PCES-30-01 PCES – Certified Entry-Level Security Specialist with Python Practice Questions
Prepare for PCES-30-01 with more than an answer.
- Level
- Entry-Level
- Valid for
- 7 years
Domains covered on the exam 4
- Security Essentials22%
- IT Systems Security27%
- Python for Security Operations29%
- Secure Development & Implementation in Python22%
- 1
A systems administrator is configuring a new web server. To ensure the server is resilient against emerging threats, the administrator configures a daily cron job to check for and apply security patches automatically. This practice best exemplifies which core security principle?
Show answer details
Correct answer: B
Security is not a "set it and forget it" endeavor. Because threats continually evolve, systems must be continuously monitored and updated (patched) to mitigate risks from newly discovered vulnerabilities.
- 2
An organization is deploying a new technical safeguard at its network perimeter. The primary requirement is that the device must actively analyze incoming network traffic for known attack signatures and automatically drop malicious packets before they reach the internal network. Which technology should be implemented?
Show answer details
Correct answer: C
An Intrusion Prevention System (IPS) sits inline on the network and actively blocks or drops traffic that matches known threat signatures. An IDS only monitors and alerts, while a firewall primarily blocks based on ports, protocols, and IP addresses rather than deep packet signature analysis.
- 3
Background:
A healthcare provider is migrating its patient portal to a cloud environment. The development team needs access to patient records to test a new machine learning diagnostic feature.Current State:
The developers are currently using a direct copy of the production database in their testing environment. All developers have administrative access to the test database to facilitate rapid prototyping.Requirement:
The security architect mandates that the organization must comply with HIPAA regulations, reduce insider threat potential, and protect sensitive patient data without halting development.Which combination of organizational safeguards MUST be applied to meet the security architect's requirements?
Show answer details
Correct answer: B
To protect sensitive health data during development, production data must never be used raw in testing environments. The environments must be isolated, the data must be anonymized (or masked) to comply with regulations like HIPAA, and developers should only have the minimum access rights necessary (least privilege).
flowchart TD Prod[(Production DB)] -->|Anonymization Process| Masked[(Masked Data)] Masked --> TestEnv[Isolated Test Environment] Dev[Developer] -->|Least Privilege Access| TestEnv - 4
A junior system administrator is tasked with hardening a newly provisioned Linux server before it is placed into production. Which TWO of the following actions represent sequential, standard stages of a system hardening process? (Select TWO)
Show answer details
Correct answer: B, C
System hardening involves reducing the attack surface. Key sequential stages include removing unnecessary services/software, applying OS and application updates, and configuring secure settings (like password policies and firewall rules).
Applying security updates is a critical stage in the system hardening process to eliminate known vulnerabilities before the system goes live.
- 5
A regional hospital recently upgraded its electronic health record (EHR) system. The new system requires doctors to use a smart card and a PIN to log in, and it permanently records every patient file accessed, modified, or printed, linking these actions directly to the doctor's unique ID. While Confidentiality, Integrity, and Availability are maintained, which specific security concept is primarily enforced by the permanent recording of these actions?
Show answer details
Correct answer: B
Accountability extends the CIA triad by ensuring that actions within a system can be traced back to a specific user or entity. By permanently recording every action linked to a doctor's unique ID, the hospital ensures that users are held responsible for their actions.
- 6
A financial services organization is reviewing its risk management framework. During a tabletop exercise, the incident response team analyzes a scenario where a threat actor sends a deceptive email appearing to be from the CEO, tricking a junior accountant into transferring funds to an offshore account. Which TWO of the following classifications best describe this threat and the appropriate layered defense measure? (Select TWO)
Show answer details
Correct answer: B, D
The scenario describes a Business Email Compromise (BEC), which is a form of phishing and social engineering where attackers manipulate employees into performing actions.
Layered defenses (defense in depth) for social engineering include combining technical controls like MFA for sensitive transactions with administrative controls like employee training.
