Understand the Differences Between the Following Key Concepts ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A logistics company's senior management has decided to expand into a new geographic market. They have developed a high-level plan that outlines the overall approach, including the resources required and the expected timeline. This plan is intended to guide the organization for the next three years. Which level of activity does this plan represent?

   • AStrategy
   • BTactics
   • CGovernance
   • DOperations
   Reveal Solution Discussion Select an answer first
2. 2application · easy

   An organization's security team has published a document that recommends, but does not require, that employees use a password manager to store their credentials. The document emphasizes that this is a best practice, but employees are free to use other approved methods. Which type of directive is this document?

   • AProcedure
   • BPolicy
   • CControl
   • DGuideline
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How do controls differ from guidelines in directing behavior?

   • AControls are high-level statements of intent, while guidelines are specific procedures.
   • BControls are optional suggestions, while guidelines are required rules.
   • CControls are mandatory mechanisms that enforce compliance, while guidelines are recommended practices that are not mandatory.
   • DControls and guidelines are the same and can be used interchangeably.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare provider must comply with new data-protection regulations. The compliance officer has implemented a set of automated checks that block any transfer of patient data to unapproved external systems. What is the role of these automated checks in the context of governance, compliance, and management?

   • AThey are management activities that define the organization's mission.
   • BThey are guidelines that recommend best practices for data handling.
   • CThey are controls that enforce compliance with the regulation and the organization's policies.
   • DThey are governance decisions that set the organization's risk appetite.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An organization has a policy that states: 'All data must be encrypted at rest.' The IT department has implemented a technical solution that automatically encrypts all data stored on company servers. Additionally, the security team has published a document that recommends, but does not require, that employees use a specific encryption tool for personal files. Which of the following correctly identifies the policy, the technical solution, and the recommendation?

   • APolicy, guideline, and control
   • BControl, policy, and guideline
   • CPolicy, control, and guideline
   • DGuideline, control, and policy
   Reveal Solution Discussion Select an answer first