CREST CPSA Practice Test
Fifteen free CREST Practitioner Security Analyst practice tests: five mixed sets and ten syllabus-area drills. Each free test has 20 questions and a 20-minute timer, keeping the same one-question-per-minute pace as the 120-question CPSA exam.
Mixed set CREST CPSA practice tests
Use these for a quick read on your overall syllabus coverage. Each set mixes questions across CPSA's ten knowledge groups rather than drilling one area in isolation.
Domain Wise — CREST CPSA Practice Tests
Target one CPSA knowledge group at a time. These 10 domain-wise practice tests map directly to CREST Technical Syllabus v2.5 Areas A through J; D1–D10 are the practice-test labels used on this page.
Twenty questions finds the gap.
One hundred and twenty tests your pace.
The free sets are built for quick diagnosis. When you want a full rehearsal, the paid CPSA tests run 120 questions in 120 minutes, matching the length and pace CREST publishes for the exam.
| Free tests on this page | Full-length practice tests | |
|---|---|---|
| Questions | 20 | 120 |
| Time limit | 20 minutes | 120 minutes |
| Coverage | Mixed sample or one syllabus area | Full CPSA syllabus coverage |
| Question format | Multiple choice | Single-answer multiple choice |
| Exam conditions | Short timed practice | Full-length timed practice |
| Number available | 15 | 10 |
| Price | Free | From $4.49₹159£3.69€4.29 |
How to use these CPSA tests
Use the shorter sets first. Save the 120-question practice tests for the point when you need to measure concentration and pace, not just recall.
Benchmark
Take two mixed sets without revising first. Look for the domains that keep costing you marks.
Start with Practice Test 1 →Drill the gap
Move to the matching domain-wise test. Twenty focused questions make a weak topic much easier to isolate.
Choose a domain →Run the full clock
Sit 120 questions in 120 minutes. That is where you find out whether your pace still holds late in the test.
Get full-length tests →About the CREST Practitioner Security Analyst exam
CPSA is CREST's written practitioner-level penetration-testing examination. It tests knowledge of operating systems, common network services and web application security at a level below CRT and CCT.
Exam format
Questions: 120 multiple-choice questions.
Duration: 2 hours. Pearson VUE allows a maximum session time of 2.5 hours including administration.
Passing score: 60%, or 72 marks out of 120.
Marking: One mark per correct answer. Incorrect answers do not lose marks.
Delivery: Pearson VUE test centre.
Exam conditions: Closed book.
Current CREST practitioner exam price: £275 before applicable tax.
Eligibility and progression
Prerequisites: None for CPSA.
CRT pathway: A valid CPSA certification is required before sitting the CREST Registered Penetration Tester exam.
Retake: An unsuccessful candidate may retake CPSA 7 days after the original exam date.
Validity: CPSA is valid for 3 years.
Syllabus: Technical Syllabus v2.5 divides the examination content into ten knowledge groups.
CREST CPSA knowledge groups
CREST publishes ten knowledge groups in Technical Syllabus v2.5. It does not publish fixed percentage weights for those groups, so this page does not invent them.
| Area | Knowledge group | Official percentage weight |
|---|---|---|
| A | Soft Skills and Assessment Management | Not published |
| B | Core Technical Skills | Not published |
| C | Background Information Gathering and Open Source | Not published |
| D | Networking Equipment | Not published |
| E | Microsoft Windows Security Assessment | Not published |
| F | Unix Security Assessment | Not published |
| G | Web Technologies | Not published |
| H | Web Testing Methodologies | Not published |
| I | Web Testing Techniques | Not published |
| J | Databases | Not published |
How our CPSA practice tests are written
Built around Technical Syllabus v2.5. Questions stay inside the ten CPSA knowledge groups and their published skill areas.
Short questions where the syllabus calls for them. CPSA is a written multiple-choice exam. The practice bank mixes direct technical knowledge with short applied situations and compact evidence interpretation.
Original practice material. The bank is written for preparation. It does not reproduce live CREST exam questions.
No fake weighting claims. CREST publishes the ten knowledge groups, but not percentage weights. Mixed sets cover the syllabus without presenting an internal distribution as an official CREST blueprint.
CREST CPSA preparation tips
Study strategy
Work from the syllabus. Turn each skill area into a checklist. A broad exam punishes blind spots more than it rewards over-studying one comfortable topic.
Keep technical recall sharp. Protocol behaviour, common services, operating-system security and web testing concepts all sit inside the CPSA scope.
Use domain-wise tests after mixed sets. Diagnose first, then drill. That keeps revision tied to evidence from your own scores.
Test-taking strategy
Respect the one-minute pace. The official exam gives 120 minutes for 120 questions. A question that absorbs four minutes has to be paid for somewhere else.
Answer every question. CREST awards one mark for a correct answer and does not deduct marks for an incorrect one.
Practise the full length before exam day. Twenty questions tests knowledge. One hundred and twenty also tests whether you can keep making clean decisions at the end.
Frequently asked questions
Start short. Finish full length.
Use a free 20-question set to find the gap. When you are ready to test the full 120-question pace, move to the full-length CPSA practice tests.
