EXIN Foundation in IT Service Management based on ISO/IEC 20000 — Question 5

An airline company employee notices that she has access to one of the companys applications that she has not used before. Is this an information security incident?

Answer options

• A. Yes
• B. No

Correct answer: B

Explanation

This situation does not necessarily indicate an information security incident since the employee may have legitimate access to the application that she was simply unaware of. An incident typically involves unauthorized access or a breach, which is not implied here.