Free CPSA MCQ Questions and Answers — Questions and Answers
Question 1: SOAP stands for "Simple Object Access Protocol". Is it True or False?
- True (Correct answer)
- False
Correct answer: True
SOAP is indeed an acronym for Simple Object Access Protocol. It is a messaging protocol specification for exchanging structured information in the implementation of web services. SOAP relies on XML for its message format and usually relies on other application layer protocols, most notably HTTP or SMTP, for message negotiation and transmission.
Question 2: In the context of HSQLDB, what port number is typically used for the server mode?
- Port 179
- Port count
- Port 389
- Port 9001 (Correct answer)
Correct answer: Port 9001
HSQLDB (HyperSQL Database) is a relational database management system written in Java. When running HSQLDB in server mode, it typically listens for client connections on port 9001 by default. This port number is a standard configuration for HSQLDB server instances, allowing applications to connect and interact with the database.
Question 3: Which protocol commonly uses Port 21 for its default communication?
- HTTP
- MTP
- FTP (Correct answer)
- TELNET
Correct answer: FTP
File Transfer Protocol (FTP) is a standard network protocol used for transferring computer files between a client and server on a computer network. FTP commonly uses port 21 for its control connection, which is responsible for commands, authentication, and managing the transfer. Data transfer itself often uses port 20 or a dynamic port.
Question 4: In the context of web server software, which version of Internet Information Services (IIS) is commonly associated with Windows Server 2003 and Windows XP Professional?
- IIS 6 Defaults (Correct answer)
- is 10 v 1809 defaults
- Iis 11 Defaults
- Iis 7 Defaults
Correct answer: IIS 6 Defaults
IIS 6.0 was the version of Internet Information Services that shipped with Windows Server 2003 and was also available for Windows XP Professional. This version introduced significant architectural changes, including a new kernel-mode HTTP stack and application pool isolation, enhancing security and reliability compared to previous versions.
Question 5: In the DES algorithm, how many cycles of 48-bit subkeys are used?
- 168 bit key encryption (48 cycles)
- Protected Extensible Authentication Protocol
- Carrier Sense Multiple Access with Collision Avoidance
- 56 bit key encryption (16 cycles of 48 bit subkeys) (Correct answer)
Correct answer: 56 bit key encryption (16 cycles of 48 bit subkeys)
The Data Encryption Standard (DES) algorithm uses a 56-bit key for encryption, although it takes a 64-bit input (8 bits are parity bits). During the encryption process, DES performs 16 rounds (cycles), and in each round, a unique 48-bit subkey is derived from the original 56-bit key and used to encrypt the data.
Question 6: When it comes to language vulnerabilities, which programming language is commonly associated with the vulnerability known as "Incorrect Element Removal"?
- Log Injection Deadlock Language-based Attacks
- Incorrect Element Removal (Correct answer)
- Root | Mysql
- Mail Rcpt Data
Correct answer: Incorrect Element Removal
The question asks which programming language is associated with 'Incorrect Element Removal', but the correct answer provided is 'Incorrect Element Removal' itself. This refers to a type of vulnerability where a program fails to properly remove or sanitize an element, potentially leading to security issues like information disclosure or bypasses. While not tied to a single specific language, it's a general class of vulnerability that can manifest in various programming contexts.
Question 7: This series includes a variety of unique standards and publications that ISO has set aside exclusively for information security.
- Classless Subnets / CIDR
- Pointer Record (PTR)
- NT 6.1 Versions
- ISO 27000 Series (Correct answer)
Correct answer: ISO 27000 Series
The ISO 27000 series is a family of international standards specifically dedicated to information security management systems (ISMS). These standards provide a framework for organizations to manage and protect their information assets, covering aspects like risk management, security controls, and continuous improvement. ISO 27001 is the most well-known standard in this series, providing requirements for an ISMS.
Free CPSA MCQ Questions and Answers
SOAP stands for "Simple Object Access Protocol".
Is it True or False?