1040 questions total · 14pages · All types, answers revealed
A service desk analyst resolves a user's password reset request. According to ITIL 4, what type of record should be closed?
Password reset is a standard service request.
Why this answer
Password resets are pre-approved, routine requests, so they are service requests.
An organisation has a mature change management process but fails to train its staff on new tools. According to ITIL 4, which dimension is being neglected?
Staff training is part of the Organisations and People dimension.
Why this answer
The organisation has good processes but neglects the people dimension.
A company is undergoing a major organizational change that will affect several IT services. The change manager wants to ensure that all changes are assessed for risk and that the change schedule is maintained. Which practice provides the formal process for managing changes in a controlled manner?
Change Enablement provides the formal process for assessing, authorizing, and scheduling changes.
Why this answer
Change Enablement is the ITIL 4 practice that provides the formal, controlled process for assessing, approving, and scheduling changes to IT services. It ensures that all changes are evaluated for risk, and that the change schedule is maintained, which directly addresses the change manager's requirements.
Exam trap
The trap here is that candidates often confuse the 'process for managing changes' with Release Management or Deployment Management, but ITIL 4 explicitly assigns the formal risk assessment and change scheduling to Change Enablement.
How to eliminate wrong answers
Option A is wrong because Deployment Management focuses on moving new or changed components into production environments, not on the formal risk assessment and scheduling of changes. Option B is wrong because Release Management handles the planning, building, testing, and deployment of releases, but the formal change authorization and risk assessment process is owned by Change Enablement. Option C is wrong because Transition Planning and Support coordinates the overall transition of new or changed services, but it does not provide the specific, controlled process for assessing and approving individual changes.
Which ITIL guiding principle states that all activities should be directly linked to creating value for stakeholders?
This principle is about ensuring every activity contributes to value creation.
Why this answer
The 'Focus on value' guiding principle is correct because it mandates that every activity, process, and decision in service management must be directly traceable to creating measurable value for stakeholders. This principle ensures that resources are not wasted on activities that do not contribute to the desired outcomes, aligning all work with the organization's strategic objectives.
Exam trap
The trap here is that candidates often confuse 'Focus on value' with 'Optimise and automate' because they assume automation inherently creates value, but the principle requires proving the value link before optimizing.
How to eliminate wrong answers
Option A is wrong because 'Think and work holistically' emphasizes understanding how all parts of the organization interact as a system, not the direct linkage of activities to stakeholder value. Option C is wrong because 'Optimise and automate' focuses on improving efficiency and reducing manual effort through technology, not on ensuring value creation. Option D is wrong because 'Start where you are' advises leveraging existing capabilities and processes rather than building from scratch, which does not inherently guarantee a direct value link to stakeholders.
Which TWO of the following are external factors from the PESTLE model?
Economic factors are part of PESTLE.
Why this answer
Economic conditions are an external factor in the PESTLE model because they represent macroeconomic influences such as inflation, unemployment rates, and economic growth that affect an organization's IT service strategy and budgeting. These factors are outside the organization's control and directly impact service demand, cost management, and investment decisions in ITIL 4.
Exam trap
The trap here is that candidates often confuse internal organizational elements (like culture or procedures) with external environmental factors, forgetting that PESTLE strictly covers macro-environmental influences outside the organization's direct control.
A project manager wants to implement a new software tool. She decides to first conduct a survey to understand user needs and then build the tool in small increments, releasing updates every two weeks. Which TWO guiding principles are being combined?
Correct. Understanding user needs focuses on value, and increments with feedback is iterative progress.
Why this answer
Focus on value (understanding user needs) and Progress iteratively with feedback (small increments) are combined. This question tests the ability to identify multiple principles in one scenario.
A user requests a software upgrade that is pre-approved and follows a standard procedure. According to ITIL 4, this is a:
A service request is a formal request for something to be provided, such as a software upgrade, following a standard procedure.
Why this answer
Option D is correct because a service request is a pre-approved, standard request that follows a defined procedure.
In ITIL 4, which practice involves managing the lifecycle of configuration items (CIs) and maintaining a configuration management database (CMDB)?
This practice manages CIs and the CMDB.
Why this answer
Service Configuration Management is responsible for managing CIs and the CMDB, including configuration baselines.
What is the purpose of the Service Level Management practice?
This is the primary purpose of Service Level Management.
Why this answer
The Service Level Management practice is specifically defined in ITIL 4 to negotiate, agree, and monitor service level agreements (SLAs). It ensures that service targets are documented, measured, and reviewed, aligning service delivery with business expectations. This practice directly manages the lifecycle of SLAs, including their creation, ongoing monitoring, and periodic review.
Exam trap
The trap here is confusing the purpose of Service Level Management with Service Availability Management, as both involve 'agreed' levels, but Service Level Management focuses on the entire SLA lifecycle (negotiation, agreement, monitoring) while Availability Management specifically ensures uptime and resilience.
