CREST CPSA Exam Study Guide with Complete Solutions

CREST CPSA Exam Study Guide with Complete Solutions Name all OSI layers - Answer-Application, Presentation, Session, Transport, Network, Data Link, Physical. Name all TCP/IP layers - Answer-Application, Transport, internet, Network Access. Name Four TCP head flags - Answer-ACK, FIN, SYN, URG, PSH, RST Which layer does HTTP protocl reside in the OSI model. - Answer-Layer 7, Application. Which layer does Ethernet reside in the OSI model. - Answer-Layer 2, Data link. Which Layer does IPv4 & IPv6 reside in TCP/IP model. - Answer-Layer 4, transport. RFC 1918 addresses - Answer-10.0.0.0 - 10.255.255.255 (10/8 prefix) 172.16.0.0 - 172.31.255.255 (172.16/12 prefix) 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) Name the well know, registered and dynamic port ranges. - Answer-Well Known(0-1023), Registed(1024-49,151) & Dynamic(49,152-65,535) What is an ephemeral port? - Answer-An ephemeral port is a short-lived transport protocol port for Internet Protocol (IP) communications. Can be used by both TCP & UDP. EMILLECT 2024/2025 ACADEMIC YEAR ©2024 EMILLECT. ALL RIGHTS RESERVED. FIRST PUBLISH OCTOBER 2024. Page 2/15 What does IANA stand for? - Answer-Internet Assigned Numbers Authority Name 10 common ports and there protocols. - Answer-FTP21, SSH22, DHCP67(C), DHCP68(S), NTP123, MYSQL3306, RDP3389, HTTP80, HTTPS443, SMB445, KERBEROS88, CHARGEN19(UDP), DNS53, TACAS49, WHOIS43, MSSQL1433, HIDDEN MSSQL2433. Name five network types. - Answer-LAN, WAN, MAN, VLAN, WLAN, PAN. Name five network topologies - Answer-Mesh, Ring, star, Tree, Bus. Name five common ethernet and FDDI cable types. - Answer-100Base5, 10Base2, 10BaseT, 100Base-FL, 1000Base-T. What is WIFI the alias for? - Answer-IEEE 802.11 What does VLAN stand for? - Answer-Virtual Local Area Network How does VLAN work? - Answer-Virtual Local Area Networks (VLANs) separate an existing physical network into multiple logical networks. Thus, each VLAN creates its own broadcast domain. Communication between two VLANs can only occur through a router that is connected to both. Name five common ICMP types. - Answer-8-echo, 0-echo reply, 30-trace route, 5-redirect, 3- destination unreachable, 11, time execeed. What does ICMP stand for? - Answer-Internet Control Message Protocol What does TTL stand for? - Answer-Time to Live EMILLECT 2024/2025 ACADEMIC YEAR ©2024 EMILLECT. ALL RIGHTS RESERVED. FIRST PUBLISH OCTOBER 2024. Page 3/15 What is TTL? - Answer-TTL is a hop count system, and each router decreases the TTL by 1. Upon reaching 0, the packet is dropped. This way you don't have packets not reaching their destination and clogging the network. OS TLL numbers? - Answer-128 Windows, 64 linux, 255 solaris(kapp) What is Traceroute - Answer-Traceroute is when you send a packet with a TTL value of 1 once it reaches the first router it will die sending a ICMP message to sender, at which point the sender can send another one with a value of 2 to see how far it will go. By doing this we can see how many hops it will take to reach our target. (A good way of enumeration of a network, when in a black box pen-test.) What is ping sweep? - Answer-Ping sweep is just a technique that can be used to find out which hosts are alive in a network or large number of IP addresses. Name Five Namp Flags. - Answer-(TCP SYN scan, -sS) (Null Scan, -sN) (Ping Scan, -sP) (Ack Scan, -sA) (OS dect, -O) What are the three firewall states? - Answer-Open, Filtered Drop