4 concept that describes the functionality offered by a service, specifically ensuring it meets the consumer's needs by providing the required attributes (e.g., performance, features). It answers the question 'What does the service do?' and is one of the two key components of service value, alongside warranty. In ITIL 4, utility is defined as the 'functionality offered by a product or service to meet a particular need,' directly aligning with the question's focus on functionality and required attributes.

Exam trap

The trap here is confusing utility with warranty, as candidates often think 'meeting needs' includes reliability or security, but ITIL 4 strictly separates functionality (utility) from assurance (warranty).

How to eliminate wrong answers

Option A is wrong because warranty describes the assurance that a service will meet agreed-upon requirements (e.g., availability, capacity, continuity, security), not its functionality or attributes. Option B is wrong because output refers to the tangible or intangible deliverables of an activity (e.g., a report or a processed transaction), not the overall service functionality that meets consumer needs. Option C is wrong because outcome is the result of using a service (e.g., increased productivity or reduced risk), not the service's inherent functionality or attributes.

Full explanation →

MCQmedium

A user requests a new laptop for a new employee. According to ITIL 4, what type of record should be raised?

A.Change request

B.Incident record

C.Service request

D.Problem record

AnswerC

A new laptop for a new employee is a pre-approved, low-risk standard request fulfilled through normal channels, which ITIL 4 classifies as a service request. It is not an incident, since nothing has failed or degraded.

Why this answer

A service request is a formal request from a user for something to be provided – for example, for information, advice, or a standard change. In ITIL 4, provisioning a new laptop for a new employee is a pre-defined, low-risk, standard request that follows an approved procedure, making it a service request rather than a change or incident.

Exam trap

The trap here is confusing a 'service request' with a 'change request' because provisioning a new laptop involves a change to the asset inventory, but ITIL 4 explicitly categorizes standard, low-risk, pre-approved requests as service requests, not changes.

How to eliminate wrong answers

Option A is wrong because a change request is used for alterations to services or infrastructure that may have risk or require assessment, not for standard, pre-approved provisioning like a new laptop. Option B is wrong because an incident record is for unplanned interruptions or reductions in quality of service, not for planned requests for new equipment. Option D is wrong because a problem record is for the root cause of one or more incidents, not for a user's request for a new asset.

Full explanation →

Multi-Selectmedium

Which TWO activities are part of the problem identification phase of Problem Management?

Select 2 answers

A.Organizing workarounds into known-error records

B.Trend analysis of incident records

C.Root cause analysis

D.Analyzing incident data for patterns

E.Implementing a known error

AnswersB, D

Trend analysis of incident records is a crucial activity for problem identification, as it involves systematically reviewing historical incident data to detect recurring patterns or increasing frequencies of specific incident types over time. By observing these trends, IT teams can proactively identify emerging problems that might otherwise go unnoticed, signaling a need for deeper investigation into an underlying cause. This proactive approach helps prevent future service disruptions.

Why this answer

Problem identification involves proactively identifying potential problems. The correct activities are trend analysis of incident records (option B) and analyzing incident data for patterns (option D). These help detect recurring issues.

Option A (organizing workarounds into known-error records) is part of error control, not identification. Option C (root cause analysis) is part of problem control. Option E (implementing a known error) is also error control.

Full explanation →

MCQeasy

Which ITIL 4 concept describes the assurance that a service meets its agreed availability and capacity requirements?

A.Risk

B.Warranty

C.Utility

D.Outcome

AnswerB

Warranty, in ITIL 4, refers to the assurance that a service will meet agreed requirements regarding its performance. It specifically addresses how the service performs, covering aspects such as availability, capacity, continuity, and security. Essentially, warranty confirms that the service is "fit for use," ensuring that it can be used reliably and consistently to deliver the desired outcomes without undue interruption or degradation. This concept directly describes the assurance provided by a service.

Why this answer

Warranty is the ITIL 4 concept that focuses on the 'assurance' that a service will meet its agreed-upon availability, capacity, continuity, and security requirements. It represents the operational guarantees that make the service fit for use, directly addressing the question's focus on availability and capacity commitments.

Exam trap

The trap here is that candidates confuse Utility (what the service does) with Warranty (how well it performs), leading them to pick Utility when the question explicitly asks about assurance of availability and capacity requirements.

How to eliminate wrong answers

Option A is wrong because Risk refers to a possible event that could cause harm or loss, not the assurance of meeting availability and capacity requirements. Option C is wrong because Utility describes the functionality of a service—'what it does'—not the assurance of its performance levels. Option D is wrong because Outcome is a result enabled by the service, not the guarantee of service performance metrics like availability or capacity.

Full explanation →

MCQmedium

An IT team is reviewing the configuration baseline of a service to understand what has changed since the last release. Which practice is primarily involved?

A.Service Configuration Management

B.Change Enablement

C.Deployment Management

D.Release Management

AnswerA

Service Configuration Management is the practice of ensuring that accurate and reliable information about the configuration of services and the CIs that support them is available when and where it is needed. This includes managing configuration baselines, which are snapshots of a configuration at a specific point in time, used for comparison, restoration, and as a known good state. Reviewing these baselines is a core activity within this practice to maintain service integrity and control.

Why this answer

The configuration baseline is a snapshot of the service's configuration at a specific point in time, used as a reference for comparison. Service Configuration Management (SCM) is the practice responsible for maintaining configuration baselines and tracking all changes to Configuration Items (CIs) within the Configuration Management Database (CMDB). Therefore, when the team needs to understand what has changed since the last release, SCM is the primary practice involved, as it provides the historical records and comparison capabilities.

Exam trap

The trap here is that candidates often confuse 'tracking changes' with Change Enablement, but Change Enablement manages the process of approving changes, while Service Configuration Management is the practice that actually records and compares the configuration states.

How to eliminate wrong answers

Option B (Change Enablement) is wrong because Change Enablement focuses on controlling the lifecycle of changes (e.g., assessing risk, approving, and scheduling changes), not on maintaining or comparing configuration baselines. Option C (Deployment Management) is wrong because Deployment Management deals with moving new or changed components to production environments, not with tracking the historical state of configuration items. Option D (Release Management) is wrong because Release Management oversees the planning, scheduling, and controlling of releases into production, but it does not maintain the configuration baseline records; it consumes them from SCM.

Full explanation →

MCQeasy

Which of the following is a key activity in the Problem Management practice?

A.Authorizing and scheduling emergency changes

B.Fulfilling a password reset request from a user

C.Restoring service as quickly as possible using a workaround

D.Documenting known errors and workarounds in the Known Error Database

AnswerD

Documenting known errors and workarounds in the Known Error Database is a critical activity within the Error Control phase of Problem Management. Once a problem's root cause has been identified and a temporary solution developed, recording this information allows for quicker incident resolution in the future and prevents recurrence. This database serves as a vital knowledge base, enabling efficient incident diagnosis and providing interim solutions until a permanent fix is implemented.

Why this answer

A key activity in Problem Management is documenting known errors and workarounds in the Known Error Database (KEDB). Problem Management focuses on identifying root causes of incidents and managing workarounds and known errors to reduce their impact. The KEDB is a central repository that helps the Service Desk resolve incidents faster by applying documented workarounds.

Exam trap

ITIL4F often tests the confusion between Incident Management and Problem Management — candidates must remember that Incident Management restores service (often via workarounds), while Problem Management identifies root causes and documents known errors in the KEDB.

How to eliminate wrong answers

Option A is wrong because authorizing and scheduling emergency changes is a key activity of Change Enablement, not Problem Management. Option B is wrong because fulfilling a password reset request is a service request handled by the Service Desk or Request Management, not Problem Management. Option C is wrong because restoring service as quickly as possible using a workaround is the primary goal of Incident Management, not Problem Management — Problem Management focuses on root cause and prevention.

Full explanation →

MCQhard

A service has been designed with excellent functionality but lacks sufficient capacity to handle peak demand. Which dimension is most likely being neglected?

A.Organizations and People

B.Partners and Suppliers

C.Information and Technology

D.Value Streams and Processes

AnswerC

This dimension encompasses the information and knowledge necessary for service management, along with the technologies and applications required to deliver and support services. A service designed with "excellent functionality" but still problematic often indicates a gap in the underlying information architecture, data availability, or the technological infrastructure needed to effectively realize or deliver that functionality. The superb design might be hindered by inadequate systems, tools, or data processing capabilities.

Why this answer

The Information and Technology dimension covers the actual IT systems, applications, and infrastructure that deliver the service. Since the service has excellent functionality but insufficient capacity to handle peak demand, the technology components (e.g., servers, network bandwidth, database throughput) are not scaled or configured to meet the required load. This neglect directly points to the Information and Technology dimension, as capacity management is a core technical concern within this dimension.

Exam trap

The trap here is that candidates may confuse 'excellent functionality' with overall service health and incorrectly choose Value Streams and Processes, thinking the issue is a flawed workflow, when in fact the problem is purely technical capacity.

How to eliminate wrong answers

Option A is wrong because Organizations and People focuses on roles, skills, and culture, not on the technical capacity of the service infrastructure. Option B is wrong because Partners and Suppliers deals with external vendors and contracts, not the internal technical capacity to handle peak demand. Option D is wrong because Value Streams and Processes addresses workflows and procedures, not the actual technology resources needed to absorb peak loads.

Full explanation →

MCQmedium

An organisation uses a chatbot to handle common IT service requests. Which dimension does this primarily relate to?

A.Information and Technology

B.Organisations and People

C.Value Streams and Processes

D.Partners and Suppliers

AnswerA

A chatbot is an automated technology tool, so it falls under the Information and Technology dimension, which covers information, knowledge, and the technologies used to manage services. It satisfies the stem's requirement to identify the dimension relating to a technological solution.

Why this answer

The chatbot is a specific technology tool that handles IT service requests, directly aligning with the 'Information and Technology' dimension. This dimension covers the technology architecture, applications, and data used to deliver and manage services. The chatbot represents an application or software component that processes and automates service interactions, making it a clear fit for this dimension.

Exam trap

The trap here is that candidates may confuse the chatbot's role in automating a process (Value Streams and Processes) with the technology itself, but the question specifically asks which dimension the chatbot primarily relates to, not the process it supports.

How to eliminate wrong answers

Option B is wrong because 'Organisations and People' focuses on roles, culture, and competencies, not the specific technology tool like a chatbot. Option C is wrong because 'Value Streams and Processes' deals with the sequence of activities and workflows, not the enabling technology itself. Option D is wrong because 'Partners and Suppliers' refers to external vendors or third-party relationships, whereas the chatbot is an internal technology asset.

Full explanation →

MCQmedium

An IT manager wants to ensure that a service meets its agreed availability targets. Which practice should they use?

A.Capacity and Performance Management

B.Availability Management

C.IT Asset Management

D.Service Level Management

AnswerB

Availability Management is the ITIL practice dedicated to ensuring that services and their components are available when needed, for the agreed period, and at the agreed level of performance. This involves proactive planning, design, implementation, measurement, and improvement of service availability to meet defined targets and business requirements. Its core objective is to minimize service interruptions and ensure continuous access for users.

Why this answer

Availability Management is the ITIL practice responsible for ensuring that IT services meet their defined availability targets. This practice involves monitoring, measuring, and reporting on service uptime, as well as planning and implementing improvements to prevent outages. The IT manager should use Availability Management to directly track and manage agreed availability levels, such as 99.9% uptime, and to coordinate with other practices to address failures.

Exam trap

The trap here is that candidates often confuse Service Level Management (which defines and reports on SLAs) with Availability Management (which actually measures and ensures the technical availability), leading them to pick D instead of B.

How to eliminate wrong answers

Option A is wrong because Capacity and Performance Management focuses on ensuring that IT resources (e.g., CPU, memory, bandwidth) are sufficient to meet current and future demand, not on tracking or achieving availability targets like uptime percentages. Option C is wrong because IT Asset Management deals with the lifecycle management of hardware and software assets (e.g., tracking licenses, warranties, and inventory), not with monitoring or improving service availability. Option D is wrong because Service Level Management is responsible for negotiating, documenting, and reviewing Service Level Agreements (SLAs), but the actual monitoring and assurance of availability targets is performed by Availability Management; Service Level Management relies on Availability Management data to verify compliance.

Full explanation →

MCQeasy

Which of the following is a PESTLE factor?

A.Technological advancements

B.Incident management procedures

C.Service level agreements

D.Organisational culture

AnswerA

Technological advancements represent the 'T' in PESTLE, encompassing innovations and developments in technology that can significantly impact an organization's operations, services, and strategic direction. These external shifts, such as the rise of artificial intelligence, cloud computing, or new communication protocols, create both opportunities and threats that an organization must analyze to remain competitive and relevant. Understanding these advancements is crucial for strategic planning and adapting IT services to evolving market demands and customer expectations.

Why this answer

PESTLE is a strategic analysis framework used in the 'Four Dimensions of IT Service Management' to assess external factors that can impact service management. Technological advancements are explicitly one of the six PESTLE factors (Political, Economic, Social, Technological, Legal, Environmental), making option A correct because it directly corresponds to the 'Technological' dimension of the model.

Exam trap

The trap here is that candidates confuse internal operational elements (like incident procedures or SLAs) with external environmental factors, mistakenly thinking any 'process' or 'agreement' belongs in PESTLE, when PESTLE strictly covers macro-environmental externalities.

How to eliminate wrong answers

Option B is wrong because incident management procedures are internal operational processes defined within the Service Value System (SVS), not an external macro-environmental factor analyzed by PESTLE. Option C is wrong because service level agreements (SLAs) are contractual commitments between a service provider and a customer, which are internal governance artifacts, not external PESTLE factors. Option D is wrong because organisational culture is an internal element of the 'Organizations and People' dimension, not an external factor captured by the PESTLE analysis.

