Try Free PeopleCert ITILSC-OSA Updated Questions & Answers

Question No. 1

Scenario

NEB is a financial management company that specializes in lending money for substantial property investments. They have a large IT department that is currently using the following ITSM processes:

Service Level Management

Availability Management

IT Service Continuity Management

Information Security Management

Incident Management

Problem Management.

Each of these processes have been implemented within the planned target time and are working effectively and efficiently. Staff have adapted to the changes in a very positive manner and see the benefits of using the ITIL framework.

Last Saturday, there was a security breach. A previous member of staff, who has left the company and joined a competitor organization, has been able to gain access to several client lending files. After initial investigation, it was found that access was not terminated when the staff member left the company -- this has highlighted that there are insufficient processes in place to ensure access rights are terminated when staff leave the company, change roles etc and there is ongoing investigation to see how many other previous staff still have access to the system.

The business has requested immediate recommendations from the IT Manager, as to what can be done to ensure this situation does not happen again and how best to inform clients, with reference to the security breach.

Refer to the scenario.

Which of the following options is most suitable to deal with this situation?

AYour first recommendation is to implement the Access Management process as soon as possible. You suggest that as the IT organization has already effectively and efficiently implemented six processes, they will be able to manage a well executed and fast implementation. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not.
With regards to informing clients, you recommend that clients are not told of the situation as you feel it will be too damaging to the NEB reputation and will result in a catastrophic loss of clientele. You suggest that if clients are contacted by the competitor organization, they cannot prove that any information has been obtained via NEB files and (as there is now a plan to implement Access Management) NEB can confidently reassure clients that there is ample security and access management in place to ensure this situation could never arise.

BYour first recommendation is to implement the Access Management process as soon as possible. You suggest that as the IT organization has already effectively and efficiently implemented six processes, they will be able to manage a well executed and fast implementation. As Access Management is the execution of the policies laid out within the Availability and Information Security Processes, the foundations are already laid. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not. To ensure alignment between the Business and IT, there will need to be integration with the Human Resources department to ensure there are consistent communications with regards to staff identity, start and end dates etc. With regards to informing clients of the breach, you suggest that the clients affected by the breach must be informed ASAP. You recommend a formal letter is sent from senior management to reassure clients that the situation is being taken seriously and what actions are taking place to ensure this never happens again. You are aware that this could damage the company's reputation, as security is a critical success factor, but feel that the specific clients must be informed by NEB ASAP, as there is a high risk they will be approached by the competitor organization.

CYour first recommendation is to implement the Access Management process as soon as possible. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not.
With regards to informing clients of the breach, you suggest that only the specifically affected clients are informed of the breach, via a formal letter sent from senior management to reassure clients that the situation is being taken seriously. You suggest that the tone and focus of the letter should emphasize the following points:
There has been a 'minor' security breach fault of member of staff, who's employment has now been terminated
No data has been 'lost or changed'
Sufficient action has been taken to ensure this situation does not happen again and NEB would like to assure their clients that there security and continued confidence is of the highest importance.

DYour first recommendation is to implement the Access Management process as soon as possible. You suggest that as the IT organization has already effectively and efficiently implemented six processes, they will be able to manage a well executed and fast implementation. This process will ensure that access is provided to those who are authorized to have it and will ensure access is restricted to those who are not.
With regards to informing clients of the breach, you suggest that all clients need to be informed of the breach and the action being taken to ensure this does not happen again. You are aware that this could damage the company's reputation, but are concerned that if only the specifically affected clients are informed, word will spread and the entire client base will feel they have been kept out of the loop on such an important issue and further damage to NEB's reputation will be felt.

Show Answer

Correct Answer: B

Question No. 2

Scenario

Vericom is a leading provider of government, business and consumer telecommunication services, and is currently seeking ways in which to improve its utilization of IT services to drive growth across its' multiple lines of business. One of the largest organizations in the United Kingdom, Vericom is comprised of the following business units:

Verinet (providing ADSL, cable, 3GSM, dialup and satellite services)

Infrastructure Services (planning, installing and maintaining the PSTN and mobile network infrastructure)

VericomTV (Pay TV)

Consumer Sales and Marketing (including 400 Vericom retail outlets)

Business and Government

Finance and Administration

Information Technology Services (Shared Service Unit, however some business units also have their own internal service provider)

Human Resources

Vericom Wholesale (for wholesale of Vericom infrastructure services)

Due to the extensive scope of infrastructure deployed and large employee and customer base, Vericom continues to rely on legacy systems for some critical IT services; however this is seen as a barrier to future organizational growth and scalability of services offered. The CIO of Vericom has also raised the concern that while improvements to the technology utilized is important, this also needs to be supported by quality IT Service Management practices employed by the various IT departments.

