CPSA EXAM 2025 QUESTIONS AND
ANSWERS
In active directory, what does FSMO (pronounced "Fizz-Mo") stand for? - ANS Fixed Single
Master Operations Flexible Security Master Operations Flexible Single Master Operations Forest
Single Master Operations Forest Security Master Operations Flexible Single Master Operations
The active directory database file is: - ANS NTDS.DAT NTDS.MDB MSAD.DIT NTDS.DIT
MDAD.MDB NTDS.DIT
What command might you use to obtain a list of systems from a master browser, together with
details about the version and available services. - ANS amap nbtstat lservers nbtquery hping3
lservers
What is used for authentication in a Microsoft Active Directory domain? - ANS RADIUS
TACACS + TACACS + + Kerberos NIDS Kerberos
Which of the following Windows programs will list all the members of the Master Browser List?
- ANS whoami dompromo lservers nbtstat None of the above nbtstat
"What does the following command achieve? - ANS
Telnet <IP Address> <Port 80> - ANS
HEAD /HTTP/1.0 - ANS
<Return> - ANS
1 Copyright ©BRIGHSTARS ALL RIGHTS RESERVED 2025
,<Return>" - ANS This command returns the home page for the IP address specified This
command opens a backdoor Telnet session to the IP address specified This command returns
the banner of the website specified by the IP address This command allows a hacker to
determine if the server has a SQL database None of these This command returns the banner of
the website specified by the IP address
A system encrypts data prior to transmitting it over a network, and the system on the other end
of the transmission media decrypts it. If the systems are using a symmetric encryption
algorithm for encryption and decryption, which of the following statements is true? - ANS A
symmetric encryption algorithm uses the same key to encrypt and decrypt data at both ends of
the transmission media A symmetric encryption algorithm uses different keys to encrypt and
decrypt data at both ends of the transmission media A symmetric encryption algorithm does
not use keys to encrypt and decrypt data at both ends of the transmission media A symmetric
encryption algorithm is an insecure method used to encrypt data transmitted over transmission
media None of these A symmetric encryption algorithm uses the same key to encrypt and
decrypt data at both ends of the transmission media
How many bits does SYSKEY use for encryption? - ANS 48 bits 56 bits 128 bits 256 bits None
of these 128 bits
How many secret bits in a 128-bit WEP key? - ANS 128 64 104 40 96 104
In an IPSEC VPN there are four main attribute classes. Which of the following is NOT one of
those classes? - ANS Encryption Algorithm Hash Algorithm Authentication Method
Aggressive Mode Diffie-Hellman group Aggressive Mode
Of the following choices, what can you use to encrypt e-mail? - ANS HMAC RIPEMD PII S/
MIME None of these S/ MIME
Of the following choices, what is a benefit of IPsec? - ANS MAC filtering Flood guard Load
balancing Payload encryption Secures your IP Payload encryption
Sally encrypted a project file with her public key. Later, an administrator accidentally deleted
her account that had exclusive access to her private key. Can this project file be retrieved? -
2 Copyright ©BRIGHSTARS ALL RIGHTS RESERVED 2025
, ANS No. If the private key is lost, the data cannot be retrieved Yes. The public key can
decrypt the file Yes, if a copy of her public key is stored in escrow Yes, if the organization uses a
recovery agent Yes, if she uses her password Yes, if the organization uses a recovery agent
What are the four mandatory transform attributes for an IKE Phase-1 SA? - ANS Encryption
Algorithm, Hash Algorithm, Authentication Method, Diffie Hellman Group Encryption
Algorithm, Key Length, Authentication Method, SA Lifetime SA Lifetime, Key length, PRF, Field
Size SA Lifetime, Hash Algorithm, Authentication Method, PRF Protocol ID, Transform ID, IPsec
Mode, Authentication Algorithm Encryption Algorithm, Hash Algorithm, Authentication
Method, Diffie Hellman Group
What do programs, such as Tripwire, MD5sum, and Windows System File Protection, all rely
on? - ANS Digital certificates Hashing Digital signatures Steganography Encryption Hashing
What does "export" signify for an SSL cipher - ANS It is a weak cipher that was acceptable for
export under the old US cryptography export regulations It is the strongest cipher that is
currently permitted to be exported from the US It is a cipher with integrated key escrow, which
allows the NSA to recover the key It is a cipher that is suitable for encrypting information to be
sent across national borders It is a stronger version of a cipher, similar to export versions of
European lagers It is a weak cipher that was acceptable for export under the old US
cryptography export regulations
What is IKE? - ANS Internet Key Exchange Initial Key Exchange IBM Key Exchange Internal Key
Exchange Integrated Key Exchange Internet Key Exchange
What is SSL used for? - ANS Encrypt data as it travels over a network Encrypt files located on
a Web server Encrypt passwords for storage in a database Encrypt specific elements of data for
application-specific purposes Encrypt digital certificates used to authenticate a Web site
Encrypt data as it travels over a network
What is the length of the IV for a WEP key? - ANS 128 bits 64 bits 40 bits 24 bits 56 bits 24
bits
Which of the following algorithms could be used to negotiate a shared encryption key? -
ANS Triple-DES SHA1 DES AES Diffie-Hellman Diffie-Hellman
3 Copyright ©BRIGHSTARS ALL RIGHTS RESERVED 2025
ANSWERS
In active directory, what does FSMO (pronounced "Fizz-Mo") stand for? - ANS Fixed Single
Master Operations Flexible Security Master Operations Flexible Single Master Operations Forest
Single Master Operations Forest Security Master Operations Flexible Single Master Operations
The active directory database file is: - ANS NTDS.DAT NTDS.MDB MSAD.DIT NTDS.DIT
MDAD.MDB NTDS.DIT
What command might you use to obtain a list of systems from a master browser, together with
details about the version and available services. - ANS amap nbtstat lservers nbtquery hping3
lservers
What is used for authentication in a Microsoft Active Directory domain? - ANS RADIUS
TACACS + TACACS + + Kerberos NIDS Kerberos
Which of the following Windows programs will list all the members of the Master Browser List?
