The purpose of the 'monitoring and event management' practice is to systematically observe services and their components. This observation is done to detect and record any changes of state, which are defined as 'events'. The practice then analyzes these events to determine the appropriate control action. This is fundamental for managing operations, identifying potential faults or incidents before they impact users, and automating routine operational tasks.

A. This describes the purpose of the 'service configuration management' practice, which focuses on managing information about Configuration Items (CIs).

C. This describes the purpose of the 'information security management' practice, which is concerned with confidentiality, integrity, and availability of information.

D. This describes the purpose of the 'incident management' practice, which focuses on restoring service operation after a disruption has occurred.

1. AXELOS. (2019). ITIL® Foundation

ITIL 4 edition. TSO (The Stationery Office).

Section 5.2.5

"Monitoring and event management": The purpose is explicitly stated as "to systematically observe services and service components

and record and report selected changes of state identified as events." (This directly supports option B).

Section 5.2.15

"Service configuration management": The purpose is stated as "to ensure that accurate and reliable information about the configuration of services

and the CIs that support them

is available when and where it is needed." (This confirms option A is incorrect).

Section 5.1.8

"Information security management": The purpose is stated as "to protect the information needed by the organization to conduct its business." (This confirms option C is incorrect).

Section 5.2.4

"Incident management": The purpose is stated as "to minimize the negative impact of incidents by restoring normal service operation as quickly as possible." (This confirms option D is incorrect).