ITIL4F Key Concepts of ITIL 4 Practice Question
Which THREE of the following are typical risks that can be transferred from a service consumer to a service provider when using a cloud-based email service?
⚠ Common exam trap
The trap here is that candidates mistakenly think all risks are transferred to the cloud provider, but in reality, risks related to the consumer's own environment (internet access, user training) remain with the consumer, while only risks inherent to the provider's infrastructure and platform operations are transferred.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Risk of hardware failure for email servers
When a consumer uses a cloud-based email service, the provider is responsible for the underlying hardware, including servers, storage, and network infrastructure. Any failure of the email servers (e.g., disk crashes, power supply failures) is a risk that the provider must manage through redundancy and maintenance, thus transferring that risk away from the consumer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Risk of internet connectivity issues
Why it's wrong here
In most standard service models for email, the consumer (user organization) is responsible for providing and maintaining their own internet connectivity to access the service. The service provider's responsibility typically begins at their network edge, ensuring the email platform is accessible from the internet. Therefore, local internet connectivity issues impacting individual users fall outside the provider's direct risk management scope for the email service itself.
- ✓
Risk of hardware failure for email servers
Why this is correct
For an email service, the provider is typically responsible for the physical infrastructure, including the servers, storage, and networking hardware that host the email platform. A hardware failure, such as a disk crash or power supply unit malfunction in an email server, directly impacts service availability and is a primary operational risk that the provider must actively manage through redundancy, monitoring, and maintenance protocols.
- ✓
Risk of security breaches on the email platform
Why this is correct
The security of the email platform itself, encompassing the operating systems, application software, and network configurations, is a core responsibility of the service provider. Risks like unauthorized access, data exfiltration, or denial-of-service attacks targeting the platform's infrastructure are direct threats the provider must mitigate through robust security controls, regular patching, and incident response capabilities.
- ✗
Risk of inadequate user training
Why it's wrong here
User training and ensuring the consumer's employees are proficient in utilizing the email service effectively falls squarely within the consumer's responsibilities. While a provider might offer training materials or services, the ultimate risk of inadequate user adoption or misuse due to lack of training is borne by the consumer organization, impacting their internal productivity rather than the service's operational integrity.
- ✓
Risk of software licensing non-compliance
Why this is correct
When delivering an email service, the provider is responsible for procuring and managing the necessary software licenses for the operating systems, email server applications, and any associated security or management tools. Non-compliance with these licensing agreements, such as under-licensing or using unauthorized software, exposes the provider to significant legal and financial penalties, making it a critical risk to manage.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ITIL4F question from scratch — 531 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ITIL4F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ITIL4F exam.