Full explanation →

MCQhard

An organization is implementing a new IT service management tool. According to ITIL 4, which practice would be primarily responsible for ensuring that the tool's performance meets the agreed demand?

A.Service Configuration Management

B.Capacity and Performance Management

C.Monitoring and Event Management

D.Availability Management

AnswerB

Capacity and Performance Management is the ITIL practice specifically designed to ensure that services and service components are able to meet agreed performance targets and demand, both current and future. It involves understanding the current capacity and performance of resources, forecasting future demand, and planning for necessary adjustments to maintain optimal service delivery and user experience. This practice proactively balances the cost of capacity with the need for performance and availability.

Why this answer

Capacity and Performance Management is the ITIL 4 practice that ensures services, including supporting tools, meet current and future demand in a cost-effective manner. It involves sizing, monitoring, and optimizing resources to meet performance requirements as defined in service level agreements. Since the question asks about ensuring the tool's performance meets agreed demand, this practice is directly responsible.

It works by forecasting demand, planning capacity, and managing performance to prevent bottlenecks.

Exam trap

ITIL4F often tests the confusion between Capacity and Performance Management and Availability Management, as both deal with service performance, but the key differentiator is that Capacity focuses on meeting demand, while Availability focuses on uptime.

How to eliminate wrong answers

Option A is wrong because Service Configuration Management focuses on maintaining accurate configuration records of configuration items (CIs) and their relationships, not on performance or demand management. Option C is wrong because Monitoring and Event Management is about observing services and components, recording and reporting events, and triggering actions; it does not own the responsibility for ensuring performance meets demand. Option D is wrong because Availability Management ensures services are available when needed, meeting availability targets, but it does not primarily handle performance relative to demand; that is the domain of Capacity and Performance Management.

Full explanation →

MCQmedium

A bank is using a cloud-based accounting software. The software provider ensures 99.9% uptime and data encryption. Which ITIL 4 concept is represented by the uptime guarantee?

A.Service relationship

B.Warranty

C.Utility

D.Outcome

AnswerB

Warranty refers to the assurance that a product or service will meet agreed requirements, specifically concerning its fitness for use. This includes aspects such as availability, capacity, security, and continuity, ensuring the service performs reliably under specified conditions. Therefore, a guarantee regarding the availability of cloud-based accounting software directly falls under the definition of warranty, as it addresses how the service performs and its reliability.

Why this answer

In ITIL 4, warranty refers to the assurance that a service will meet its agreed requirements — including availability, capacity, security, and continuity. A 99.9% uptime guarantee is a warranty commitment, as it defines the level of assurance the provider offers. Utility, by contrast, is about the functionality the service provides (what it does), while warranty is about how well it performs.

Exam trap

ITIL4F often tests the utility vs. warranty distinction — candidates see 'uptime guarantee' and pick utility because it sounds like a service feature, forgetting that warranty covers assurance of availability, capacity, security, and continuity.

How to eliminate wrong answers

Option A is wrong because a service relationship is the overall interaction between provider and consumer, including service provision, consumption, and relationship management — not the specific uptime guarantee. Option C is wrong because utility describes the functionality offered by a service (fit for purpose), such as the accounting features, not the uptime assurance. Option D is wrong because an outcome is the result enabled by the service for the consumer (e.g., accurate financial reporting), not the availability guarantee itself.

Full explanation →

MCQhard

An organization notices that the CMDB contains outdated information about several configuration items. Which ITIL 4 practice is primarily responsible for maintaining accurate CI data?

A.Service Configuration Management

B.Deployment Management

C.IT Asset Management

D.Change Enablement

AnswerA

Service Configuration Management is the ITIL practice specifically responsible for ensuring that accurate and reliable information about the configuration of services and their supporting configuration items (CIs) is available. This practice establishes and maintains the Configuration Management Database (CMDB), defining configuration baselines and managing the lifecycle of CIs to reflect their current state. Therefore, addressing outdated information in the CMDB falls directly under its purview, as it governs the integrity and accuracy of configuration data.

Why this answer

Service Configuration Management is the ITIL 4 practice responsible for maintaining accurate and reliable information about configuration items (CIs) throughout their lifecycle. It ensures the CMDB reflects the current state of CIs, including relationships and attributes, by controlling updates through defined processes and audits. Outdated CI data directly indicates a failure in this practice's core function of configuration control and status accounting.

Exam trap

The trap here is that candidates confuse IT Asset Management (which tracks financial and contractual data) with Service Configuration Management (which tracks technical configuration data), leading them to choose Option C even though the CMDB's accuracy is a configuration management responsibility, not an asset management one.

How to eliminate wrong answers

Option B is wrong because Deployment Management focuses on moving new or changed hardware, software, or services into production environments, not on maintaining ongoing CI data accuracy in the CMDB. Option C is wrong because IT Asset Management manages the financial, contractual, and lifecycle aspects of assets (e.g., procurement, depreciation, disposal), but it does not own the technical configuration records or their accuracy in the CMDB. Option D is wrong because Change Enablement controls the approval and implementation of changes to services and CIs, but it does not perform the ongoing maintenance or verification of CI data accuracy; it relies on Service Configuration Management to provide reliable CI information.

Full explanation →

MCQmedium

Which of the following is an output of the 'Obtain/Build' value chain activity?

A.A signed service level agreement

B.A resolved incident

C.A configured software component ready for testing

D.A service design package

AnswerC

A configured software component ready for testing is a direct and expected output of the 'Obtain/Build' value chain activity. This activity involves the actual creation, modification, or acquisition of service components, ensuring they are built or configured according to specifications derived from design. Once these components are developed and initially configured, they are then prepared for subsequent validation and verification activities, typically within the 'Design and Transition' activity, to ensure they meet the required quality and functional criteria.

Why this answer

The 'Obtain/Build' value chain activity is responsible for creating, acquiring, or modifying components and services to meet agreed specifications. A configured software component ready for testing is a direct output of this activity, as it represents the tangible result of the build process before it moves into the 'Test' activity for validation.

Exam trap

The trap here is confusing the outputs of different value chain activities, particularly mistaking a service design package (a design-phase output) for a build-phase output, or assuming that resolved incidents or signed SLAs are produced during the build stage when they belong to later operational or planning activities.

How to eliminate wrong answers

Option A is wrong because a signed service level agreement (SLA) is an output of the 'Engage' or 'Plan' value chain activities, not 'Obtain/Build', as it involves negotiating and agreeing on service levels with customers. Option B is wrong because a resolved incident is an output of the 'Deliver and Support' value chain activity, specifically the incident management process, not the 'Obtain/Build' activity which focuses on building components. Option D is wrong because a service design package (SDP) is an output of the 'Design and Transition' value chain activity, produced during the design phase to document service requirements and specifications, not during the build phase.

Full explanation →

MCQmedium

An IT service desk analyst receives a call that users cannot access the CRM system. What should the analyst do FIRST according to ITIL 4?

A.Request a change to the CRM system configuration

B.Log an incident record to restore service as quickly as possible

C.Investigate the root cause of the CRM failure

D.Submit a service request to grant access

AnswerB

Incident management begins by recording the incident so it can be tracked, prioritised and progressed. Logging the CRM access failure first establishes the record the analyst needs to restore service as quickly as possible, satisfying ITIL 4's incident management practise.

Why this answer

According to ITIL 4, the primary goal of incident management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations. When users cannot access the CRM system, the analyst's first action must be to log an incident record, capturing details such as the number of affected users, error messages, and timestamps, to initiate the restoration process. This aligns with the ITIL 4 guiding principle of 'Focus on Value' by prioritizing service recovery over root cause analysis or configuration changes.

Exam trap

The trap here is that candidates confuse incident management with problem management, mistakenly thinking that finding the root cause is the first step, when ITIL 4 explicitly mandates restoring service first before investigating underlying causes.

How to eliminate wrong answers

Option A is wrong because requesting a change to the CRM system configuration is a reactive and premature action; changes must follow the change enablement process with proper authorization and risk assessment, not be initiated as a first response to an outage. Option C is wrong because investigating the root cause of the CRM failure is part of problem management, not incident management; the immediate priority is to restore service, not to perform deep analysis. Option D is wrong because submitting a service request to grant access is a standard request fulfillment activity for pre-approved access needs, not a response to a sudden, widespread service outage that indicates an incident.

Full explanation →

MCQeasy

Which type of change follows a pre-defined, low-risk procedure and is pre-approved?

A.Service request

B.Normal change

C.Standard change

D.Emergency change

AnswerC

A standard change is a pre-authorized change that is low-risk, well-understood, and has a documented procedure for implementation. These changes are typically routine, frequently performed, and do not require additional authorization each time they are executed, as the risk has been assessed and approved beforehand. This classification perfectly aligns with following a pre-defined, low-risk procedure, making it efficient for common modifications.

Why this answer

A standard change is a pre-defined, low-risk change that follows a specific procedure and is pre-approved by change management. It does not require a new change request each time because its risk profile and implementation steps are already documented and authorized. This aligns with ITIL 4's definition of a standard change as a change that is well-understood, fully documented, and can be implemented without additional approval.

Exam trap

The trap here is that candidates often confuse 'standard change' with 'service request' because both can follow a pre-defined procedure, but ITIL 4 explicitly separates them: a service request is for standard services (e.g., password reset), while a standard change is for low-risk technical changes (e.g., applying a tested patch).

How to eliminate wrong answers

Option A is wrong because a service request is a formal request from a user for something to be provided – such as access, information, or a standard service – and while it may follow a pre-defined procedure, it is not a type of change; it is a separate category in ITIL 4. Option B is wrong because a normal change is any change that is not standard or emergency; it requires a full assessment and approval through the change advisory board (CAB) and does not have pre-approval. Option D is wrong because an emergency change is a change that must be implemented as soon as possible to resolve an incident or critical issue; it follows an expedited process but is not pre-approved and carries higher risk.

Full explanation →

Multi-Selectmedium

Which THREE of the following are considered part of the 'Information and Technology' dimension in ITIL 4?

Select 3 answers

A.Cloud computing platforms

B.Change management procedures

C.Databases and data storage systems

D.Skills and competencies of IT staff

E.Security and encryption technologies

AnswersA, C, E

Cloud computing platforms are fundamental technological infrastructures that provide scalable and on-demand computing resources, including servers, storage, databases, networking, software, analytics, and intelligence, over the internet. These platforms are integral to the Information and Technology dimension because they represent the actual technology components and services utilized to deliver and support IT services, enabling flexible and efficient operations.

Why this answer

Cloud computing platforms (A) are a core component of the 'Information and Technology' dimension, which covers the technical infrastructure, applications, and data management used to deliver services. This dimension includes hardware, software, networks, and cloud services that enable service delivery and support.

Exam trap

The trap here is that candidates confuse 'procedures' (which are process artifacts) with 'technology' (which is the infrastructure and tools), leading them to incorrectly select change management procedures as part of the Information and Technology dimension.

Full explanation →

MCQhard

A software company is using ITIL 4 to improve its incident management process. Currently, incidents are resolved but often require significant rework, leading to delays. Which practice should the company focus on to address this issue?

A.Change Enablement

B.Incident Management

C.Service Desk

D.Problem Management

AnswerD

Problem Management is specifically designed to reduce the likelihood and impact of incidents by identifying, analyzing, and resolving the root causes of actual and potential incidents. It proactively prevents recurrence and minimizes the impact of unavoidable incidents through structured analysis, known error identification, and the implementation of permanent solutions. This practice is crucial for improving service stability and reducing future operational overhead.

Why this answer

Problem Management (D) is the correct practice because the issue of recurring rework and delays indicates underlying root causes that are not being addressed. Problem Management focuses on identifying and eliminating the root causes of incidents, which reduces the need for rework and prevents future incidents, directly improving efficiency.

Exam trap

The trap here is that candidates often confuse Incident Management (restoring service quickly) with Problem Management (preventing recurrence), and choose Incident Management because it seems directly related to resolving incidents, missing that the question specifically asks about reducing rework and delays caused by recurring issues.

How to eliminate wrong answers

Option A is wrong because Change Enablement manages the lifecycle of changes to IT services, not the root cause analysis of recurring incidents; it would not address why rework is needed. Option B is wrong because Incident Management focuses on restoring normal service operation as quickly as possible, but it does not prevent the underlying causes that lead to rework and delays. Option C is wrong because the Service Desk provides a single point of contact for users and handles incident logging and initial support, but it does not perform root cause analysis or eliminate the need for rework.

Full explanation →

MCQmedium

Which of the following is an example of an emergency change?

A.Updating the service desk knowledge base with new articles

B.Applying a critical security patch to a production server to fix a vulnerability

C.A request to install a new software version for all users next month

D.A password reset for a user

AnswerB

Applying a critical security patch to a production server to fix a vulnerability is a prime example of an emergency change. Such a situation involves an immediate, severe threat to the security, availability, or integrity of a live service, demanding urgent action to prevent significant business impact or data compromise. The critical nature of the vulnerability necessitates an expedited assessment and authorization process, bypassing the typical, longer change schedule to mitigate the risk as quickly as possible.

Why this answer

An emergency change is defined in ITIL 4 as a change that must be implemented as soon as possible, often to resolve a major incident or address a critical security vulnerability. Applying a critical security patch to a production server to fix a vulnerability fits this definition because it is urgent, unplanned, and necessary to prevent or mitigate a significant risk. The other options are either routine changes, service requests, or planned changes with future dates.

Exam trap

ITIL4F often tests the distinction between emergency changes, normal changes, and service requests, and candidates may mistakenly classify any urgent-sounding task (like a password reset) as an emergency change, when it is actually a service request.

