In India, it is legally mandatory for which of the following to report on cyber security incidents ? 1. Service providers 2. Data centres 3. Body corporate Select the correct answer using the code given below :

Describes a licensing regime for Internet Service Providers (400 licences, 128 signed) indicating an existing regulatory framework governing ISPs.

A student could check typical ISP licence conditions (reporting/notification clauses) or compare licence-era regulations around 2017 to see if incident-reporting was mandated.

Reports high counts of cybercrime cases (city-level FIRs) and notes technology makes detection challenging, implying government and police engagement with cyber incidents.

One could infer that high incident levels might motivate legal obligations for providers; verify by looking up 2017 policies or advisories from law enforcement/Ministry of Home Affairs on mandatory reporting.

Shows the government imposed specific rules on digital service providers (equalisation levy withheld by Indian companies), demonstrating precedent for targeted regulation of service providers.

Use this as a pattern that India enacted service-specific regulatory duties; search for contemporaneous cyber/security-specific rules applying analogous obligations (e.g., reporting) to service providers in 2017.

States absence of an enacted Act to regulate cryptocurrencies even after major regulatory steps, illustrating that in some digital domains India lacked formal legislation as of the dates referenced.

As a cautionary counter-pattern, a student could use this to argue that absence of an Act in one tech area means specific legal obligations (like mandatory incident reporting) are not automatic—so they should look for explicit rules or advisories from 2017.