A manufacturing company is assessing risks for a new automated production system. The risk team has limited historical data but has gathered expert opinions. They need to decide whether to use qualitative or quantitative analysis. The company's leadership wants a clear financial justification for risk responses. What should the risk team do?

Use scenario analysis only, without assigning probabilities

Use quantitative analysis despite limited data, using expert estimates as inputs

Use qualitative analysis because it is faster and requires less data

Skip analysis and proceed directly to risk treatment

A healthcare provider is implementing a new patient portal. During risk identification, the team notes that a data breach could lead to loss of patient trust and negative media coverage. How should this risk be categorized, and what is the primary reason for this categorization?

Reputational risk, because the main impact is on the organization's image and stakeholder trust

Financial risk, because a breach could lead to fines and legal costs

Operational risk, because it affects the daily functioning of the portal

Strategic risk, because it could derail the entire digital strategy

A logistics company is evaluating risks for a new route optimization system. The risk team has limited data on the likelihood of system failures but has expert opinions and historical data from similar projects. They need to prioritize risks for further action. Which approach is most appropriate?

Risk evaluation using a risk appetite statement

Quantitative analysis using Monte Carlo simulation

Qualitative analysis using a probability-impact matrix

Scenario analysis using best-case and worst-case outcomes

An energy company is evaluating risks for a new smart grid project. The risk team has historical data on equipment failures and can estimate the probability and impact of each risk. They need to prioritize risks based on their expected monetary value. Which method is most appropriate?

Scenario analysis using best-case and worst-case outcomes

Qualitative analysis using a probability-impact matrix

Risk evaluation using a risk appetite statement

Quantitative analysis using expected monetary value (EMV)

ITIL 4 Strategic Leader

Domain 13Objective 2

In the Context of Digital and IT Strategy, Explain How To ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 6)

Part of the Understand the risks and opportunities of Digital and IT Strategy domain, which makes up ~11% of our current practice bank.

31questions here

7free pages

7concepts

Questions 26–30

26expert · hard
A manufacturing company is assessing risks for a new automated production system. The risk team has limited historical data but has gathered expert opinions. They need to decide whether to use qualitative or quantitative analysis. The company's leadership wants a clear financial justification for risk responses. What should the risk team do?
Select an answer first
27foundation · easy
An organization wants to identify risks by bringing together stakeholders from different departments to brainstorm and discuss potential issues with a new IT strategy. Which technique is most appropriate for this purpose?
Select an answer first
28application · medium
A healthcare provider is implementing a new patient portal. During risk identification, the team notes that a data breach could lead to loss of patient trust and negative media coverage. How should this risk be categorized, and what is the primary reason for this categorization?
Select an answer first
29application · medium
A logistics company is evaluating risks for a new route optimization system. The risk team has limited data on the likelihood of system failures but has expert opinions and historical data from similar projects. They need to prioritize risks for further action. Which approach is most appropriate?
Select an answer first
30application · medium
An energy company is evaluating risks for a new smart grid project. The risk team has historical data on equipment failures and can estimate the probability and impact of each risk. They need to prioritize risks based on their expected monetary value. Which method is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ITIL-4-STRATEGIC-LEADER-MODULES

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by PeopleCert. “ITIL-4-STRATEGIC-LEADER-MODULES” is a trademark of its owner, used for identification only.

In the Context of Digital and IT Strategy, Explain How To ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 6)

Questions 26–30

An organization wants to identify risks by bringing together stakeholders from different departments to brainstorm and discuss potential issues with a new IT strategy. Which technique is most appropriate for this purpose?

A healthcare provider is implementing a new patient portal. During risk identification, the team notes that a data breach could lead to loss of patient trust and negative media coverage. How should this risk be categorized, and what is the primary reason for this categorization?

A logistics company is evaluating risks for a new route optimization system. The risk team has limited data on the likelihood of system failures but has expert opinions and historical data from similar projects. They need to prioritize risks for further action. Which approach is most appropriate?

An energy company is evaluating risks for a new smart grid project. The risk team has historical data on equipment failures and can estimate the probability and impact of each risk. They need to prioritize risks based on their expected monetary value. Which method is most appropriate?

Keep studying — Understand the risks and opportunities of Digital and IT Strategy