Free Preparation Discussions
MENU
EC-Council Certified Ethical Hacker CEH-AI v13 312-50 Exam Questions
- Topic 1: Introduction to Ethical Hacking: This module covers ethical hacking fundamentals such as elements of information security, Chain Methodology, Hacker Classes, Risk Management, DSS, HIPPA, and SOX.
- Topic 2: Foot Printing and Reconnaissance: In this module, candidates are tested for performing footprinting on the target network, and performing website, email, whois, and DNS footprinting. Other topics include Advanced Google Hacking Techniques, Deep and Dark Web Footprinting, Website Mirroring, Traceout Analysis, and other tools.
- Topic 3: Scanning Networks: The topics covered in this module include network scanning, host discovery, port scanning, OS Discovery, and packet Fragmentation.
- Topic 4: Enumeration: The current domain covers NetBIOS Enumeration, SNMP, NFS, SMTP Enumeration and also covers DNS Cache Snooping and VoIP Enumeration.
- Topic 5: Vulnerability Analysis: It covers vulnerability research, assessment, management and lifecycle, classification, and assessment tools.
- Topic 6: System Hacking: This section covers password cracking, wire sniffing, buffer overflow, keylogger, spyware, anti-keyloggers, rootKits, post-exploitation, and covering tracks.
- Topic 7: Malware Threats: This section covers Malware components, APT, Trojan, Virus, Ransomware, Worms, Virus detection, and Anti-trojan software.
- Topic 8: Sniffing: This module covers sniffing, MAC flooding, MAC Spoofing, DNS Poisoning tools, and Sniffing tools.
- Topic 9: Social Engineering: This section of the exam covers social engineering types, Phishing, insider threats, and identity theft.
- Topic 10: Denial-of-Service: This section covers DoS Attacks, DDos Attacks, Botnets, DoS/DDoS Attack Tools, DoS Protection Tools.
- Topic 11: Session Hijacking: This section covers types of session hacking, Spoofing, client-side attacks, session replay attacks, CRIME attacks, and Hijacking tools.
- Topic 12: Evading IDS, Firewalls, and Honeypots: This section covers intrusion detection systems, firewall types, intrusion prevention, intrusion detection tools, Evading NAC Endpoint security, IDS/Firewall Evading Tools, and Honeypot detection tools.
- Topic 13: Hacking Web Servers: This section covers web server operations, web server attacks, DNS Server Hijacking, website defacement, Web Cache Positioning Attack, web server security tools, and patch management tools.
- Topic 14: Hacking Web Applications: This section covers web applications architecture, web application threats, application security risks, web shell, web API Hacking Methodology.
- Topic 15: SQL Injection: In this section, topics covered SQJ injection, SQJ Injection methodology, tools signature evasion, and injection detection tools.
- Topic 16: Hacking Wireless Networks: This section covers wireless terminology, wireless networks, encryption, wireless threats, Wi-Fi encryption cracking, Bluetooth hacking, Wi-Fi security auditing, and Bluetooth security tools.
- Topic 17: Hacking Mobile Platforms: This section covers Mobile Platform Attack Vectors, App sandboxing, SMS Phishing attacks, hacking Android devices, and mobile security tools.
- Topic 18: IoT and OT Hacking: In this section, topics covered IoT Architecture, IoT Communication, top ten IoT threats, ICS and SCADA, OT Vulnerabilities, and OT Security Tools.
- Topic 19: Cloud Computing: This section covers types of cloud computing, cloud deployment, Fog and Edge computing, cloud service providers, serverless computing, and cloud attacks.
- Topic 20: Cryptography: This section covers cryptography, Encryption Algorithms, Cryptography tools, disk encryption, and Key Stretching.
Free EC-Council Certified Ethical Hacker CEH-AI v13 312-50 Exam Actual Questions
Note: Premium EC-Council Certified Ethical Hacker CEH-AI v13 312-50 Practice Questions — Last Updated: Oct. 30, 2026 (see below)
During a social engineering simul-ation at BrightPath Consulting in Denver, ethical hacker Liam emails employees a message that appears to come from the company's security team. The email urgently warns that ''all systems will shut down within 24 hours'' unless staff download a patch from a provided link. The message is deliberately false and contains no actual malware, but it causes confusion and prompts several employees to call IT for clarification.
