Which describes a proactive trigger for problem management?

Automated detection of infrastructure or application faults via event or alert tools is a trigger for incident management or reactive problem management, not a proactive problem management trigger.

A technical support group analyzing an active incident to reveal an underlying problem is a reactive trigger, as it is initiated in response to an ongoing incident.

Suspicion or detection of a cause by the service desk during an active incident is also a reactive trigger, initiated in response to an occurring incident rather than through preventive trend analysis.

Trending historical incident records to identify underlying causes is the defining characteristic of proactive problem management, which seeks to prevent future incidents by recognizing patterns before they escalate. This activity is deliberately initiated through analysis of past data rather than in response to an active incident, making it genuinely proactive. ITIL explicitly separates this from reactive problem management, which is triggered by incidents that have already occurred.