A company that processes credit card transactions must comply with the Payment Card Industry Data Security Standard (PCI DSS). During an incident response, which requirement is most directly tied to PCI DSS compliance?

Notifying affected customers within 72 hours

Maintaining a log of all access to cardholder data

Appointing a Data Protection Officer (DPO)

Conducting a privacy impact assessment

Systems Security Certified Practitioner

Domain 3Objective 2

3.2 - Understand Legal and Regulatory Concerns (e.g., Jurisdiction, Limitations, Privacy) SSCP Practice Questions (Page 5)

Part of the Risk Identification, Monitoring and Analysis domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

15%of the exam

Questions 21–22

21foundation · easy
A company that processes credit card transactions must comply with the Payment Card Industry Data Security Standard (PCI DSS). During an incident response, which requirement is most directly tied to PCI DSS compliance?
Select an answer first
22foundation · easy
A security operations team in a company that processes personal data of European Union residents is designing an incident response plan. Which privacy regulation directly imposes requirements on how they handle personal data during an incident?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

3.2 - Understand Legal and Regulatory Concerns (e.g., Jurisdiction, Limitations, Privacy) SSCP Practice Questions (Page 5)

Questions 21–22

A company that processes credit card transactions must comply with the Payment Card Industry Data Security Standard (PCI DSS). During an incident response, which requirement is most directly tied to PCI DSS compliance?

A security operations team in a company that processes personal data of European Union residents is designing an incident response plan. Which privacy regulation directly imposes requirements on how they handle personal data during an incident?

Keep studying — Risk Identification, Monitoring and Analysis