Certified Tester - Infrastructure
CREST logo

Certified Tester - Infrastructure

CCT INF

Validate infrastructure testing skills with CREST's Certified Tester Infrastructure certification for IT professionals.

Exam syllabus, organized by domain

Try a real question

Sample Certified Tester - Infrastructure exam question

Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.

MasterApplication Security and Web Technologies

A penetration tester discovers a reflected XSS vulnerability in an employee portal login page. The 'username' parameter is echoed unsanitized into the page. The tester crafts a URL that steals the admin's session cookie via an image request. After obtaining the admin session, the tester finds that all state-changing endpoints use CSRF tokens. How can the tester leverage the XSS to bypass CSRF protections?

Frequently asked questions

Key facts about the Certified Tester - Infrastructure certification and how to prepare for it.

Skills & Requirements

What you need to know before attempting the Certified Tester - Infrastructure exam.