How to eliminate wrong answers

Option A is wrong because updating the service desk knowledge base is a routine, low-risk administrative task that follows a standard change model, not an emergency. Option C is wrong because it describes a planned change with a future implementation date (next month), which would go through normal change control, not emergency procedures. Option D is wrong because a password reset is a service request, not a change; it is handled through request management, not change enablement.

Full explanation →

MCQeasy

What is the purpose of governance in the ITIL 4 Service Value System?

A.To replace the service value chain

B.To implement all ITIL 4 processes

C.To define every practice in detail

D.To evaluate, direct, and monitor the organization

AnswerD

Governance in the ITIL 4 Service Value System provides the direction and control layer, achieved through the governing body's three activities: evaluate, direct and monitor. This ensures the organisation's strategy, portfolios and value streams align with stakeholder needs and objectives.

Why this answer

Governance in the ITIL 4 Service Value System (SVS) is defined by the 'evaluate, direct, and monitor' activities, which ensure that the organization's strategy, policies, and objectives align with stakeholder needs and are effectively controlled. This is the core purpose of the governance component, as specified in the ITIL 4 Foundation syllabus, and it operates independently of the service value chain or specific practices.

Exam trap

The trap here is that candidates often confuse governance with management or operational control, mistakenly thinking it involves detailed process implementation or practice definition, rather than its true role of high-level evaluation, direction, and monitoring.

How to eliminate wrong answers

Option A is wrong because governance does not replace the service value chain; the service value chain is a separate operating model for delivering value, while governance provides oversight and direction. Option B is wrong because governance is not responsible for implementing all ITIL 4 processes; implementation is managed through the service value chain and continual improvement, not governance. Option C is wrong because governance does not define every practice in detail; practices are defined by their own purpose and components, while governance focuses on high-level evaluation, direction, and monitoring.

Full explanation →

MCQmedium

An IT team is reviewing the number of incidents resolved on first contact. Which metric is being measured?

A.Customer Satisfaction Score (CSAT)

B.First Contact Resolution (FCR)

C.Service Level Agreement (SLA) compliance

D.Mean Time to Resolve (MTTR)

AnswerB

First Contact Resolution (FCR) is a crucial service desk metric that quantifies the percentage of incidents or service requests that are fully resolved during the customer's initial interaction with the service provider. This means the issue is completely addressed without requiring further follow-up, escalation, or transfer to another support agent. FCR directly measures the efficiency and effectiveness of the initial support, indicating the team's ability to resolve issues promptly at the first point of contact. A high FCR rate significantly enhances customer satisfaction and reduces operational costs.

Why this answer

First Contact Resolution (FCR) is the metric that specifically measures the percentage of incidents resolved during the initial interaction with the service desk, without requiring escalation or follow-up. The question directly describes this scenario, making B the correct choice.

Exam trap

The trap here is that candidates often confuse FCR with MTTR, assuming that resolving an incident quickly on first contact is the same as measuring the time to resolve, but FCR is a ratio metric, not a time-based one.

How to eliminate wrong answers

Option A is wrong because Customer Satisfaction Score (CSAT) measures overall customer happiness with a service or interaction, not the specific count of incidents resolved on first contact. Option C is wrong because Service Level Agreement (SLA) compliance measures whether response or resolution times meet contractual targets, not the first-contact resolution rate. Option D is wrong because Mean Time to Resolve (MTTR) calculates the average time taken to fully resolve an incident, not the proportion resolved on first contact.

Full explanation →

Multi-Selecthard

Which THREE of the following are activities of Service Level Management?

Select 3 answers

A.Managing supplier contracts

B.Reporting service performance

C.Monitoring service performance against SLAs

D.Negotiating and agreeing SLAs

E.Defining service metrics

AnswersB, C, D

Reporting service performance is a critical activity within Service Level Management, ensuring transparency and accountability. This involves systematically collecting, analyzing, and presenting data on how well services are meeting their agreed-upon targets to relevant stakeholders, including customers and internal management. Regular performance reports highlight achievements, identify deviations, and provide insights necessary for continuous service improvement and informed decision-making regarding service levels.

Why this answer

Service Level Management involves negotiating SLAs, monitoring service performance, and reporting results. Defining service metrics is part of service design, not a direct activity of SLA management.

Full explanation →

MCQmedium

An IT team is designing a new service. They ensure that the service is available during agreed hours and performs within agreed capacity levels. Which aspect of value are they addressing?

A.Cost

B.Risk

C.Utility

D.Warranty

AnswerD

Warranty describes how the service performs, specifically its fitness for use, by assuring that the service meets agreed-upon requirements. When designing a new service, an IT team ensures the warranty by guaranteeing specific levels of availability, capacity, continuity, and security. This assurance provides confidence to the service consumer that the service will consistently meet its defined performance criteria and be available when needed, making it reliable for its intended use.

Why this answer

Warranty in ITIL 4 refers to the assurance that a service will meet agreed-upon conditions, such as availability, capacity, continuity, and security. By ensuring the service is available during agreed hours and performs within agreed capacity levels, the team is directly addressing the warranty aspect of value, which provides confidence in the service's operational reliability.

Exam trap

The trap here is that candidates often confuse utility (what the service does) with warranty (how well it performs), mistakenly thinking that ensuring availability and capacity is part of the service's functionality rather than its operational guarantees.

How to eliminate wrong answers

Option A is wrong because cost in ITIL 4 refers to the financial resources expended on a service, not the operational guarantees of availability or capacity. Option B is wrong because risk involves the potential for negative outcomes or uncertainties, whereas the question describes specific, agreed-upon performance assurances that mitigate risk but are not risk itself. Option C is wrong because utility is the functionality or 'fit for purpose' of a service (what it does), not the 'fit for use' guarantees of availability and capacity that warranty covers.

Full explanation →

100

MCQhard

An organization has implemented a change to update the firewall rules. The change was pre-authorized and followed a predefined procedure. What type of change is this?

A.Standard change

B.Normal change

C.Service request

D.Emergency change

AnswerA

A standard change is a low-risk, pre-authorized change that follows a well-established, documented procedure. Updating a firewall rule, if it's a routine, templated modification (e.g., opening a specific port for a new application following a pre-approved template), perfectly aligns with this definition. Such changes are implemented without needing additional authorization each time, enabling efficient and consistent delivery of common infrastructure modifications.

Why this answer

In ITIL 4, a standard change is a pre-approved, low-risk change that follows a defined procedure. Option A is correct. Option B (normal change) requires authorization through the change advisory board.

Option C (emergency change) is for urgent issues. Option D (service request) is for routine service requests, not changes.

Full explanation →

101

MCQmedium

According to ITIL 4, what is the PRIMARY purpose of the Service Value System (SVS)?

A.To define a set of service desk procedures

B.To replace the ITIL continual improvement model

C.To enable value co-creation through service management

D.To specify the structure of ITIL 4 practices

AnswerC

The primary purpose of the ITIL Service Value System (SVS) is indeed to enable value co-creation through service management. The SVS achieves this by providing a holistic, end-to-end operating model that integrates an organization's guiding principles, governance, service value chain, practices, and continual improvement. This integrated approach ensures that all activities contribute systematically to delivering products and services that realize value for stakeholders.

Why this answer

The Service Value System (SVS) is the core architectural model in ITIL 4 that describes how all components and activities of an organization work together to facilitate value co-creation through service management. It provides a holistic, flexible framework that integrates the guiding principles, governance, service value chain, practices, and continual improvement to enable the creation, delivery, and improvement of services that generate value for stakeholders.

Exam trap

The trap here is that candidates often mistake the SVS for a simple collection of practices or procedures, when in fact it is a strategic, holistic model designed to enable value co-creation by integrating all service management components.

How to eliminate wrong answers

Option A is wrong because the SVS is not limited to defining service desk procedures; it is a comprehensive model that encompasses the entire service management ecosystem, including governance, practices, and the service value chain, not just a single operational function. Option B is wrong because the SVS does not replace the ITIL continual improvement model; rather, the continual improvement model is a key component embedded within the SVS, and the SVS provides the overarching structure that supports and integrates continual improvement. Option D is wrong because the SVS does not specify the structure of ITIL 4 practices; instead, it provides the framework within which practices operate, and the practices themselves are defined separately in the ITIL 4 practice guides.

Full explanation →

102

MCQmedium

An event monitoring system detects that a server's disk usage has reached 85%. Which type of event is this?

A.Exception event

B.Critical event

C.Warning event

D.Informational event

AnswerC

A warning event is correctly identified when a predefined threshold, such as 85% disk usage, has been exceeded, indicating a potential issue that could escalate if not addressed. This type of event serves as an early alert, prompting investigation or proactive action to prevent a more severe incident, without necessarily signifying an immediate failure or critical impact. It allows for timely intervention before service quality is significantly affected.

Why this answer

An event that indicates a threshold has been reached and may require attention or monitoring is classified as a Warning event in ITIL 4. Here, 85% disk usage exceeds typical warning thresholds (e.g., 80%), suggesting potential future risk if usage continues to grow, but does not yet constitute a critical failure. ITIL 4 defines Warning events as those that signify a situation that is not normal but not yet critical, often prompting proactive review or preventive action.

Exam trap

The trap is that candidates may assume any threshold-based alert is 'informational,' but ITIL 4 distinguishes informational events as purely awareness without action, whereas warning events indicate a potential problem that should be monitored or addressed.

How to eliminate wrong answers

Option A is wrong because an exception event indicates an abnormal or unexpected occurrence that deviates from standard operations, such as a service outage or hardware failure, not a routine threshold alert. Option B is wrong because a critical event signifies a situation that requires immediate intervention to prevent service disruption, such as disk usage at 95% or 100%, not 85%. Option C is wrong because a warning event typically alerts that a threshold is approaching a critical level and may require attention soon, but 85% is often considered a standard informational threshold in many monitoring systems, not a warning.

Full explanation →

103

MCQmedium

A service desk analyst receives a call that users cannot access the CRM system. What should they do FIRST according to ITIL 4?

A.Raise a problem record to investigate the root cause

B.Log an incident and attempt to restore service

C.Submit a change request to modify the CRM system

D.Inform the line manager of the issue

AnswerB

Logging an incident is the correct first step as it formally records an unplanned interruption to a service, or a reduction in the quality of a service. The primary objective of incident management is to restore normal service operation as quickly as possible, minimizing business impact. Attempting service restoration directly aligns with this core principle.

Why this answer

According to ITIL 4, the first priority when a service is unavailable is to restore normal service operation as quickly as possible. The service desk analyst must log an incident (a record of an unplanned interruption) and attempt to restore the CRM system access, which aligns with the incident management practice. This immediate action minimizes business impact, whereas root cause analysis or changes come later.

Exam trap

The trap here is that candidates often confuse incident management with problem management, thinking root cause analysis should be the first step, but ITIL 4 prioritizes service restoration over investigation to minimize business disruption.

How to eliminate wrong answers

Option A is wrong because raising a problem record to investigate the root cause is a secondary step that should only occur after the incident is logged and service restoration is attempted; problem management focuses on identifying underlying causes, not immediate recovery. Option C is wrong because submitting a change request to modify the CRM system is premature and risky without first understanding the incident's nature; changes require authorization and should not be the first action for an unplanned outage. Option D is wrong because informing the line manager of the issue delays the critical first step of logging and attempting to restore service; escalation to management is appropriate only if the analyst cannot resolve the incident or if it requires higher-level authorization.

Full explanation →

104

Multi-Selectmedium

Which TWO of the following are components of value according to ITIL 4?

Select 2 answers

A.Outcomes

B.Benefits

C.Outputs

D.Costs

E.Risks

AnswersA, B

In ITIL 4, value is co-created and defined by the perception of stakeholders. Outcomes represent the results achieved by a service consumer that enable them to meet their objectives, often facilitated by a service. These desired results directly contribute to the realization of value, as they address the underlying needs and goals of the consumer, making them a fundamental component of value itself.

Why this answer

In ITIL 4, value is defined as the perceived benefits, usefulness, and importance of something. It is explicitly composed of two components: outcomes (the results achieved for stakeholders) and benefits (the positive gains realized from services). Option A is correct because outcomes are the measurable results that directly contribute to value, such as increased customer satisfaction or reduced downtime.

Exam trap

The trap here is that candidates often confuse 'outputs' with 'outcomes' or mistakenly include 'costs' and 'risks' as components of value, when ITIL 4 explicitly limits the definition to outcomes and benefits only.

Full explanation →

105

MCQmedium

A service provider has a large number of standard, low-risk changes that are requested frequently, such as resetting a password or adding a user to a distribution list. The change manager wants to reduce the administrative burden on the Change Control practice while maintaining an acceptable level of risk. Which approach BEST fits ITIL 4 guidance?

A.Use a pre-authorized standard change model with defined triggers, so these changes can be implemented without individual CAB review.

B.Delegate approval of these changes to the service desk, allowing agents to authorize any change they believe is low risk.

C.Route all changes through the full Change Control practice, including the Change Advisory Board (CAB), to ensure consistent risk assessment.

D.Reclassify all of these changes as incidents so that they can be handled by the Incident Management practice instead.

AnswerA

Standard changes are pre-authorized, low-risk, and well-understood, so they can be implemented using a documented procedure without seeking further authorization each time. This reduces the burden on Change Control while preserving control, because the risk has already been assessed and the model defines exactly when and how the change may proceed.

Why this answer

Standard changes are low-risk, repeatable, and pre-authorized, so they can be implemented through a documented procedure without a CAB decision each time. Defining such a model lets the Change Control practice focus attention on normal and emergency changes, which carry more risk. The other approaches either add unnecessary control, misuse Incident Management, or remove control entirely.

Exam trap

The trap here is assuming that all changes must go through the CAB, when ITIL 4 explicitly recognizes pre-authorized standard changes that bypass individual review.

