Certified Tester - Infrastructure
Validate infrastructure testing skills with CREST's Certified Tester Infrastructure certification for IT professionals.
Exam syllabus, organized by domain
Try a real question
Sample Certified Tester - Infrastructure exam question
Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.
A penetration tester discovers a reflected XSS vulnerability in an employee portal login page. The 'username' parameter is echoed unsanitized into the page. The tester crafts a URL that steals the admin's session cookie via an image request. After obtaining the admin session, the tester finds that all state-changing endpoints use CSRF tokens. How can the tester leverage the XSS to bypass CSRF protections?
Practice the Certified Tester - Infrastructure
Free Certified Tester - Infrastructure practice questions, scored per domain against the official blueprint.
Everything about the Certified Tester - Infrastructure exam
The questions people ask before booking, answered with the official specification.
Frequently asked questions
Key facts about the Certified Tester - Infrastructure certification and how to prepare for it.
Skills & Requirements
What you need to know before attempting the Certified Tester - Infrastructure exam.
Compare related certifications
Explore other certifications in the same category and see how they stack up.
Related articles
Learn more about Cybersecurity with these guides.

What Does a Certification Exam Score Report Actually Tell You? (And What It Never Will)
PMI gives you performance bands by domain. CompTIA gives you a scaled score and the objectives you missed. ISC2 gives you nothing at all. Here is how to read each one, and why the number you want is the one nobody gives you.

Which IT Certifications Have No Experience Requirement? The 2026 List (And the Catch With Each)
CompTIA, AWS, Google Cloud and Scrum.org require nothing but the exam. ISACA, ISC2 and PMI do not. The differences are not academic — a title reduces an experience requirement in ISACA and ISC2, and in one case does not reduce it at all.

Do CompTIA Certifications Expire? A+ vs Network+ vs Security+ Do Not Work the Same
A+, Network+ and Security+ all last three years, but they renew on different terms: 20, 30 and 50 CEUs, at $75, $150 and $150. And there is one category that never expires at all.

