CREST - CPSA MAIN LATEST EXAM 2026/2027 ALL
QUESTIONS WITH CORRECT ANSWERS| ALREADY
GRADED A+
AES (Advanced Encryption Standard) - ✔✔✔ ANSWER-A block cypher
created in the late 1990s that uses a 128-bit block size and a 128-,
129-, or 256-bit key size. Practically uncrackable.
TKIP (Temporal Key Integrity Protocol) - ✔✔✔ ANSWER-A security
protocol created by the IEEE 802.11i task group to replace WEP.
SMTP User Enumeration - ✔✔✔ ANSWER-EXPN
VRFY
Sendmail < 8.12.9 Buffer Overflow - ✔✔✔ ANSWER-The prescan
function in Sendmail 8.12.9 allows remote attackers to execute
arbitrary code via buffer overflow attacks, as demonstrated using the
parseaddr function in parseaddr.c.
X11 - ✔✔✔ ANSWER-Runs on TCP Port 6000 (can range between 6000-
6063)
Can be intercepted if not tunneled through SSH
RPC (Remote Procedure Call) Enumeration - ✔✔✔ ANSWER-Can be
assessed using portmapper requests
,Query RPC portmapper using rpcinfo: rpcinfo p <host>
Non-Persistent XSS - ✔✔✔ ANSWER-XSS that occurs when the
attacker's script that is injected is not stored in the backend, and the
Web-browser client simply echoes back the results of the script
execution. It can be over GET (QueryString) or POST (Forms) methods.
Can be used to steal cookies, redirect to phishing sites, and force
actions if targets click on crafted links
Persistent XSS - ✔✔✔ ANSWER-malicious code that remains on a
website (for ex) until it is removed
Good for getting ahold of forms, tickets, submissions, etc
SOAP - ✔✔✔ ANSWER-Simple Object Access Protocol
Simple Object Access Protocol (SOAP) - ✔✔✔ ANSWER-An XML-based
communication protocol used for sending messages between
applications via the Internet.
XML injection - ✔✔✔ ANSWER-An attack that injects XML tags and
data into a database. Can change data, effect how data is processed,
etc.
XXE (XML External Entity) Attack - ✔✔✔ ANSWER-This attack occurs
,when XML input containing a reference to an external entity is
processed by a weakly configured XML parser. This attack may lead to
the disclosure of confidential data, denial of service, server side
request forgery, port scanning from the perspective of the machine
where the parser is located, and other system impacts
Web Server Common Flaws - ✔✔✔ ANSWER-Denial of Service
(DoS)Buffer overflow attacksAttacks on vulnerable scriptsURL
manipulation
HTTP Web Methods - ✔✔✔ ANSWER-*Risky Methods are marked with a
star
GET
HEAD (similar to GET)
POST
PUT*
DELETE*
CONNECT*
OPTIONS
TRACE*
PATCH
LDAP Injection - ✔✔✔ ANSWER-An attack that allows for the
construction of LDAP statements based on user input statements,
which can then be used to access the LDAP database or modify the
database's information
, Base64 Encoding - ✔✔✔ ANSWER-An encoding scheme which
represents any binary data using only printable ASCII characters.
Usually used for encoding email attachments over SMTP
OSSTMM - ✔✔✔ ANSWER-Open Source Security Testing Methodology
Manual
ISECOM - ✔✔✔ ANSWER-Institute for Security and Open Methodologies
OWASP - ✔✔✔ ANSWER-Open Web Application Security Project
PTES - ✔✔✔ ANSWER-Pen Testing Execution Standard
CPNI - ✔✔✔ ANSWER-Centre for the Protection of National
Infrastructure (UK best practices)
Police and Justice Act 2006 - ✔✔✔ ANSWER-Defines police limitations
of searching tech
Computer Fraud and Abuse Act of 1986 - ✔✔✔ ANSWER-This act
defines cybercrime as any illegal act for which knowledge of computer
technology is essential for its perpetration, investigation, or
prosecution; currently being evaluated for revision because much of
its language was developed before the Internet boom
HIPAA - ✔✔✔ ANSWER-Health Insurance Portability and Accountability
QUESTIONS WITH CORRECT ANSWERS| ALREADY
GRADED A+
AES (Advanced Encryption Standard) - ✔✔✔ ANSWER-A block cypher
created in the late 1990s that uses a 128-bit block size and a 128-,
129-, or 256-bit key size. Practically uncrackable.