Full explanation →

106

MCQeasy

What is the PRIMARY purpose of the 'Plan' activity in the ITIL 4 service value chain?

A.To provide a good understanding of stakeholder needs and transparency

B.To ensure a shared understanding of the vision, current status, and improvement direction for all products and services

C.To ensure that services are delivered according to agreed specifications

D.To coordinate and prioritize improvement opportunities

AnswerB

The 'Plan' activity is foundational, establishing a unified strategic direction across the organization for all products and services. It ensures that all stakeholders share a common understanding of the organizational vision, the current state of services, and the overarching direction for future improvements. This activity provides the necessary guidance and constraints for all other service value chain activities, aligning efforts towards value co-creation.

Why this answer

The 'Plan' activity in the ITIL 4 service value chain ensures alignment of strategy, vision, and current status across all products and services. It creates a shared understanding that guides subsequent value chain activities, making option B the correct primary purpose.

Exam trap

The trap here is that candidates confuse the 'Plan' activity with 'Engage' (stakeholder needs) or 'Improve' (prioritizing improvements), but ITIL 4 explicitly assigns shared vision and direction setting to 'Plan' as the central governance activity.

How to eliminate wrong answers

Option A is wrong because providing a good understanding of stakeholder needs and transparency is the primary purpose of the 'Engage' activity, not 'Plan'. Option C is wrong because ensuring services are delivered according to agreed specifications is the primary purpose of the 'Deliver and Support' activity. Option D is wrong because coordinating and prioritizing improvement opportunities is the primary purpose of the 'Improve' activity.

Full explanation →

107

MCQeasy

Which of the following is one of the four dimensions of IT Service Management according to ITIL 4?

A.Service Level Management

B.Organizations and People

C.Incident Management

D.Continual Improvement

AnswerB

This dimension addresses the structure, culture, and capabilities of an organization, along with the roles, responsibilities, and skills of its people. It emphasizes that a successful service value system requires a clear organizational structure, a supportive culture, and competent individuals with the right authority and communication channels to deliver value effectively. This foundational dimension is critical for how an organization operates and delivers services.

Why this answer

'Organizations and People' is explicitly defined in ITIL 4 as one of the four dimensions of service management. These four dimensions—Organizations and People, Information and Technology, Partners and Suppliers, and Value Streams and Processes—ensure a holistic approach to service management by covering all aspects of service delivery. Without the Organizations and People dimension, the human and cultural factors critical to effective service management would be overlooked.

Exam trap

The trap here is that candidates confuse the four dimensions with the ITIL practices (like Incident Management or Service Level Management), or with the guiding principles (like Continual Improvement), because ITIL 4 uses similar terminology for different concepts, leading to a misidentification of what constitutes a dimension.

How to eliminate wrong answers

Option A is wrong because Service Level Management is a practice (a set of activities and processes) within ITIL 4, not a dimension; the four dimensions are high-level perspectives that apply across all practices. Option C is wrong because Incident Management is also a practice, specifically focused on restoring normal service operation as quickly as possible, not a dimension. Option D is wrong because Continual Improvement is a guiding principle and a practice, not one of the four dimensions; the dimensions provide the context in which continual improvement operates.

Full explanation →

108

MCQmedium

An IT department often works in silos, leading to miscommunication. To address this, management starts sharing service performance data across all teams and holds joint planning sessions. Which two ITIL 4 guiding principles are being applied? (Select the option that best pairs them.)

A.Start where you are and Progress iteratively with feedback

B.Collaborate and promote visibility and Think and work holistically

C.Focus on value and Keep it simple and practical

D.Optimise and automate and Focus on value

AnswerB

The principles 'Collaborate and promote visibility' and 'Think and work holistically' directly combat the issues arising from siloed IT departments. 'Collaborate and promote visibility' encourages shared information, joint efforts, and transparency across all relevant stakeholders, directly breaking down communication barriers. 'Think and work holistically' compels departments to consider the entire service ecosystem and understand how their actions impact others, fostering a unified approach and eliminating isolated perspectives on service delivery.

Why this answer

The scenario describes breaking down silos by sharing service performance data (promoting visibility) and holding joint planning sessions (thinking and working holistically). These actions directly align with the ITIL 4 guiding principles 'Collaborate and promote visibility' and 'Think and work holistically', which together address miscommunication and cross-team integration.

Exam trap

The trap here is that candidates often confuse 'Progress iteratively with feedback' with joint planning sessions, but the key distinction is that the scenario emphasizes cross-team data sharing and holistic planning, not iterative feedback loops on individual processes.

How to eliminate wrong answers

Option A is wrong because 'Start where you are' focuses on leveraging existing processes and assets, and 'Progress iteratively with feedback' emphasizes incremental improvement with feedback loops—neither principle directly addresses breaking down silos or sharing data across teams. Option C is wrong because 'Focus on value' centers on delivering outcomes to stakeholders, and 'Keep it simple and practical' advocates for minimal complexity—while valuable, they do not specifically target the root cause of siloed miscommunication. Option D is wrong because 'Optimise and automate' aims to improve efficiency through automation, and 'Focus on value' again misses the collaborative and visibility aspects required to resolve silo-driven issues.

Full explanation →

109

MCQmedium

Which practice includes the 'ITIL continual improvement model' with seven steps?

A.Continual Improvement

B.Change Enablement

C.Service Level Management

D.Problem Management

AnswerA

The Continual Improvement practice explicitly encompasses the ITIL continual improvement model, which provides a structured approach for organizations to improve their services, products, and practices. This model, consisting of seven steps, guides improvement initiatives from "What is the vision?" to "Did we get there?" and "How do we keep the momentum going?". It is central to fostering an organizational culture of ongoing enhancement and value co-creation.

Why this answer

The ITIL continual improvement model is a structured seven-step process (What is the vision?, Where are we now?, Where do we want to be?, How do we get there?, Take action, Did we get there?, How do we keep the momentum going?) that is explicitly defined within the Continual Improvement practice. This practice is the owner of the model, providing the framework for identifying and executing improvements across all other ITIL practices.

Exam trap

The trap here is that candidates confuse the 'continual improvement model' with a generic improvement concept and incorrectly associate it with Problem Management (which also investigates root causes) or Change Enablement (which also involves steps), but only the Continual Improvement practice formally owns and defines the seven-step model.

How to eliminate wrong answers

Option B is wrong because Change Enablement manages the lifecycle of changes (standard, normal, emergency) and does not include the seven-step continual improvement model; its focus is on risk assessment and authorization of changes. Option C is wrong because Service Level Management deals with negotiating, agreeing, and monitoring service level agreements (SLAs) and does not own the seven-step improvement model; it may use the model but does not define it. Option D is wrong because Problem Management focuses on identifying the root cause of incidents and preventing recurrence through known error records and workarounds, not on the seven-step continual improvement model.

Full explanation →

110

MCQmedium

An organization wants to track the lifecycle of its servers, including acquisition, maintenance, and disposal. Which practice should they use?

A.Supplier Management

B.Capacity and Performance Management

C.IT Asset Management

D.Service Configuration Management

AnswerC

IT Asset Management is the practice of planning, acquiring, deploying, managing, and retiring IT assets, including servers, throughout their entire lifecycle. This comprehensive approach encompasses tracking financial aspects like depreciation, contractual details, physical location, and operational status from procurement through to disposal. It directly addresses the organization's need to understand and manage the full journey and value of its servers.

Why this answer

IT Asset Management (ITAM) is the correct practice because it is specifically designed to manage the complete lifecycle of IT assets, including servers, from acquisition through maintenance to disposal. ITAM tracks financial value, contractual agreements (e.g., warranties, leases), and physical status, ensuring compliance and cost optimization across the entire lifecycle.

Exam trap

The trap here is confusing Service Configuration Management (which tracks configuration items and their relationships) with IT Asset Management (which tracks the financial and lifecycle aspects of assets), leading candidates to pick D because they think 'tracking lifecycle' means tracking configuration changes.

How to eliminate wrong answers

Option A is wrong because Supplier Management focuses on managing relationships and contracts with external vendors, not on tracking the internal lifecycle of assets like servers. Option B is wrong because Capacity and Performance Management deals with ensuring current and future performance and capacity demands are met, not with lifecycle tracking of individual hardware assets. Option D is wrong because Service Configuration Management (now part of Service Configuration Management in ITIL 4) manages the configuration items (CIs) and their relationships within the service model, but it does not handle financial tracking, procurement, or disposal processes that are core to asset lifecycle management.

Full explanation →

111

MCQeasy

Which of the following is an example of a 'service request' according to ITIL 4?

A.A team investigates the root cause of recurring network issues

B.A user requests a new laptop, which is pre-approved for new hires

C.A server crashes, causing a major outage

D.A user reports that the email system is slow

AnswerB

This scenario perfectly exemplifies a service request. A service request is a formal request from a user for something standard, pre-defined, and typically low-risk, which follows a pre-established, documented procedure for fulfillment. The request for a pre-approved laptop fits this definition, as it is a standard offering with a known process for new hires.

Why this answer

A service request in ITIL 4 is a standardized, pre-defined request from a user for information, advice, access, or a change that does not require urgent or root-cause analysis. A new laptop for a new hire is a typical example of a standard change that is pre-approved and follows a predefined workflow, aligning with the ITIL 4 definition of a service request as a low-risk, routine request that is handled through a request fulfillment process.

Exam trap

The trap here is that candidates often confuse a service request with an incident, especially when the request involves a change (like a new laptop), but ITIL 4 clearly separates standard changes (pre-approved, low-risk) from incidents (unplanned service interruptions) and problems (root cause analysis).

How to eliminate wrong answers

Option A is wrong because investigating the root cause of recurring network issues is an incident management activity (specifically problem management) aimed at identifying the underlying cause of incidents, not a service request. Option C is wrong because a server crash causing a major outage is an incident (a major incident) that requires immediate restoration of service, not a service request. Option D is wrong because a user reporting that the email system is slow is an incident (a degradation of service) that needs to be logged and resolved under incident management, not a service request.

Full explanation →

112

MCQmedium

Which component of the ITIL 4 Service Value System is responsible for providing guidance on how the organization should direct its efforts?

A.Service value chain

B.Guiding principles

C.Governance

D.Practices

AnswerC

Governance directs the organisation through evaluation, direction and monitoring, setting the strategy and policies that align all value chain activities with business objectives. It provides the guiding constraints and decision-making authority that steer how the organisation invests effort, satisfying the stem's requirement for direction of effort.

Why this answer

Governance is the component of the ITIL 4 Service Value System (SVS) that evaluates, directs, and monitors the organization's activities. It provides the framework for decision-making and ensures that the organization's efforts are aligned with its strategic objectives and stakeholder needs. Without governance, there would be no authoritative guidance on how to prioritize or steer service management activities.

Exam trap

The trap here is that candidates confuse 'guiding principles' (which are advisory) with 'governance' (which is authoritative and directive), leading them to select Option B when the question explicitly asks for the component that 'directs' efforts.

How to eliminate wrong answers

Option A is wrong because the service value chain is a set of interconnected activities (plan, improve, engage, design & transition, obtain/build, deliver & support) that describe how to create value, not how to direct the organization's efforts. Option B is wrong because guiding principles (e.g., focus on value, start where you are) are recommendations that guide decision-making but do not provide the authoritative direction or control that governance does. Option D is wrong because practices (e.g., incident management, change enablement) are sets of organizational resources for performing work, not the mechanism for directing overall organizational effort.

Full explanation →

113

MCQmedium

Which component of the ITIL 4 Service Value System ensures that the organization's activities are aligned with its objectives and that there is proper oversight?

A.Guiding principles

B.Governance

C.Continual improvement

D.Service value chain

AnswerB

Governance is the Service Value System component that directs and controls the organisation, ensuring activities align with objectives through oversight, accountability and compliance. It evaluates, directs and monitors, providing the steering that other components such as the value chain lack.

Why this answer

Governance is the component of the ITIL 4 Service Value System (SVS) that specifically ensures organizational activities are aligned with objectives and that proper oversight exists. It defines the framework for decision-making, accountability, and control, enabling the organization to evaluate, direct, and monitor its service management practices. Without governance, activities may drift from strategic goals and lack the necessary checks and balances.

Exam trap

Candidates often confuse 'Guiding principles' (Option A) with governance because both involve direction, but guiding principles are broad cultural guidelines, not a formal oversight mechanism. The ITIL exam tests this distinction by making the principles sound like they 'align activities' when they actually only provide general advice.

How to eliminate wrong answers

Option A is wrong because guiding principles are universal recommendations that guide an organization in all circumstances, but they do not provide the formal oversight or alignment mechanism that governance does; they inform behavior rather than enforce alignment. Option C is wrong because continual improvement is a recurring organizational activity focused on improving products, services, and practices, but it is not responsible for overall alignment with objectives or oversight—it operates within the governance framework. Option D is wrong because the service value chain is an operating model that outlines the key activities (plan, improve, engage, design & transition, obtain/build, deliver & support) required to respond to demand and facilitate value creation, but it does not itself ensure alignment with objectives or provide oversight; it is directed and controlled by governance.

Full explanation →

114

MCQhard

An organization receives a request to install a standard software package on a user's laptop. The request is pre-approved, and the installation takes 20 minutes. According to ITIL 4, what type of request is this?

A.Incident

B.Problem

C.Standard change

D.Service request

AnswerD

A service request is a formal request from a user or user's authorized representative for something that is a normal part of service delivery, typically a pre-defined, routine, and low-risk action. Installing standard software perfectly fits this definition, as it is a common, repeatable activity that organizations provide to users as part of their service catalog. The Service Request practice is designed to fulfill these requests efficiently and effectively, often with automated workflows.

