CREST CPSA Actual Exam Detailed Questions
with Verified Correct Answers Already Graded
A++ Latest update 2025
In a DNS zone transfer, what is a requested? --- correct precise answers ---
Requests all data on a domain.
Telnet remote machine returns :
User Access Verification
Password.
Which o/s? --- correct precise answers ---Cisco ios
DES --- correct precise answers ---Data Encryption Standard
DES. Key size? --- correct precise answers ---56 bits
HTTP OSI Model layer? --- correct precise answers ---Layer 7: Application
HTTP Code. Temporarily moved? --- correct precise answers ---302
,SQL server resolution service introduced? --- correct precise answers ---SQL server
2000
SQL server stored procedures. --- correct precise answers ---xp_cmdshell
ICMP type 8 response to host without firewall --- correct precise answers ---Echo
SYS user password (oracle) --- correct precise answers ---CHANGE_ON_INSTALL
how can HTTP Trace method used against web server? --- correct precise answers
---user cookie and session information compromised
Java technique that minimises threat from applets --- correct precise answers ---
Sandbox
enumerate users with empty GECOS field. --- correct precise answers ---finger
0@<ip>
LANMAN and NTLM. --- correct precise answers ---Don't use a salt.
Stored procedure xp_cmdshell can? --- correct precise answers ---Execute any DOS
commands.
, Unmap unused ISAPI filters to...? --- correct precise answers ---.....reduce attack
surface against IIS
Which SQL string can be used in username to bypass an authentication mechanism.
--- correct precise answers ---' or 1=1 - -
Different Web site host names have same IP. How does web server differentiate? --
- correct precise answers ---Inspecting host field in client request.
HTTP Method for enumerating HTTP methods. --- correct precise answers ---
OPTIONS
EXPN command protocol? --- correct precise answers ---SMTP
DNS Zone transfer command. --- correct precise answers ---dig
@relay.example.org example.org axfr
SMTP commands to enumerate users on a default Sendmail server. --- correct
precise answers ---VRFY EXPN RCPT TO
CVE-2003-0780 MySQL version has post authentication privilege escalation issue. -
-- correct precise answers ---MySQL 4.0.15
DES Data block size --- correct precise answers ---64 bits
with Verified Correct Answers Already Graded
A++ Latest update 2025
In a DNS zone transfer, what is a requested? --- correct precise answers ---
Requests all data on a domain.
Telnet remote machine returns :
User Access Verification
Password.
Which o/s? --- correct precise answers ---Cisco ios
DES --- correct precise answers ---Data Encryption Standard
DES. Key size? --- correct precise answers ---56 bits
HTTP OSI Model layer? --- correct precise answers ---Layer 7: Application
HTTP Code. Temporarily moved? --- correct precise answers ---302
,SQL server resolution service introduced? --- correct precise answers ---SQL server
2000
SQL server stored procedures. --- correct precise answers ---xp_cmdshell
ICMP type 8 response to host without firewall --- correct precise answers ---Echo
SYS user password (oracle) --- correct precise answers ---CHANGE_ON_INSTALL
how can HTTP Trace method used against web server? --- correct precise answers
---user cookie and session information compromised
Java technique that minimises threat from applets --- correct precise answers ---
Sandbox
enumerate users with empty GECOS field. --- correct precise answers ---finger
0@<ip>
LANMAN and NTLM. --- correct precise answers ---Don't use a salt.
Stored procedure xp_cmdshell can? --- correct precise answers ---Execute any DOS
commands.
, Unmap unused ISAPI filters to...? --- correct precise answers ---.....reduce attack
surface against IIS
Which SQL string can be used in username to bypass an authentication mechanism.
--- correct precise answers ---' or 1=1 - -
Different Web site host names have same IP. How does web server differentiate? --
- correct precise answers ---Inspecting host field in client request.
HTTP Method for enumerating HTTP methods. --- correct precise answers ---
OPTIONS
EXPN command protocol? --- correct precise answers ---SMTP
DNS Zone transfer command. --- correct precise answers ---dig
@relay.example.org example.org axfr
SMTP commands to enumerate users on a default Sendmail server. --- correct
precise answers ---VRFY EXPN RCPT TO
CVE-2003-0780 MySQL version has post authentication privilege escalation issue. -
-- correct precise answers ---MySQL 4.0.15
DES Data block size --- correct precise answers ---64 bits