How to eliminate wrong answers
Option A is wrong because handling predefined, pre-approved requests from users is the purpose of the Service Request Management practice, not Service Level Management. Option B is wrong because ensuring services meet current and future demand is the purpose of the Capacity and Performance Management practice, which focuses on resource planning and demand forecasting. Option D is wrong because ensuring services are available as agreed is the purpose of the Service Availability Management practice, which monitors uptime and resilience, not the negotiation and monitoring of SLAs.
An IT service desk analyst receives a call that users cannot access the CRM system. What should they do FIRST according to ITIL 4?
Logging and categorizing is the first step in incident management.
Why this answer
The first step is to log and categorize the incident to initiate the incident management process and begin restoration of service.
When a change is classified as ‘normal’ in ITIL, what does that mean?
Correct. Normal changes are assessed and approved by the change authority.
Why this answer
Normal changes follow a standard, risk-assessed process but are not pre-approved like standard changes.
A recurring issue with a software application has caused multiple incidents. Which record should be raised to investigate the underlying cause?
A problem seeks to find the root cause of recurring incidents.
Why this answer
A problem record is specifically designed in ITIL 4 to manage the investigation and diagnosis of the underlying cause of one or more incidents. Since the question describes a recurring issue causing multiple incidents, raising a problem record is the correct action to perform root cause analysis (RCA) and prevent future occurrences.
Exam trap
The trap here is that candidates confuse 'incident record' (restore service) with 'problem record' (find root cause), especially when the question mentions 'recurring' incidents, which is the classic trigger for problem management.
How to eliminate wrong answers
Option A is wrong because a change request is used to implement a modification to a service or configuration item, not to investigate the root cause of incidents. Option B is wrong because a service request is a pre-defined, standard request from a user (e.g., password reset, access grant), not an investigation into recurring failures. Option D is wrong because an incident record is used to restore normal service operation as quickly as possible after a disruption, not to perform deep analysis of underlying causes.
Which THREE of the following are purposes or activities of the Problem Management practice?
Problem Control phase determines root cause.
Why this answer
Problem Management includes problem identification, root cause analysis, and known error management. Options A, B, and C are correct. Option D is Incident Management; Option E is Change Enablement.
A user requests a new laptop for an employee who has just joined the company. According to ITIL 4, how should this request be classified?
Service requests are for predefined, pre-approved items like new hardware.
Why this answer
A new laptop request is a predefined, pre-approved service request if it follows standard procedures. Option D is correct. It is not an incident (unplanned interruption), a problem (root cause), or an emergency change.
Which TWO of the following are key activities of the Change Enablement practice?
Key activity of Change Enablement.
Why this answer
Change Enablement includes assessing, authorizing, and scheduling changes (A) and ensuring changes are reviewed after implementation (E). Options B and D relate to Incident Management. Option C relates to Service Level Management.
Which TWO of the following are components of the ITIL Service Value System?
The service value chain is a central component of the SVS.
Why this answer
Option C is correct because the service value chain is a core component of the ITIL Service Value System (SVS), providing an operating model for the creation, delivery, and continual improvement of services. It outlines the key activities (plan, improve, engage, design & transition, obtain/build, deliver & support) required to respond to demand and facilitate value creation.
Exam trap
The trap here is that candidates often confuse the four dimensions of service management as a component of the SVS, when in fact the four dimensions are a separate but complementary concept that describes the key perspectives for applying the SVS.
A service provider is designing a new service. They involve all stakeholders from the beginning and share information openly. Which ITIL guiding principle are they applying?
This principle directly matches the actions described.
Why this answer
The 'Collaborate and promote visibility' guiding principle emphasizes involving all stakeholders from the start and sharing information openly to ensure alignment and reduce misunderstandings. By engaging stakeholders early and maintaining transparency, the service provider can gather diverse input, identify risks sooner, and build trust, which directly supports the design of a service that meets actual needs.
Exam trap
The trap here is that candidates often confuse 'Collaborate and promote visibility' with 'Focus on value' because both involve stakeholders, but 'Focus on value' is about outcomes and benefits, not the process of open collaboration and transparency.
How to eliminate wrong answers
Option A is wrong because 'Focus on value' centers on delivering outcomes that matter to customers and users, not specifically on stakeholder involvement or open information sharing. Option C is wrong because 'Think and work holistically' addresses understanding the entire system and interdependencies, not the collaborative and transparent engagement of stakeholders. Option D is wrong because 'Keep it simple and practical' advocates for minimizing complexity and avoiding over-engineering, which does not directly relate to involving all stakeholders or promoting visibility.
An IT team identifies that repeated application crashes are caused by a memory leak. According to ITIL 4, at which stage of Problem Management is the memory leak documented as a Known Error?
Error control manages known errors and workarounds.
Why this answer
A Known Error is created during error control after root cause analysis is completed and a workaround is identified.
An organization has an SLA that specifies a response time of 4 hours for priority 2 incidents. The IT team also has an OLA with the network team to resolve network-related incidents within 2 hours. According to ITIL 4, what is the relationship between the SLA and the OLA?
OLAs are internal agreements that support the SLA.
