ISO20KF 無料問題集「EXIN ISO / IEC 20000 Foundation」

（A）Information Security Risk assessments should be performed once a year.

（B）Information Security Risk assessments should be performed as a result of the review of every Incident.

（C）Information Security Risk assessments should be carried out by an external auditor to maintain objectivity.

（D）Information Security Risk assessments should be performed at agreed intervals and be maintained during Changes.

（A）That the suppliers understand their obligation to the Service Provider

（B）That business transactions between all parties are recorded

（C）That information on the performance of all suppliers can be observed and acted upon

（D）That it is made clear that the supplier cannot subcontract part of the delivered services to the Service Provider

（A）an updated Operational Level Agreement

（B）the policies, plans and procedures of each process or set of processes

（C）cost, organizational, technical and commercial impact

（D）the Service Management plan

（A）Standard products

（B）Customer communication

（C）Social responsibility

（D）Employee motivation

（A）The resilience of the infrastructure components should be measured and included in the Capacity plan.

（B）A Capacity plan documenting the actual performance and the expected requirements should be produced at least annually.

（C）The Service Catalog should be maintained and kept up-to-date.

（D）Decisions about service provision should be based on cost effectiveness comparisons.

（A）The Change process should be completely bypassed.

（B）Only the senior manager should authorize emergency Changes.

（C）There is a separate process for emergency Changes.

（D）Where possible the Change process should be followed.

（A）Customer satisfaction

（B）Resource utilization

（C）Major non-conformities

（D）Problems

（A）IT Service Continuity Management

（B）Capacity Management

（C）Financial Management for IT Services

（D）Availability Management

（A）The appointment of a specialist department responsible for the development of the process structures

（B）Buy-in specifically from the levels in the organization which will be operationally involved in IT Service Management activities

（C）The involvement and commitment of personnel at all levels in the organization from operational staff to top management

（D）A top-down approach whereby the management of the organization strongly and visibly enforces the implementation

（A）the Release dates

（B）the Request for Change (RFC)

（C）the Incidents related to a Release in the period following a Release

（D）the frequency and types of Releases