CREST CPSA EXAM QUESTIONS AND CORRECT ANSWERS

802.3 - Answer-Ethernet

/.AD database filename - Answer-NTDS.DIT

/.AES - Answer-Advanced Encryption Standard

/.ARP - Answer-Address Resolution Protocol

/.ASP - Answer-Active Server Pages

/.BIND version information. Command? - Answer-dig @beta.example.com version.bind
chaos txt

/.CDP - Answer-Cisco Discovery Protocol

/.CGI - Answer-Common Gateway Interface

/.CNAME - Answer-Canonical Name

/.Cookie attribute for must stored on disk - Answer-Expires

/.Cookie can be accessed by client side scripts. Which cookie attribute? - Answer-
httponly

/.CRLF - Answer-carriage-return/line-feed

/.CVE 2012-5615 MySQL 5.6.0 vulnerability.? - Answer-Username enumeration.

/.CVE-2001-0414 NTP remote exploit version? - Answer-4.0.99k

/.CVE-2002-0906 buffer overflow, sendmail version. - Answer-8.12.4

/.CVE-2003-0780 MySQL version has post authentication privilege escalation issue. -
Answer-MySQL 4.0.15

/.DBSNMP default password? - Answer-DBSNMP

/.DES - Answer-Data Encryption Standard

, /.DES Data block size - Answer-64 bits

/.DES. Key size? - Answer-56 bits

/.Different Web site host names have same IP. How does web server differentiate? -
Answer-Inspecting host field in client request.

/.DNS Zone Reverse look up record. For ip 192.168.1.10 - Answer-10.1.168.192. In-
addr.arpa. IN PTR alpha.example.com

/.DNS Zone transfer command. - Answer-dig @relay.example.org example.org axfr

/.enumerate users with empty GECOS field. - Answer-finger 0@<ip>

/.EXPN command protocol? - Answer-SMTP

/.FTP command to initiate data transfer - Answer-PORT

/.How are cookies presented back to the server? - Answer-Cookie HTTP header.

/.how can HTTP Trace method used against web server? - Answer-user cookie and
session information compromised

/.HTTP Code. Temporarily moved? - Answer-302

/.HTTP Method for enumerating HTTP methods. - Answer-OPTIONS

/.HTTP method for soap api data transfer? - Answer-POST

/.HTTP Methods - Answer-Options, delete,put,trace,

/.HTTP OSI Model layer? - Answer-Layer 7: Application

/.HTTP status code bad request? - Answer-400

/.ICMP destination host unreachable (number?) - Answer-3

/.ICMP type 8 response to host without firewall - Answer-Echo

/.IIS 5.0. Which o/s? - Answer-Windows 2000

/.IKE - Answer-Internet Key Exchange

/.IKE Main mode more secure than aggressive. Because? - Answer-identity protection.

/.In a DNS zone transfer, what is a requested? - Answer-Requests all data on a domain.