CRT Cheat Sheet 2026

The 30 highest-yield CRT facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. In pipe tobacco terminology, what is a 'Cavendish'? → A process of pressure-cooking tobacco with sweeteners to create a mild, sweet blend
2. The Cuban tobacco variety 'Corojo' is traditionally used for which part of the cigar? → Wrapper leaf
3. A tobacco retailer's database stores customer loyalty points. Which SQL statement adds 50 points to every customer who has made more than 5 purchases? → UPDATE customers SET points = points + 50 WHERE purchases > 5
4. Which SQL command permanently removes a tobacco product record from the inventory table? → DELETE FROM inventory WHERE id=5
5. When evaluating third-party vendors who access a tobacco retailer's systems, risk management best practice requires: → Conducting vendor security assessments and including security requirements in contracts
6. In a tobacco retail management system, what does 'FIFO' inventory rotation mean? → First In, First Out — older stock is sold before newer stock
7. Which SQL keyword is used to update the price of a specific tobacco product already in the database? → UPDATE
8. What is 'patch management' and why is it important for a tobacco retail POS system? → Regularly updating software to fix security vulnerabilities before attackers exploit them
9. Which type of encryption uses two mathematically related keys — one public and one private? → Asymmetric encryption
10. Which data visualization principle helps prevent misleading comparisons in tobacco retail reports? → Starting the y-axis at zero to accurately represent magnitude differences
11. Which store layout strategy best supports a premium tobacconist's brand experience? → Open, curated displays with ample browsing space and knowledgeable staff stations
12. What regulatory data must a US tobacco retailer retain and make available to authorities upon request? → Invoices from distributors/manufacturers showing tobacco product acquisitions
13. What are the three main structural components of a premium handmade cigar? → Wrapper, binder, and filler
14. What does PKI stand for in the context of network security? → Public Key Infrastructure
15. What is the default port number used by HTTPS? → 443
16. In CRT cybersecurity, what is the principle of least privilege? → Users should only have the minimum access rights necessary to perform their job functions
17. A tobacco shop's Wi-Fi network is used for both the POS system and customer internet access. The BEST security practice is to: → Segment them into separate networks
18. What does the principle of least privilege state? → Users and systems should have only the minimum access rights needed for their tasks
19. How should loose pipe tobacco be displayed in a retail tobacco store? → In sealed glass jars or airtight tins labeled by blend
20. Which chart type would best show each tobacco product category's share of total annual revenue? → Pie or donut chart
21. What is a 'pilón' in tobacco processing? → A large bulk pile of tobacco leaves assembled for the fermentation process
22. In smokeless tobacco, what distinguishes 'moist snuff' from 'dry snuff'? → Moist snuff is used orally while dry snuff is traditionally inhaled nasally
23. What was the primary effect of the 1962 US embargo on Cuba on the American premium cigar market? → Cuban cigar makers emigrated and established new premium industries in other countries
24. What is the recommended relative humidity (RH) range for a walk-in cigar humidor? → 65–72%
25. Which data source would be most valuable when benchmarking a tobacco shop's performance against industry averages? → Trade association reports and industry publications
26. In a large walk-in retail humidor, where should the humidification unit ideally be positioned for best air distribution? → Near the ceiling, as humidity-laden air naturally descends
27. What is 'spear phishing' as distinct from general phishing attacks? → Highly targeted phishing that uses personalized information about a specific victim
28. Under a risk transfer strategy, a tobacco retailer would typically: → Purchase cyber liability insurance to shift financial risk to an insurer
29. During a tobacco retail ERP implementation, the project team must complete testing before training can begin. What type of dependency is this? → Mandatory dependency
30. Which action would most likely constitute a 'straw purchase' in a tobacco retail context? → An adult buying tobacco products at the request of and for an underage person