Why this answer
An OLA supports the SLA by defining internal targets that help meet the SLA.
Which TWO of the following are ITIL 4 guiding principles?
One of the guiding principles.
Why this answer
Option A is correct because 'Collaborate and promote visibility' is one of the seven ITIL 4 guiding principles, which emphasizes cross-team cooperation and transparency to improve decision-making and reduce silos. Option B is correct because 'Focus on value' is also a core guiding principle, ensuring all activities directly contribute to stakeholder value and outcomes.
Exam trap
PeopleCert often tests candidates by mixing ITIL 4 principles with Lean or DevOps concepts (like 'Reduce waste' or 'Standardize processes'), expecting you to recall the exact seven ITIL 4 principles from the syllabus without conflating them with other frameworks.
An organization is designing a new service for remote access. Which dimension focuses on the skills and culture needed to support the service?
Why this answer
The Organizations and People dimension includes culture, roles, skills, and communication. Information and Technology focuses on data and tools; Partners and Suppliers on external relationships; Value Streams and Processes on workflows.
Which of the following is a key metric for the Service Desk practice?
FCR measures how often the Service Desk resolves an issue on the first call.
Why this answer
First Call Resolution (FCR) is a common metric for Service Desk effectiveness. Option C is correct. MTTR is for Incident Management.
SLA compliance is for Service Level Management. Uptime is for Availability Management.
Which THREE of the following are characteristics of a service request?
Service requests are typically pre-approved and have standard procedures.
Why this answer
Service requests are predefined, pre-approved, low-risk, and typically involve standard procedures. Incidents are unplanned, and service requests are separate from changes.
In which service value chain activity would an organization define the strategy and direction for service management?
Plan is responsible for strategy and direction of the value chain.
Why this answer
The 'Plan' value chain activity is responsible for defining the strategy, policies, and direction for service management across the organization. It ensures that the organization's vision, objectives, and continual improvement initiatives are aligned with business goals, providing a blueprint for all other service value chain activities.
Exam trap
The trap here is that candidates often confuse 'Plan' with 'Improve' because both involve governance and direction, but 'Plan' sets the initial strategy while 'Improve' focuses on iterative enhancements based on performance data.
How to eliminate wrong answers
Option A is wrong because 'Design and transition' focuses on creating and transitioning new or changed services into the live environment, not on defining overarching strategy and direction. Option C is wrong because 'Improve' deals with continual improvement of services and processes based on feedback and metrics, not with initial strategy definition. Option D is wrong because 'Engage' handles stakeholder relationships, communication, and demand management, but does not set the strategic direction for service management.
An IT service desk analyst receives a call that users cannot access the CRM system. The analyst verifies the issue and suspects it may be related to a recent change. What should the analyst do FIRST according to ITIL 4?
An incident should be logged first to manage the unplanned interruption.
Why this answer
The first step is to log the disruption as an incident to initiate restoration of service, even if the cause is suspected to be a change.
Which statement BEST distinguishes a service request from an incident?
This is the key distinction: service requests follow a standard process; incidents are unplanned.
Why this answer
Incidents are unplanned service interruptions; service requests are pre-defined, pre-approved requests from users. Option A is correct. Option B is wrong because both may involve changes.
Option C is wrong because service requests can be related to information. Option D is wrong because both are logged.
A team is redesigning the password reset process. They decide to reuse an existing automated workflow rather than building a new one. Which ITIL 4 guiding principle are they applying?
Why this answer
The 'Start where you are' principle emphasizes leveraging existing services, processes, and technologies before creating new ones. By reusing an existing automated workflow for the password reset process, the team avoids reinventing the wheel and builds on current capabilities, which aligns directly with this principle.
Exam trap
The trap here is that candidates may confuse 'Start where you are' with 'Keep it simple and practical' because both involve efficiency, but the former specifically targets reuse of existing assets rather than general simplification.
How to eliminate wrong answers
Option A is wrong because 'Keep it simple and practical' focuses on minimizing complexity and eliminating unnecessary steps, not on reusing existing assets. Option C is wrong because 'Progress iteratively with feedback' is about making incremental improvements with continuous feedback loops, not about leveraging what already exists. Option D is wrong because 'Focus on value' prioritizes delivering outcomes that matter to stakeholders, but does not specifically address the reuse of existing workflows.
In the ITIL 4 Service Value System, which component provides governance and guidance?
Governance provides direction and control through policies and decision-making.
Why this answer
In the ITIL 4 Service Value System (SVS), the Governance component is specifically responsible for defining the direction, policies, and control mechanisms that ensure the organization's activities align with its objectives. It provides the overarching framework for decision-making and accountability, guiding how all other SVS components operate. Without governance, the SVS would lack the necessary oversight to ensure value co-creation is achieved in a controlled and compliant manner.
Exam trap
The trap here is that candidates often confuse the Guiding Principles (Option A) with governance because both provide 'guidance,' but the Guiding Principles are broad, flexible recommendations, whereas Governance is a formal, authoritative component that enforces policies and controls.
