Free PeopleCert ITIL v4 Foundation Actual Exam Questions - Question 9 Discussion

Never thought about it like this, but change management (A) does audit alterations that might trigger breaches, so it could help spot issues early, not just access control. A

I see why C might be the go-to since it’s all about permissions and access control. But I’m thinking A could also fit because change management tracks and audits changes that might cause security issues, potentially triggering incident detection. Still, access management (C) sounds more hands-on with catching breaches right when they happen. So I’d trust C for this one.

A vs C? Change management ensures any updates or patches related to security are properly applied and tracked, which can help detect breaches if something goes wrong during a change. Access management definitely handles who gets in, but without proper change management, some breaches might slip through unnoticed. So it’s a bit about prevention and detection working together.

A/C? Change management makes sense too because when changes are made, especially to security settings or systems, it often triggers logging and monitoring for potential breaches. Access management controls permissions, but change management ensures that any modifications that might cause vulnerabilities are tracked, which is important for incident management. So it could be either depending on how you interpret “works with incident management” — is it about controlling access or tracking changes that might expose risks?

C. Access management directly controls and monitors permissions, which helps detect unauthorized access quickly, making it the best fit for working with incident management on breaches.

Maybe D because continual service improvement looks at overall process effectiveness, including how incidents like security breaches are detected and logged, not just access controls.

Guessing A since change management tracks changes that might cause breaches.

It’s C