ITIL4F ITIL Management Practices Practice Question
An IT service desk analyst receives a call that users cannot access the CRM system. What should the analyst do FIRST?
⚠ Common exam trap
Many exam-takers confuse the urgency of restoring service with the procedural necessity of logging, leading them to jump to escalation or workaround steps before creating the formal record.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Log the incident in the ITSM tool
The first action for any incident, including a CRM system outage, is to log the incident in the ITSM tool. This ensures a formal record is created with details such as user impact, timestamp, and symptoms, which is the foundation for all subsequent incident management activities per ITIL 4. Without logging, there is no auditable trail or basis for prioritization, escalation, or problem management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Search the known error database for a workaround
Why it's wrong here
Searching the known error database for a workaround is a resolution activity, not the initial step when a user reports an issue. Before attempting to resolve or find a solution, the incident must first be formally recorded. Logging the incident ensures it is tracked, prioritized, and managed according to established service level agreements, providing a critical foundation for all subsequent actions.
- ✗
Inform the user that a problem has been raised
Why it's wrong here
Informing the user that a problem has been raised is premature and incorrect for an initial user call about an interruption. An incident is an unplanned interruption to a service, while a problem is the underlying cause of one or more incidents. Problem management is a separate practice focused on root cause analysis and prevention, typically initiated after multiple incidents or when an incident cannot be resolved quickly, not as an immediate response to a single service interruption.
- ✗
Escalate the call to Level 2 support
Why it's wrong here
Escalating the call to Level 2 support as the first action bypasses critical initial incident management steps. Escalation, whether functional or hierarchical, should occur only after the incident has been logged, initially assessed, and the service desk has determined it cannot resolve the issue within its capabilities or target resolution times. Bypassing these steps can lead to inefficient resource utilization and a lack of proper incident tracking.
- ✓
Log the incident in the ITSM tool
Why this is correct
Logging the incident in the ITSM tool is the foundational first step in the incident management process. This action creates a formal record of the service interruption, enabling tracking, prioritization, and communication throughout its lifecycle until resolution. Proper logging ensures accountability, facilitates adherence to service level agreements, and provides valuable data for future analysis and problem identification.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ITIL4F question from scratch — 805 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.