CREST-CPSA CREST Practitioner Security Analyst Exam Free Dumps

dumps2025-09-18T10:04:41+08:00

CREST-CPSA CREST Practitioner Security Analyst exam is easy for you to take now. Learning CREST-CPSA exam information is useful in your preparation. There are 120 multiple-choice questions in real CREST-CPSA exam, and you have 2 hours to answer all the questions. The required passing score is 60%. We provide the latest CREST Practitioner Security Analyst CREST-CPSA exam dumps, which can ensure you pass the test easily. Free CREST Practitioner Security Analyst CREST-CPSA exam dumps are available below.

Page 1 of 5

1. Which term best describes the likelihood that a threat will exploit a vulnerability causing harm?

Risk

Threat

Exposure

Control

2. Which of the following conditions makes an FTP server highly vulnerable to abuse?

Passive mode disabled

Anonymous access enabled with write permissions

SFTP enabled instead of FTP

File listing disabled

3. Why is directory listing considered a security risk on web servers?

It slows down the server response time

It reveals server IP addresses

It encrypts traffic incorrectly

It exposes sensitive files to unauthenticated users

4. During traffic analysis, which layer of the OSI model would reveal source and destination MAC addresses?

Layer 3 C Network

Layer 5 C Session

Layer 2 C Data Link

Layer 7 C Application

5. Which service in Exchange may expose email address enumeration through HTTP response codes?

OWA

RPC

POP3

SMTP

6. Which Oracle privilege, if granted improperly, can allow a user to execute functions as another user, potentially leading to privilege escalation?

GRANT CREATE SESSION

GRANT EXECUTE ANY PROCEDURE

GRANT SELECT ON DBA_USERS

GRANT DROP ANY TABLE

7. On a Linux system, which of the following permission settings allows a file to be executed only by the owner?

744

755

711

700

8. Which of the following best describes the purpose of the HTML <form> tag?

It adds styles to a webpage

It defines input fields for user interaction and data submission

It embeds JavaScript

It renders images on the server

9. What is the main purpose of an interim report during an assessment?

To serve as the final report if testing is interrupted

To alert the client to critical issues requiring immediate attention

To summarize tool output before analysis

To document scope changes

10. Which of the following wireless encryption protocols is considered secure for enterprise use?

WEP

WPA

WPA2-Enterprise

WPA2-Personal with TKIP

Page 2 of 5

11. Which HTTP method is used by web servers to retrieve data without making changes to server-side resources?

POST

PUT

GET

DELETE

12. Which port does traditional FTP use for control communication?

13. What protocol is primarily used by Active Directory for directory services?

RDP

LDAP

HTTP

DNS

14. You review an Nmap scan output and observe port 80/tcp is open with a service name "http-proxy." What does this imply?

The web server is using port forwarding

The port is misconfigured and should be closed

A proxy service (such as Squid) is running on that port

SSL encryption is enforced on that port

15. Which type of DNS record is used to define the mail server for a domain?

A record

TXT record

MX record

CNAME record

16. Why should verbose error messages be avoided in production web applications?

They decrease search engine rankings

They expose internal details such as file paths, technologies, or SQL queries

They confuse legitimate users

They affect server bandwidth

17. Which protocol is used to securely transmit HTTP traffic over an encrypted channel?

FTP

SSH

HTTPS

SMTP

18. Which command-line tool is used on Windows to enumerate users from the local system or domain?

whoami

net user /domain

ipconfig

netstat

19. What is the primary goal of application fingerprinting during a security assessment?

To launch a brute force attack

To identify open ports

To determine application type and version

To evade firewalls

20. Why is VoIP considered a high-value target during penetration tests?

It is always unencrypted

It operates only over TCP

It often contains sensitive voice data and user credentials

It uses proprietary, untestable protocols

Page 3 of 5

21. Which tool is commonly used for capturing and analyzing network traffic in real time?

Nikto

Wireshark

Nmap

Metasploit

22. Which protocol is commonly used for remote client access in Microsoft Exchange?

IMAP

RDP

MAPI over HTTP

FTP

23. What is a potential security risk of embedding unvalidated user input inside HTML pages?

HTTP header injection

SQL Injection

Cross-site scripting (XSS)

DNS Rebinding

24. Which of the following configuration issues presents the highest risk on a network device?

Hostname not matching internal naming policy

Outdated banners

Default administrative credentials

Lack of NTP synchronization

25. A well-configured Checkpoint Firewall is running on your local network segment.

Which of the following types of probe is it most likely to respond to?

