CREST CPSA EXAM.
(100% complete) QUESTIONS AND ANSWERS LATEST 2024-2025.
(VERIFIED ANSWERS) ALREADY GRADED A+.
LDAP Injection - ANS:-An attack that allows for the construction of LDAP statements based
on user input statements, which can then be used to access the LDAP database or modify
the database's information
Base64 Encoding - ANS:-An encoding scheme which represents any binary data using only
printable ASCII characters. Usually used for encoding email attachments over SMTP
OSSTMM - ANS:-Open Source Security Testing Methodology Manual
ISECOM - ANS:-Institute for Security and Open Methodologies
OWASP - ANS:-Open Web Application Security Project
PTES - ANS:-Pen Testing Execution Standard
CPNI - ANS:-Centre for the Protection of National Infrastructure (UK best practices)
Police and Justice Act 2006 - ANS:-Defines police limitations of searching tech
Computer Fraud and Abuse Act of 1986 - ANS:-This act defines cybercrime as any illegal
act for which knowledge of computer technology is essential for its perpetration,
investigation, or prosecution; currently being evaluated for revision because much of its
language was developed before the Internet boom
HIPAA - ANS:-Health Insurance Portability and Accountability Act
,FISMA - ANS:-Federal Information Security Management Act
GLBA - ANS:-Gramm-Leach-Bliley Act
Gramm-Leach-Bliley Act of 1999 - ANS:-requires financial institutions to ensure the security
and confidentiality of customer data
GDPR - ANS:-General Data Protection Regulation
FERPA - ANS:-Family Educational Rights and Privacy Act
PCI DSS - ANS:-Payment Card Industry Data Security Standard
Basel Accord - ANS:-an agreement that required that banks hold as capital at least 8% of
their risk-weighted assets
TCP - ANS:-Transmission Control Protocol
UDP - ANS:-User Datagram Protocol
Port 21 - ANS:-FTP
FTP - ANS:-File Transfer Protocol
Port 22 - ANS:-SSH
SSH - ANS:-Secure Shell
Port 23 - ANS:-Telnet
Port 25 - ANS:-SMTP
SMTP - ANS:-Simple Mail Transfer Protocol
,Port 49 - ANS:-TACACS
TACACS - ANS:-Terminal Access Controller Access Control System
Port 53 - ANS:-DNS
DNS - ANS:-Domain Name System
Port 67 (UDP) - ANS:-DHCP (Server)
Port 68 (UDP) - ANS:-DHCP (Client)
DHCP - ANS:-Dynamic Host Configuration Protocol
Port 69 (UDP) - ANS:-TFTP
TFTP - ANS:-Trivial File Transfer Protocol
Port 80 - ANS:-HTTP
HTTP - ANS:-Hypertext Transfer Protocol
Port 88 - ANS:-Kerberos
Kerberos - ANS:-A computer network authentication protocol that works on the basis of
tickets to allow nodes communicating over a non-secure network to prove their identity to
one another in a secure manner
Port 110 - ANS:-POP3
POP3 - ANS:-Post Office Protocol version 3
, Port 111 - ANS:-RPC
RPC - ANS:-Remote Procedure Call
Port 123 - ANS:-NTP
NTP - ANS:-Network Time Protocol
Port 135 - ANS:-Windows RPC (EPM)
Port 593 - ANS:-RPC over HTTPS
Port 445 - ANS:-SMB
SMB - ANS:-Server Message Block
Port 137 (UDP) - ANS:-NetBIOS (name services)
Port 138 (UDP) - ANS:-NetBIOS (datagram services)
Port 139 - ANS:-NetBIOS (session services)
NetBIOS - ANS:-Network Basic Input/Output System
Port 143 - ANS:-IMAP
IMAP - ANS:-Internet Message Access Protocol
Port 161 (UDP) - ANS:-SNMP
SNMP - ANS:-Simple Network Management Protocol
Port 179 - ANS:-BGP
(100% complete) QUESTIONS AND ANSWERS LATEST 2024-2025.