TKIP (Temporal Key Integrity Protocol) - ✔✔✔ ANSWER-A security
protocol created by the IEEE 802.11i task group to replace WEP.
SMTP User Enumeration - ✔✔✔ ANSWER-EXPN
VRFY
Sendmail < 8.12.9 Buffer Overflow - ✔✔✔ ANSWER-The prescan
function in Sendmail 8.12.9 allows remote attackers to execute
arbitrary code via buffer overflow attacks, as demonstrated using the
parseaddr function in parseaddr.c.
X11 - ✔✔✔ ANSWER-Runs on TCP Port 6000 (can range between 6000-
6063)
Can be intercepted if not tunneled through SSH
RPC (Remote Procedure Call) Enumeration - ✔✔✔ ANSWER-Can be
assessed using portmapper requests
,Query RPC portmapper using rpcinfo: rpcinfo p <host>
Non-Persistent XSS - ✔✔✔ ANSWER-XSS that occurs when the
attacker's script that is injected is not stored in the backend, and the
Web-browser client simply echoes back the results of the script
execution. It can be over GET (QueryString) or POST (Forms) methods.
Can be used to steal cookies, redirect to phishing sites, and force
actions if targets click on crafted links
Persistent XSS - ✔✔✔ ANSWER-malicious code that remains on a
website (for ex) until it is removed
Good for getting ahold of forms, tickets, submissions, etc
SOAP - ✔✔✔ ANSWER-Simple Object Access Protocol
Simple Object Access Protocol (SOAP) - ✔✔✔ ANSWER-An XML-based
communication protocol used for sending messages between
applications via the Internet.
XML injection - ✔✔✔ ANSWER-An attack that injects XML tags and
data into a database. Can change data, effect how data is processed,
etc.
XXE (XML External Entity) Attack - ✔✔✔ ANSWER-This attack occurs
,when XML input containing a reference to an external entity is
processed by a weakly configured XML parser. This attack may lead to
the disclosure of confidential data, denial of service, server side
request forgery, port scanning from the perspective of the machine
where the parser is located, and other system impacts
Web Server Common Flaws - ✔✔✔ ANSWER-Denial of Service
(DoS)Buffer overflow attacksAttacks on vulnerable scriptsURL
manipulation
HTTP Web Methods - ✔✔✔ ANSWER-*Risky Methods are marked with a
star
GET
HEAD (similar to GET)
POST
PUT*
DELETE*
CONNECT*
OPTIONS
TRACE*
PATCH
LDAP Injection - ✔✔✔ ANSWER-An attack that allows for the
construction of LDAP statements based on user input statements,
which can then be used to access the LDAP database or modify the
database's information
, Base64 Encoding - ✔✔✔ ANSWER-An encoding scheme which
represents any binary data using only printable ASCII characters.
Usually used for encoding email attachments over SMTP
OSSTMM - ✔✔✔ ANSWER-Open Source Security Testing Methodology
Manual
ISECOM - ✔✔✔ ANSWER-Institute for Security and Open Methodologies
OWASP - ✔✔✔ ANSWER-Open Web Application Security Project
PTES - ✔✔✔ ANSWER-Pen Testing Execution Standard
CPNI - ✔✔✔ ANSWER-Centre for the Protection of National
Infrastructure (UK best practices)
Police and Justice Act 2006 - ✔✔✔ ANSWER-Defines police limitations
of searching tech
Computer Fraud and Abuse Act of 1986 - ✔✔✔ ANSWER-This act
defines cybercrime as any illegal act for which knowledge of computer
technology is essential for its perpetration, investigation, or
prosecution; currently being evaluated for revision because much of
its language was developed before the Internet boom
HIPAA - ✔✔✔ ANSWER-Health Insurance Portability and Accountability