Why this answer

This is a service request because it involves a pre-approved, standard request from a user for information, advice, or access to a service—specifically, the installation of a standard software package. ITIL 4 defines a service request as a formal request from a user for something to be provided, such as access to an application or a standard change that follows a predefined procedure, which does not require urgent incident management or root cause analysis.

Exam trap

The trap here is that candidates confuse a standard change with a service request, but ITIL 4 explicitly categorizes user requests for standard software installation as service requests, not changes, to emphasize the user-facing nature and the predefined fulfillment path.

How to eliminate wrong answers

Option A is wrong because an incident is an unplanned interruption or reduction in quality of an IT service, not a pre-approved installation request. Option B is wrong because a problem is the root cause of one or more incidents, not a routine user request for software installation. Option C is wrong because while a standard change is a pre-approved, low-risk change, ITIL 4 specifically categorizes user requests for standard software installation as service requests, not as change requests, to streamline the fulfillment process.

Full explanation →

115

Multi-Selecthard

Which THREE of the following are factors in the PESTLE model?

Select 3 answers

A.Legal

B.Cultural

C.Social

D.Operational

E.Political

AnswersA, C, E

The Legal factor in PESTLE analysis encompasses the laws, regulations, and legal frameworks that impact an organization's operations and services. This includes consumer protection laws, data privacy regulations like GDPR, employment laws, and industry-specific compliance requirements. Understanding these legal obligations is critical for ensuring service compliance, mitigating risks, and avoiding penalties, directly influencing how services are designed and delivered.

Why this answer

Legal is one of the six factors in the PESTLE model, which stands for Political, Economic, Social, Technological, Legal, and Environmental. In ITIL 4, the PESTLE model is used within the 'Four Dimensions of Service Management' to analyze external factors that can impact an organization's service management strategy. Legal factors include laws, regulations, and compliance requirements that directly affect IT service delivery, such as GDPR or data protection acts.

Exam trap

The trap here is that candidates often confuse 'Cultural' with 'Social' or assume 'Operational' is a PESTLE factor because it sounds like a common business consideration, but ITIL 4 strictly defines the six PESTLE categories as Political, Economic, Social, Technological, Legal, and Environmental.

Full explanation →

116

MCQmedium

A company uses an external provider for email services. Which of the following costs is typically removed from the consumer (company) and borne by the provider?

A.The cost of training employees on how to use email

B.The cost of purchasing and maintaining email servers

C.The cost of user support for password resets

D.The cost of internet connectivity

AnswerB

By engaging an external provider for email services, the company effectively transfers the operational burden and capital expenditure associated with the underlying infrastructure. The external provider assumes full responsibility for acquiring, housing, powering, cooling, patching, and maintaining the physical and virtual servers, storage, and network components necessary to deliver the email service. This transfer of infrastructure ownership and management is a primary driver for outsourcing such services.

Why this answer

When a company uses an external provider for email services (SaaS model), the provider is responsible for the underlying infrastructure. The cost of purchasing and maintaining email servers is a capital and operational expense that shifts from the consumer to the provider, as the provider owns and manages the hardware, storage, and server software (e.g., Microsoft Exchange Online or Google Workspace). This aligns with the ITIL 4 concept of utility and warranty, where the provider ensures availability and capacity without the consumer incurring direct hardware costs.

Exam trap

The trap here is that candidates confuse 'costs removed from the consumer' with 'costs that are reduced or shared,' leading them to select options like user support or training, which remain consumer-side responsibilities even in a fully outsourced email service.

How to eliminate wrong answers

Option A is wrong because training employees on how to use email remains a consumer responsibility; the provider delivers the service but does not train end users on client applications (e.g., Outlook or Gmail interface). Option C is wrong because user support for password resets is typically a shared or consumer-side activity, often handled by the consumer's IT service desk or identity management system (e.g., Azure AD self-service password reset), not the email provider. Option D is wrong because internet connectivity is a separate utility cost borne by the consumer to access the provider's service; the provider does not cover the consumer's ISP or network access fees.

Full explanation →

117

MCQeasy

Which ITIL 4 concept describes the perceived benefits, usefulness, and importance of a service to stakeholders?

A.Utility

B.Value

C.Outcome

D.Warranty

AnswerB

Value, within the ITIL 4 framework, is defined as the perceived benefits, usefulness, and importance of something. It is a subjective concept, co-created through the interaction between service providers and consumers, encompassing both tangible and intangible benefits. Value represents the overall worth or significance that stakeholders attribute to a product, service, or other output, directly addressing the question's focus on "perceived benefits and usefulness."

Why this answer

Value is the core concept in ITIL 4 that defines the perceived benefits, usefulness, and importance of a service to stakeholders. It is co-created through the use of the service and is central to the Service Value System (SVS), where all activities are directed toward delivering value. Utility (fit for purpose) and Warranty (fit for use) are components that contribute to value, but they do not themselves describe the perceived benefits or importance.

Exam trap

The trap here is that candidates often confuse Utility or Warranty with Value, because ITIL 4 defines Utility and Warranty as components that contribute to value, but the question specifically asks for the concept that describes the perceived benefits, usefulness, and importance—which is Value itself.

How to eliminate wrong answers

Option A is wrong because Utility refers specifically to the functionality offered by a service to meet a user's need (fit for purpose), not the perceived benefits or importance to stakeholders. Option C is wrong because an Outcome is a result for a stakeholder enabled by one or more outputs, not the perception of benefits, usefulness, or importance. Option D is wrong because Warranty describes the assurance that a service will meet agreed requirements (fit for use), such as availability, capacity, security, and continuity, not the perceived value.

Full explanation →

118

MCQhard

A user requests a new laptop because their current one is slow. The request is for a standard configuration. How should this be handled?

A.As a change request

B.As a service request

C.As an incident

D.As a problem

AnswerB

A service request represents a formal request from a user for something that is a normal part of service delivery, typically a pre-defined and pre-approved offering from the service catalog. Requesting a new laptop, especially when it's a standard model provided by the organization, falls squarely into this category. These requests are usually low-risk, frequently occurring, and follow established workflows for fulfillment, often with automated or semi-automated processes.

Why this answer

A standard laptop request is a pre-approved, low-risk service request handled through the service request fulfillment process, not the change enablement process. Service requests are user-initiated requests for information, advice, or a standard change, and they follow a defined workflow with approval and fulfillment steps. Because the configuration is standard, it does not require assessment by a change advisory board.

Exam trap

ITIL4F often tests the confusion between incidents and service requests, especially when a user reports a symptom (slow laptop) that sounds like a fault but is actually a request for a new standard item.

How to eliminate wrong answers

Option A is wrong because a change request is for modifying a service or infrastructure component that is not a pre-approved standard change; a standard laptop is already authorized. Option C is wrong because an incident is an unplanned interruption or degradation of a service, whereas the user's slow laptop is a request for a new asset, not a service outage. Option D is wrong because a problem is the underlying cause of one or more incidents, and no incident has been logged for a service failure.

Full explanation →

119

MCQmedium

Which ITIL 4 guiding principle is being applied when a team decides to review and use the existing incident management process rather than designing a new one from scratch?

A.Progress iteratively with feedback

B.Start where you are

C.Focus on value

D.Keep it simple and practical

AnswerB

The 'Start where you are' principle explicitly mandates assessing the current state and leveraging existing services, processes, people, and tools whenever possible. It encourages organizations to avoid starting from scratch by identifying and utilizing what is already proven and available, thereby preventing unnecessary duplication of effort and resources. This direct focus on evaluating and incorporating existing assets makes it the most relevant principle for promoting reuse.

Why this answer

The 'Start where you are' guiding principle is applied because the team leverages the existing incident management process rather than building a new one from scratch. This principle emphasizes assessing and building upon current capabilities, services, and processes to avoid unnecessary rework and loss of existing value. By reviewing and using the current process, the team directly follows this principle's core directive of measuring and using what already exists.

Exam trap

The trap here is that candidates confuse 'Start where you are' with 'Keep it simple and practical' because both involve avoiding unnecessary complexity, but the key distinction is that 'Start where you are' specifically mandates using existing assets as the foundation, not just simplifying a new design.

How to eliminate wrong answers

Option A is wrong because 'Progress iteratively with feedback' focuses on making continuous improvements through small, incremental steps and incorporating feedback, not on reusing an existing process as-is. Option C is wrong because 'Focus on value' directs attention to delivering outcomes that are meaningful to stakeholders, but the decision to reuse a process is about leveraging existing assets, not directly about value definition or delivery. Option D is wrong because 'Keep it simple and practical' advocates for minimizing complexity and eliminating unnecessary steps, but the team's action of reusing an existing process does not inherently address simplification or practicality—it is about starting from the current state.

Full explanation →

120

MCQmedium

What is the relationship between a Configuration Management Database (CMDB) and IT Asset Management?

A.IT Asset Management provides financial data for CIs in the CMDB

B.The CMDB replaces IT Asset Management

C.They are the same practice

D.IT Asset Management is a subset of Service Configuration Management

AnswerA

IT Asset Management (ITAM) is responsible for tracking the financial and contractual aspects of IT assets throughout their lifecycle, including acquisition cost, depreciation, warranty information, and end-of-life dates. This crucial financial and lifecycle data is then integrated with Configuration Items (CIs) within the Configuration Management Database (CMDB). This integration enriches the CMDB's technical view with vital business context, enabling better decision-making regarding asset utilization and investment.

Why this answer

IT Asset Management (ITAM) is a broader practice that tracks the financial, contractual, and lifecycle aspects of assets, while the CMDB focuses on configuration items (CIs) and their relationships to support service delivery. In ITIL 4, ITAM feeds financial and ownership data—such as cost, depreciation, and license status—into the CMDB so that CIs have complete lifecycle context. This integration ensures that configuration records reflect both technical and financial attributes, supporting better decision-making across service value streams.

Exam trap

ITIL4F often tests the misconception that CMDB and ITAM are interchangeable or that one subsumes the other, when in fact they are complementary practices with distinct but overlapping responsibilities.

How to eliminate wrong answers

Option B is wrong because the CMDB does not replace ITAM; the two practices serve complementary purposes—CMDB manages configuration relationships while ITAM manages asset lifecycle and financial data. Option C is wrong because ITIL 4 treats Service Configuration Management and IT Asset Management as distinct practices with different scopes, even though they overlap. Option D is wrong because ITAM is not a subset of Service Configuration Management; rather, ITAM is a separate practice that provides financial and contractual data that enriches the CMDB.

Full explanation →

121

Multi-Selectmedium

Which TWO of the following scenarios best illustrate the 'Think and work holistically' guiding principle?

Select 2 answers

A.The service desk solves incidents without documenting root causes.

B.The IT team focuses only on their own department's goals and ignores the needs of the business.

C.The service design team works with operations, security, and finance to ensure the service meets all requirements.

D.A change is made to the database server without considering how it affects the application layer.

E.When updating a service, the team considers the impact on all other services and stakeholders.

AnswersC, E

This scenario exemplifies holistic thinking by demonstrating cross-functional collaboration across different organizational dimensions (e.g., 'Organizations and people,' 'Information and technology,' 'Partners and suppliers,' and implicitly 'Value streams and processes'). By involving operations (how it runs), security (how it's protected), and finance (how it's funded and delivers value), the design team ensures that the service is considered from multiple perspectives, addressing all requirements and potential impacts throughout its lifecycle.

Why this answer

The 'Think and work holistically' guiding principle in ITIL 4 means understanding how all parts of an organization and its services interconnect and work together as a whole system. Option C is correct because the service design team collaborating with operations, security, and finance demonstrates cross-functional integration, ensuring the service meets all requirements rather than being designed in isolation. Option E is correct because considering the impact of a service update on all other services and stakeholders reflects a holistic view of how changes ripple across the entire service ecosystem.

Option A is incorrect because solving incidents without documenting root causes is a siloed, reactive approach that ignores systemic learning and improvement. Option B is incorrect because focusing only on one department's goals while ignoring business needs is the opposite of holistic thinking, which requires alignment across the whole organization. Option D is incorrect because changing a database server without considering the application layer shows a narrow, component-level view rather than understanding interdependencies.

Exam trap

The trap here is that candidates often confuse 'holistic thinking' with simply 'working with other teams' (Option C) but fail to recognize that Option E is also correct because it explicitly considers the impact on all other services and stakeholders, which is the essence of holistic thinking—both options are correct, and the question asks for TWO.

Full explanation →

122

MCQeasy

A retail company is experiencing frequent service outages during peak hours due to insufficient capacity. The IT team wants to implement a practice that ensures the service provider has the capacity to meet agreed service level targets cost-effectively and in a timely manner. Which ITIL management practice should they use?

A.Monitoring and event management

B.Capacity and performance management

C.Availability management

D.Service level management and availability management

AnswerB

Capacity and availability management is the best answer because it addresses capacity, which is the core requirement of the question. Note that the exact ITIL 4 practice name is Capacity and performance management, but among the options, this is the most appropriate.

Why this answer

In ITIL 4, the practice that ensures the service provider has sufficient capacity to meet agreed service level targets cost-effectively and in a timely manner is Capacity and performance management. Option B represents this practice. Option A (Monitoring and event management) focuses on detecting events, not capacity planning.

Option C (Availability management) focuses on availability, not capacity. Option D (Service level management and availability management) covers service levels and availability but not capacity. Therefore, B is correct.

Full explanation →

123

Multi-Selectmedium

Which TWO of the following are key activities of Problem Management?

