ITIL4F ITIL Management Practices Practice Question
What is the PRIMARY difference between a problem and an incident?
⚠ Common exam trap
It's easy for candidates to confuse the symptom (incident) with the cause (problem) and assume time-based or role-based distinctions, when ITIL 4 explicitly defines them by their purpose and lifecycle, not by arbitrary metrics or logging sources.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Incidents are unplanned interruptions; problems are the cause of incidents
The primary difference is that an incident is an unplanned interruption or reduction in quality of an IT service, while a problem is the underlying cause of one or more incidents. In ITIL 4, incidents are managed to restore normal service operation as quickly as possible, whereas problems are analyzed to identify and eliminate root causes to prevent recurrence. This distinction is foundational because incidents are reactive events, while problems drive proactive improvement through problem management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Incidents are unplanned interruptions; problems are the cause of incidents
Why this is correct
An incident, according to ITIL 4, is an unplanned interruption to a service or a reduction in the quality of a service. Its primary goal is to restore normal service operation as quickly as possible. Conversely, a problem is defined as a cause, or potential cause, of one or more incidents, even if the cause is not yet known. Problem management focuses on identifying these root causes and preventing future incidents, or at least minimizing their impact, making this the fundamental differentiating factor.
- ✗
Incidents are always resolved within 24 hours; problems may take longer
Why it's wrong here
This statement is incorrect because the resolution time is not the primary differentiator between an incident and a problem. While many incidents are resolved quickly, critical incidents can take days or even weeks to fully restore service, depending on their complexity and impact. Conversely, some problems might have their root cause identified relatively quickly, even if the permanent fix takes longer. The distinction lies in their nature: an incident is the disruption, while a problem is its underlying cause, regardless of the time taken for resolution.
- ✗
Problems are logged by users; incidents are logged by the service desk
Why it's wrong here
This option is inaccurate because both incidents and problems can be logged by various stakeholders, not exclusively by specific roles. Users commonly log incidents when they experience a service interruption, often via a self-service portal or directly with the service desk. The service desk, in turn, logs incidents reported by users and may also log problems based on recurring incidents or proactive analysis. Therefore, the logging party does not define the fundamental difference between an incident and a problem.
- ✗
Incidents require a change request; problems do not
Why it's wrong here
This statement is incorrect because both incidents and problems can necessitate a change request, albeit for different purposes. While an incident's immediate resolution might involve a workaround or a quick fix that doesn't always require a formal change, a permanent resolution to a problem almost invariably requires a change to prevent recurrence. Furthermore, even some complex incidents might require an emergency change to restore service. Thus, the requirement for a change request is not a distinguishing factor between them.
Go deeper
Related to this question
About these practice questions
This ITIL4F question is part of Courseiva's 805-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.