CREST -CPSA MAIN EXAM WITH
QUESTIONS AND WELL VERIFIED
ANSWERS [ALREADY GRADED A+}
REAL EXAM !!!
What are the types of infrastructure testing? - ANS✔✔---- External
Infrastructure Penetration Testing
- Internal Infrastructure Penetration Testing
- Cloud and Virtualization Penetration Testing
- Wireless Security Penetration Testing
,What does External Infrastructure Testing include? - ANS✔✔---Mapping
flaws in the external infrastructure
What are the benefits of External Infrastructure Testing ? - ANS✔✔----
Identifies flaws within the firewall configuration that could be misused.
- Finds how information could be leaked out from the system
- Suggests how these issues could be fixed
- Prepares a comprehensive report highlighting the security risk of the
networks and suggests solutions
- Ensures overall efficiency and productivity of your business
What are the benefits of Internal Infrastructure testing? - ANS✔✔----
Identifies how an internal attacker could take advantage of even a minor
security flaw
- Identifies the potential business risk and damage that an internal attacker
can inflict
- Improves security systems of internal infrastructure
- Prepares a comprehensive report giving details of the security exposures
of internal networks along with the detailed action plan on how to deal with
it
3306? - ANS✔✔---MySQL (structured Query Language) Database
management system for web database, data warehousing, e-commerce,
and logging applications
What port does squid proxy use? - ANS✔✔---3128
What are the benefits of a penetration test? - ANS✔✔---- Enhancement
of the management system
,- Avoid fines
- Protection from financial damage
- Customer protection
What is the structure of a penetration test? - ANS✔✔---Planning and
Preparation
Reconnaissance
Discovery
Analyzing information and risks
Active intrusion attempts
Final analysis
Report Preparation
What is another structure of a penetration test? - ANS✔✔---
Reconnaissance
Vulnerability Scanning
Investigation
Exploitation
What is does infrastructure testing include? - ANS✔✔---Includes all
internal computer systems, associated external devices, internet
networking, cloud and virtualization testing.
, What are the benefits of cloud and virtualization penetration testing? -
ANS✔✔---- Discover the real risks within the virtual environment and
suggests the methods and costs to fix the threats and flaws
- Provides guidelines and an action plan how to resolve the issues
- Improves the overall protection systems
- Prepares a comprehensive security system report of the cloud computing
and virtualization, outline the security flaws, causes and possible solutions
What are the disadvantages of black box penetration testing? - ANS✔✔-
--- Particularly, these kinds of test cases are difficult to design
- Possibly, it is not worth, in-case designer has already conducted a test
case
- It does not conduct everything
What is white box penetration testing ? - ANS✔✔---A tester is provided a
whole range of information about the systems and/or network such as
schema, source code, os details, ip address, etc.
What are the advantages of white box penetration testing? - ANS✔✔----
It ensures that all independent paths of a module have been exercised
- It ensures that all logical decisions have been verified along with their true
and false value.
- It discovers the typographical errors and does syntax checking
- It finds the design errors that may have occurred because of the
difference between logical flow of the program and the actual execution.
QUESTIONS AND WELL VERIFIED
ANSWERS [ALREADY GRADED A+}
REAL EXAM !!!
What are the types of infrastructure testing? - ANS✔✔---- External
Infrastructure Penetration Testing
- Internal Infrastructure Penetration Testing
- Cloud and Virtualization Penetration Testing
- Wireless Security Penetration Testing
,What does External Infrastructure Testing include? - ANS✔✔---Mapping
flaws in the external infrastructure
What are the benefits of External Infrastructure Testing ? - ANS✔✔----
Identifies flaws within the firewall configuration that could be misused.
- Finds how information could be leaked out from the system
- Suggests how these issues could be fixed
- Prepares a comprehensive report highlighting the security risk of the
networks and suggests solutions
- Ensures overall efficiency and productivity of your business
What are the benefits of Internal Infrastructure testing? - ANS✔✔----
Identifies how an internal attacker could take advantage of even a minor
security flaw
- Identifies the potential business risk and damage that an internal attacker
can inflict
- Improves security systems of internal infrastructure
- Prepares a comprehensive report giving details of the security exposures
of internal networks along with the detailed action plan on how to deal with
it
3306? - ANS✔✔---MySQL (structured Query Language) Database
management system for web database, data warehousing, e-commerce,
and logging applications
What port does squid proxy use? - ANS✔✔---3128
What are the benefits of a penetration test? - ANS✔✔---- Enhancement
of the management system
,- Avoid fines
- Protection from financial damage
- Customer protection
What is the structure of a penetration test? - ANS✔✔---Planning and
Preparation
Reconnaissance
Discovery
Analyzing information and risks
Active intrusion attempts
Final analysis
Report Preparation
What is another structure of a penetration test? - ANS✔✔---
Reconnaissance
Vulnerability Scanning
Investigation
Exploitation
What is does infrastructure testing include? - ANS✔✔---Includes all
internal computer systems, associated external devices, internet
networking, cloud and virtualization testing.
, What are the benefits of cloud and virtualization penetration testing? -
ANS✔✔---- Discover the real risks within the virtual environment and
suggests the methods and costs to fix the threats and flaws
- Provides guidelines and an action plan how to resolve the issues
- Improves the overall protection systems
- Prepares a comprehensive security system report of the cloud computing
and virtualization, outline the security flaws, causes and possible solutions
What are the disadvantages of black box penetration testing? - ANS✔✔-
--- Particularly, these kinds of test cases are difficult to design
- Possibly, it is not worth, in-case designer has already conducted a test
case
- It does not conduct everything
What is white box penetration testing ? - ANS✔✔---A tester is provided a
whole range of information about the systems and/or network such as
schema, source code, os details, ip address, etc.
What are the advantages of white box penetration testing? - ANS✔✔----
It ensures that all independent paths of a module have been exercised
- It ensures that all logical decisions have been verified along with their true
and false value.
- It discovers the typographical errors and does syntax checking
- It finds the design errors that may have occurred because of the
difference between logical flow of the program and the actual execution.