How to eliminate wrong answers
Option A is wrong because Guiding Principles are recommendations that guide an organization in its work, but they do not provide the formal governance and authority structure; they are a component of the SVS that supports decision-making, not governance itself. Option B is wrong because Continual Improvement is a practice and a component that ensures the SVS is constantly optimized, but it is a method for improvement, not a governance mechanism that provides direction and control. Option C is wrong because the Service Value Chain is an operating model that outlines the key activities to create value, but it is a framework for workflows, not a governance body that sets policies and ensures compliance.
An organization is reviewing its IT service management practices. They find that the same recurring incident is being logged multiple times without investigation. Which practice should address this to prevent recurrence?
Problem Management aims to find root cause and eliminate recurring incidents.
Why this answer
Problem Management is responsible for identifying the root cause of incidents and preventing recurrence. Option A is correct. Incident Management focuses on restoring service, not preventing recurrence.
Service Desk logs incidents. Change Enablement manages changes.
A service provider introduces a new service that allows customers to self-report issues. This results in a 30% reduction in call volume to the service desk and faster resolution times. According to ITIL 4, what is the outcome of this service?
These are the results achieved for stakeholders.
Why this answer
An outcome is a result enabled by the service for stakeholders—here, faster resolutions and reduced volume are results for the customer.
Which of the following BEST differentiates a normal change from an emergency change?
This accurately captures the key difference in process and urgency.
Why this answer
Emergency changes are for urgent situations where delays would cause significant business impact, and they follow an expedited process. Normal changes follow standard assessment and approval.
Which TWO of the following are considered service management practices in ITIL 4?
Service Desk is a service management practice.
Why this answer
Service Desk is correct because ITIL 4 defines it as a key service management practice that provides a single point of contact between the service provider and users for managing incidents, service requests, and communication. It is explicitly listed in the ITIL 4 service management practices, focusing on operational support and user interaction.
Exam trap
The trap here is that candidates often confuse general management practices (like IT Asset Management) or technical management practices (like Capacity and Performance Management) with service management practices, because ITIL 4 reorganized the categories from ITIL v3's processes, leading to misclassification.
Which TWO of the following are phases of Problem Management?
This is the first phase.
Why this answer
Problem Identification is a core phase of Problem Management because it involves detecting and logging problems before they are analyzed. In ITIL 4, Problem Management consists of three phases: Problem Identification, Problem Control, and Error Control. Problem Identification ensures that problems are formally recognized, often through trend analysis of incidents or proactive monitoring, so that root causes can be addressed.
Exam trap
The trap here is that candidates confuse the phases of Problem Management with other ITIL practices, such as Incident Management or Event Management, because all involve handling issues but have distinct objectives and workflows.
Which TWO of the following are types of events in Monitoring and Event Management?
Correct. Informational events provide awareness.
Why this answer
In ITIL 4, Monitoring and Event Management defines three types of events: Informational, Warning, and Exception. Option D (Informational) is correct because informational events indicate normal, expected operations (e.g., a scheduled backup completed successfully) and do not require any action beyond logging.
Exam trap
The trap here is that candidates confuse the ITIL event types (Informational, Warning, Exception) with other ITIL practices (Incident, Problem, Service Request), leading them to incorrectly select Incident or Problem as event types.
What is the PRIMARY purpose of the Service Level Management practice?
Why this answer
Service Level Management ensures that services meet agreed levels. It sets targets and monitors performance. Option B is close but is more specific to warranty; the primary purpose is to define and manage service levels.
Which TWO of the following are characteristics of a service request compared to an incident?
Service requests are low-risk and pre-approved.
Why this answer
Service requests are pre-approved and typically follow a standard fulfillment process, while incidents are unplanned disruptions.
A service provider is designing a new service. They map the activities and workflows required to deliver the service. Which dimension are they primarily addressing?
Why this answer
Value Streams and Processes focuses on workflows, activities, inputs, outputs, and throughput. The other dimensions are about people, technology, and partners.
An IT organization wants to improve first-contact resolution (FCR) rates. According to ITIL 4, which practice is most directly associated with this metric?
FCR is a common measure of service desk effectiveness.
Why this answer
First-contact resolution is a key performance indicator for the service desk, reflecting its ability to resolve issues on the first interaction.
Which THREE are components of the ITIL 4 Service Value System?
Guiding Principles are part of the SVS.
Why this answer
The Service Value System includes the Guiding Principles, Governance, Service Value Chain, Practices, and Continual Improvement.
A major incident occurs. The IT team implements a workaround to restore service. Which practice is responsible for ensuring that the workaround does not become a permanent solution?
Problem Management aims to find root causes and eliminate workarounds through permanent fixes.
Why this answer
Problem Management will investigate the root cause and identify a permanent fix; Incident Management focuses on restoration.
A company launches a new mobile banking app. Customers can transfer money, view balances, and pay bills. The app is available 99.9% of the time during business hours. Which statement about the app's utility and warranty is TRUE?
Utility is the functionality (transferring money), warranty is the assurance (availability).