Select 2 answers

A.Conducting root cause analysis

B.Authorizing changes to resolve incidents

C.Restoring normal service as quickly as possible

D.Managing service requests from users

E.Identifying problems from incidents

AnswersA, E

Root cause analysis (RCA) is a fundamental activity within problem management, specifically falling under the 'problem control' phase. Its purpose is to systematically investigate and determine the underlying causes of one or more incidents, preventing their recurrence. By identifying the true origin of issues, problem management can develop effective workarounds and permanent solutions, thereby reducing the impact and frequency of future service disruptions. This proactive approach is crucial for improving service stability and reliability.

Why this answer

Problem management includes problem identification and root cause analysis (problem control). Restoring service is incident management, and managing changes is change enablement.

Full explanation →

124

MCQmedium

A team is designing a new service. They ensure that they have regular feedback sessions with users after each release and plan their work in two-week sprints. Which ITIL 4 guiding principle is being applied?

A.Collaborate and promote visibility

B.Keep it simple and practical

C.Progress iteratively with feedback

D.Start where you are

AnswerC

"Progress iteratively with feedback" is the correct principle because it directly addresses the need for designing a new service through manageable steps, continuously learning, and adapting. This principle dictates that work should be broken into smaller, repeatable iterations, with each cycle incorporating feedback from stakeholders and users. This allows for continuous refinement, risk reduction, and ensures the service design evolves effectively to meet requirements and deliver value.

Why this answer

The team is applying the 'Progress iteratively with feedback' guiding principle. By organizing work into two-week sprints and holding regular feedback sessions after each release, they are breaking the service design into manageable iterations and using user feedback to guide subsequent improvements. This aligns with the ITIL 4 principle that emphasizes incremental delivery and continuous learning through feedback loops.

Exam trap

The trap here is that candidates may confuse 'Progress iteratively with feedback' with 'Collaborate and promote visibility' because both involve user interaction, but the key differentiator is the structured, time-boxed iteration (sprints) explicitly tied to feedback loops, not just general collaboration.

How to eliminate wrong answers

Option A is wrong because 'Collaborate and promote visibility' focuses on cross-team cooperation and transparency, not on the iterative cycle of sprints and feedback sessions. Option B is wrong because 'Keep it simple and practical' advocates for minimizing complexity and avoiding over-engineering, but the described sprint-based approach is about iterative progress, not simplicity. Option D is wrong because 'Start where you are' means leveraging existing processes and assets rather than building from scratch, but the scenario does not mention any assessment of current state or reuse of existing components.

Full explanation →

125

MCQmedium

An organization decides to outsource its IT support to a third-party provider. Which ITIL 4 dimension is primarily affected by this decision?

A.Value Streams and Processes

B.Partners and Suppliers

C.Organizations and People

D.Information and Technology

AnswerB

Outsourcing IT support directly and fundamentally impacts the 'Partners and Suppliers' dimension, as it involves establishing or modifying relationships with external organizations that contribute to the design, development, delivery, support, and continual improvement of services. This dimension specifically addresses the interactions and agreements with third parties, making it the most relevant consideration when an organization decides to engage an external provider for service delivery. The very act of outsourcing is a decision rooted in this dimension.

Why this answer

The decision to outsource IT support directly involves engaging a third-party provider, which falls under the 'Partners and Suppliers' dimension of ITIL 4. This dimension covers relationships with external organizations that provide services or resources, including suppliers, manufacturers, and vendors. The other dimensions (Value Streams and Processes, Organizations and People, Information and Technology) are affected indirectly but are not the primary focus of an outsourcing decision.

Exam trap

The trap here is that candidates often confuse the 'Partners and Suppliers' dimension with 'Organizations and People' because outsourcing involves people, but the primary dimension affected is the external relationship, not the internal workforce structure.

How to eliminate wrong answers

Option A is wrong because 'Value Streams and Processes' focuses on how activities are coordinated to create value, not on the external sourcing of services; outsourcing may change processes but the primary dimension affected is the relationship with external parties. Option C is wrong because 'Organizations and People' deals with internal roles, culture, and competencies, not with the selection or management of external service providers. Option D is wrong because 'Information and Technology' covers data, applications, and infrastructure, not the contractual or relational aspects of outsourcing to a third party.

Full explanation →

126

Multi-Selecteasy

Which TWO of the following are types of events in the Monitoring and Event Management practice?

Select 2 answers

A.Known error

B.Standard change

C.Warning event

D.Service request

E.Informational event

AnswersC, E

A warning event signals that a threshold is approaching or has been breached, prompting investigation before a full exception occurs. It satisfies the stem by being one of the recognised event types, alongside informational and exception events.

Why this answer

In the Monitoring and Event Management practice, events are classified by their significance and required response, and two recognized event types are the warning event (C) and the informational event (E). A warning event (C) is correct because it signals that a component or service is approaching a threshold or condition that may require attention before it becomes a breach, such as high CPU or low disk space. An informational event (E) is correct because it simply records a normal, expected occurrence—like a device coming online or a job completing—that requires no action.

The other options do not belong: a known error (A) is a problem record whose root cause is documented, a standard change (B) is a pre-authorized low-risk change, and a service request (D) is a user-initiated request handled by the Service Request Management practice—none of these are event types in Monitoring and Event Management.

Exam trap

ITIL4F often tests the confusion between event types (informational, warning, exception) and other ITIL concepts like known errors, standard changes, and service requests, which belong to different practices.

Full explanation →

127

MCQhard

An organization identifies that a recurring incident is due to a known error in a software component. According to ITIL 4, which practice is responsible for managing the known error?

A.Service Level Management

B.Incident Management

C.Change Enablement

D.Problem Management

AnswerD

Problem Management is the correct practice as it specifically focuses on reducing the likelihood and impact of incidents by identifying actual and potential causes of incidents, and managing workarounds and known errors. When an organization identifies a recurring incident and determines its root cause, it becomes a "known error." Problem Management's "Error Control" activity is precisely responsible for managing these known errors throughout their lifecycle, ensuring that the underlying cause is addressed and future incidents are prevented or minimized.

Why this answer

Problem Management because ITIL 4 assigns the responsibility for managing known errors to the Problem Management practice. A known error is a problem that has been analyzed and has a documented root cause and a potential workaround, and Problem Management is the practice that owns the known error database (KEDB) and coordinates the lifecycle of known errors until a permanent fix is implemented via Change Enablement.

Exam trap

The trap here is that candidates confuse Incident Management's use of the KEDB with ownership of known errors, but ITIL 4 explicitly assigns the known error lifecycle to Problem Management, not to the practice that merely consumes the data.

How to eliminate wrong answers

Option A is wrong because Service Level Management is responsible for negotiating, agreeing, and monitoring service level agreements (SLAs), not for managing technical defects like known errors. Option B is wrong because Incident Management focuses on restoring normal service operation as quickly as possible for individual incidents, but it does not own the long-term analysis or documentation of known errors; it may use the KEDB but does not manage it. Option C is wrong because Change Enablement controls the lifecycle of changes (e.g., deploying a fix), but it does not perform the root cause analysis or maintain the known error record; it is a downstream practice that implements solutions identified by Problem Management.

Full explanation →

128

MCQhard

Which of the following best distinguishes a service request from an incident?

A.Service requests are logged by users; incidents are logged by IT staff

B.Service requests are always fulfilled by self-service; incidents require human intervention

C.Service requests are for planned, pre-approved actions; incidents are unplanned interruptions

D.Service requests have a shorter resolution time than incidents

AnswerC

This option correctly identifies the primary distinction between service requests and incidents according to ITIL 4. Service requests are typically pre-defined, standard, and often pre-approved actions that fulfill a user's need, such as requesting access to a system or a standard piece of equipment. In contrast, an incident is an unplanned interruption to a service or a reduction in the quality of a service, requiring prompt restoration to normal operation.

Why this answer

ITIL 4 defines a service request as a formal request from a user for something to be provided – for example, access to an application or a password reset – which is typically pre-approved and follows a standard procedure. An incident, by contrast, is an unplanned interruption to a service or a reduction in its quality, such as a server crash or a network outage. This distinction is fundamental to the ITIL Service Value System, as it drives different handling workflows, prioritization, and escalation paths.

Exam trap

The trap here is that candidates confuse the 'unplanned' nature of incidents with 'unplanned' work in general, forgetting that service requests are always for planned, pre-approved actions, while incidents are defined strictly as unplanned interruptions or reductions in service quality.

How to eliminate wrong answers

Option A is wrong because both service requests and incidents can be logged by users or IT staff; ITIL does not restrict who logs them. Option B is wrong because service requests can be fulfilled through various channels, including assisted service desk calls, not exclusively self-service; conversely, incidents may sometimes be resolved via automated scripts without human intervention. Option D is wrong because resolution time is not a defining characteristic – a complex service request (e.g., provisioning a new server) can take longer than a simple incident (e.g., a password reset), and ITIL does not use time as a classification criterion.

Full explanation →

129

MCQeasy

Which ITIL 4 concept describes the functionality of a service offered to meet a specific need?

A.Warranty

B.Outcome

C.Output

D.Utility

AnswerD

Utility describes the functionality offered by a service to meet a particular need, determining whether the service is 'fit for purpose'. It addresses what the service does and whether it supports the performance of a task or the achievement of an objective. This concept directly defines the specific features, functions, and performance characteristics that enable the user to achieve their desired results, making it the direct answer for describing the functionality of a service.

Why this answer

Utility is the ITIL 4 concept that defines the functionality of a service—what the service does to meet a specific customer need. It addresses the 'fit for purpose' aspect, ensuring the service delivers the required features or capabilities to achieve a desired outcome.

Exam trap

Candidates often confuse utility and warranty. Utility addresses 'fit for purpose' (functionality to meet a need), while warranty addresses 'fit for use' (reliability, availability, etc.). The question explicitly asks about functionality, so utility is correct.

How to eliminate wrong answers

Option A is wrong because warranty describes the assurance that a service will meet agreed-upon performance levels (availability, capacity, continuity, security), not its functionality. Option B is wrong because outcome refers to the result or benefit realized by the customer from using the service, not the service's inherent functionality. Option C is wrong because output is a tangible or intangible deliverable produced by a service activity (e.g., a report or processed transaction), not the overall functionality that meets a specific need.

Full explanation →

130

MCQmedium

Which ITIL 4 practice involves classifying events as informational, warning, or exception?

A.Problem Management

B.Service Desk

C.Incident Management

D.Monitoring and Event Management

AnswerD

Monitoring and Event Management is the ITIL 4 practice specifically designed to systematically observe services and service components, recording and reporting selected changes of state identified as events. A fundamental activity within this practice is the classification of these events into meaningful categories, such as informational (no action needed), warning (potential issue), or exception (requires action), to enable appropriate automated or manual responses.

Why this answer

The Monitoring and Event Management practice is specifically responsible for monitoring IT services and categorizing events into three types: informational (routine notifications), warning (conditions that may require attention), and exception (significant deviations requiring immediate action). This classification enables appropriate responses based on the event's severity and impact on service availability.

Exam trap

The trap here is that candidates confuse the event classification step with Incident Management, but ITIL 4 explicitly assigns the classification of events (informational, warning, exception) to the Monitoring and Event Management practice, not to the incident lifecycle.

How to eliminate wrong answers

Option A is wrong because Problem Management focuses on identifying the root cause of incidents and preventing recurrence, not on classifying real-time events into informational, warning, or exception categories. Option B is wrong because the Service Desk acts as the single point of contact for users reporting incidents or service requests, and does not perform event classification or monitoring. Option C is wrong because Incident Management handles the lifecycle of unplanned interruptions or service reductions, but event classification occurs before an incident is declared, as part of the monitoring and detection process.

Full explanation →

131

Multi-Selectmedium

Which TWO of the following are part of the 'Organisations and People' dimension?

Select 2 answers

A.Contracts and agreements

B.Roles and skills

C.Data and information

D.Tools and technology

E.Culture and behaviour

AnswersB, E

Roles and skills are fundamental components of the "Organizations and People" dimension, as they define the necessary competencies and responsibilities required within an organization to effectively manage services. Establishing clear roles ensures accountability and efficient workflow, while developing appropriate skills empowers individuals to perform their tasks and contribute to value co-creation. This dimension emphasizes the human element and organizational structure essential for service delivery.

Why this answer

The 'Organisations and People' dimension of ITIL 4 focuses on the roles, responsibilities, authority structures, and the culture and behaviour of people within the organization. Option B (Roles and skills) is correct because defining clear roles and ensuring the necessary skills are available is fundamental to this dimension. Option E (Culture and behaviour) is correct because the shared values, attitudes, and behaviours of people directly influence how work is performed and how services are managed.

Exam trap

The trap here is that candidates often confuse 'Contracts and agreements' with internal organizational governance, but ITIL 4 explicitly places them under the 'Partners and Suppliers' dimension, not 'Organisations and People'.

Full explanation →

132

MCQmedium

Which ITIL practice involves negotiating, agreeing, and monitoring service level targets?

A.Incident Management

B.Supplier Management

C.Service Level Management

D.Service Desk

AnswerC

Service Level Management is the practice of setting clear business-based targets for service performance, and ensuring that delivery of services is properly assessed, monitored, and managed against these targets. This practice explicitly involves negotiating service level agreements (SLAs) with customers to define measurable service outcomes, agreeing upon these targets, and then continuously monitoring and reporting on actual service performance against the agreed levels to ensure value co-creation and customer satisfaction.

Why this answer

Service Level Management (SLM) is the ITIL practice responsible for negotiating, agreeing, and monitoring service level targets. It ensures that IT services meet the agreed-upon levels of performance and availability as documented in Service Level Agreements (SLAs). SLM is a core practice in ITIL 4 and directly aligns with the question's description.

Exam trap

The trap is confusing Service Level Management with Incident Management or Service Desk—candidates may pick Incident Management because it deals with service issues, but the key differentiator is that SLM negotiates and monitors targets, while Incident Management resolves disruptions.

