CREST CPSA EXAM SCRIPT 2026 FULL
QUESTIONS AND CORRECT ANSWERS STUDY
GUIDE
◉ IIS 7.5 Defaults. Answer: Windows 7, 2008 R2
◉ IIS 8 Defaults. Answer: Windows Server 2012, Windows 8
◉ IIS 8.5 Defaults. Answer: Windows Server 2012 R2, Windows 8.1
◉ IIS 10 v 1607 Defaults. Answer: Windows Server 2016, Windows
10 Anniversary Update
◉ IIS 10 v 1709 Defaults. Answer: Windows 10 Fall Creators, v1709
◉ IIS 10 v 1809 Defaults. Answer: Windows Server 2019, Windows
10 October Update
◉ Windows Command : Disable Firewall. Answer: netsh advfirewall
set currentprofile state off
netsh advfirewall set allprofiles state off
,◉ Sysinternals Suite. Answer: A set of powerful Windows
administration applications used to view, troubleshoot, and modify
Windows functions
◉ WMCI. Answer: Windows Management Instrumentation
Command-Line
◉ WMCI Command : Execute Process. Answer: wmci process call
create "process_name"
◉ WMCI Command : Uninstall Software. Answer: wmci product get
name /value
wmci product where name="XX" call uninstall /nointeractive
◉ PCI Card Info Storage Common-Use. Answer: - Store card details
(i.e CC number, expiry) in encrypted form
- Store cardholder details (name, address, contact details...ie PII) in a
SEPARATE encrypted database with a unique reference identifier
linking the two
-DO NOT STORE sensitive data (ie CVV2, CVV or CID values)
◉ Windows : Active Directory Default Location. Answer:
C:\Windows\NTDS
,Ntds.dit is the physical storage file
◉ Windows : Domain Common Folders. Answer:
C:\Windows\SYSVOL
Contains Group Policies, Login Scripts, Staging Folders, etc.
◉ dsquery. Answer: Remote Server Administration Tools (RSAT)
feature pack tool used to enumerate Windows Domain
◉ Classful IP Range : Class A. Answer: 128 Networks (2^7),
16,777,216 Addresses per network (2^24)
Range : 0.0.0.0-127.0.0.0
Default Subnet Mask : 255.0.0.0
CIDR Notation : /8
◉ Classful IP Range : Class B. Answer: 16,384 Networks (2^14),
65,536 Addresses per network (2^16)
Range : 128.0.0.0-191.255.0.0
Default Subnet Mask : 255.255.0.0
CIDR Notation : /16
, ◉ Classful IP Range : Class C. Answer: 2,097,152 Networks (2^21),
256 Addresses per network (2^8)
Range : 192.0.0.0-223.255.255.0
Default Subnet Mask : 255.255.255.0
CIDR Notation : /24
◉ Classful IP Range Calculation. Answer: If the first bit is a "0", it's a
class A address (Half the address space has a "0" for the first bit, so
this is why class A takes up half the address space.)
If the second bit is a "0", it's a class B address (Half of the remaining
non-class-A addresses, or one quarter of the total.)
If the third bit is a "0", it's a class C address (Half again of what's left,
or one eighth of the total.)
If the fourth bit is a "0", it's a class D address. (Half the remainder, or
one sixteenth of the address space.) If it's a "1", it's a class E address.
(The other half, one sixteenth.)
◉ Classless Subnets / CIDR. Answer: Class C - 255.255.255.0 , /24
(254 Hosts)
QUESTIONS AND CORRECT ANSWERS STUDY
GUIDE
◉ IIS 7.5 Defaults. Answer: Windows 7, 2008 R2
◉ IIS 8 Defaults. Answer: Windows Server 2012, Windows 8
◉ IIS 8.5 Defaults. Answer: Windows Server 2012 R2, Windows 8.1
◉ IIS 10 v 1607 Defaults. Answer: Windows Server 2016, Windows
10 Anniversary Update
◉ IIS 10 v 1709 Defaults. Answer: Windows 10 Fall Creators, v1709
◉ IIS 10 v 1809 Defaults. Answer: Windows Server 2019, Windows
10 October Update
◉ Windows Command : Disable Firewall. Answer: netsh advfirewall
set currentprofile state off
netsh advfirewall set allprofiles state off
,◉ Sysinternals Suite. Answer: A set of powerful Windows
administration applications used to view, troubleshoot, and modify
Windows functions
◉ WMCI. Answer: Windows Management Instrumentation
Command-Line
◉ WMCI Command : Execute Process. Answer: wmci process call
create "process_name"
◉ WMCI Command : Uninstall Software. Answer: wmci product get
name /value
wmci product where name="XX" call uninstall /nointeractive
◉ PCI Card Info Storage Common-Use. Answer: - Store card details
(i.e CC number, expiry) in encrypted form
- Store cardholder details (name, address, contact details...ie PII) in a
SEPARATE encrypted database with a unique reference identifier
linking the two
-DO NOT STORE sensitive data (ie CVV2, CVV or CID values)
◉ Windows : Active Directory Default Location. Answer:
C:\Windows\NTDS
,Ntds.dit is the physical storage file
◉ Windows : Domain Common Folders. Answer:
C:\Windows\SYSVOL
Contains Group Policies, Login Scripts, Staging Folders, etc.
◉ dsquery. Answer: Remote Server Administration Tools (RSAT)
feature pack tool used to enumerate Windows Domain
◉ Classful IP Range : Class A. Answer: 128 Networks (2^7),
16,777,216 Addresses per network (2^24)
Range : 0.0.0.0-127.0.0.0
Default Subnet Mask : 255.0.0.0
CIDR Notation : /8
◉ Classful IP Range : Class B. Answer: 16,384 Networks (2^14),
65,536 Addresses per network (2^16)
Range : 128.0.0.0-191.255.0.0
Default Subnet Mask : 255.255.0.0
CIDR Notation : /16
, ◉ Classful IP Range : Class C. Answer: 2,097,152 Networks (2^21),
256 Addresses per network (2^8)
Range : 192.0.0.0-223.255.255.0
Default Subnet Mask : 255.255.255.0
CIDR Notation : /24
◉ Classful IP Range Calculation. Answer: If the first bit is a "0", it's a
class A address (Half the address space has a "0" for the first bit, so
this is why class A takes up half the address space.)
If the second bit is a "0", it's a class B address (Half of the remaining
non-class-A addresses, or one quarter of the total.)
If the third bit is a "0", it's a class C address (Half again of what's left,
or one eighth of the total.)
If the fourth bit is a "0", it's a class D address. (Half the remainder, or
one sixteenth of the address space.) If it's a "1", it's a class E address.
(The other half, one sixteenth.)
◉ Classless Subnets / CIDR. Answer: Class C - 255.255.255.0 , /24
(254 Hosts)