(VERIFIED ANSWERS) ALREADY GRADED A+.
LDAP Injection - ANS:-An attack that allows for the construction of LDAP statements based
on user input statements, which can then be used to access the LDAP database or modify
the database's information
Base64 Encoding - ANS:-An encoding scheme which represents any binary data using only
printable ASCII characters. Usually used for encoding email attachments over SMTP
OSSTMM - ANS:-Open Source Security Testing Methodology Manual
ISECOM - ANS:-Institute for Security and Open Methodologies
OWASP - ANS:-Open Web Application Security Project
PTES - ANS:-Pen Testing Execution Standard
CPNI - ANS:-Centre for the Protection of National Infrastructure (UK best practices)
Police and Justice Act 2006 - ANS:-Defines police limitations of searching tech
Computer Fraud and Abuse Act of 1986 - ANS:-This act defines cybercrime as any illegal
act for which knowledge of computer technology is essential for its perpetration,
investigation, or prosecution; currently being evaluated for revision because much of its
language was developed before the Internet boom
HIPAA - ANS:-Health Insurance Portability and Accountability Act
,FISMA - ANS:-Federal Information Security Management Act
GLBA - ANS:-Gramm-Leach-Bliley Act
Gramm-Leach-Bliley Act of 1999 - ANS:-requires financial institutions to ensure the security
and confidentiality of customer data
GDPR - ANS:-General Data Protection Regulation
FERPA - ANS:-Family Educational Rights and Privacy Act
PCI DSS - ANS:-Payment Card Industry Data Security Standard
Basel Accord - ANS:-an agreement that required that banks hold as capital at least 8% of
their risk-weighted assets
TCP - ANS:-Transmission Control Protocol
UDP - ANS:-User Datagram Protocol
Port 21 - ANS:-FTP
FTP - ANS:-File Transfer Protocol
Port 22 - ANS:-SSH
SSH - ANS:-Secure Shell
Port 23 - ANS:-Telnet
Port 25 - ANS:-SMTP
SMTP - ANS:-Simple Mail Transfer Protocol
,Port 49 - ANS:-TACACS
TACACS - ANS:-Terminal Access Controller Access Control System
Port 53 - ANS:-DNS
DNS - ANS:-Domain Name System
Port 67 (UDP) - ANS:-DHCP (Server)
Port 68 (UDP) - ANS:-DHCP (Client)
DHCP - ANS:-Dynamic Host Configuration Protocol
Port 69 (UDP) - ANS:-TFTP
TFTP - ANS:-Trivial File Transfer Protocol
Port 80 - ANS:-HTTP
HTTP - ANS:-Hypertext Transfer Protocol
Port 88 - ANS:-Kerberos
Kerberos - ANS:-A computer network authentication protocol that works on the basis of
tickets to allow nodes communicating over a non-secure network to prove their identity to
one another in a secure manner
Port 110 - ANS:-POP3
POP3 - ANS:-Post Office Protocol version 3
, Port 111 - ANS:-RPC
RPC - ANS:-Remote Procedure Call
Port 123 - ANS:-NTP
NTP - ANS:-Network Time Protocol
Port 135 - ANS:-Windows RPC (EPM)
Port 593 - ANS:-RPC over HTTPS
Port 445 - ANS:-SMB
SMB - ANS:-Server Message Block
Port 137 (UDP) - ANS:-NetBIOS (name services)
Port 138 (UDP) - ANS:-NetBIOS (datagram services)
Port 139 - ANS:-NetBIOS (session services)
NetBIOS - ANS:-Network Basic Input/Output System
Port 143 - ANS:-IMAP
IMAP - ANS:-Internet Message Access Protocol
Port 161 (UDP) - ANS:-SNMP
SNMP - ANS:-Simple Network Management Protocol
Port 179 - ANS:-BGP
