For my SAC, there were questions on:
1. Consequences of data loss (loss of income, loss of reputation etc.)
2. Identify the breach of law (and name the law and how) - make sure you memorise each law along with the date (and have a rough idea what it covers).
3. Identify the ethical problem
4. Identify threats to data and provide a strategy to fix this problem (had to list 5).
5. Name advantages of cloud computing
6. Disadvantages of cloud computing
7. Design a data recovery plan (focus on the entire back up process)
8. How to test the data recovery plan
9. Evaluation criteria.
Think there were a couple of other questions, can't remember them.
For all questions you had to make it relevant to the scenario provided.
I found it was a pretty easy sac, completed it in about 30 to 40 minutes (spent the rest of the time double checking thoroughly). Just cram information from Mark Kelly's website, it pretty much has everything you need to know. Don't neglect any advice from your teacher, they might be dropping hints about the SAC.