Question 1

What amount of disruption to the client's systems is acceptable during a penetration test?

Options :

A : There should be no disruption if the systems are secure, but the client should expect disruption if there are vulnerabilities.

B : None, and the client should report any anomalous behaviour immediately.

C : An few spontaneous reboots and occasional data corruption, but nothing really bad.

D : Quite a lot. Disruption is to be expected during a full penetration test.

E : It depends, but the client should be asked not to bother the testers as they have enough to deal with.

Answer: B

Question 2

What is the hash length of MD5?

Options :

A : 8 Byte or 36 bits

B : 16 Bytes with 128 bits

C : 32 Byte or 256 bits

D : 12 Byte or 192 bits

E : 64 Byte or 512 bits

Answer: B

Question 3

Why is the LM hash considered insecure?

Options :

A : It is susceptible to rainbow table attacks

B : It uses a weak encryption algorithm

C : It does not support special characters in passwords

D : It cannot store passwords longer than 7 characters

E : It stores passwords in plaintext

Answer: A

Question 4

On which Port does Oracle TNS listen?

Options :

A : 1521

B : 2433

C : 5667

D : 1566

E : 5666

Answer: A

Question 5

What is port 9100?

Options :

A : HTTP

B : FTP

C : SSH

D : Telnet

E : Printer

Answer: E

Free CREST-CPSA Mock Exam – Practice Online Confidently