ECCouncil 312-50v13 Actual Tests : Certified Ethical Hacker Exam (CEHv13)

ECCouncil 312-50v13 Exam Syllabus Topics:

ECCouncil Certified Ethical Hacker Exam (CEHv13) Sample Questions:

1. During a forensic investigation of an attack on a media company in New York, analysts discovered that a non-privileged process loaded a malicious library instead of the intended library because the attacker placed the rogue file in a directory Windows searched before the legitimate location. When the trusted application started, the attacker's code executed with the application's privileges. No registry changes or kernel exploits were involved. Which technique most likely enabled the privilege escalation?

A) Privilege Escalation by Bypassing User Account Control
B) Access Token Manipulation
C) Privilege Escalation Using DLL Hijacking
D) Privilege Escalation by Exploiting Vulnerabilities

2. Which file is a rich target to discover the structure of a website during web-server footprinting?

A) domain.txt
B) Robots.txt
C) index.html
D) Document root

3. Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfiltrated by an attacker.
AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non- whitelisted programs. What type of malware did the attacker use to bypass the company's application whitelisting?

A) Phishing malware
B) File-less malware
C) Zero-day malware
D) Logic bomb malware

4. During a penetration test on a legacy Windows network, you use the nbtstat -A <IP> command on a target system and retrieve several NetBIOS names, including entries ending with <20> and
<03>. However, attempts to list shared folders fail. Which of the following best explains this behavior?

A) The nbtstat utility cannot enumerate shares from NetBIOS names.
B) File and printer sharing is disabled on the target system.
C) The host is not part of any Active Directory domain.
D) The target system's NetBIOS service is bound to a non-standard port.

5. A large multinational corporation is in the process of evaluating its security infrastructure to identify potential vulnerabilities. After a comprehensive analysis, they found multiple areas of concern, including time of check/time of use (TOC/TOU) errors, improper input handling, and poor patch management. Which of the following approaches will best help the organization mitigate the vulnerability associated with TOC/TOU errors?

A) Frequently updating firewall configurations to prevent intrusion attempts
B) Ensuring atomicity of operations between checking and using data resources
C) Regular patching of servers, firmware, operating system, and applications
D) Implementing stronger encryption algorithms for all data transfers

Solutions: