CREST CPSA Full-Length Practice Test
One hundred and twenty questions in 120 minutes. Ten full-length practice tests built across the ten knowledge groups in CREST Technical Syllabus v2.5, using the published 72/120 pass mark as the target.
- 120 questions / 120 min
- 72 / 120 to pass
- Single-answer practice bank
- 10 syllabus groups
- 30 easy · 60 medium · 30 hard
Choose one test, five, or the complete set
Every option uses the same 120-question format and the same internal CPSA practice-bank blueprint. The pack only changes how many fresh sets you get.
One test
120 questions
One full two-hour practice test
- 120 single-answer questions
- All ten CPSA syllabus groups covered
- 30 easy, 60 medium and 30 hard questions
- Explanation attached to every question
All 10 tests
1,200 questions
Works out at $1.50₹49.90£1.20€1.40 per test
- Ten complete 120-question practice tests
- 1,200 questions across the full series
- Same ten-group allocation in every set
- Same 30 / 60 / 30 difficulty mix throughout
- Enough fresh sets to compare progress without repeating one paper
Five tests
600 questions
Works out at $2.00₹71.80£1.60€1.90 per test
- Five complete 120-question practice tests
- 600 questions in total
- Same two-hour format in every set
- Same ten-group allocation and difficulty mix
One payment per test or pack. No subscription.
What CREST sets on the current CPSA exam
CPSA is a closed-book written multiple-choice exam. It tests practitioner-level knowledge of infrastructure and web security assessment, below the depth of CREST's CRT and CCT qualifications.
| Exam | CREST Practitioner Security Analyst (CPSA) |
| Format | Written multiple-choice examination |
| Questions | 120 |
| Duration | 2 hours / 120 minutes |
| Pass mark | 72 / 120, or 60% |
| Marking | 1 mark per correct answer; no deduction for incorrect answers |
| Book policy | Closed book |
| Delivery | Pearson VUE test centre |
| Retake wait | 7 days after an unsuccessful attempt |
| Current practitioner price | £275 before applicable tax |
| Technical syllabus | Version 2.5 |
Built around the published syllabus
CREST's current CPSA syllabus is divided into ten knowledge groups. They run from assessment management and core technical skills through Windows, Unix, web testing and databases.
The exam is knowledge based. CREST describes it as testing whether a candidate can assess operating systems and common network services, perform basic infrastructure and web application vulnerability scanning, and interpret the results well enough to locate security weaknesses.
These practice tests stay at that practitioner level. The bank uses concise technical questions, short scenarios and evidence interpretation instead of turning CPSA into an advanced exploit-development exam.
Two hours changes the way a 120-question paper feels
A short quiz can expose a weak topic. A full CPSA run tests whether you can keep the pace when the questions move from DNS to Windows, Unix, web testing and databases without warning.
How it's built
- 120 questions in every full-length set
- Four answer options with one keyed answer
- All ten syllabus knowledge groups represented
- All 76 syllabus skill areas used across each set
- 30 easy, 60 medium and 30 hard questions
Under the clock
- 120 minutes for the complete practice test
- About one minute per question on average
- Single-answer questions throughout the bank
- No choose-TWO or multi-response items in this series
- 72 correct answers is the practice pass target
What the explanations do
- Every question carries a 2–4 sentence explanation
- The keyed answer is tied back to the tested concept
- The strongest distractor is addressed when it matters
- Legacy syllabus items are explained in their proper context
- The aim is to fix the distinction, not just reveal a letter
Short, technical, and built around what the evidence means
CPSA does not need every item turned into a long story. The better questions are often compact: a protocol, an observed result, then one decision.
During reconnaissance, a tester sends an AXFR request to a target's authoritative DNS server and the transfer succeeds. What is the main security concern?
- AThe zone's DNS records can be disclosed, revealing useful host and naming information.
- BThe DNS server will automatically replace its authoritative records with the requester's records.
- CThe successful transfer proves that all DNS traffic is encrypted with an obsolete cipher.
- DThe server can no longer answer recursive DNS queries for external domains.
Why A
A successful zone transfer can expose the records held for the zone, which may reveal hostnames, mail systems and other useful reconnaissance data. It does not grant permission to rewrite the zone, and it says nothing about DNS encryption or recursive-query behaviour.
Every practice test covers all ten CPSA knowledge groups
CREST publishes the ten groups in Technical Syllabus v2.5 but does not publish percentage weights for them. The counts below are the fixed internal allocation used in this 120-question practice bank.
| Group | CREST syllabus area | Questions per practice test |
|---|---|---|
| A | Soft Skills and Assessment Management | 8 |
| B | Core Technical Skills | 19 |
| C | Background Information Gathering and Open Source | 10 |
| D | Networking Equipment | 11 |
| E | Microsoft Windows Security Assessment | 14 |
| F | Unix Security Assessment | 14 |
| G | Web Technologies | 14 |
| H | Web Testing Methodologies | 19 |
| I | Web Testing Techniques | 6 |
| J | Databases | 5 |
Total: 120 questions. These are practice-bank counts, not CREST-published exam weights.
All 10 CREST CPSA full-length practice tests
Each test is a complete 120-question set. Buy one, take five, or work through all ten as separate two-hour runs.
About the CPSA exam and these practice tests
The CPSA exam
How many questions are on the CREST CPSA exam?
What score do you need to pass CPSA?
Is the CPSA exam closed book?
What topics are in the CPSA syllabus?
How soon can I retake CPSA after an unsuccessful attempt?
How much does the CREST Practitioner exam cost?
Does CREST publish percentage weights for the ten CPSA knowledge groups?
These practice tests
How closely do these practice tests match the CPSA format?
Do these tests include explanations?
Do these tests use choose-TWO or multiple-answer questions?
Are all ten tests built to the same difficulty mix?
Where do the practice questions come from?
How much are the CPSA practice tests?
Ten CPSA practice tests. 1,200 questions.
$14.99₹499£11.99€13.99
CREST currently lists Practitioner examinations at £275 before applicable tax. Use the full-length sets to find the syllabus area that keeps costing you marks before you book the exam.
