ITIL4F ITIL Management Practices Practice Question
An IT service desk analyst receives a call that users cannot access the CRM system. According to ITIL 4, what should the analyst do FIRST?
⚠ Common exam trap
Many exam-takers confuse incident management with problem management or change management, and incorrectly assume that immediate technical action (like rebooting) or root cause analysis is the first priority, rather than following the prescribed process of logging and categorization.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Log the incident and categorize it
According to ITIL 4, the first action for a service desk analyst when receiving a user-reported outage is to log the incident and categorize it. This ensures the incident is formally recorded, prioritized, and routed to the appropriate support team for resolution. Skipping this step would violate the incident management process, which mandates logging as the initial activity to maintain an accurate audit trail and enable proper escalation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Log the incident and categorize it
Why this is correct
Logging the incident is the foundational first step in the Incident Management practice, ensuring that all service disruptions are formally recorded and tracked. Categorization, which includes assigning impact and urgency, allows for proper prioritization and routing to the appropriate support teams. This systematic approach is crucial for effective incident resolution, service restoration, and subsequent analysis of service performance.
- ✗
Reboot the server immediately
Why it's wrong here
Rebooting a server, while potentially a quick fix, is a resolution action that should only occur after the incident has been properly logged and categorized. Performing any action, even a seemingly simple one, without prior logging risks losing critical information about the incident's initial state and impact. Adhering to the logging protocol ensures that the incident is documented for future analysis, audit trails, and accurate service level reporting.
- ✗
Inform the change manager about a potential emergency change
Why it's wrong here
Immediately informing the change manager about a potential emergency change is premature and bypasses the standard incident management process. An emergency change is a specific, high-impact procedure reserved for critical situations requiring urgent modification to restore service, and its initiation typically follows a more thorough assessment than a service desk analyst's initial call. The primary focus for the service desk is to log and manage the incident, escalating only when the scope and necessary actions are clearer.
- ✗
Start a problem investigation to find the root cause
Why it's wrong here
Initiating a problem investigation to find the root cause is a distinct activity within Problem Management, which is typically undertaken after an incident has been resolved or when recurring incidents indicate an underlying issue. The immediate priority of Incident Management is to restore normal service operation as quickly as possible, minimizing business impact. Root cause analysis is a subsequent, proactive step aimed at preventing future incidents, not the initial response to a live service disruption.
Go deeper
Related to this question
About these practice questions
One of 805 original ITIL4F practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.