CPSA Crest 4

Question 1

What does CVSS Base Score measure in the context of vulnerability assessment?

Accepted Answer

The intrinsic severity of a vulnerability independent of time and environment

Answer

The CVSS Base Score reflects the intrinsic qualities of a vulnerability (attack vector, complexity, privileges required, impact) without considering time or environmental factors.

Question 2

What is a pass-the-hash attack and which protocol does it primarily target?

Accepted Answer

Authenticating using a stolen password hash without cracking it; targets NTLM

Answer

Pass-the-hash exploits NTLM authentication by using a captured hash directly as a credential, bypassing the need to know the plaintext password.

Question 3

Which Windows privilege escalation technique exploits services running with unquoted paths containing spaces?

Accepted Answer

Unquoted service path exploitation

Answer

When a service executable path with spaces is unquoted, Windows searches each space-delimited path component, allowing an attacker to place a malicious binary in an intermediate directory.

Question 4

What does the term 'lateral movement' mean in the context of a penetration test?

Accepted Answer

Moving from one compromised system to other systems in the network

Answer

Lateral movement refers to techniques used to progressively move through a network after initial compromise, accessing additional hosts and resources.

Question 5

Which tool is most commonly associated with Active Directory enumeration and attack path visualization during internal penetration tests?

Accepted Answer

BloodHound

Answer

BloodHound collects AD data via SharpHound and visualizes attack paths, identifying the shortest path to Domain Admin through ACL abuse, group memberships, and trust relationships.

CPSA Exam Practice Test

CPSA Exam Practice Test

CPSA Crest 4