Try Free PeopleCert ITILSC-OSA Updated Questions & Answers

Question No. 1

Scenario

NEB is a financial management company that specializes in lending money for substantial property investments. They have a large IT department that is currently using the following ITSM processes:

Service Level Management

Availability Management

IT Service Continuity Management

Information Security Management

Incident Management

Problem Management.

Each of these processes have been implemented within the planned target time and are working effectively and efficiently. Staff have adapted to the changes in a very positive manner and see the benefits of using the ITIL framework.

Last Saturday, there was a security breach. A previous member of staff, who has left the company and joined a competitor organization, has been able to gain access to several client lending files. After initial investigation, it was found that access was not terminated when the staff member left the company -- this has highlighted that there are insufficient processes in place to ensure access rights are terminated when staff leave the company, change roles etc and there is ongoing investigation to see how many other previous staff still have access to the system.

The business has requested immediate recommendations from the IT Manager, as to what can be done to ensure this situation does not happen again and how best to inform clients, with reference to the security breach.

Refer to the scenario.

Which of the following options is most suitable to deal with this situation?

AYour first recommendation is to implement the Access Management process as soon as possible. You suggest that as the IT organization has already effectively and efficiently implemented six processes, they will be able to manage a well executed and fast implementation. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not.
With regards to informing clients, you recommend that clients are not told of the situation as you feel it will be too damaging to the NEB reputation and will result in a catastrophic loss of clientele. You suggest that if clients are contacted by the competitor organization, they cannot prove that any information has been obtained via NEB files and (as there is now a plan to implement Access Management) NEB can confidently reassure clients that there is ample security and access management in place to ensure this situation could never arise.

BYour first recommendation is to implement the Access Management process as soon as possible. You suggest that as the IT organization has already effectively and efficiently implemented six processes, they will be able to manage a well executed and fast implementation. As Access Management is the execution of the policies laid out within the Availability and Information Security Processes, the foundations are already laid. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not. To ensure alignment between the Business and IT, there will need to be integration with the Human Resources department to ensure there are consistent communications with regards to staff identity, start and end dates etc. With regards to informing clients of the breach, you suggest that the clients affected by the breach must be informed ASAP. You recommend a formal letter is sent from senior management to reassure clients that the situation is being taken seriously and what actions are taking place to ensure this never happens again. You are aware that this could damage the company's reputation, as security is a critical success factor, but feel that the specific clients must be informed by NEB ASAP, as there is a high risk they will be approached by the competitor organization.

CYour first recommendation is to implement the Access Management process as soon as possible. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not.
With regards to informing clients of the breach, you suggest that only the specifically affected clients are informed of the breach, via a formal letter sent from senior management to reassure clients that the situation is being taken seriously. You suggest that the tone and focus of the letter should emphasize the following points:
There has been a 'minor' security breach fault of member of staff, who's employment has now been terminated
No data has been 'lost or changed'
Sufficient action has been taken to ensure this situation does not happen again and NEB would like to assure their clients that there security and continued confidence is of the highest importance.

DYour first recommendation is to implement the Access Management process as soon as possible. You suggest that as the IT organization has already effectively and efficiently implemented six processes, they will be able to manage a well executed and fast implementation. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not.
With regards to informing clients of the breach, you suggest that all clients need to be informed of the breach and the action being taken to ensure this does not happen again. You are aware that this could damage the company's reputation, but are concerned that if only the specifically affected clients are informed, word will spread and the entire client base will feel they have been kept out of the loop on such an important issue and further damage to NEB's reputation will be felt.

Show Answer

Correct Answer: B

Question No. 2

Scenario

Vericom is a leading provider of government, business and consumer telecommunication services, and is currently seeking ways in which to improve its utilization of IT services to drive growth across its' multiple lines of business. One of the largest organizations in the United Kingdom, Vericom is comprised of the following business units:

Verinet (providing ADSL, cable, 3GSM, dialup and satellite services)

Infrastructure Services (planning, installing and maintaining the PSTN and mobile network infrastructure)

VericomTV (Pay TV)

Consumer Sales and Marketing (including 400 Vericom retail outlets)

Business and Government

Finance and Administration

Information Technology Services (Shared Service Unit, however some business units also have their own internal service provider)

Human Resources

Vericom Wholesale (for wholesale of Vericom infrastructure services)

Due to the extensive scope of infrastructure deployed and large employee and customer base, Vericom continues to rely on legacy systems for some critical IT services; however this is seen as a barrier to future organizational growth and scalability of services offered. The CIO of Vericom has also raised the concern that while improvements to the technology utilized is important, this also needs to be supported by quality IT Service Management practices employed by the various IT departments.

