2
CREST CPSA EXAM 300 QUESTIONS
AND CORRECT ANSWERS LATEST
2026-2027(VERIFIED CORRECT
ANSWERS)
What port does squid proxy use? ----- CORRECT ANSWER:>>>3128
What are the benefits of a penetration test? ----- CORRECT
ANSWER:>>>- Enhancement of the management system
- Avoid fines
- Protection from financial damage
- Customer protection
What is the structure of a penetration test? - --- CORRECT
ANSWER:>>>Planning and Preparation
Reconnaissance
Discovery
Analyzing information and risks
Active intrusion attempts
pg. 2
,3
Final analysis
Report Preparation
What is another structure of a penetration test? - ---
CORRECT ANSWER:>>>Reconnaissance
Vulnerability Scanning
Investigation
Exploitation
What is does infrastructure testing include? - ---
CORRECT ANSWER:>>>Includes all internal computer systems,
associated external devices, internet networking, cloud and
virtualization testing.
What are the types of infrastructure testing? ----- CORRECT
ANSWER:>>>-
External Infrastructure Penetration Testing
- Internal Infrastructure Penetration Testing
- Cloud and Virtualization Penetration Testing
pg. 3
,4
- Wireless Security Penetration Testing
What does External Infrastructure Testing include? - --- CORRECT
ANSWER:>>>Mapping flaws in the external infrastructure
What are the benefits of External Infrastructure Testing ? - ---
CORRECT ANSWER:>>>- Identifies flaws within the firewall
configuration that could be misused.
- Finds how information could be leaked out from the system
- Suggests how these issues could be fixed
- Prepares a comprehensive report highlighting the security risk of the
networks and suggests solutions
- Ensures overall efficiency and productivity of your business
What are the benefits of Internal Infrastructure testing? - ---
CORRECT ANSWER:>>>-Identifies how an internal attacker
could take advantage of even a minor security flaw
pg. 4
, 5
- Identifies the potential business risk and damage that an internal
attacker can inflict
- Improves security systems of internal infrastructure
- Prepares a comprehensive report giving details of the security
exposures of internal networks along with the detailed action plan on
how to deal with it
What are the benefits of cloud and virtualization penetration
testing? - ---CORRECT ANSWER:>>>- Discover the real risks
within the
virtual environment and suggests the methods and costs to fix the threats
and flaws
- Provides guidelines and an action plan how to resolve the issues
- Improves the overall protection systems
- Prepares a comprehensive security system report of the cloud
computing and virtualization, outline the security flaws, causes and
possible solutions
pg. 5
CREST CPSA EXAM 300 QUESTIONS
AND CORRECT ANSWERS LATEST
2026-2027(VERIFIED CORRECT
ANSWERS)
What port does squid proxy use? ----- CORRECT ANSWER:>>>3128
What are the benefits of a penetration test? ----- CORRECT
ANSWER:>>>- Enhancement of the management system
- Avoid fines
- Protection from financial damage
- Customer protection
What is the structure of a penetration test? - --- CORRECT
ANSWER:>>>Planning and Preparation
Reconnaissance
Discovery
Analyzing information and risks
Active intrusion attempts
pg. 2
,3
Final analysis
Report Preparation
What is another structure of a penetration test? - ---
CORRECT ANSWER:>>>Reconnaissance
Vulnerability Scanning
Investigation
Exploitation
What is does infrastructure testing include? - ---
CORRECT ANSWER:>>>Includes all internal computer systems,
associated external devices, internet networking, cloud and
virtualization testing.
What are the types of infrastructure testing? ----- CORRECT
ANSWER:>>>-
External Infrastructure Penetration Testing
- Internal Infrastructure Penetration Testing
- Cloud and Virtualization Penetration Testing
pg. 3
,4
- Wireless Security Penetration Testing
What does External Infrastructure Testing include? - --- CORRECT
ANSWER:>>>Mapping flaws in the external infrastructure
What are the benefits of External Infrastructure Testing ? - ---
CORRECT ANSWER:>>>- Identifies flaws within the firewall
configuration that could be misused.
- Finds how information could be leaked out from the system
- Suggests how these issues could be fixed
- Prepares a comprehensive report highlighting the security risk of the
networks and suggests solutions
- Ensures overall efficiency and productivity of your business
What are the benefits of Internal Infrastructure testing? - ---
CORRECT ANSWER:>>>-Identifies how an internal attacker
could take advantage of even a minor security flaw
pg. 4
, 5
- Identifies the potential business risk and damage that an internal
attacker can inflict
- Improves security systems of internal infrastructure
- Prepares a comprehensive report giving details of the security
exposures of internal networks along with the detailed action plan on
how to deal with it
What are the benefits of cloud and virtualization penetration
testing? - ---CORRECT ANSWER:>>>- Discover the real risks
within the
virtual environment and suggests the methods and costs to fix the threats
and flaws
- Provides guidelines and an action plan how to resolve the issues
- Improves the overall protection systems
- Prepares a comprehensive security system report of the cloud
computing and virtualization, outline the security flaws, causes and
possible solutions
pg. 5
