A European e-commerce company processes orders from customers across the EU. The security team is implementing network monitoring and access controls. Which compliance requirement is most directly imposed on the company by GDPR?

Obtain explicit written consent for every data processing activity

Store all personal data within the EU at all times

Ensure that personal data is processed lawfully, transparently, and with appropriate security measures

Conduct annual penetration tests on all external-facing systems

A multinational company is subject to both GDPR and PCI DSS. The security team is designing a logging and monitoring solution. Which approach best satisfies both frameworks' requirements?

Implementing centralized logging with role-based access controls and retention policies that meet both GDPR and PCI DSS

Disabling logging for cardholder data to reduce GDPR exposure

Using a single shared admin account for all log access to simplify management

Storing all logs for 10 years to ensure compliance with both frameworks

How does the scope of HIPAA differ from that of PCI DSS?

HIPAA applies to healthcare organizations, while PCI DSS applies to any organization that handles payment card data

HIPAA applies to all organizations in the US, while PCI DSS applies only to financial institutions

HIPAA focuses on financial data, while PCI DSS focuses on health data

HIPAA is an international regulation, while PCI DSS is US-specific

A multinational corporation with subsidiaries in the EU and the US is developing a unified data protection policy. Which approach best addresses the differences between GDPR and US sectoral laws?

Using only the minimum requirements of each law to reduce overhead

Adopting the stricter requirements of GDPR globally to ensure compliance across all regions

Ignoring US laws because GDPR is more comprehensive

Creating separate policies for each subsidiary without coordination

EC-CouncilNetwork Defense Essentials

Domain 2Objective 1

Regulatory Frameworks and Compliance Requirements NDE Practice Questions (Page 3)

Part of the Administrative and Physical Security Controls domain, which makes up ~15% of our current practice bank.

46questions here

10free pages

4concepts

Questions 11–15

11application · medium
A European e-commerce company processes orders from customers across the EU. The security team is implementing network monitoring and access controls. Which compliance requirement is most directly imposed on the company by GDPR?
Select an answer first
12expert · hard
A multinational company is subject to both GDPR and PCI DSS. The security team is designing a logging and monitoring solution. Which approach best satisfies both frameworks' requirements?
Select an answer first
13application · medium
A multinational organization operates a credit card payment gateway (processing cardholder data) and also maintains an HR database with employee records of EU residents. The compliance team needs to map applicable frameworks. Which combination of frameworks applies to this organization?
Select an answer first
14foundation · easy
How does the scope of HIPAA differ from that of PCI DSS?
Select an answer first
15application · medium
A multinational corporation with subsidiaries in the EU and the US is developing a unified data protection policy. Which approach best addresses the differences between GDPR and US sectoral laws?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.