The project of improving the IT Service Management practices employed by Vericom has been outsourced to external consultants who are aware of the major IT refresh that is going to be occurring over the next 24 months.

Refer to the scenario.

With Vericom being a large organization (approximately 40 000 staff), some of the business units have developed their own internal IT departments to supplement the services provided by the centralized Information Technology Services (ITS) department. This has occurred due to the specialized needs and requirements for technology, specifically Verinet, VericomTV and Consumer Sales and Marketing.

While the decision has been made that this organizational structure is to remain in place, there has been identified issues relating to a lack of consistency in IT Service Management processes used by the different departments and unclear boundaries for the responsibilities of the various IT Service Desks. This has resulted in:

End users calling the wrong Service Desk, requiring the call to be redirected to the appropriate group

Inconsistency in the categorization and classification of service requests, incidents and problems, causing confusion and frustration when there are multiple IT departments involved

Known Errors being recorded internally within the various IT departments, which may in fact have a wider impact on the whole organization when these are not visible to everyone

Inconsistency in the Service Management systems and tools used for handling service requests, incidents, problems and Known Errors.

From the following responses, which BEST represents the approach you would take to overcome the issues described above?

AYou realize a coordinated approach is the best method, including:
The development of the ITS Service Desk to be the single point of contact for ALL end user (internal) queries. This will be performed over a 6 month period, to take account for any training and transfer of knowledge that needs to occur. This Service Desk will then escalate to the appropriate second line group (from any of the IT departments) as required.
Develop consistency across all departments for categories and priority coding systems used for all service requests, incidents and problems.
Build or purchase a consistent service management tool that will be used by all IT departments for managing incidents, problems, Known Errors and service requests.
Holding regular review sessions involving staff from each of the IT departments to discuss current issues, recurring and potential problems future initiatives.

BYou realize a phased approach is the best method, including four phases:
Phase 1 -- Build or purchase a service management tool that will be used by all IT departments for managing incidents, problems and service requests
Phase 2 -- Standardize the use of ITIL processes used by the ITS department across all IT departments at Vericom
Phase 3 -- Deliver training and awareness sessions for staff regarding the importance of the processes and how they should be used.
Phase 4 -- Review the success of the project and pass any lessons learnt onto future projects

CYou realize a coordinated approach is the best method, including:
Developing a telephone system that will route calls to the appropriate Service Desk based on the user's input. This should also provide the capability for a Service Desk analyst to call them back during peak periods.
Develop consistency in all the categories assigned to service requests, incidents and problems across all IT departments.
Build or purchase a service management tool that will be used by all IT departments for managing incidents, problems, Known Errors and service requests
Hold regular review sessions involving key staff from each of the IT departments to discuss current issues and potential problems.

DYou realize that improving the business awareness of IT is most important, and address the issues by:
Identifying the training requirements of end users to improve their use of IT service
Implement an online Service Catalogue for all IT Services, with self-help capabilities to log and track incidents, problems and service requests
Assist Service Level Management in improving the visibility of the IT organization in general, and identify areas of customer satisfaction that need improving
Build or purchase a service management tool that will be used by all IT departments and end users for managing incidents, problems, Known Errors and service requests

Show Answer

Correct Answer: A

Question No. 3

Functions are best described as?

ASelf-Contained units of organizations

BInter-related activities with a defined goal or output

CClosed loop control systems

DA team of IT staff who provide a single point of contact for all user communication

Show Answer

Correct Answer: B

Question No. 4

Scenario

Vericom is a leading provider of government, business and consumer telecommunication services, and is currently seeking ways in which to improve its utilization of IT services to drive growth across its' multiple lines of business. One of the largest organizations in the United Kingdom, Vericom is comprised of the following business units:

Verinet (providing ADSL, cable, 3GSM, dialup and satellite services)

Infrastructure Services (planning, installing and maintaining the PSTN and mobile network infrastructure)

VericomTV (Pay TV)

Consumer Sales and Marketing (including 400 Vericom retail outlets)

Business and Government

Finance and Administration

Information Technology Services (Shared Service Unit, however some business units also have their own internal service provider)

Human Resources

Vericom Wholesale (for wholesale of Vericom infrastructure services)

Due to the extensive scope of infrastructure deployed and large employee and customer base, Vericom continues to rely on legacy systems for some critical IT services; however this is seen as a barrier to future organizational growth and scalability of services offered. The CIO of Vericom has also raised the concern that while improvements to the technology utilized is important, this also needs to be supported by quality IT Service Management practices employed by the various IT departments.

