ECCouncil 312-50v13 Exam Overview:

ECCouncil 312-50v13 Exam Syllabus Topics:

ECCouncil Certified Ethical Hacker Exam (CEHv13) Sample Questions:

1. Stephen, an attacker, targeted the industrial control systems of an organization. He generated a fraudulent email with a malicious attachment and sent it to employees of the target organization.
An employee who manages the sales software of the operational plant opened the fraudulent email and clicked on the malicious attachment. This resulted in the malicious attachment being downloaded and malware being injected into the sales software maintained in the victim's system. Further, the malware propagated itself to other networked systems, finally damaging the industrial automation components. What is the attack technique used by Stephen to damage the industrial systems?

A) Spear-phishing attack
B) Reconnaissance attack
C) HMI-based attack
D) SMishing attack

2. During an internal red team engagement, an operator discovers that TCP port 389 is open on a target system identified as a domain controller. To assess the extent of LDAP exposure, the operator runs the command ldapsearch -h <Target IP> -x -s base namingcontexts and receives a response revealing the base distinguished name (DN): DC=internal,DC=corp. This naming context indicates the root of the LDAP directory structure used by the organization's Active Directory. With this discovery, the operator plans the next step to continue LDAP enumeration and expand visibility into users and objects in the domain. What is the most logical next action?

A) Conduct an ARP scan on the local subnet
B) Use the base DN in a filter to enumerate directory objects
C) Attempt an RDP login to the domain controller
D) Launch a brute-force attack against user passwords via SMB

3. Dorian is sending a digitally signed email to Poly. With which key is Dorian signing this message and how is Poly validating it?

A) Dorian is signing the message with his private key, and Poly will verify that the message came from Dorian by using Dorian's public key.
B) Dorian is signing the message with Poly's public key, and Poly will verify that the message came from Dorian by using Dorian's public key.
C) Dorian is signing the message with his public key, and Poly will verify that the message came from Dorian by using Dorian's private key.
D) Dorian is signing the message with Poly's private key, and Poly will verify that the message came from Dorian by using Dorian's public key.

4. In the industrial heart of Detroit, Michigan, a steel plant's production line halts under mysterious circumstances, prompting an urgent cybersecurity investigation. As Marcus Reed, an ethical hacker, you audit the system and notice the plant's control process uses a feedback mechanism to continuously adjust operations based on output conditions. Your review reveals that this self- regulating behavior is central to the plant's automation design. Based on your findings, which OT system concept is being employed?

A) Open loop
B) Closed loop
C) Distributed Control System (DCS)
D) Manual loop

5. In downtown Chicago, Illinois, security analyst Mia Torres investigates a breach at Windy City Enterprises, a logistics firm running an Apache HTTP Server. The attacker exploited a known vulnerability in an outdated version, gaining unauthorized access to customer shipment data.
Mia's analysis reveals the server lacked recent security updates, leaving it susceptible to remote code execution. Determined to prevent future incidents, Mia recommends a strategy to the IT team to address this exposure. Which approach should Mia recommend to secure Windy City Enterprises' Apache HTTP Server against such vulnerabilities?

A) Eliminate unnecessary flies within the jar files
B) Block all unnecessary ports, ICMP traffic, and unnecessary protocols such as NetBIOS and SMB
C) Use a dedicated machine as a web server
D) Conduct an extensive risk assessment to determine which segments of the network are most vulnerable or at high risk that need to be patched first

Solutions: