CREST Registered Penetration Tester (CRT) Certification Sample Questions

The purpose of this Sample Question Set is to provide you with information about the CREST Registered Penetration Tester exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the CRT certification test. To get familiar with real exam environment, we suggest you try our Sample CREST Registered Penetration Tester Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual CREST Registered Penetration Tester (CRT) certification exam.

These sample questions are simple and basic questions that represent likeness to the real CREST CRT exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium CREST Registered Penetration Tester Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

CREST CRT Sample Questions:

01. Which tools can be used for mail injection testing?

a) smtp-user-enum

b) swaks

c) msfvenom

d) sqlmap

02. Which commands are helpful in identifying SUID binaries?

a) find / -perm -4000 -type f

b) ls -l

c) sudo -l

d) grep sudo

03. What is the primary purpose of the /etc/sudoers file?

a) To configure logging

b) To define password complexity

c) To manage user sudo permissions

d) To store user home directories

04. Which tool would you use for passive DNS enumeration?

a) dig

b) theHarvester

c) nslookup

d) dnsrecon

05. What type of encryption does IPsec use for confidentiality?

a) AES

b) DES

c) RSA

d) MD5

06. What are valid reasons for performing DNS reconnaissance?

a) Mapping out a target’s subdomains

b) Identifying domain registrars

c) Extracting internal hostnames

d) Gaining access to passwords

07. Which defenses are recommended against SQL Injection?

a) Base64 encoding

b) Using hidden fields in forms

c) Input sanitization

d) Prepared statements

08. What port does the Secure Shell (SSH) protocol use by default?

a) 21

b) 443

c) 110

d) 22

09. A secure alternative to FTP for file transfer over SSH is called ______.

a) SFTP

b) FTPS

c) TFTP

d) SCP

10. What is the primary purpose of OS fingerprinting in a penetration test?

a) To identify open ports on a system

b) To bypass firewall rules

c) To determine the target system's operating system

d) To check for service vulnerabilities

Answers:

Question: 01 Answer: a, b	Question: 02 Answer: a, c	Question: 03 Answer: c	Question: 04 Answer: b	Question: 05 Answer: a
Question: 06 Answer: a, c	Question: 07 Answer: c, d	Question: 08 Answer: d	Question: 09 Answer: a	Question: 10 Answer: c

Note: For any error in CREST Registered Penetration Tester (CRT) certification exam sample questions, please update us by writing an email on feedback@edusum.com.

CREST Registered Penetration Tester (CRT) Certification Sample Questions

CREST CRT Sample Questions:

Answers:

Blogs