The project of improving the IT Service Management practices employed by Vericom has been outsourced to external consultants who are aware of the major IT refresh that is going to be occurring over the next 24 months.

Refer to the scenario.

With Vericom being a large organization (approximately 40 000 staff), some of the business units have developed their own internal IT departments to supplement the services provided by the centralized Information Technology Services (ITS) department. This has occurred due to the specialized needs and requirements for technology, specifically Verinet, VericomTV and Consumer Sales and Marketing.

While the decision has been made that this organizational structure is to remain in place, there has been identified issues relating to a lack of consistency in IT Service Management processes used by the different departments and unclear boundaries for the responsibilities of the various IT Service Desks. This has resulted in:

End users calling the wrong Service Desk, requiring the call to be redirected to the appropriate group

Inconsistency in the categorization and classification of service requests, incidents and problems, causing confusion and frustration when there are multiple IT departments involved

Known Errors being recorded internally within the various IT departments, which may in fact have a wider impact on the whole organization when these are not visible to everyone

Inconsistency in the Service Management systems and tools used for handling service requests, incidents, problems and Known Errors.

From the following responses, which BEST represents the approach you would take to overcome the issues described above?

AYou realize a coordinated approach is the best method, including:
The development of the ITS Service Desk to be the single point of contact for ALL end user (internal) queries. This will be performed over a 6 month period, to take account for any training and transfer of knowledge that needs to occur. This Service Desk will then escalate to the appropriate second line group (from any of the IT departments) as required.
Develop consistency across all departments for categories and priority coding systems used for all service requests, incidents and problems.
Build or purchase a consistent service management tool that will be used by all IT departments for managing incidents, problems, Known Errors and service requests.
Holding regular review sessions involving staff from each of the IT departments to discuss current issues, recurring and potential problems future initiatives.

BYou realize a phased approach is the best method, including four phases:
Phase 1 -- Build or purchase a service management tool that will be used by all IT departments for managing incidents, problems and service requests
Phase 2 -- Standardize the use of ITIL processes used by the ITS department across all IT departments at Vericom
Phase 3 -- Deliver training and awareness sessions for staff regarding the importance of the processes and how they should be used.
Phase 4 -- Review the success of the project and pass any lessons learnt onto future projects

CYou realize a coordinated approach is the best method, including:
Developing a telephone system that will route calls to the appropriate Service Desk based on the user's input. This should also provide the capability for a Service Desk analyst to call them back during peak periods.
Develop consistency in all the categories assigned to service requests, incidents and problems across all IT departments.
Build or purchase a service management tool that will be used by all IT departments for managing incidents, problems, Known Errors and service requests
Hold regular review sessions involving key staff from each of the IT departments to discuss current issues and potential problems.

DYou realize that improving the business awareness of IT is most important, and address the issues by:
Identifying the training requirements of end users to improve their use of IT service
Implement an online Service Catalogue for all IT Services, with self-help capabilities to log and track incidents, problems and service requests
Assist Service Level Management in improving the visibility of the IT organization in general, and identify areas of customer satisfaction that need improving
Build or purchase a service management tool that will be used by all IT departments and end users for managing incidents, problems, Known Errors and service requests

Show Answer

Correct Answer: A

Question No. 3

Scenario

Vision Media is an international media organization, operating various lines of business including:

Film Production

Television (production and delivery of their own channel in the United States VisionOne)

Print media (including newspapers in 15 countries)

Online Advertising

The organization has recently been restructured, and now is comprised of the following companies and departments:

Vision Films (production of movies and television shows)

VisionOne (television channel)

VisionNews (coordinates all of the sub-companies involved in the delivery of printed newspapers, as well as being the centralized source of news information for all company owned media outlets)

VisionNet (managing the online and internet businesses)

Legal Services

Finance and Administration

Human Resources

Information Technology

The organization is also actively pursuing growth in the online market, and is currently holding discussions with the leading online news provider about the possible acquisition of their company. This would increase the overall size of Vision Media by around 15%.

