Exin EPI Certified Information Technology Manager CITM Exam Questions

Answer : D

Requests for password resets from unknown individuals suggest social engineering attacks, such as phishing or impersonation, where attackers manipulate users to gain unauthorized access. An information security awareness program should focus on educating staff about social engineering tactics to recognize and prevent such incidents.

E-mail usage (A), instant messaging (B), and internet usage (C) may be vectors for attacks, but the core issue is social engineering, which encompasses tactics used across these channels.

Answer : A

A Critical Success Factor (CSF) in IT services review, as per ITIL's service management framework, is to evaluate deliverables before meeting the customer for an IT service review (A). This ensures that the IT service provider has thoroughly assessed service performance, identified issues, and prepared actionable insights or recommendations to discuss with the customer. Pre-evaluating deliverables enables a productive review meeting, ensuring alignment with customer expectations and service level agreements (SLAs).

Suitable location (B): Logistical factors like location are not critical to the success of the review process.

Explain shortcomings and bottlenecks (C): While transparency is important, focusing only on issues without prior evaluation may undermine the review's effectiveness.

Inform customers on improvements (D): Informing about improvements is part of the review but not the CSF; evaluation of deliverables is the foundation for meaningful discussions.

Answer : B

An SLA's section on estimated system response times focuses on ensuring the system meets performance expectations. Key factors for successful delivery include:

Technical specifications of the system (A): Defines the system's capabilities (e.g., processing power, architecture) critical for response times.

Skills and knowledge of staff (C): Ensures the IT team can manage and optimize the system for performance.

Technical specifications of the IT infrastructure (D): Includes network, servers, and storage, which directly impact response times.

Price for the IT service (B) is not a direct factor in achieving system response times, as it relates to cost negotiation rather than technical performance. While budget may influence resource allocation, it's not a key factor in delivering the SLA's performance metrics.

Answer : D

In a fast-changing business environment, a Change Manager (D) is responsible for guiding the change process in a controlled manner. According to ITIL, the Change Manager oversees the change management process, ensuring that changes to IT services or infrastructure are assessed, approved, and implemented with minimal disruption to business operations. This role is critical when rapid business changes require structured control to maintain stability and alignment with organizational goals.

Risk Manager (A): Focuses on identifying and mitigating risks, not directly managing change processes.

Service Level Manager (B): Ensures service levels meet agreed standards, focusing on service delivery rather than change control.

Business Relationship Manager (C): Manages relationships with business stakeholders to align IT services with needs, not specifically change processes.

The Change Manager's role, as defined in ITIL's change management framework, is essential for controlling the pace and impact of changes in a dynamic environment.

Answer : D

In ITIL, the service operation phase focuses on delivering and managing services, including activities like communicating scheduled outages (A), reporting service performance (B), and handling escalations (C). Defining service strategy (D) is part of the service strategy phase, not service operation, as it involves planning and aligning services with business goals.

Answer : A

For a budget proposal that must be as accurate as possible and supported by a Work Breakdown Structure (WBS) or Product Breakdown Structure (PBS), the bottom-up estimate (A) is preferred. This method involves estimating costs for each task or deliverable in the WBS/PBS, then aggregating them to calculate the total budget. According to PMBOK, bottom-up estimation leverages detailed data, ensuring high accuracy, especially when a WBS is available.

Rough Order of Magnitude (ROM) (B): A high-level estimate with low accuracy (50%), used early in projects, not suitable for detailed budgeting.

Analogous estimate (C): Relies on historical data from similar projects, less accurate than bottom-up when detailed WBS data exists.

Budget estimate (D): A general term, not a specific technique, and less precise than bottom-up.

Answer : B

For a mission-critical application in a financial institution requiring data to be instantly available at two locations, synchronous replication (B) is recommended. Synchronous replication ensures that data is written to both the primary and secondary locations simultaneously, guaranteeing no data loss and immediate availability at both sites. This is critical for financial applications where data integrity and zero recovery point objective (RPO) are essential, as per business continuity and disaster recovery frameworks like ISO 22301.

Instant replication (A): Not a standard term in replication strategies; likely a distractor.

Asynchronous replication (C): Data is replicated with a delay, risking data loss in case of failure, unsuitable for instant availability.

Semi-synchronous replication (D): A compromise where the primary site continues after the secondary acknowledges receipt, but it may not guarantee instant availability.

Synchronous replication ensures real-time data consistency, critical for financial systems.