Exam ITIL4-DPI Topic 1 Question 37 Discussion

Actual exam question for ITIL's ITIL4-DPI exam
Question #: 37
Topic #: 1
A legacy financial system requires the user to manually enter the time and date of transactions to meet regulatory requirements. A recent internal audit has shown that these fields are often blank.
Which are TWO effective controls that could improve compliance?
* Modify the application to automatically add the current date and time when a transaction is entered
* Establish a communication plan to remind users of the importance of including the date and time on transactions
* Develop a goals cascade so that all staff know their role in achieving company goals
* Create a report showing non-compliant records and take appropriate action to correct them

Suggested Answer: D Vote an answer

In DPI,controls are mechanisms to ensure compliance and mitigate risks. Modifying the system to auto- capture date/time (1) is apreventive control, while reporting and correcting non-compliant records (4) is a detective control. Together, these are effective and practical. Communication plans (2) and goals cascades (3) improve awareness but do not guarantee compliance. DPI stresses thattechnical and reporting controls are stronger than relying on human reminders.
(Reference: ITIL 4 Strategist DPI, section on "Controls - preventive and detective mechanisms in governance")

by Venus at Nov 07, 2025, 04:17 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10