CREST CPSA QUESTIONS AND ANSWERS FULLY ANALYSED 2024

TCP Port 1 - answer-Multiplexer tcpmux TCP Port 7 - answer-Echo TCP Port 11 - answer-System status. syst at TCP 13 - answer-Date and time. TCP 15 - answer-netstat TCP 19 - answer-chargen TCP 21 - answer-ftp TCP 22 - answer-ssh TCP 23 - answer-Telnet TCP 25 - answer-smtp TCP 37 - answer-Time TCP 42 - answer-wins TCP 43 - answer-whois TCP 49 - answer-tacacs TCP 53 - answer-DNS TCP 70 - answer-gopher TCP 79 - answer-finger TCP 80 - answer-http TCP 88 - answer-Kerberos TCP 110 - answer-pop3 TCP 113 - answer-auth TCP 119 - answer-nntp TCP 139 - answer-Netbios TCP 143 - answer-imap TCP 179 - answer-bgp TCP 389 - answer-LDAP TCP 443 - answer-https TCP 445 - answer-SMB (cifs) TCP 512 - answer-exec (remote) TCP 513 - answer-login (remote ) TCP 514 - answer-shell (remote) TCP 1080 - answer-socks proxy TCP 1433 - answer-ms-sql TCP 1521 - answer-TNS Oracle TCP 1723 - answer-pptp TCP 2433 - answer-ms-sql (hidden) TCP 3128 - answer-squid proxy TCP 3268 - answer-Globalcat TCP 3306 - answer-mysql TCP 3389 - answer-RDP TCP 5432 - answer-postgres TCP 5900 - answer-vnc TCP 6000 - answer-X11 TCP 9100 - answer-Jetdirect UDP 53 - answer-DNS UDP 67 and 68 - answer-DHCP UDP 69 - answer-ttfp UDP 123 - answer-ntp UDP 135 - answer-RPC UDP 137 and 138 - answer-Netbios UDP 161 - answer-snmp UDP 445 - answer-SMB UDP 500 - answer-IKE UDP 513 - answer-rwho UDP 520 - answer-RIP UDP 1434 - answer-ms-sql / ssrs UDP 2049 - answer-nfs TKIP - answer-Temporal Key Integrity Protocol XML - answer-Extensible Markup Language LSASS - answer-Local Security Authority Subsystem Service LSA - answer-Local Security Authority RSA - answer-Rivest, Shamir, & Adleman CRLF - answer-carriage-return/line-feed OSPF - answer-Open Shortest Path First NFS - answer-Network File System RIP - answer-Routing Information Protocol IKE - answer-Internet Key Exchange AES - answer-Advanced Encryption Standard SQL - answer-Structured Query Language ISAPI - answer-Internet Server Application Programming Interface ASP - answer-Active Server Pages NTP - answer-Network Time Protocol WSUS - answer-Windows Server Update Services SSH - answer-Secure Shell WSDL - answer-Web Services Description Language CNAME - answer-Canonical Name TTL - answer-Time to Live CGI - answer-Common Gateway Interface STP - answer-Spanning Tree Protocol In a DNS zone transfer, what is a requested? - answer-Requests all data on a domain. Telnet remote machine returns : User Access Verification Password. Which o/s? - answer-Cisco ios DES - answer-Data Encryption Standard DES. Key size? - answer-56 bits HTTP OSI Model layer? - answer-Layer 7: Application HTTP Code. Temporarily moved? - answer-302 SQL server resolution service introduced? - answer-SQL server 2000 SQL server stored procedures. - answer-xp_cmdshell ICMP type 8 response to host without firewall - answer-Echo SYS user password (oracle) - answer-CHANGE_ON_INSTALL how can HTTP Trace method used against web server? - answer-user cookie and session information compromised Java technique that minimises threat from applets - answer-Sandbox enumerate users with empty GECOS field. - answer-finger 0@ip LANMAN and NTLM. - answer-Don't use a salt. Stored procedure xp_cmdshell can? - answer-Execute any DOS commands. Unmap unused ISAPI filters to...? - answer-.....reduce attack surface against IIS Which SQL string can be used in username to bypass an authentication mechanism. - answer-' or 1=1 - - Different Web site host names have same IP. How does web server differentiate? - answer-Inspecting host field in client request. HTTP Method for enumerating HTTP methods. - answer-OPTIONS EXPN command protocol? - answer-SMTP DNS Zone transfer command. - answer-dig @ axfr SMTP commands to enumerate users on a default Sendmail server. - answer-VRFY EXPN RCPT TO CVE- MySQL version has post authentication privilege escalation issue. - answer-MySQL 4.0.15 DES Data block size - answer-64 bits RC4 Key size - answer-128 Symmetric encryption algorithm. - answer-AES Salted md5? - answer-Salted md5? Trusted hosts and usernames for unix r-services - answer-/etc/ Cookie attribute for must stored on disk - answer-Expires Null session to windows. - answer-net use hostipc$"" /u:"" Reason for written permission for pen test. - answer-Misuse of computer act. CVE- buffer overflow, sendmail version. - answer-8.12.4 Which ruser command lists active user details. - answer-rusers -l ip Password hashes stored on linux - answer-/etc/shadow HTTP Methods - answer-Options, delete,put,trace, SAM file location - answer-%systemroot%system32configSAM IIS 5.0. Which o/s? - answer-Windows 2000 IPv6 bits? - answer-128 How are cookies presented back to the server? - answer-Cookie HTTP header.