Password resets and confirming customer identity are recognised Service Desk responsibilities within Information Security Management, making statements 1 and 3 correct.

Password resets are security-sensitive activities because changing credentials can provide access to organisational systems and data. Consequently, analysts must follow established identity-verification procedures before performing such actions. Confirming that the person requesting access or credential changes is legitimately entitled to them protects against social engineering, impersonation, and unauthorised access.

Updating an SLA is not an Information Security Management responsibility performed by an analyst as part of this activity. Likewise, Service Desk Analysts would normally report or escalate suspected security breaches according to policy rather than independently issuing formal disciplinary warnings to customers.

SDA v9 explicitly includes Information Security Management among the core ITSM practices analysts must understand. Identity confirmation and password/login resets are established Service Desk security responsibilities. This distinction matters because frontline analysts frequently serve as a control point between customers and protected organisational resources. Therefore, B – 1 and 3 – is correct.