How to eliminate wrong answers

Option A is wrong because Incident Management focuses on restoring normal service operation as quickly as possible after an incident, not on negotiating or monitoring service level targets. Option B is wrong because Supplier Management handles relationships with external suppliers and ensuring they meet contractual obligations, not the overall service level targets with customers. Option D is wrong because the Service Desk is the single point of contact for users to report issues and request services, but it does not negotiate or monitor SLAs—that is the role of SLM.

Full explanation →

133

MCQeasy

What is the role of the Service Desk according to ITIL 4?

A.To manage changes

B.To negotiate SLAs

C.To be the single point of contact for users

D.To perform root cause analysis

AnswerC

The Service Desk serves as the crucial single point of contact (SPOC) between the service provider and its users. This means users have one consistent channel for logging incidents, requesting services, and making inquiries, streamlining communication and improving user experience. By centralizing these interactions, the Service Desk ensures efficient routing, tracking, and resolution of all user-initiated contacts, embodying its core ITIL 4 purpose.

Why this answer

In ITIL 4, the Service Desk is defined as the single point of contact (SPOC) between the service provider and users. It handles incidents, service requests, and communication, ensuring users have one place to go for support. This SPOC role is the foundational definition of the Service Desk in ITIL.

Exam trap

ITIL4F often tests the precise ITIL definition of the Service Desk as the single point of contact — candidates may confuse it with Change Management, SLM, or Problem Management responsibilities.

How to eliminate wrong answers

Option A is wrong because managing changes is the responsibility of Change Enablement (formerly Change Management), not the Service Desk. Option B is wrong because negotiating SLAs is typically the role of Service Level Management, not the Service Desk. Option C is correct — the Service Desk is the SPOC for users.

Option D is wrong because root cause analysis is part of Problem Management, not the Service Desk's core role.

Full explanation →

134

Multi-Selecthard

Which THREE of the following are key activities of the Problem Management practice?

Select 3 answers

A.Problem identification

B.Error control

C.Change authorization

D.Problem control

E.Incident resolution

AnswersA, B, D

Problem identification is a foundational activity in Problem Management, focusing on detecting and logging potential problems. This often involves analyzing incident trends, reviewing monitoring alerts, or receiving direct reports from users and technical staff to proactively identify recurring issues and their root causes.

Why this answer

Problem identification (A) is a core Problem Management activity because it detects and logs problems — often by analyzing incident trends and recurring patterns — so their root causes can be investigated. Error control (B) is correct because it covers managing known errors throughout their lifecycle, including recording them in the known error database, assessing workarounds, and tracking them until a permanent fix is implemented. Problem control (D) is correct because it is the activity of investigating and analyzing problems to determine root causes and identify permanent solutions.

Change authorization (C) belongs to Change Enablement (change control), which assesses and authorizes changes, not to Problem Management. Incident resolution (E) belongs to Incident Management, whose goal is to restore service quickly, whereas Problem Management focuses on eliminating the underlying causes of incidents.

Exam trap

The trap here is that candidates confuse the activities of Incident Management (like Incident Resolution) with Problem Management, or mistake Change Authorization as part of Problem Management, when it strictly belongs to Change Enablement.

Full explanation →

135

Multi-Selectmedium

Which THREE of the following are triggers for the Service Value System to produce value?

Select 3 answers

A.Demand

B.A new regulation

C.Opportunity

D.Budget approval

E.Incident reports

AnswersA, B, C

Demand represents the need or desire for products and services from consumers, acting as a fundamental trigger for the Service Value System (SVS). Organizations exist to create value by addressing these needs, prompting the SVS to design, deliver, and improve services that fulfill this demand. This proactive response ensures that resources are aligned to meet market requirements effectively, leading to value co-creation.

Why this answer

Demand is a correct trigger because the Service Value System (SVS) is activated when there is a need for services from customers or users. In ITIL 4, demand represents the requirement for value in the form of products or services, which initiates the entire value stream and value chain activities to produce outcomes.

Exam trap

The trap here is that candidates confuse operational inputs (like incident reports or budget approvals) with the high-level triggers that initiate the entire Service Value System, which are specifically demand, opportunity, and external requirements such as regulations.

Full explanation →

136

MCQeasy

Which dimension of IT Service Management focuses on the culture, roles, and skills needed to deliver services?

A.Organisations and People

B.Information and Technology

C.Partners and Suppliers

D.Value Streams and Processes

AnswerA

The Organisations and People dimension directly addresses the culture, roles, and skills required to deliver services, as specified in the stem. This dimension ensures that the service provider’s structure, decision-making authority, and competency development align with the service value system. By focusing on human factors rather than processes or technology, it satisfies the constraint of defining the workforce and behavioural elements necessary for service management.

Why this answer

The 'Organisations and People' dimension is correct because it specifically addresses the human aspects of service management, including organizational culture, the structure of teams, and the competencies and roles required to design, deliver, and improve services. In ITIL 4, this dimension ensures that the right people with the right skills are in place and that the culture supports collaboration and continuous improvement, which is critical for effective service delivery.

Exam trap

The trap here is that candidates often confuse 'Organisations and People' with 'Value Streams and Processes' because they assume culture and roles are part of process definitions, but ITIL 4 separates them to emphasize that people and culture must be deliberately designed, not just assumed by process documentation.

How to eliminate wrong answers

Option B (Information and Technology) is wrong because it focuses on the data, applications, and infrastructure used to deliver services, not on the culture, roles, or skills of people. Option C (Partners and Suppliers) is wrong because it deals with external relationships, contracts, and dependencies on third-party vendors, not internal organizational culture or workforce capabilities. Option D (Value Streams and Processes) is wrong because it describes the workflows, activities, and procedures that create and deliver value, not the human factors like culture or role definitions.

Full explanation →

137

MCQmedium

A team is designing a new service and only considers the technology requirements. According to ITIL 4, what is a likely consequence?

A.Processes will be optimized automatically.

B.The service will be delivered on time and within budget.

C.Vendor contracts will be automatically fulfilled.

D.Staff may lack the necessary skills to operate the service.

AnswerD

When service design focuses exclusively on technology, it critically overlooks the "Organizations and People" dimension of service management. This dimension addresses the necessary skills, competencies, roles, and responsibilities required for effective service operation and support. Without considering the human element, there is a high probability that staff will not possess the requisite knowledge or training to competently operate, maintain, or support the new service, leading to operational inefficiencies and service quality issues.

Why this answer

D is correct because ITIL 4 emphasizes the Four Dimensions of Service Management, which include Organizations and People, Information and Technology, Partners and Suppliers, and Value Streams and Processes. Focusing solely on technology ignores the 'Organizations and People' dimension, leading to a skills gap where staff may not be trained or competent to operate the new service effectively.

Exam trap

The trap here is that candidates assume technology alone drives service success, ignoring ITIL 4's explicit requirement to balance all four dimensions, especially the 'Organizations and People' dimension.

How to eliminate wrong answers

Option A is wrong because processes are not automatically optimized by technology; they require deliberate design, governance, and continuous improvement (ITIL 4's 'Continual Improvement' practice). Option B is wrong because ignoring non-technical dimensions like people and partners often causes delays, cost overruns, and rework, not on-time and within-budget delivery. Option C is wrong because vendor contracts require active management, fulfillment, and alignment with service requirements, not automatic fulfillment from technology decisions alone.

Full explanation →

138

MCQmedium

An IT service desk analyst receives multiple calls that users cannot access the CRM system after a scheduled maintenance. According to ITIL 4, what should the analyst do FIRST?

A.Log an incident record to restore service as soon as possible

B.Raise a problem record to investigate the root cause

C.Submit a change request to revert the maintenance changes

D.Create a service request for user access

AnswerA

According to ITIL 4, an incident is an unplanned interruption to a service or a reduction in the quality of a service. The primary objective of incident management is to restore normal service operation as quickly as possible to minimize business impact. Therefore, logging an incident record is the correct immediate action for a service desk analyst receiving multiple calls about a service disruption, initiating the formal process to track and resolve the issue.

Why this answer

According to ITIL 4, the primary goal of incident management is to restore normal service operation as quickly as possible and minimize the adverse impact on business operations. When users cannot access the CRM system after scheduled maintenance, the analyst must first log an incident record to initiate the restoration process, as this is an unplanned interruption or reduction in quality of an IT service. This aligns with the ITIL 4 guiding principle of 'Focus on Value' by prioritizing immediate service recovery over investigation or change management.

Exam trap

The trap here is that candidates confuse incident management with problem management, thinking that investigating the root cause (Option B) should be the first step, when in fact ITIL 4 mandates restoring service first before analyzing the underlying cause.

How to eliminate wrong answers

Option B is wrong because raising a problem record is a reactive or proactive step to identify the root cause of one or more incidents, but it should not be the first action when service is actively down; incident management takes precedence. Option C is wrong because submitting a change request to revert maintenance changes is a change management activity that requires authorization and a defined process, and it bypasses the immediate need to restore service through incident management. Option D is wrong because creating a service request for user access is for standard, pre-approved requests (like password resets or new account setups), not for restoring service after a widespread outage caused by maintenance.

Full explanation →

139

MCQmedium

A service provider decides to outsource its data center operations. Which dimension is MOST directly affected by this decision?

A.Organisations and People

B.Partners and Suppliers

C.Information and Technology

D.Value Streams and Processes

AnswerB

The 'Partners and Suppliers' dimension specifically addresses the relationships an organization has with external entities that are involved in the design, development, delivery, support, or improvement of services. Outsourcing a data center operation directly involves establishing, managing, and governing new or existing supplier agreements and partnerships, making this the most directly and primarily impacted dimension as it dictates how external resources contribute to value creation.

Why this answer

Outsourcing data center operations directly involves engaging an external organization to manage and run the data center. This decision most immediately affects the 'Partners and Suppliers' dimension, which covers the relationships, contracts, and roles of external entities that contribute to service delivery. While other dimensions may be impacted indirectly, the core change is in the supplier ecosystem.

Exam trap

The trap here is that candidates confuse the operational impact (e.g., changes to processes or technology) with the primary dimension directly altered by the outsourcing decision, which is the partner/supplier relationship.

How to eliminate wrong answers

Option A is wrong because 'Organisations and People' focuses on internal roles, culture, and skills; outsourcing changes who performs the work but the primary dimension affected is the external relationship. Option C is wrong because 'Information and Technology' deals with the data, applications, and infrastructure itself, not the decision to have an external party manage them. Option D is wrong because 'Value Streams and Processes' concerns the workflows and activities; outsourcing may require process adjustments, but the direct impact is on the partner/supplier relationship.

Full explanation →

140

Multi-Selecthard

Which THREE of the following are differences between Utility and Warranty?

Select 3 answers

A.Warranty covers availability, capacity, and continuity

B.Utility can be described as 'fit for purpose'

C.Utility is what the service does; warranty is how it is delivered

D.Warranty ensures the service is fit for purpose

E.Utility is more important than warranty

AnswersA, B, C

Warranty, in ITIL 4, refers to the assurance that a service will meet agreed-upon requirements. This specifically includes aspects like availability (the service being accessible when needed), capacity (its ability to handle the required workload), continuity (its resilience to disruptions), and security (protection against unauthorized access). These elements collectively ensure the service is 'fit for use' and performs reliably.

Why this answer

Warranty in ITIL 4 is defined as the assurance that a service will meet agreed requirements, covering availability, capacity, and continuity. These are the specific dimensions that warranty guarantees, ensuring the service is reliable and sufficient in its delivery. Utility, by contrast, focuses on functionality and performance.

Exam trap

The trap here is that candidates often confuse 'fit for purpose' with warranty, thinking warranty ensures the service does what it is supposed to do, when in fact warranty ensures the service is delivered reliably and consistently.

Full explanation →

141

Multi-Selectmedium

A large hospital has signed a contract with an external IT provider for a new electronic health records (EHR) system. The hospital's clinical staff will use the system daily, the hospital's IT department will manage user access, and the provider will host and maintain the underlying infrastructure. The hospital's CIO is accountable for ensuring the EHR service delivers the required clinical outcomes. Which TWO of the following statements correctly describe the service relationships in this scenario according to ITIL 4? (Choose two.)

Select 2 answers

A.The hospital's IT department is the service provider because it manages user access to the EHR system.

B.The hospital's IT department is the customer because it manages user access and ensures the service meets clinical needs.

C.The clinical staff are users of the EHR service because they use it to support their daily work.

D.The external IT provider is a user of the EHR service because it maintains the underlying infrastructure.

E.The hospital's CIO acts as the sponsor because they authorize the budget and are accountable for the EHR service outcomes.

AnswersC, E

In ITIL 4, a user is a role that uses services. Clinical staff interact directly with the EHR system to perform their daily duties, so they fit the definition of users. They are not necessarily the customer who agrees the service level, nor the sponsor who authorizes the budget, but their hands-on interaction makes them users.

Why this answer

Clinical staff use the EHR system daily, making them users. The CIO authorizes budget and is accountable for outcomes, fulfilling the sponsor role. These two roles are distinct from the provider, who hosts and maintains the service.

The hospital's IT department manages access but does not define requirements or authorize budget, so it is not the customer or sponsor here.

Exam trap

The trap here is assuming that any organization touching the service is automatically the provider or customer, when ITIL 4 roles depend on the specific relationship and accountability, not just activity.

Full explanation →

142

Multi-Selectmedium

Which TWO of the following are external factors that can affect the four dimensions according to ITIL 4?

Select 2 answers

A.Political factors

B.Service level agreements

C.Organizational culture

D.Legal factors

E.Staff skills

AnswersA, D

Political factors represent external influences stemming from government policies, political stability, and international relations that can significantly impact an organization's operations and service strategy. These factors include changes in trade regulations, taxation policies, or government spending priorities, which are entirely outside an organization's direct control but necessitate strategic adaptation. Consequently, an organization must monitor these shifts to ensure compliance and maintain business viability.