Which social engineering technique is Liam demonstrating?
The best answer is A. Hoax because the scenario is built around a false alarm message designed to provoke fear, urgency, and reactive behavior rather than to deliver a real payload. In CEH-aligned social engineering concepts, a hoax typically involves distributing a fabricated warning (for example, claims of imminent system failure, viruses spreading internally, accounts being deleted, or catastrophic outages) to manipulate users into taking unnecessary actions or spreading the message further. The key trait is that the content is intentionally untrue and aims to exploit human psychology---especially urgency and fear---to disrupt normal operations or trigger unsafe decisions.Here, Liam impersonates the security team and claims ''all systems will shut down within 24 hours'' unless employees act. Even though the email contains no malware, it still achieves a common hoax outcome: confusion, loss of productivity, and increased helpdesk load as employees contact IT. In real-world attacks, hoaxes can be used as a precursor to more damaging steps (e.g., pushing victims toward unsafe links, persuading them to install fake ''patches,'' or creating noise that distracts defenders), but the defining characteristic remains the false security warning and the behavioral manipulation it causes.Why the other options are less correct: Baiting relies on enticing victims with something appealing (free software, prizes, ''exclusive'' content) to get them to click or plug in media; this scenario is fear/urgency, not temptation. Pretexting is the creation of a believable fabricated identity/story to obtain information or actions; while impersonation is present, the question's hallmark is the deliberately false alarm consistent with a hoax. Spam refers to unsolicited bulk messaging and is not defined by deception about imminent shutdowns or security crises.Therefore, Liam is demonstrating a hoax social engineering technique.
During an external assessment of a healthcare insurance company in Houston, a penetration tester identifies a service running on TCP port 389. When queried, the service accepts anonymous binds and reveals directory data. By structuring his search filter, the tester is able to obtain usernames, departmental details, and organizational units. This information could potentially be used for targeted password attacks or privilege escalation.
Which classification best describes this enumeration activity?
TCP port 389 is the default port for LDAP (Lightweight Directory Access Protocol). The tester's actions---performing an anonymous bind and querying directory contents with structured search filters to extract usernames and organizational information---are definitive indicators of LDAP enumeration. LDAP is commonly used for centralized directory services (including environments integrated with Active Directory via LDAP interfaces). If misconfigured to allow anonymous binds or overly permissive searches, an attacker can retrieve valuable identity and structure data.
The scenario describes obtaining usernames, departmental details, and organizational units (OUs). Those are typical LDAP directory attributes and containers. Enumerating them can directly support follow-on attack paths: building targeted password-spraying lists, crafting spear-phishing that references accurate internal roles, identifying privileged groups, and mapping the organization's structure to prioritize high-value targets. Even without direct credential compromise, directory disclosure increases attacker effectiveness.
Why the other options are incorrect:
SMTP enumeration (A) focuses on email systems (e.g., VRFY/EXPN/RCPT TO behaviors) and typically uses TCP/25 or related mail ports, not 389.
DNS enumeration (B) involves querying DNS records (A/AAAA, MX, NS, TXT, zone transfers) and does not involve directory binds or LDAP filters.
NTP enumeration (D) relates to time services (UDP/123) and provides timing/monlist-style information, not user/OU directory attributes.
Because the service is on TCP/389 and the technique involves binds and directory searches, the correct classification is C. LDAP Enumeration.
During security awareness training, which scenario best describes a tailgating social engineering attack?
The Certified Ethical Hacker (CEH) Social Engineering module defines tailgating as a physical social engineering attack where an unauthorized person follows an authorized individual into a restricted area.
Option C precisely matches CEH's definition.
Option A is pretexting.
Option B is baiting.
Option D is phishing.
CEH stresses physical security awareness as critical as cyber defenses.
While testing the policy, the engineer temporarily picks up one of the unattended phones and is able to immediately access corporate email, financial reports, and messaging applications without encountering any authentication barrier at the device level.