- ANS whoami dompromo lservers nbtstat None of the above nbtstat
"What does the following command achieve? - ANS
Telnet <IP Address> <Port 80> - ANS
HEAD /HTTP/1.0 - ANS
<Return> - ANS
1 Copyright ©BRIGHSTARS ALL RIGHTS RESERVED 2025
,<Return>" - ANS This command returns the home page for the IP address specified This
command opens a backdoor Telnet session to the IP address specified This command returns
the banner of the website specified by the IP address This command allows a hacker to
determine if the server has a SQL database None of these This command returns the banner of
the website specified by the IP address
A system encrypts data prior to transmitting it over a network, and the system on the other end
of the transmission media decrypts it. If the systems are using a symmetric encryption
algorithm for encryption and decryption, which of the following statements is true? - ANS A
symmetric encryption algorithm uses the same key to encrypt and decrypt data at both ends of
the transmission media A symmetric encryption algorithm uses different keys to encrypt and
decrypt data at both ends of the transmission media A symmetric encryption algorithm does
not use keys to encrypt and decrypt data at both ends of the transmission media A symmetric
encryption algorithm is an insecure method used to encrypt data transmitted over transmission
media None of these A symmetric encryption algorithm uses the same key to encrypt and
decrypt data at both ends of the transmission media
How many bits does SYSKEY use for encryption? - ANS 48 bits 56 bits 128 bits 256 bits None
of these 128 bits
How many secret bits in a 128-bit WEP key? - ANS 128 64 104 40 96 104
In an IPSEC VPN there are four main attribute classes. Which of the following is NOT one of
those classes? - ANS Encryption Algorithm Hash Algorithm Authentication Method
Aggressive Mode Diffie-Hellman group Aggressive Mode
Of the following choices, what can you use to encrypt e-mail? - ANS HMAC RIPEMD PII S/
MIME None of these S/ MIME
Of the following choices, what is a benefit of IPsec? - ANS MAC filtering Flood guard Load
balancing Payload encryption Secures your IP Payload encryption
Sally encrypted a project file with her public key. Later, an administrator accidentally deleted
her account that had exclusive access to her private key. Can this project file be retrieved? -
2 Copyright ©BRIGHSTARS ALL RIGHTS RESERVED 2025
, ANS No. If the private key is lost, the data cannot be retrieved Yes. The public key can
decrypt the file Yes, if a copy of her public key is stored in escrow Yes, if the organization uses a
recovery agent Yes, if she uses her password Yes, if the organization uses a recovery agent
What are the four mandatory transform attributes for an IKE Phase-1 SA? - ANS Encryption
Algorithm, Hash Algorithm, Authentication Method, Diffie Hellman Group Encryption
Algorithm, Key Length, Authentication Method, SA Lifetime SA Lifetime, Key length, PRF, Field
Size SA Lifetime, Hash Algorithm, Authentication Method, PRF Protocol ID, Transform ID, IPsec
Mode, Authentication Algorithm Encryption Algorithm, Hash Algorithm, Authentication
Method, Diffie Hellman Group
What do programs, such as Tripwire, MD5sum, and Windows System File Protection, all rely
on? - ANS Digital certificates Hashing Digital signatures Steganography Encryption Hashing
What does "export" signify for an SSL cipher - ANS It is a weak cipher that was acceptable for
export under the old US cryptography export regulations It is the strongest cipher that is
currently permitted to be exported from the US It is a cipher with integrated key escrow, which
allows the NSA to recover the key It is a cipher that is suitable for encrypting information to be
sent across national borders It is a stronger version of a cipher, similar to export versions of
European lagers It is a weak cipher that was acceptable for export under the old US
cryptography export regulations
What is IKE? - ANS Internet Key Exchange Initial Key Exchange IBM Key Exchange Internal Key
Exchange Integrated Key Exchange Internet Key Exchange
What is SSL used for? - ANS Encrypt data as it travels over a network Encrypt files located on
a Web server Encrypt passwords for storage in a database Encrypt specific elements of data for
application-specific purposes Encrypt digital certificates used to authenticate a Web site
Encrypt data as it travels over a network
What is the length of the IV for a WEP key? - ANS 128 bits 64 bits 40 bits 24 bits 56 bits 24
bits
Which of the following algorithms could be used to negotiate a shared encryption key? -
ANS Triple-DES SHA1 DES AES Diffie-Hellman Diffie-Hellman
3 Copyright ©BRIGHSTARS ALL RIGHTS RESERVED 2025