Why this answer
Utility is about functionality (what the service does) – transferring money, viewing balances, paying bills. Warranty is about assurance (how the service is delivered) – availability 99.9%. Option B correctly identifies utility for the features and warranty for the availability guarantee.
Option A reverses the concepts. Option C and D incorrectly claim utility is not used.
A service provider delivers a monthly report to a customer. The report is accurate and on time. However, the customer finds the report useless for decision-making because it lacks key metrics. In ITIL 4 terms, which statement is correct?
Output is the deliverable; outcome is the result for the customer.
Why this answer
In ITIL 4, an output is a tangible deliverable (the report), while an outcome is the result of using that output to achieve a goal (informed decision-making). The report is accurate and on time, so the output is satisfactory. However, the customer finds it useless for decision-making due to missing key metrics, meaning the desired outcome is not achieved.
Therefore, option B is correct.
Exam trap
The trap here is that candidates often confuse outputs with outcomes, assuming that if a deliverable is produced correctly (output), the customer automatically gains value (outcome), but ITIL 4 emphasizes that outcomes depend on whether the output enables the desired result.
How to eliminate wrong answers
Option A is wrong because it claims both output and outcome are satisfactory, but the customer explicitly finds the report useless for decision-making, indicating the outcome is not achieved. Option C is wrong because it states the outcome is satisfactory but the output is not; however, the output (the report) is accurate and on time, so it is satisfactory, while the outcome is not. Option D is wrong because it claims both are unsatisfactory, but the output is accurate and on time, so it is satisfactory.
Which metric is most commonly used to measure the effectiveness of the Service Desk?
FCR measures the percentage of issues resolved on first contact.
Why this answer
First Contact Resolution (FCR) is a key service desk metric.
A project team is designing a new service. They decide to reuse an existing reporting module instead of building a new one. Which guiding principle is being applied?
Reusing an existing module is a classic example of starting from what you have.
Why this answer
The guiding principle 'Start where you are' is about using what already exists. Reusing an existing module demonstrates this principle.
An IT team is investigating a recurring network outage. They have identified the root cause as a faulty router configuration. In which phase of Problem Management are they operating?
Problem Control is the phase that includes root cause analysis and identifying the cause.
Why this answer
Problem Control is the phase where root cause analysis is performed and the root cause is identified. Problem Identification is the first phase (detecting problems), and Error Control is the phase where known errors are managed and workarounds are created.
Which ITIL 4 guiding principle is being applied when a team reviews existing processes before designing new ones?
This principle recommends understanding the current state before making changes.
Why this answer
The principle 'Start where you are' encourages leveraging what already exists.
Which component of the ITIL 4 Service Value System provides direction and oversight to ensure that activities are aligned with organizational objectives?
Why this answer
Governance is the component responsible for evaluating, directing, and monitoring the organization's activities.
Match each ITIL 4 guiding principle to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Everything the organization does must map to stakeholder value
Use existing services, processes, and tools as a foundation
Work in small, incremental steps with regular reviews
Involve stakeholders and make work visible to reduce silos
Minimize complexity and eliminate unnecessary steps
Why these pairings
The seven guiding principles are a key part of the ITIL 4 framework.
The exhibit shows a service level agreement (SLA) target and current performance. Which action should be taken to address this?
Improving availability aligns with the target.
Why this answer
The correct action is to investigate and implement improvements to increase availability because the current performance (e.g., 97.5%) is below the SLA target (e.g., 99.9%), and the gap is not within any defined tolerance. ITIL 4 emphasizes continuous improvement, so the service provider should analyze root causes (e.g., using incident management data) and apply corrective measures to meet the agreed target.
Exam trap
The trap here is that candidates may assume a small gap is acceptable (Option B) or that renegotiation (Option C) is a quick fix, but ITIL 4 requires evidence-based decisions and prioritizes improving service performance over adjusting targets.
How to eliminate wrong answers
Option A is wrong because financial penalties are a punitive measure typically reserved for repeated or severe breaches, not a first response to a performance gap, and ITIL 4 prioritizes improvement over punishment. Option B is wrong because ignoring the gap assumes it is within acceptable tolerance, but the exhibit shows a clear deficit below the SLA target with no tolerance band indicated, so inaction would violate the SLA commitment. Option C is wrong because renegotiating the SLA to lower the target would reduce service quality without addressing the underlying issue, contradicting the ITIL principle of aligning services with business needs and continuous improvement.
A hospital's IT department is adopting ITIL 4. They want to define the steps needed to create, deliver, and improve their IT services. Which ITIL 4 component should they use to structure these activities?
Provides the operating model with key activities for value creation.
Why this answer
The Service Value Chain (D) is the correct component because it provides an operating model that outlines the key activities required to respond to demand and facilitate value creation through the creation, delivery, and improvement of services. It consists of six interconnected activities (Plan, Improve, Engage, Design & Transition, Obtain/Build, Deliver & Support) that directly structure the steps needed for service management. The hospital's IT department can use this model to map out the end-to-end processes for developing and enhancing their IT services.
