PCES – Certified Entry-Level Security Specialist with Python Free Sample Questions

A regional hospital recently upgraded its electronic health record (EHR) system. The new system requires doctors to use a smart card and a PIN to log in, and it permanently records every patient file accessed, modified, or printed, linking these actions directly to the doctor's unique ID. While Confidentiality, Integrity, and Availability are maintained, which specific security concept is primarily enforced by the permanent recording of these actions?

A financial services organization is reviewing its risk management framework. During a tabletop exercise, the incident response team analyzes a scenario where a threat actor sends a deceptive email appearing to be from the CEO, tricking a junior accountant into transferring funds to an offshore account. Which TWO of the following classifications best describe this threat and the appropriate layered defense measure? (Select TWO)

A logistics company relies heavily on a centralized database to route delivery trucks efficiently. A malicious insider gains access to the system and alters the GPS coordinates for 500 delivery destinations, changing them slightly so the trucks are sent to incorrect, remote locations. What is the primary consequence of this specific type of data manipulation?

True or False: In the context of data protection regulations, a company that suffers a data breach exposing user passwords and emails can typically wait up to 6 months before notifying regulatory authorities, provided they are actively investigating the incident.

An e-commerce retailer experiences a catastrophic database failure during the 'Black Friday' peak sales period. The website remains offline for 14 hours. Beyond the direct loss of sales revenue during the outage, which of the following represents an indirect operational impact of this system unavailability?

A software development firm is drafting a new employment contract. The legal team includes a clause specifically protecting the company's proprietary algorithms and source code, which give them a competitive advantage in the market. Which legal instrument is specifically designed to protect this type of confidential information from being shared with competitors by former employees?