CREST CPSA LATEST 2026 REVISION EXAM PAPER
QUESTIONS AND ANSWERS GUARANTEE A+
✔✔host.equiv (or .rhosts file) Structure - ✔✔Allow any user to log in from any host:
+
Allow any user from host with a matching local account to log in:
host
Allow any user from host to log in:
host +
Allow user from host to log in as any non-root user:
host user
Allow all users with matching local accounts from host to log in except for baduser:
host -baduser
host
Deny all users from host:
-host
Allow all users with matching local accounts on all hosts in a netgroup:
+@netgroup
Disallow all users on all hosts in a netgroup:
-@netgroup
Allow all users in a netgroup to log in from host as any non-root user:
host +@netgroup
Allow all users with matching local accounts on all hosts in a netgroup except baduser:
+@netgroup -baduser
+@netgroup
✔✔Linux Shell Breakouts - ✔✔python -c 'import pty;pty.spawn("/bin/bash")'
, echo os.system('/bin/bash')
/bin/sh -i
✔✔Language Vulns : Java (OO) - ✔✔Log Injection
Deadlock
Language-based Attacks
✔✔Language Vulns : C (Function) - ✔✔Code Injection
Buffer Overflow
✔✔Language Vulns : Objective-C (OO) - ✔✔Code Insertion
Malformation
Race Conditions
✔✔Language Vulns : C++ (OO) - ✔✔Race Conditions
✔✔Language Vulns: PHP - ✔✔Incorrect Element Removal
✔✔NIC - ✔✔Network Interface Card
✔✔Network Interface Card (NIC) - ✔✔An expansion card that enables a computer to
connect other computers or to a cable modem to facilitate a high-speed Internet
connection.
✔✔MAC - ✔✔Media Access Control
✔✔NAT - ✔✔Network Address Translation
✔✔Media Access Control (MAC) - ✔✔An address for communications on the physical
network segment.
✔✔Network Address Translation (NAT) - ✔✔A technique that allows private IP
addresses to be used on the public Internet.
✔✔OSI Model - ✔✔"Please Dont Nag Tyrannosaurus, She'll Probably Attack"
1 : Physical (Bits)
2 : Data Link (Frames)
3 : Network (Packets)
4 : Transport (Segments)
5 : Session (Data)
6 : Presentation (Data)
7 : Application (Data)
QUESTIONS AND ANSWERS GUARANTEE A+
✔✔host.equiv (or .rhosts file) Structure - ✔✔Allow any user to log in from any host:
+
Allow any user from host with a matching local account to log in:
host
Allow any user from host to log in:
host +
Allow user from host to log in as any non-root user:
host user
Allow all users with matching local accounts from host to log in except for baduser:
host -baduser
host
Deny all users from host:
-host
Allow all users with matching local accounts on all hosts in a netgroup:
+@netgroup
Disallow all users on all hosts in a netgroup:
-@netgroup
Allow all users in a netgroup to log in from host as any non-root user:
host +@netgroup
Allow all users with matching local accounts on all hosts in a netgroup except baduser:
+@netgroup -baduser
+@netgroup
✔✔Linux Shell Breakouts - ✔✔python -c 'import pty;pty.spawn("/bin/bash")'
, echo os.system('/bin/bash')
/bin/sh -i
✔✔Language Vulns : Java (OO) - ✔✔Log Injection
Deadlock
Language-based Attacks
✔✔Language Vulns : C (Function) - ✔✔Code Injection
Buffer Overflow
✔✔Language Vulns : Objective-C (OO) - ✔✔Code Insertion
Malformation
Race Conditions
✔✔Language Vulns : C++ (OO) - ✔✔Race Conditions
✔✔Language Vulns: PHP - ✔✔Incorrect Element Removal
✔✔NIC - ✔✔Network Interface Card
✔✔Network Interface Card (NIC) - ✔✔An expansion card that enables a computer to
connect other computers or to a cable modem to facilitate a high-speed Internet
connection.
✔✔MAC - ✔✔Media Access Control
✔✔NAT - ✔✔Network Address Translation
✔✔Media Access Control (MAC) - ✔✔An address for communications on the physical
network segment.
✔✔Network Address Translation (NAT) - ✔✔A technique that allows private IP
addresses to be used on the public Internet.
✔✔OSI Model - ✔✔"Please Dont Nag Tyrannosaurus, She'll Probably Attack"
1 : Physical (Bits)
2 : Data Link (Frames)
3 : Network (Packets)
4 : Transport (Segments)
5 : Session (Data)
6 : Presentation (Data)
7 : Application (Data)