Exam trap
The trap here is that candidates often confuse the Service Value Chain with the Continual Improvement Model, mistakenly thinking that improvement steps alone cover service creation and delivery, whereas the Service Value Chain is the comprehensive operating model that structures all activities from demand to value.
How to eliminate wrong answers
Option A is wrong because the Continual Improvement Model is a structured approach for managing improvement initiatives (e.g., defining vision, assessing current state, implementing improvements), but it does not define the core steps for creating and delivering services; it is a supporting tool rather than the primary operating model. Option B is wrong because the Guiding Principles (e.g., Focus on Value, Start Where You Are) are recommendations that guide decision-making and behavior, not a sequence of activities for service creation and delivery. Option C is wrong because the Four Dimensions of Service Management (Organizations & People, Information & Technology, Partners & Suppliers, Value Streams & Processes) represent holistic perspectives that must be considered, but they do not prescribe the specific steps or workflow for creating, delivering, and improving services.
Which TWO of the following are types of events in Monitoring and Event Management?
Warning events indicate a potential issue.
Why this answer
In ITIL 4, Monitoring and Event Management defines three types of events: Informational, Warning, and Exception. A Warning event (Option B) indicates a condition that may require attention before it becomes critical, such as a disk usage threshold being exceeded. An Informational event (Option C) is a routine notification that does not require action, like a successful backup completion.
Exam trap
The trap here is that candidates confuse 'Exception' (a valid ITIL event type) with 'Emergency' (a change model), and fail to notice that 'Exception' is duplicated in the options, leading them to select it twice instead of recognizing the correct pair of Warning and Informational.
An IT service desk analyst receives a call that users cannot access the CRM system. What should they do FIRST according to ITIL 4?
Logging the incident is the first step, then attempts to restore service.
Why this answer
The first step is to log the incident, as this captures the disruption and initiates the process to restore service.
Which TWO are phases of the Problem Management practice?
Correct. This phase involves root cause analysis.
Why this answer
ITIL 4 describes three phases: problem identification, problem control (root cause analysis), and error control (known errors).
A company's board of directors has defined that all IT investments must align with the organization's strategic objectives. This is an example of which SVS component?
Governance includes the direction and control of the organization.
Why this answer
Governance is the component that evaluates, directs, and monitors the organization. The board setting direction (alignment with strategy) is a governance activity.
Which THREE of the following are consequences of neglecting the Information and Technology dimension?
Security is a key aspect of the Information and Technology dimension.
Why this answer
Neglecting the Information and Technology dimension directly leads to data security breaches because without proper security controls, encryption, and access management, sensitive data becomes exposed to unauthorized access or theft. Outdated technology results from failing to maintain hardware and software lifecycles, causing vulnerabilities and incompatibility with current standards. Inaccurate data arises when data management practices are ignored, leading to corruption, duplication, or loss of integrity across systems.
Exam trap
The trap here is that candidates confuse the consequences of neglecting the Information and Technology dimension with those of other dimensions, such as attributing inefficient workflows or poor vendor relationships to technology rather than to processes or partners.
A service desk agent fulfills a password reset request for a user. According to ITIL 4, which practice does this activity belong to?
Password resets are standard service requests.
Why this answer
Password resets are pre-approved, routine requests, typical of Service Request Management.
A company hires a managed service provider to run its email system. Which cost is typically REMOVED from the consumer by using this service?
These costs are transferred to the provider.
Why this answer
By outsourcing email management, the consumer no longer needs to invest in email server hardware and its maintenance, removing those capital costs.
What is the PRIMARY purpose of the 'Plan' value chain activity in the ITIL 4 service value chain?
The 'Plan' activity aligns the organization's direction.
Why this answer
The 'Plan' activity ensures a shared understanding of the vision, current status, and improvement direction for all four dimensions and products/services. The other options are purposes of other value chain activities: 'Improve' ensures continual improvement, 'Engage' manages stakeholder relationships, and 'Deliver and Support' ensures service delivery and support.
Which dimension ensures that a service is 'fit for use' by managing availability, capacity, and continuity?
This dimension addresses technology that ensures availability, capacity, etc.
Why this answer
Warranty is about being 'fit for use', often addressed by Information and Technology dimension through technical management.
A company is implementing ITIL 4 and wants to ensure that all changes to IT services are managed in a controlled manner. Which practice should they use to balance the need for change with the need to minimize risk?
Change enablement manages the lifecycle of all changes to minimize disruption.
Why this answer
Change enablement is the correct practice because it specifically governs the lifecycle of changes to IT services, ensuring that all changes are assessed, authorized, and implemented in a controlled manner. This practice balances the need for rapid service evolution with the imperative to minimize risk by using standardized procedures, change models, and authorization policies (e.g., pre-approved standard changes, normal changes requiring CAB approval, emergency changes with expedited review).
Exam trap
The trap here is that candidates confuse 'managing changes' with 'fixing incidents' or 'solving problems,' leading them to select incident management or problem management instead of recognizing that change enablement is the dedicated practice for controlled change implementation and risk balancing.