A ICMP Echo request

An ARP 'who has' request

It will not respond to any type of probe

A TCP SYN packet to TCP port 264

An IKE probe to UDP port 500

26. Which of the following helps automate patch deployment in enterprise environments?

Group Policy

WSUS

Event Viewer

Task Manager

27. Which cryptographic concept ensures that a message has not been altered in transit?

Confidentiality

Availability

Integrity

Non-repudiation

28. What command-line tool is commonly used to test SMTP servers for open relay vulnerabilities?

Telnet

Curl

Dig

Arp-scan

29. Which of the following tools is most suitable for discovering hidden directories and files during web reconnaissance?

Dirb

Netcat

Telnet

Nmap

30. Which framework is commonly used in web application threat modelling to categorize potential attacker goals?

STRIDE

OSINT

XSSER

OWASP ZAP

Page 4 of 5

31. Which HTTP header would you modify to help perform an "HTTP request smuggling" attack?

Expires

Pragma

Cache-Control

Content-Length

Content-Language

32. What valuable information can often be gained by analyzing publicly accessible robots.txt files on a target website?

Web application firewall rules

Directory paths intended to be hidden from search engines

JavaScript obfuscation methods

SSL certificate expiration date

33. Which protocol version is considered insecure and deprecated in modern web encryption?

TLS 1.3

TLS 1.2

SSL 3.0

HTTPS 2.0

34. Which transport layer protocol provides reliable data transfer with flow control and sequencing?

UDP

ICMP

TCP

ARP

35. Which technique is best used to evaluate an unknown service running on a non-standard port?

TCP SYN scan

Banner grabbing

DNS zone transfer

ARP spoofing

36. Which of the following fields in an IPv4 header is used for packet fragmentation and reassembly?

Header Checksum

Time to Live (TTL)

Identification

Protocol

37. What HTTP status code typically indicates that a discovered URL exists but requires authentication?

200 OK

403 Forbidden

401 Unauthorized

302 Found

38. Which of the following is a key sign that a SQL injection vulnerability is present?

A 404 error page is returned

The page redirects to the home page

SQL syntax or database error messages are displayed

CAPTCHA is triggered

39. Which Nmap option performs aggressive OS detection?

-sT

-A

-O

-sV

40. Which file, when misconfigured, can allow passwordless login using RSH or RLOGIN?

/etc/shadow

/etc/hosts.deny

/etc/passwd

.rhosts

Page 5 of 5

41. Which of the following tools is typically used to retrieve WHOIS data for domain registration information?

Nmap

Whois

Netcat

Dig

42. Which of the following best describes perfect forward secrecy (PFS) in TLS?

Encrypts data using client’s SSL certificate

Ensures session keys are not derived from long-term keys

Uses RSA for session key exchange

Prevents man-in-the-middle attacks entirely

43. Which of the following is a popular open-source web application server used to deploy Java-based applications?

Apache HTTP Server

Tomcat

IIS

Nginx

44. Which Unix command can enumerate RPC services running on a remote host?

iptables

rpcinfo

wget

host

45. Which programming language is executed directly in the user’s browser?

Perl

PHP

JavaScript

Java (JSP)

46. Which UK legislation specifically makes unauthorized access to computer systems a criminal offence?

Data Protection Act 2018

Computer Misuse Act 1990

Regulation of Investigatory Powers Act 2000

Freedom of Information Act 2000

47. What information is commonly exposed in email headers that may aid an attacker?

Password hashes

Operating system serial number

SSL private keys

Internal hostnames and IP addresses

CREST-CPSA CREST Practitioner Security Analyst Exam Free Dumps

CREST-CPSA CREST Practitioner Security Analyst Exam Free Dumps

Share this post