Why this answer

Political factors are external to the organization and can influence service strategy and design, for example, changes in government policy or trade agreements. Legal factors, such as new data protection regulations (e.g., GDPR), are also external and directly impact how services are managed across the four dimensions. Both are part of the PESTLE model, which ITIL 4 uses to identify external influences.

Exam trap

PeopleCert often tests the distinction between internal factors (like SLAs, culture, and skills) and external factors (like political and legal), so the trap here is that candidates mistakenly classify SLAs or organizational culture as external because they involve outside parties or are influenced by external trends.

Full explanation →

143

Multi-Selectmedium

Which TWO of the following are components of the Service Value System (SVS)?

Select 2 answers

A.Service desk

B.Service level agreements

C.Configuration management database

D.Service value chain

E.Guiding principles

AnswersD, E

The Service Value Chain (SVC) is a core operational model within the ITIL Service Value System, outlining the six key activities an organization undertakes to create value. It describes how demand is translated into value through a sequence of interconnected steps: Plan, Engage, Design & Transition, Obtain/Build, Deliver & Support, and Improve. The SVC is central to understanding how an organization delivers services and manages its value streams.

Why this answer

The Service Value System (SVS) is a core component of ITIL 4 that describes how all components and activities of an organization work together as a system to enable value creation. The Service Value Chain (Option D) is a central element of the SVS, providing an operating model for the creation, delivery, and continuous improvement of services. Guiding Principles (Option E) are also a key component of the SVS, providing universal recommendations that guide an organization in all its work.

Exam trap

The trap here is that candidates often confuse operational components (like Service Desk, SLAs, or CMDB) with the high-level, abstract building blocks of the Service Value System, leading them to select concrete tools or documents instead of the correct conceptual components.

Full explanation →

144

MCQhard

An IT department has a CMDB. Which practice is primarily responsible for ensuring that configuration data is accurate and up to date?

A.Monitoring and Event Management

B.IT Asset Management

C.Service Configuration Management

D.Service Desk

AnswerC

Service Configuration Management is the practice specifically responsible for planning, identifying, controlling, recording, reporting, and verifying all configuration items (CIs) and their relationships. Its core purpose is to ensure that accurate and reliable information about the services and their supporting components is available in the Configuration Management Database (CMDB) throughout their lifecycle.

Why this answer

Service Configuration Management (C) is the practice responsible for maintaining accurate and up-to-date configuration data in the CMDB. It ensures that all Configuration Items (CIs) are identified, controlled, and their attributes and relationships are recorded and verified through regular audits and reconciliation processes, directly supporting the integrity of the CMDB.

Exam trap

The trap here is that candidates often confuse IT Asset Management (ITAM) with Service Configuration Management, but ITAM focuses on financial lifecycle and inventory, while Service Configuration Management owns the logical relationships and technical attributes of CIs in the CMDB.

How to eliminate wrong answers

Option A is wrong because Monitoring and Event Management focuses on detecting and reacting to events and alerts from IT infrastructure, not on maintaining the accuracy of configuration data in a CMDB. Option B is wrong because IT Asset Management manages the lifecycle, financial value, and contractual aspects of assets, but it does not own the detailed configuration records or relationships between CIs in the CMDB. Option D is wrong because the Service Desk handles incident and service request tickets, and while it may update CI statuses as part of incident resolution, it is not primarily responsible for ensuring the ongoing accuracy and currency of configuration data.

Full explanation →

145

MCQhard

A global financial services firm is expanding its online trading platform to handle increased market volatility. The platform currently uses a monolithic architecture hosted in a private cloud. The IT team has noticed that during peak trading hours, the system experiences latency spikes and occasional timeouts. The business requires 99.99% uptime and rapid scaling to handle sudden volume surges. The team has been asked to propose improvements within the 'Information and Technology' dimension. They are evaluating several options. Which course of action best addresses the symptoms while aligning with the four dimensions?

A.Increase the capacity of existing servers by adding more CPU and RAM to handle peak loads.

B.Implement a new incident management process to reduce response times during outages.

C.Migrate to a microservices architecture using container orchestration and implement auto-scaling policies to handle demand spikes.

D.Outsource the platform management to a third-party provider with proven uptime guarantees.

AnswerC

This solution directly tackles the core challenges by re-architecting the application into independent, smaller services (microservices). Container orchestration (e.g., Kubernetes) provides the platform for deploying, managing, and scaling these services efficiently, while auto-scaling policies dynamically adjust resource allocation based on real-time demand. This approach ensures high availability, resilience, and elastic scalability, preventing latency and timeouts during peak loads by distributing the workload and scaling only necessary components.

Why this answer

Directly addresses the root cause (monolithic architecture unable to scale dynamically) by migrating to microservices with container orchestration (e.g., Kubernetes) and auto-scaling policies. This aligns with the 'Information and Technology' dimension by redesigning the technology architecture to handle sudden volume surges, achieving 99.99% uptime through horizontal scaling and fault isolation, rather than vertical scaling or reactive processes.

Exam trap

The trap here is that candidates confuse vertical scaling (Option A) as a quick fix for capacity, ignoring the architectural limitations of a monolith, or assume process improvements (Option B) can compensate for technology deficiencies, while the question explicitly targets the 'Information and Technology' dimension.

How to eliminate wrong answers

Option A is wrong because increasing CPU/RAM (vertical scaling) has hardware limits and cannot handle sudden, unpredictable demand spikes without downtime for upgrades; it also does not address the monolithic architecture's single point of failure. Option B is wrong because implementing a new incident management process only improves response to outages, not prevents them; it does not fix the underlying scalability or latency issues caused by the monolithic design. Option D is wrong because outsourcing to a third-party provider does not inherently resolve the architectural bottleneck; it shifts responsibility but still relies on the same monolithic platform, and the business retains accountability for 99.99% uptime.

Full explanation →

146

MCQhard

A service provider offers an email service that is always available (99.999% uptime) but it is very slow and users cannot send attachments over 1 MB. Which statement about the service is correct?

A.The service has good warranty but poor utility

B.The service has both poor utility and poor warranty

C.The service has good utility but poor warranty

D.The service has both good utility and good warranty

AnswerA

High availability delivers the warranty — the promised 99.999% uptime — while the 1 MB attachment cap and slow performance undermine utility, the functionality's fitness for purpose. ITIL defines warranty as assurance of availability, capacity and continuity, and utility as what the service does; here reliability is assured but usefulness is constrained.

Why this answer

The service is always available (99.999% uptime), which means it meets high warranty (availability, capacity, continuity, security). However, it is very slow and cannot send attachments over 1 MB, indicating poor utility (functionality and performance). Option A correctly identifies this mismatch: good warranty but poor utility.

Exam trap

The trap here is confusing high availability (warranty) with good overall service quality, leading candidates to overlook poor utility (slow speed, attachment limits) and incorrectly select option D.

How to eliminate wrong answers

Option B is wrong because it claims both utility and warranty are poor, but the service has excellent availability (99.999% uptime), which is a key warranty attribute. Option C is wrong because it claims good utility but poor warranty, whereas the service has poor utility (slow, limited attachment size) and good warranty (high uptime). Option D is wrong because it claims both are good, but the slow speed and 1 MB attachment limit clearly indicate poor utility.

Full explanation →

147

MCQeasy

What is the PRIMARY purpose of the ITIL 4 Service Value System?

A.To enable value co-creation through IT-enabled services

B.To define all ITIL practices

C.To reduce the cost of IT services

D.To replace ITIL v3 processes

AnswerA

The ITIL 4 Service Value System (SVS) is fundamentally designed to facilitate the collaborative creation of value between service providers and consumers. It achieves this by providing a holistic operating model that integrates various components and activities, ensuring that all organizational efforts contribute to delivering beneficial outcomes. This framework ensures that IT-enabled services are not just delivered, but actively contribute to the realization of stakeholder value through shared efforts and continuous improvement.

Why this answer

The ITIL 4 Service Value System (SVS) is designed to enable value co-creation through IT-enabled services by integrating all components and activities of the organization into a cohesive, flexible model. Its primary purpose is not to define practices or reduce costs, but to ensure that every element—from guiding principles to continual improvement—works together to deliver value to stakeholders. This aligns with the ITIL 4 shift from process-centric to value-centric service management.

Exam trap

The trap here is that candidates confuse the SVS's purpose with a specific component (e.g., practices or cost reduction) or mistakenly think ITIL 4 completely discards ITIL v3, when in fact the SVS is a value-oriented evolution, not a replacement.

How to eliminate wrong answers

Option B is wrong because the SVS does not define all ITIL practices; instead, it provides a framework that includes the Service Value Chain and the 34 ITIL practices, which are defined separately in the ITIL 4 framework. Option C is wrong because reducing the cost of IT services is a potential outcome of effective service management, but it is not the primary purpose of the SVS, which focuses on value co-creation and flexibility. Option D is wrong because the SVS does not replace ITIL v3 processes; ITIL 4 evolves and integrates concepts from ITIL v3 (e.g., the service lifecycle) into a more holistic system, but the SVS itself is a new structural model, not a direct replacement.

Full explanation →

148

MCQhard

A company implements a new feature in its software that reduces processing time. Customers are satisfied, but the IT team notices the change did not increase revenue. Which statement best describes this situation using ITIL 4 terms?

A.The change produced an output but not the expected outcome.

B.The change produced an outcome but not an output.

C.The change improved utility but not warranty.

D.The change improved warranty but not utility.

AnswerA

This option correctly identifies that the implemented new feature itself constitutes an "output"—a tangible deliverable resulting from an activity. However, if this feature failed to achieve its intended purpose, such as reducing customer complaints or improving efficiency, then the desired "outcome"—the benefit or result for stakeholders—was not realized. ITIL 4 emphasizes that value is co-created through outcomes, not merely by producing outputs.

Why this answer

The IT team delivered a new feature (the output: reduced processing time) that satisfied customers, but it did not achieve the intended business outcome of increased revenue. In ITIL 4, an output is a tangible deliverable (e.g., a software update), while an outcome is the result or value realized by the customer or business. Here, the output was successful, but the expected outcome (revenue growth) was not met, making option A correct.

Exam trap

The trap here is confusing 'output vs. outcome' with 'utility vs. warranty' — candidates often misapply the utility/warranty framework when the question explicitly tests the output/outcome distinction from the Service Value System.

How to eliminate wrong answers

Option B is wrong because it reverses the definitions: the change clearly produced an output (the new feature), not an outcome without an output. Option C is wrong because utility (functionality fit for purpose) was improved (processing time reduced), but warranty (availability, capacity, security) is not discussed; the issue is about outcome vs. output, not utility vs. warranty. Option D is wrong because warranty was not the focus; the change improved utility (reduced processing time), not warranty, and again the core distinction is between output and outcome.

Full explanation →

149

MCQmedium

A company is redesigning its service desk processes. The team decides to first review existing procedures, metrics, and feedback before making changes. Which ITIL guiding principle is being applied?

A.Focus on value

B.Progress iteratively with feedback

C.Keep it simple and practical

D.Start where you are

AnswerD

This ITIL guiding principle mandates that organizations should not start from a blank slate but rather assess what is already in place. Before redesigning service desk processes, it is essential to understand the current state of existing processes, tools, skills, and services to determine what can be reused or improved upon. This principle directly addresses the necessary initial step of reviewing the current environment and capabilities.

Why this answer

The guiding principle 'Start where you are' (D) directs organizations to examine existing services, processes, metrics, and feedback before implementing changes. By reviewing current procedures and performance data first, the team avoids reinventing the wheel and builds on what already works, which is exactly what the scenario describes.

Exam trap

The trap here is that candidates confuse the initial review step with 'Progress iteratively with feedback' (B), but the scenario explicitly describes a one-time assessment before changes, not an ongoing iterative cycle.

How to eliminate wrong answers

Option A is wrong because 'Focus on value' emphasizes ensuring every activity delivers measurable value to stakeholders, not on reviewing existing state before change. Option B is wrong because 'Progress iteratively with feedback' advocates for incremental improvements with continuous feedback loops, but the scenario describes an initial review, not an iterative cycle. Option C is wrong because 'Keep it simple and practical' promotes minimizing complexity, but the team's first action is to assess the current state, not to simplify processes directly.

Full explanation →

150

MCQmedium

An IT service desk analyst receives a call that users cannot access the CRM system. What should they do FIRST?

A.Raise a problem record to find the root cause

B.Log an incident to restore the service

C.Submit a change request to fix the system

D.Create a service request for user access

AnswerB

Logging an incident is the correct action because an incident is defined as an unplanned interruption to a service or a reduction in the quality of a service. The primary objective of incident management is to restore normal service operation as quickly as possible, minimizing business impact. Users being unable to access a service directly represents such an unplanned disruption requiring immediate attention to restore functionality.

Why this answer

In ITIL 4, when users cannot access a service, the first step is to log an incident record to capture the details and initiate the incident management process. The goal of incident management is to restore normal service operation as quickly as possible, so logging the incident is the immediate action before any problem, change, or service request activities.

Exam trap

ITIL4F often tests the distinction between incident, problem, change, and service request — candidates must recognize that a service outage is an incident and the first action is to log it.

How to eliminate wrong answers

Option A is wrong because a problem record is raised for root cause analysis of recurring or significant incidents, not as the first response to a single service disruption. Option C is wrong because a change request is used to implement a modification to the IT infrastructure, which comes after diagnosis and is not the first step. Option D is wrong because a service request is for standard user requests (e.g., access, information), not for reporting a service outage.

Full explanation →

ITIL 4 Foundation (ITIL4F) — Questions 76–150