ISO/IEC 20000 Foundation Exam Questions and Answers
What is the purpose of information security controls?
What do the principles Adapt and Adopt mean?
When managing a major incident, what is one of the activities that needs to be performed?
Which document defines the scope of services to be delivered by an external supplier who implements and operates some parts of the service management processes?
What should be done to handle risks and opportunities?
What is a responsibility of the organization regarding supplier management as defined in ISO/IEC 20000-1?
What process, other than business relationship management, reviews service performance with the customer?
Which is not an example of configuration information for a CI?
Identify the missing words in the following sentence. The definition of the scope of the SMS shall include the services in scope and the [???] managing and delivering the services.
How are ISO/IEC 20000 Parts 1, 2, and 3 used?
One of the activities required for effective planning, coordination, and evaluation of requested changes is assessing the impact and required resources. Which process or function is responsible for this activity?
Which audit, performed by the Registered Certification Body, is required to be carried out at least annually?
What is the relationship between ISO/IEC 20000-1, ISO 9001 and ISO/IEC 27001?
How many years is an ISO/IEC 20000-1 certificate valid for the Certification scheme?
at is the difference between a nonconformity and an observation?