CREST Practitioner Security Analyst (CPSA)

Question 1

What is the primary purpose of an Information Security Management System (ISMS) as defined by ISO/IEC 27001?

To establish, implement, maintain, and continually improve information security controls To automate vulnerability scanning across all systems To manage employee security awareness training To define software development lifecycle processes

Correct Answer:

To establish, implement, maintain, and continually improve information security controls

Question 2

What does a risk assessment in information security aim to identify?

Threats, vulnerabilities, likelihood, and potential impact to organizational assets Penetration test findings and their CVSS scores The number of security incidents per quarter Compliance gaps against a regulatory framework

Correct Answer:

Threats, vulnerabilities, likelihood, and potential impact to organizational assets

Question 3

Which of the following is a risk treatment option in information security risk management?

Risk transfer (e.g., cyber insurance) Risk discovery Risk enumeration Risk correlation

Correct Answer:

Risk transfer (e.g., cyber insurance)

Question 4

What does the NIST Cybersecurity Framework (CSF) organize its functions around?

Identify, Protect, Detect, Respond, Recover Plan, Do, Check, Act Prevent, Detect, Correct Classify, Assess, Mitigate, Monitor

Correct Answer:

Identify, Protect, Detect, Respond, Recover

Question 5

What is the difference between a vulnerability and a risk in information security?

A vulnerability is a weakness; a risk is the potential for harm when a threat exploits that weakness A vulnerability is the likelihood of an attack; a risk is the discovered flaw A vulnerability is a business impact; a risk is a technical weakness They are synonymous terms used interchangeably

Correct Answer:

A vulnerability is a weakness; a risk is the potential for harm when a threat exploits that weakness

Exam overview

About this Exam

Prepare with the CREST Practitioner Security Analyst (CPSA) practice quiz. This question bank includes 30 questions covering security, information, malware, risk, and crest. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CREST Practitioner Security Analyst (CPSA)

This practice set contains 30 questions from the matching question bank and focuses on security, information, malware, risk, and crest. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

CREST Practitioner Security Analyst (CPSA)

Frequently Asked Questions

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

4Point Business Practitioner Practice Exam

Arizona Security Guard Knowledge Practice Exam

Certified Valuation Analyst (CVA) Practice Exam

Certified Quality Process Analyst (CQPA) 1 Practice Exam

AANP Adult-Gerontology Primary Care Nurse Practitioner Practice Exam