ITIL4F ITIL Management Practices Practice Question
An IT service desk analyst receives a call that users cannot access the CRM system. What should they do FIRST?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Log the incident with relevant details
The first step in incident management is to log the incident, capturing key details, before proceeding with investigation or escalation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Log the incident with relevant details
Why this is correct
Logging the incident is the foundational first step in the Incident Management practice. It ensures that the service disruption is formally recorded, assigned a unique identifier, and tracked through its entire lifecycle. Capturing relevant details like user contact, symptoms, and impact is crucial for effective diagnosis, communication, and eventual resolution, aligning with the practice's objective of restoring normal service operation as quickly as possible.
- ✗
Search for a known error in the known error database
Why it's wrong here
Searching for a known error is an activity performed during the investigation and diagnosis phase of incident resolution, not as the immediate first response to a user call. A known error represents a problem that has a documented root cause and a workaround or permanent solution. Attempting this search without first logging the incident and understanding its specific symptoms would bypass essential initial steps, potentially leading to misdiagnosis or untracked work.
- ✗
Escalate to the problem management team
Why it's wrong here
Directly escalating an incident to the problem management team as a first action is premature and misaligns with ITIL principles. Problem Management focuses on identifying the root causes of incidents to prevent recurrence, whereas Incident Management's primary goal is to restore service quickly. Escalation within Incident Management (e.g., to a higher support tier) might occur after initial logging and diagnosis, but involving Problem Management is typically reserved for recurring or complex incidents where the root cause is unknown.
- ✗
Reset users' passwords
Why it's wrong here
Resetting users' passwords is a specific potential solution to a particular type of access incident, not a universal first action for a general 'users cannot' report. Before attempting any resolution, an incident must be logged, and initial diagnosis performed to confirm if a password issue is indeed the underlying cause. Jumping directly to a password reset without proper investigation could lead to unnecessary actions, wasted effort, or failure to address the actual problem.
Go deeper
Related to this question
About these practice questions
This ITIL4F question is part of Courseiva's 531-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.