SDI Risk Assessment & Management 3

Question 1

Which framework is MOST commonly referenced by SDI for aligning risk management with IT service management practices?

Accepted Answer

ITIL 4

Answer

ITIL 4 provides guidance on risk management as part of the service value system, making it the primary framework referenced by SDI.

Question 2

A risk that has been accepted by management but continues to be monitored is classified as:

Accepted Answer

Residual risk under watch

Answer

When a risk is accepted but still monitored, it becomes a residual risk under watch to ensure conditions do not change.

Question 3

Which stakeholder role is typically assigned ownership of a risk in a service desk risk register?

Accepted Answer

The person with accountability and authority to manage that risk

Answer

Risk ownership is assigned to the individual with the authority and accountability to manage or mitigate the specific risk.

Question 4

During a business impact analysis (BIA), what is the key output that directly informs risk prioritization?

Accepted Answer

The criticality and recovery requirements of business services

Answer

A BIA identifies which services are most critical and what recovery objectives they require, directly shaping how risks are prioritized.

Question 5

A service desk implements multi-factor authentication to reduce the risk of unauthorized access. This is an example of:

Accepted Answer

Risk mitigation

Answer

Adding controls such as multi-factor authentication reduces the likelihood or impact of a risk, which is risk mitigation.

(SDI) Service Desk Institute Certifications Practice Test