How to eliminate wrong answers
Option A is wrong because incident management focuses on restoring normal service operation as quickly as possible after an unplanned interruption or degradation, not on proactively controlling planned changes. Option C is wrong because problem management aims to identify and eliminate the root causes of incidents, reducing their recurrence, but does not manage the authorization or implementation of changes. Option D is wrong because the service desk provides a single point of contact for users to report incidents and request services, but it does not own the change authorization or risk-balancing process.
A financial services firm uses a legacy on-premise system for customer account management. The IT team is small, with three administrators responsible for all changes, incidents, and problems. Recently, a change to the system's database schema caused a major outage lasting 4 hours. The post-mortem revealed that the change was not properly tested and was implemented without approval. The IT manager wants to prevent such incidents in the future while maintaining agility. The team often needs to make urgent changes to fix critical bugs. What should the IT manager do?
This provides appropriate controls for different change types, including fast-tracking emergency changes.
Why this answer
Option A is correct because implementing a change enablement practice with standard, normal, and emergency change types provides a structured yet flexible framework. Standard changes (pre-approved, low-risk) allow routine tasks to proceed quickly, normal changes require approval and testing, and emergency changes can be fast-tracked with post-implementation review. This balances agility with control, directly addressing the root cause (untested, unapproved change) while enabling urgent bug fixes.
Exam trap
The trap here is that candidates may assume a CAB meeting is always required for all changes, overlooking that ITIL 4 allows standard and emergency change types to maintain agility while ensuring proper testing and approval for high-risk changes.
How to eliminate wrong answers
Option B is wrong because requiring all changes to go through a CAB meeting introduces unnecessary bureaucracy and delays, especially for urgent bug fixes, and would hinder the team's agility. Option C is wrong because documenting the incident but taking no further action fails to prevent recurrence, leaving the same risk of untested, unapproved changes causing future outages. Option D is wrong because restricting changes to only the senior administrator creates a single point of failure and bottleneck, reducing agility and increasing risk if that administrator is unavailable or makes an error.
An IT service desk analyst receives a call that users cannot access the CRM system. According to ITIL 4, what should they do FIRST?
Incident Management aims to restore normal service ASAP.
Why this answer
The first priority is to restore service as quickly as possible, which is the purpose of Incident Management. Option B is correct. Option A is a Problem Management activity; Option C is Change Enablement; Option D is Service Level Management.
An organization wants to improve first-level resolution rates. Which practice should they focus on?
The service desk aims to resolve incidents at first contact (FCR).
Why this answer
Improving first-level resolution rates is a key objective for the service desk, often achieved through shift-left strategies. Option B is correct. Option A is wrong because service level management focuses on SLAs, not resolution rates.
Option C is wrong because incident management is about restoring service, not necessarily first-level resolution. Option D is wrong because problem management focuses on root cause.
What is the primary measure of success for Incident Management?
MTTR measures how quickly service is restored after an incident.
Why this answer
Incident Management is measured by Mean Time to Restore Service (MTTR). Option B is correct. Option A (FCR) is a Service Desk metric.
Option C (CSAT) is customer satisfaction. Option D (MTBF) is used in Availability Management.
Which THREE activities are part of the ITIL service value chain?
Engage is a value chain activity that provides a good understanding of stakeholder needs.
Why this answer
The ITIL service value chain consists of six core activities: Plan, Improve, Engage, Design & Transition, Obtain/Build, and Deliver & Support. 'Engage' (C) is the activity that focuses on understanding stakeholder needs, managing relationships, and ensuring transparency throughout the service lifecycle. It is a fundamental component of the service value chain, not a guiding principle or a process.
Exam trap
The trap here is that candidates confuse ITIL guiding principles (like 'Keep it simple and practical') or specific management practices (like 'Service catalogue management') with the six core service value chain activities, which are explicitly defined and limited to Plan, Improve, Engage, Design & Transition, Obtain/Build, and Deliver & Support.
During a major outage, a team implements a temporary workaround to restore service. Which ITIL 4 practice is primarily responsible for this action?
Incident Management focuses on restoring service quickly, often using workarounds.
Why this answer
Incident Management is responsible for restoring service as quickly as possible, even with a workaround. Option A is correct. Problem Management would later diagnose the root cause.
Service Desk may log the incident but the restoration action is Incident Management.
In ITIL 4, which statement correctly distinguishes an output from an outcome?
Why this answer
Option A is correct because in ITIL 4, an output is defined as a tangible or intangible deliverable produced by a service or process (e.g., a report, a software build, or a server configuration), while an outcome is the result for a stakeholder that is enabled by the output, such as increased productivity or reduced risk. This distinction is fundamental to the Service Value System (SVS), where outputs are the means to achieve outcomes that drive value for stakeholders.
Exam trap
The trap here is that candidates confuse the terms by associating 'output' with business results and 'outcome' with deliverables, when in fact ITIL 4 explicitly defines outputs as the deliverables and outcomes as the stakeholder results.
