An organization wants to control how its proprietary documents are used after they are shared with external partners, including restricting printing and forwarding. Which data protection method is best suited for this use case?

Cloud Access Security Broker (CASB)

Digital Rights Management (DRM)

A retail company processes credit card payments and must comply with PCI DSS. The company also stores customer loyalty data that is not subject to PCI DSS. The security team is defining the scope of PCI DSS compliance. Which systems should be included in the PCI DSS scope?

Only the payment terminals at the point of sale

All systems in the company, including loyalty data systems

Only the systems that store, process, or transmit cardholder data

Only the database that stores cardholder data

Certified Information Systems Security Professional

Domain 2Objective 6

2.6 - Determine Data Security Controls and Compliance Requirements CISSP Practice Questions (Page 4)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

10%of the exam

Questions 16–18

16foundation · easy
A company that processes credit card payments must select a security standard to meet contractual obligations with its payment processor. Which standard is most directly applicable to this requirement?
Select an answer first
17foundation · easy
An organization wants to control how its proprietary documents are used after they are shared with external partners, including restricting printing and forwarding. Which data protection method is best suited for this use case?
Select an answer first
18application · medium
A retail company processes credit card payments and must comply with PCI DSS. The company also stores customer loyalty data that is not subject to PCI DSS. The security team is defining the scope of PCI DSS compliance. Which systems should be included in the PCI DSS scope?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.6 - Determine Data Security Controls and Compliance Requirements CISSP Practice Questions (Page 4)

Questions 16–18

A company that processes credit card payments must select a security standard to meet contractual obligations with its payment processor. Which standard is most directly applicable to this requirement?

An organization wants to control how its proprietary documents are used after they are shared with external partners, including restricting printing and forwarding. Which data protection method is best suited for this use case?

A retail company processes credit card payments and must comply with PCI DSS. The company also stores customer loyalty data that is not subject to PCI DSS. The security team is defining the scope of PCI DSS compliance. Which systems should be included in the PCI DSS scope?

Keep studying — Asset Security