CREST Practitioner Security Analyst (CPSA) Vocabulary Game
Exam terms with clues and explanations by OpenExamPrep.
About the CREST Practitioner Security Analyst (CPSA) Vocabulary Games
4 free word games built on 20 CREST Practitioner Security Analyst (CPSA) terms across 13 topics. Every game deals terms at random and shows what each term means, so you can keep playing as long as you like.
How to Play
- 1.Read the clue and type the term (3 to 6 letters).
- 2.Green: right spot. Yellow: wrong spot. Gray: not in the term.
- 3.Solve it in 6 tries, then read the explanation.
- 1.Swap two neighboring tiles to line up 3 of the same term.
- 2.Longer lines, two lines at once and chains score more.
- 3.Play until no swap can make a line.
- 1.Flip two cards. A matching pair stays face up.
- 2.Each pair you find shows what the term means.
- 3.Clear the board in as few moves as you can.
- 1.Find each listed term in the letter grid.
- 2.Drag across its letters: across, down or diagonally.
- 3.Find all five as fast as you can.
Explore More CREST Penetration Testing Certifications
Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.
Free CETopics in the CREST Practitioner Security Analyst (CPSA) Vocabulary Game
Assessment management
Core technical skills
Cryptography
Information gathering
Networking equipment
Password attacks
Domain reconnaissance
Patch management
Unix security
Web technologies
Web testing methodologies
Web testing techniques
Databases
Sources for these terms (21)
- Internet Denial-of-Service Considerations · Source checked 2026-11-06
- Transmission Control Protocol (TCP) · Source checked 2026-11-06
- User Datagram Protocol · Source checked 2026-11-06
- Announcing the Advanced Encryption Standard (AES) · Source checked 2026-11-06
- HMAC: Keyed-Hashing for Message Authentication · Source checked 2026-11-06
- WHOIS Protocol Specification · Source checked 2026-11-06
- Domain Names - Concepts and Facilities · Source checked 2026-11-06
- Address Resolution Protocol (ARP) - Glossary · Source checked 2026-11-06
- Dynamic Host Configuration Protocol · Source checked 2026-11-06
- SIP: Session Initiation Protocol · Source checked 2026-11-06
- [MS-NLMP]: Overview · Source checked 2026-11-06
- [MS-SMB2]: Server Message Block (SMB) Protocol Versions 2 and 3 · Source checked 2026-11-06
- Windows Server Update Services (WSUS) Overview · Source checked 2026-11-06
- Network File System (NFS) Version 4 Minor Version 1 Protocol · Source checked 2026-11-06
- File Transfer Protocol (FTP) · Source checked 2026-11-06
- HTTP Semantics · Source checked 2026-11-06
- SOAP Version 1.2 Part 1: Messaging Framework (Second Edition) · Source checked 2026-11-06
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') · Source checked 2026-11-06
- MySQL 8.4 Reference Manual: What is MySQL? · Source checked 2026-11-06
- MySQL 8.4 Reference Manual: MySQL Server Configuration with MySQL Configurator · Source checked 2026-11-06
- FIPS 198-1: The Keyed-Hash Message Authentication Code (HMAC) · Source checked 2026-11-06
About the CREST CPSA Exam
The CREST Practitioner Security Analyst (CPSA) is the entry-level CREST certification for penetration testers. It validates core knowledge of IP protocols, cryptography, network mapping, OS security assessment, and web application vulnerability identification — and is a prerequisite path to the CREST Registered Tester (CRT).
Exam sponsor: CREST. The requirements and fees below concern the certification or admission exam, separate from our free practice resources.
Questions
120 questions
Time Limit
2 hours
Passing Score
72/120 (60%)
Exam / Certification Fees
Varies by region; check crest-approved.org for current pricing
Exam sponsor websiteReported exam pass rate: Not published. CREST does not publish official pass-rate statistics for the CPSA exam. Exam sponsor website
Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.
Frequently Asked Questions
Is the CREST CPSA vocabulary game free?
Yes. The game is free to play with no sign-up. Signing in adds AI explanations for any term.
How do the CREST CPSA vocabulary games work?
There are 4 games built on 20 CREST CPSA terms. In Guess the Term, a clue describes one term and you have six tries to spell it, with green, yellow and gray letters showing how close you are. In Term Match, six terms appear as colored tiles; swap neighbors to line up three or more of the same term, and each match shows what the term means. In Term Pairs, twelve face-down cards hide six pairs of terms; flip two at a time to find each pair, and every pair you find shows what the term means. In Term Search, five terms hide in a grid of letters, reading across, down or diagonally; drag across a term to circle it, and each term you find shows what it means.
Where do the CREST CPSA terms come from?
OpenExamPrep researched each term from the CREST content outline and primary sources, listed under Sources on this page. The game is independent study material, not an official exam resource.
What is the CREST CPSA exam format?
The CPSA is a 120-question closed-book multiple-choice exam with a 2-hour time limit. It is delivered at a Pearson VUE test centre. Each question has multiple answer options, one correct answer scores 1 mark, and there is no negative marking. Candidates need 72 correct answers (60%) to pass.
Is CREST CPSA good for beginners?
Yes, the CPSA is positioned as the entry-level CREST qualification for aspiring penetration testers. It tests foundational knowledge of networking, cryptography, OS internals, and web vulnerabilities. Candidates with a solid CompTIA Network+ or Security+ background typically find the theoretical content accessible.