Understand the Role of Risk and Risk Management in DPI (1.2.1.3, 2.3, 2.3.1-2) ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is developing an innovative IoT product. The team identifies a risk that the product may not comply with new data privacy regulations. They decide to monitor regulatory changes and adjust the product design accordingly. Which risk management method does this represent?

   • ARisk response
   • BRisk assessment
   • CRisk transfer
   • DContinuous risk monitoring
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of continuous risk monitoring in a digital innovation initiative?

   • ATo assign a single owner for all risks
   • BTo ensure that all risks are transferred to external parties
   • CTo eliminate the need for risk assessment
   • DTo identify new risks and track the effectiveness of risk responses over time
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does risk management integrate with the governance component of the service value system (SVS)?

   • AGovernance is only involved when risks become issues
   • BGovernance sets the risk appetite and provides direction for risk management activities
   • CGovernance eliminates the need for risk management
   • DGovernance is responsible for executing all risk responses
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization is developing a new customer-facing analytics dashboard. The team has identified a risk that the dashboard may expose sensitive customer data due to a misconfigured access control. They decide to implement role-based access control (RBAC) and conduct a security review before launch. Which risk response strategy are they applying?

   • ARisk mitigation
   • BRisk avoidance
   • CRisk acceptance
   • DRisk transfer
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization is integrating risk management into its service value system. They have a high risk appetite for innovation but a low tolerance for compliance risks. How should they approach risk management to balance these conflicting appetites?

   • AAdopt a single risk appetite for all risks to simplify management.
   • BApply a differentiated risk appetite, with stricter controls for compliance risks and more flexibility for innovation risks.
   • CPrioritize innovation and accept all compliance risks.
   • DAvoid all innovation to eliminate compliance risks.
   Reveal Solution Discussion Select an answer first