The organization determines that the exposure stems from inadequate baseline security requirements for personally owned devices used to access corporate resources.
Which BYOD security guideline would most directly mitigate this exposure?
The immediate weakness is absence of device-level authentication. A strong device passcode directly prevents an unauthorized person who physically obtains an unattended smartphone from immediately opening corporate applications and data. Encryption protects stored information, but normally depends on authentication controls to prevent unauthorized interactive access. Separating business and personal information improves BYOD governance but does not stop someone from using an already accessible phone. Application-specific passwords provide additional defense, yet the scenario explicitly identifies the missing baseline control at the device level. CEH v13 Module 17 includes mobile device management and mobile-security guidelines, while established BYOD guidance likewise recommends strong passwords, automatic locking, and authentication controls on personally owned devices accessing organizational data. Therefore, option B most directly addresses the stated exposure.
================
A penetration tester is conducting an assessment of a web application for a financial institution. The application uses form-based authentication and does not implement account lockout policies after multiple failed login attempts. Interestingly, the application displays detailed error messages that disclose whether the username or password entered is incorrect. The tester also notices that the application uses HTTP headers to prevent clickjacking attacks but does not implement Content Security Policy (CSP). With these observations, which of the following attack methods would likely be the most effective for the penetration tester to exploit these vulnerabilities and attempt unauthorized access?
1: What is a Brute Force Attack? | Definition, Types & How It Works - Fortinet
2: What is SQL Injection? Tutorial & Examples | Web Security Academy
3: Cross Site Scripting (XSS) | OWASP Foundation
4: What is Clickjacking? | Definition, Types & Examples - Fortinet
5: Man-in-the-middle attack - Wikipedia
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Carol Thompson
1 month agoBrian Lopez
2 months agoBrenda Hall
2 months agoStephen Anderson
2 months agoDeborah Young
3 months agoMonica Johnson
3 months agoRichard Young
3 months agoFrank Campbell
4 months agoSteven Murphy
4 months agoRobert Stewart
4 months agoCarol Campbell
5 months agoStephen Cook
5 months agoMelissa Anderson
5 months agoGary King
6 months agoFrank Rogers
6 months agoEmma Scott
7 months agoLaura Lee
6 months agoChristopher Hill
6 months agoJeffrey Bell
6 months agoTimothy Evans
6 months agoRichard Parker
6 months agoFausto
7 months agoDalene
7 months agoNatalie
8 months agoTyra
8 months agoIzetta
8 months agoJohnetta
8 months agoElly
9 months agoUla
9 months agoVincent
9 months agoJohana
9 months agoVernell
10 months agoAlease
10 months agoBarbra
10 months agoNikita
10 months agoAbraham
11 months agoVinnie
11 months agoSharika
11 months agoEnola
11 months agoJuliana
12 months agoRochell
12 months agoWilletta
1 year agoPenney
1 year agoElza
1 year agoYuki
1 year agoQuiana
1 year agoJoanna
1 year agoJames
1 year agoMaryann
1 year agoLatosha
1 year agoLinn
1 year agoOretha
1 year agoAntonette
1 year agoLang
1 year agokeron
1 year agoArlene
2 years agoGearldine
2 years agoEliz
2 years agoIsadora
2 years agoRashad
2 years agoBlair
2 years agoAlonzo
2 years agoSherron
2 years agoZita
2 years agoLeota
2 years agoDeane
2 years agoAnjelica
2 years agoOmega
2 years agoRodrigo
2 years agoEmilio
2 years agoJoesph
2 years agoBernardo
2 years agoCyndy
2 years agoAmos
2 years agoLauran
2 years agoLigia
2 years agoErasmo
2 years agoJustine
2 years agoJerilyn
2 years agoFidelia
2 years agoYun
2 years agoCathrine
2 years agoGail
2 years agoShenika
2 years agoSanda
2 years agoDaniela
2 years agoDorsey
2 years agoMargart
2 years agoRashad
2 years agoSvetlana
2 years agoDesmond
2 years agoPansy
2 years agoKarl
2 years agoVenita
2 years ago