ITIL4F Key Concepts of ITIL 4 Practice Question
In ITIL 4, which of the following is an example of a risk removed from the service consumer by using a service?
⚠ Common exam trap
A common mix-up: candidates confuse 'risk removal' with 'cost reduction' or 'responsibility sharing,' leading them to select options like regulatory fines or employee error, which are typically retained or shared risks, not fully removed by the service provider.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Risk of technology obsolescence of the underlying hardware
Using a service transfers the risk of technology obsolescence of the underlying hardware to the service provider. In ITIL 4, the service consumer no longer owns or manages the physical infrastructure, so the provider is responsible for hardware lifecycle management, upgrades, and end-of-life replacement, effectively removing that risk from the consumer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Risk of technology obsolescence of the underlying hardware
Why this is correct
When a consumer procures a service, particularly cloud or managed services, the responsibility for managing the underlying infrastructure's lifecycle, including hardware upgrades and obsolescence, typically shifts to the service provider. This arrangement effectively transfers the risk of technology obsolescence from the consumer to the provider, as the provider is contractually obligated to maintain current and supported technology to deliver the service. The consumer benefits by consuming the service without bearing the direct burden or financial impact of hardware refresh cycles.
- ✗
Risk of regulatory fines for data protection
Why it's wrong here
While a service provider implements security controls and processes to protect data, the ultimate accountability for regulatory compliance, such as GDPR or HIPAA, often remains with the consumer, who is the data controller. The consumer is responsible for ensuring that the service, as used, meets all applicable legal and regulatory obligations, and therefore retains the risk of fines or penalties resulting from non-compliance, even if a provider's failure contributes to it. This critical compliance risk cannot be fully transferred.
- ✗
Cost of training staff to use the service
Why it's wrong here
The expense associated with educating and developing internal staff to effectively utilize a new service is a direct operational cost, not an uncertain event that could impact objectives (a risk). While inadequate training could lead to risks like inefficient service use or errors, the training cost itself is a planned expenditure. It represents an investment in capability rather than a potential negative deviation from expected outcomes.
- ✗
Risk of employee error in operating the service
Why it's wrong here
The risk of human error by the consumer's own employees when interacting with or operating a service is generally retained by the consumer organization. Even with a well-designed service, the consumer's internal staff are responsible for correct usage and adherence to operational procedures. This internal operational risk is inherent to the consumer's own processes and personnel, and cannot be transferred to an external service provider.
About these practice questions
Courseiva writes every ITIL4F question from scratch — 805 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.