The project of improving the IT Service Management practices employed by Vericom has been outsourced to external consultants who are aware of the major IT refresh that is going to be occurring over the next 24 months.

Refer to the scenario.

As part of the major refresh of IT systems, it has been agreed that the existing ITIL processes of Incident and Problem Management are not performing adequately. Recent surveys indicate that:

A high percentage of incidents are being escalated to second line support staff

There is inconsistency in the knowledge captured for diagnosing and resolving incidents and problems

Problem Management is predominantly reactive and typically only executed when a large volume of incidents are identified to be of a common root cause

There is little handover of knowledge (including documentation of Known Errors) for many releases deployed, creating significant workloads for the support groups in the weeks following deployment.

Which of the following responses BEST represents the way in which you would seek to improve the situation?

AYou understand the need to review current practices, so you compare current practices against those described in the ITIL volume of Service Operation. You perform a gap analysis, and realize most of the issues relate to inadequate knowledge capture and sharing. You focus on improving this by:
Reviewing the tools and systems used, and develop a business case for acquiring new Knowledge Management Software to be used by the IT division.
Creating rules for the escalation of incident and problems so that higher level support groups are not overloaded
Improving the level of documentation and knowledge capture by running incentive programs rewarding staff for the number of contributions made to the knowledgebase
Conducting training on how to use the refreshed Incident and Problem Management processes.
Developing performance metrics to be reviewed for Incident and Problem Management

BYou communicate the need to review the situation, inviting various stakeholders from the IT departments and other business units to discuss the issues at hand. Your main concern is the lack of communication between various IT groups, so to improve this you focus on:
Improving the Release Policy to be adhered to by the various Release & Deployment teams, stating the documentation and knowledge transfer requirements for the different types of releases performed.
Developing guidelines, procedures and associated incentives for the capture of knowledge relating to incidents, problems and general service requests.
Conducting training and awareness sessions on the requirements for documentation and knowledge capture.
Rotating developers and second line staff through the Service Desk every three months
Develop consistency in the Early Life Support provided by design/specialist staff for major releases
Improving the interfaces between Incident and Problem
Management, particularly those around escalation and problem detection.
Scheduling regular Proactive Problem Management reviews, which will look at trends in incidents and problems, and to identify vulnerable infrastructure components.
Developing metrics that will be used to evaluate the value and performance of the Incident and Problem Management processes.

CYou understand the need for compliance to the defined processes, as currently many staff do not follow prescribed guidelines and procedures. Your efforts focus on improving compliance to the Incident and Problem Management processes by:
Auditing the processes, seeking where exceptions to defined procedures occur
Running awareness sessions to communicate the value and importance of the processes in place
Modifying existing systems and tools so that improve compliance to existing processes
Evaluating which groups are underperforming to identify any training that needs to occur

DYou communicate the need to understand more about the current issues, so you invite the Service Desk, Incident, Problem and Release & Deployment managers to a meeting to review the situation. Your main concern is the lack of documentation and knowledge being recorded by various IT groups, so to improve this you focus on:
Defining the requirements for knowledge capture and transfer (including Known Errors) so that all communication is improved
Improving the tools and systems used for by the various groups for knowledge capture and transfer
Creating rules for the escalation of incident and problems so that higher level support groups are not overloaded
Develop consistency in the Early Life Support provided by design/specialist staff for major releases
Assigning responsibility to the lead infrastructure architect to oversee Proactive Problem Management.
Conducting training on how to use the refreshed Incident and Problem Management processes.
Rotating Service Desk staff through higher level support teams every three months
Developing performance metrics to be reviewed for Incident and Problem Management

Show Answer

Correct Answer: B

Question No. 5

Which ITIL process ensures that the IT Services are restored as soon as possible in the case of a malfunction?

AChange Management

BIncident Management

CProblem Management

DService Level Management

Show Answer

Correct Answer: B

Most Recent PeopleCert ITILSC-OSA Exam Questions & Answers

The questions for ITILSC-OSA were last updated on Dec 23, 2024.

Unlock All Questions for PeopleCert ITILSC-OSA Exam