1|Page
CREST CPSA EXAM NEWEST 2026/2027 ACTUAL EXAM
COMPLETE 300 QUESTIONS AND CORRECT DETAILED
ANSWERS (VERIFIED ANSWERS) |ALREADY GRADED A+||BEST
BRAND NEW EDITION||BEST EXAMS||QUICK PASS!!!
What is FIN used for? - ANSWER-Used to terminate the
connection
What does SYN stand for in TCP? - ANSWER-Synchronize
What does ACK stand for in TCP? - ANSWER-Acknowledgement
What does SYN-ACK stand for in TCP - ANSWER-Synchronize
Acknowledgement
What does FIN stand for in TCP? - ANSWER-Finish
What happens after the SYN-ACK phrase? - ANSWER-FIN
What does TCP stand for ? - ANSWER-Transmission control
protocol
What is port 9100? - ANSWER-Jetdirect
,2|Page
Computer Misuse Act 1990 - ANSWER-An Act which makes
illegal a number of activities such as deliberately planting
viruses, hacking, using ICT equipment for fraud.
Human Rights Act 1998 - ANSWER-Act of Parliament that
incorporated the European Convention on Human Rights into
UK law, making it enforceable in UK courts
Data Protection Act 1998 - ANSWER-The UK law that tells
organisations how they must protect the personal data of real
people. (NOW GDPR)
GDPR (General Data Protection Regulation) - ANSWER-New
European Union law on data protection and privacy for
individuals.
DoS - ANSWER-Denial of Service
DDoS (Distributed Denial of Service) - ANSWER-An attack on a
computer or network device in which multiple computers send
data and requests to the device in an attempt to overwhelm it
so that it cannot perform normal operations.
,3|Page
XSS (Cross Site Scripting) - ANSWER-A type of application attack
where the attacker takes advantage of scripting and input
validation vulnerabilities in an interactive website to attack
legitimate users.
MySQL < 5.1 Authentication Bypass - ANSWER-Bug that allows
authentication even when password provided is incorrect.
1/256 chance of being triggered, so one can just keep sending
login attempts over and over to access.
*Can only be exploited if built on a system where the
memcmp() function can return values outside the -128 to 127
range
Passive OS fingerprinting - ANSWER-Observing host behavior
and packets (DHCP, TCP, etc) to determine OS
Common Tools: Network Miner, p0f, Satori, Wireshark
Active OS Fingerprinting - ANSWER-Sends specially crafted
packets to the remote OS and analyzes the received response.
, 4|Page
NMap is awesome at this
AES (Advanced Encryption Standard) - ANSWER-A block cypher
created in the late 1990s that uses a 128-bit block size and a
128-, 129-, or 256-bit key size. Practically uncrackable.
TKIP (Temporal Key Integrity Protocol) - ANSWER-A security
protocol created by the IEEE 802.11i task group to replace WEP.
SMTP User Enumeration - ANSWER-EXPN
VRFY
Sendmail < 8.12.9 Buffer Overflow - ANSWER-The prescan
function in Sendmail 8.12.9 allows remote attackers to execute
arbitrary code via buffer overflow attacks, as demonstrated
using the parseaddr function in parseaddr.c.
X11 - ANSWER-Runs on TCP Port 6000 (can range between
6000-6063)
Can be intercepted if not tunneled through SSH
CREST CPSA EXAM NEWEST 2026/2027 ACTUAL EXAM
COMPLETE 300 QUESTIONS AND CORRECT DETAILED
ANSWERS (VERIFIED ANSWERS) |ALREADY GRADED A+||BEST
BRAND NEW EDITION||BEST EXAMS||QUICK PASS!!!
What is FIN used for? - ANSWER-Used to terminate the
connection
What does SYN stand for in TCP? - ANSWER-Synchronize
What does ACK stand for in TCP? - ANSWER-Acknowledgement
What does SYN-ACK stand for in TCP - ANSWER-Synchronize
Acknowledgement
What does FIN stand for in TCP? - ANSWER-Finish
What happens after the SYN-ACK phrase? - ANSWER-FIN
What does TCP stand for ? - ANSWER-Transmission control
protocol
What is port 9100? - ANSWER-Jetdirect
,2|Page
Computer Misuse Act 1990 - ANSWER-An Act which makes
illegal a number of activities such as deliberately planting
viruses, hacking, using ICT equipment for fraud.
Human Rights Act 1998 - ANSWER-Act of Parliament that
incorporated the European Convention on Human Rights into
UK law, making it enforceable in UK courts
Data Protection Act 1998 - ANSWER-The UK law that tells
organisations how they must protect the personal data of real
people. (NOW GDPR)
GDPR (General Data Protection Regulation) - ANSWER-New
European Union law on data protection and privacy for
individuals.
DoS - ANSWER-Denial of Service
DDoS (Distributed Denial of Service) - ANSWER-An attack on a
computer or network device in which multiple computers send
data and requests to the device in an attempt to overwhelm it
so that it cannot perform normal operations.
,3|Page
XSS (Cross Site Scripting) - ANSWER-A type of application attack
where the attacker takes advantage of scripting and input
validation vulnerabilities in an interactive website to attack
legitimate users.
MySQL < 5.1 Authentication Bypass - ANSWER-Bug that allows
authentication even when password provided is incorrect.
1/256 chance of being triggered, so one can just keep sending
login attempts over and over to access.
*Can only be exploited if built on a system where the
memcmp() function can return values outside the -128 to 127
range
Passive OS fingerprinting - ANSWER-Observing host behavior
and packets (DHCP, TCP, etc) to determine OS
Common Tools: Network Miner, p0f, Satori, Wireshark
Active OS Fingerprinting - ANSWER-Sends specially crafted
packets to the remote OS and analyzes the received response.
, 4|Page
NMap is awesome at this
AES (Advanced Encryption Standard) - ANSWER-A block cypher
created in the late 1990s that uses a 128-bit block size and a
128-, 129-, or 256-bit key size. Practically uncrackable.
TKIP (Temporal Key Integrity Protocol) - ANSWER-A security
protocol created by the IEEE 802.11i task group to replace WEP.
SMTP User Enumeration - ANSWER-EXPN
VRFY
Sendmail < 8.12.9 Buffer Overflow - ANSWER-The prescan
function in Sendmail 8.12.9 allows remote attackers to execute
arbitrary code via buffer overflow attacks, as demonstrated
using the parseaddr function in parseaddr.c.
X11 - ANSWER-Runs on TCP Port 6000 (can range between
6000-6063)
Can be intercepted if not tunneled through SSH