The Information Technology department acts as a Shared Service Unit, providing IT Services to all of sub-companies and departments, which complement some of the Internal Service Providers that also exist. The director of Information Technology has realized the need to improve the quality of services offered by implementing ITIL, and has decided to do so using a phased approach. Some of the Service Design and Service Transition processes have already been implemented, and they are now planning the implementation of Service Operation.

While the IT director does have tentative support from the other directors and CEO, budgets for implementing the Service Operation processes have not been finalized, and still require a business case to be formally submitted.

Refer to the exhibit.

Sally Robbins, who had previously managed the IT department's Service Desk, has now been assigned the role of Incident Manager. To assist in the implementation of the process, Sally has conducted a number of meetings with IT staff, customers, external suppliers and other relevant stakeholders to identify their requirements. Based on these discussions, Sally has created following impact definitions, which will be used in conjunction to the given urgency to determine the appropriate timescales and effort applied for response and resolution to recorded incidents.

Impact Definition:

Low Impact

Affects a single user, preventing them from performing normal work functions

A single, non-critical device or peripheral is unavailable

Medium Impact

Multiple users are affected, preventing them from performing normal work functions

A regular business function is unavailable to part of a or organizational unit department

High Impact

A vital business function is unavailable to an entire department or company owned organization

Major Incident

A vital business function is unavailable to all Vision

Media departments and company owned organizations

Example Incidents:

IThe IT manager of Vision Films detects that their dedicated Virtual Private Network linking them to Vision Media's corporate IT systems has failed. This has prevented users from accessing or modifying any file, document or system maintained by the centralized IT department of Vision Media.
II. The vice-president of the Finance and Administration department reports that her laptop keeps rebooting. She has an important report to complete for the Chief Executive Officer.
III. The president of Vision TV is unable to stream high-definition video from a regional office. He requires the regional office's WAN connection to be upgraded to a 14.4 M/bit wireless mobile network.
IV. A IT staff member is alerted to the failure of systems provided by Human Resources to all other departments and sub companies to manage payments and leave for Vision Media employees (and those employed by organizations fully owned by Vision Media)
Which of the following responses provides the correct assignment of impact to the above incidents?

AI. High Impact
II. Medium Impact
III. Not an incident, should be a Request for Change
IV. Major Incident

BI. High Impact
II. Low Impact
III. Not an incident, should be a Request for Change
IV. Major Incident

CI. Major Incident
II. Medium Impact
III. High Impact
IV. Major Incident

DI. High Impact
II. Low Impact
III. Medium Impact
IV. Major Incident

Show Answer

Correct Answer: B

Question No. 4

Which ITIL process ensures that the IT Services are restored as soon as possible in the case of a malfunction?

AChange Management

BIncident Management

CProblem Management

DService Level Management

Show Answer

Correct Answer: B

Question No. 5

Scenario

Vision Media is an international media organization, operating various lines of business including:

Film Production

Television (production and delivery of their own channel in the United States VisionOne)

Print media (including newspapers in 15 countries)

Online Advertising

The organization has recently been restructured, and now is comprised of the following companies and departments:

Vision Films (production of movies and television shows)

VisionOne (television channel)

VisionNews (coordinates all of the sub-companies involved in the delivery of printed newspapers, as well as being the centralized source of news information for all company owned media outlets)

VisionNet (managing the online and internet businesses)

Legal Services

Finance and Administration

Human Resources

Information Technology

The organization is also actively pursuing growth in the online market, and is currently holding discussions with the leading online news provider about the possible acquisition of their company. This would increase the overall size of Vision Media by around 15%.

The Information Technology department acts as a Shared Service Unit, providing IT Services to all of sub-companies and departments, which complement some of the Internal Service Providers that also exist. The director of Information Technology has realized the need to improve the quality of services offered by implementing ITIL, and has decided to do so using a phased approach. Some of the Service Design and Service Transition processes have already been implemented, and they are now planning the implementation of Service Operation.

While the IT director does have tentative support from the other directors and CEO, budgets for implementing the Service Operation processes have not been finalized, and still require a business case to be formally submitted.

Refer to the exhibit.

The IT director is now considering the implementation of the Service Operation functions. However there seems to be overlap between the goals and objectives for each of the functions, which is causing some concern among staff involved in the project.

Which of the following responses BEST describes the objectives of the four Service Operation functions?

A)