01. Why does an organization deploy centralized patch management across its employee workstations?
a) It detects and removes malware already running on a workstation
b) It provides an inventory of the applications installed on each workstation
c) It closes known vulnerabilities on every managed host on a predictable schedule
d) It blocks hostile traffic before it reaches an unpatched workstation
02. A software company writes an incident-response plan covering breaches that affect internal systems and customer data. What is the primary purpose of such a plan?
a) It records the residual risk that each business system has been permitted to carry
b) It defines the roles and escalation path to follow once an incident is detected
c) It specifies the hardening baseline and patch level a new server must meet
d) It documents the retention period applied to archived audit log data
03. Attackers have repeatedly probed a retail company's internet-facing Linux servers. The team wants to reduce what is reachable at the network edge and to see suspicious activity sooner.
Which two controls address those goals?
(Choose two.)
a) Deploy an intrusion detection system that alerts on traffic matching known attack patterns
b) Remove remote administration entirely and manage the servers only from the physical console
c) Filter inbound traffic at a firewall so that only required ports are reachable
d) Move the servers onto the same flat network as the office workstations to simplify management
04. Clinicians share ward workstations that lock after two minutes of inactivity. Re-typing a long password between patients is slowing care, and staff have begun wedging sessions open.
Which response best balances security against usability?
a) Keep the short timeout and add badge-tap re-authentication at each workstation
b) Turn off the automatic lock and rely on staff to log out between patients
c) Issue one shared ward account so staff no longer log in individually
d) Reduce the lock timeout further so unattended sessions are exposed for less time
05. Python scripts collect authentication, firewall and web server logs from a dozen hosts into a single central store.
What does this aggregation make possible that reading each host's logs separately does not?
a) Guaranteeing that no log entry is lost in transit or dropped by the collector
b) Automatically deciding which combinations of events represent an attack
c) Reducing the total volume of log data retained without losing recent history
d) Comparing events from different systems side by side without visiting each host
06. Servers running internal applications forward their log entries to a central collector as the entries are written.
What does forwarding provide that logging only to each host does not?
a) It prevents applications from writing sensitive values into their log records.
b) It keeps a copy beyond the reach of anyone who clears a host's local logs.
c) It reduces the total volume of log data the organization stores.
d) It confirms that each entry was written by the process that claims to have written it.
07. An organization runs a Python-based employee portal that gives staff remote access to payroll records. A security review finds that employees reuse their portal password on external websites, so a phishing incident elsewhere is likely to expose it.
Which control most effectively limits unauthorized account access if that password is exposed?
a) Enable multi-factor authentication
b) Shorten the password expiry interval
c) Raise the minimum password length and complexity
d) Encrypt the payroll database at rest
08. Auditors at a financial-services company find that several employees can view customer account records unrelated to their responsibilities in a shared reporting platform. Which security principle should be strengthened?
a) Separation of duties
b) Network segmentation
c) Least privilege
d) Defense in depth
09. During month-end close a finance team can no longer open the reporting system, because a flood of traffic has saturated the server.
Which security objective has been affected?
a) Integrity
b) Authentication
c) Confidentiality
d) Availability
10. Ransomware has encrypted the file servers a company depends on for daily operations.
What is the primary purpose of the disaster recovery plan the company now activates?
a) To restore the affected services to working order within a planned timeframe
b) To prevent ransomware from reaching the company's file servers in the first place
c) To identify which employee opened the attachment, and when
d) To decide whether the ransom demand should be paid
The purpose of this Sample Question Set is to provide you with information about the Python Institute Certified Entry-Level Security Specialist with Python exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the PCES certification test. To get familiar with real exam environment, we suggest you try our Sample Python Institute Entry-Level Security Specialist with Python Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual Python Institute Certified Entry-Level Security Specialist with Python (PCES) certification exam.