How to eliminate wrong answers
Option B is wrong because it reverses the definitions: an output is not the business result (that is an outcome), and an outcome is not the product (that is an output). Option C is wrong because it incorrectly maps output/outcome to warranty/utility; in ITIL 4, warranty and utility are components of service value, not direct synonyms for output and outcome. Option D is wrong because it states an output is the value achieved (value is realized through outcomes, not outputs) and an outcome is the activity (outcomes are results, not activities).
An organization has identified that a recurring incident is caused by a specific software bug. The bug has been documented, and a workaround is known. What phase of Problem Management is this?
Error Control manages known errors and workarounds.
Why this answer
The phase where known errors are documented and workarounds are maintained is Error Control. Option C is correct. Option A (Problem Identification) detects problems.
Option B (Problem Control) analyzes root causes. Option D (Incident Management) is not a phase of Problem Management.
A service desk is experiencing high ticket volumes for password resets. After analysis, they find that users are not following the self-service password reset process. Which dimension should be improved to address this issue?
Correct. The problem is related to user behaviour and training.
Why this answer
The issue is that users are not following the self-service password reset process, which is a behavioral and procedural problem rooted in how people interact with the system. The 'Organizations and people' dimension focuses on roles, responsibilities, culture, and user adoption, making it the correct dimension to improve by addressing training, communication, or incentives for users to use the self-service tool.
Exam trap
The trap here is that candidates often confuse a user adoption problem with a process or technology issue, incorrectly selecting 'Value streams and processes' or 'Information and technology' when the root cause is behavioral and falls under the 'Organizations and people' dimension.
How to eliminate wrong answers
Option A is wrong because 'Value streams and processes' deals with the design and flow of activities, not user behavior; the process for password reset already exists but is not being followed. Option B is wrong because 'Information and technology' covers the tools and data, but the self-service password reset technology is already in place and functional; the problem is not with the technology itself. Option D is wrong because 'Partners and suppliers' involves external vendors or third-party services, which are not relevant to internal user non-compliance with an existing self-service process.
Which THREE of the following are benefits of applying the ITIL guiding principles?
Correct. The principles guide effective and efficient practices.
Why this answer
Option A is correct because the ITIL guiding principles, such as 'Focus on Value' and 'Keep it Simple and Practical', provide a framework that enables organizations to design, deliver, and improve service management processes in a way that is both effective (achieving desired outcomes) and efficient (optimizing resource use). By applying these principles, organizations avoid wasteful activities and ensure that every process step contributes directly to service quality and stakeholder satisfaction.
Exam trap
The trap here is that candidates often assume ITIL principles are prescriptive guarantees (like eliminating risk or reducing cost) rather than flexible guidelines that help optimize outcomes, leading them to select absolute statements like D or E.
Which activity of the ITIL 4 service value chain focuses on understanding stakeholder needs and managing relationships?
Engage is the activity that interacts with stakeholders to understand needs.
Why this answer
The 'Engage' activity of the ITIL 4 service value chain is specifically designed to understand stakeholder needs, manage relationships, and ensure ongoing transparency and communication. It handles demand intake, feedback loops, and service reporting, directly aligning with the question's focus on stakeholder needs and relationship management.
Exam trap
The trap here is that candidates often confuse 'Engage' with 'Plan' because both involve stakeholders, but 'Plan' is about strategic direction and governance, not the direct, ongoing relationship management and demand capture that 'Engage' handles.
How to eliminate wrong answers
Option A is wrong because 'Deliver and support' focuses on the actual delivery of services and resolution of incidents/requests, not on understanding stakeholder needs or managing relationships. Option B is wrong because 'Improve' is concerned with continual improvement of services and processes based on metrics and feedback, not with the initial or ongoing engagement with stakeholders. Option D is wrong because 'Plan' deals with creating a shared vision, strategy, and tactical plans for service delivery, not with the direct interaction and relationship management with stakeholders.
Which THREE of the following are ITIL 4 management practices?
Service Desk is a practice.
Why this answer
Service Desk, Incident Management, and Problem Management are ITIL 4 management practices. Project Management and Financial Management are not part of the ITIL 4 practices list.
Which of the following is an example of value co-creation?
Consumer input helps co-create value.
Why this answer
Value co-creation occurs when the consumer contributes to achieving outcomes, e.g., by providing data or feedback.
In ITIL 4, which role is responsible for defining the requirements for a service and ensuring the provider meets them?
The customer defines requirements and ensures the provider meets them.
Why this answer
The customer defines requirements and approves the service. The user uses the service, and the sponsor authorizes budget.
Which TWO of the following scenarios best illustrate the principle 'Progress iteratively with feedback'?
Feedback loops are central to this principle.
Why this answer
This principle involves working in timeboxed iterations and incorporating feedback loops. Option A (split large release into smaller ones) and Option C (collect feedback after each sprint) directly reflect this. Option B (assess current tools) is 'Start where you are'.
Option D (involve all teams) is 'Collaborate and promote visibility'. Option E (automate manual tasks) is 'Optimise and automate'.
Practice ITIL4F by domain
Target a specific domain to shore up weak areas.