EC-Council 312-50v13 Practice Exams
Last updated on Oct 24,2026- Exam Code: 312-50v13
- Exam Name: Certified Ethical Hacker Exam (CEHv13)
- Certification Provider: EC-Council
- Latest update: Oct 24,2026
Which of these is capable of searching for and locating rogue access points?
- A . HIDS
- B . WISS
- C . WIPS
- D . NIDS
You start performing a penetration test against a specific website and have decided to start from grabbing all the links from the main page.
What Is the best Linux pipe to achieve your milestone?
- A . dirb https://site.com | grep "site"
- B . curl -s https://sile.com | grep ‘’< a href-’http" | grep "Site-com- | cut -d "V" -f 2
- C . wget https://stte.com | grep "< a href=*http" | grep "site.com"
- D . wgethttps://site.com | cut-d"http-
You have successfully logged on a Linux system. You want to now cover your trade Your login attempt may be logged on several files located in /var/log.
Which file does NOT belongs to the list:
- A . user.log
- B . auth.fesg
- C . wtmp
- D . btmp
A security analyst uses Zenmap to perform an ICMP timestamp ping scan to acquire information related to the current time from the target host machine.
Which of the following Zenmap options must the analyst use to perform the ICMP timestamp ping scan?
- A . -PY
- B . -PU
- C . -PP
- D . -Pn
Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to test for any security loopholes by hijacking a session between a client and server. This tool has a feature of intercepting proxy that can be used to inspect and modify the traffic between the browser and target application. This tool can also perform customized attacks and can be used to test the randomness of session tokens.
Which of the following tools is used by Gregory in the above scenario?
- A . Nmap
- B . Burp Suite
- C . CxSAST
- D . Wireshark
When discussing passwords, what is considered a brute force attack?
- A . You attempt every single possibility until you exhaust all possible combinations or discover the password
- B . You threaten to use the rubber hose on someone unless they reveal their password
- C . You load a dictionary of words into your cracking program
- D . You create hashes of a large number of words and compare it with the encrypted passwords
- E . You wait until the password expires
What is not a PCI compliance recommendation?
- A . Use a firewall between the public network and the payment card data.
- B . Use encryption to protect all transmission of card holder data over any public network.
- C . Rotate employees handling credit card transactions on a yearly basis to different departments.
- D . Limit access to card holder data to as few individuals as possible.
This kind of password cracking method uses word lists in combination with numbers and special characters:
- A . Hybrid
- B . Linear
- C . Symmetric
- D . Brute Force
The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE’s Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implementation of the Transport Layer Security (TLS) protocols defined in RFC6520.
What type of key does this bug leave exposed to the Internet making exploitation of any compromised system very easy?
- A . Public
- B . Private
- C . Shared
- D . Root
A malicious user has acquired a Ticket Granting Service from the domain controller using a valid user’s Ticket Granting Ticket in a Kerberoasting attack. He exhorted the TGS tickets from memory for offline cracking. But the attacker was stopped before he could complete his attack. The system administrator needs to investigate and remediate the potential breach.
What should be the immediate step the system administrator takes?
- A . Perform a system reboot to clear the memory
- B . Delete the compromised user’s account
- C . Change the NTLM password hash used to encrypt the ST
- D . invalidate the TGS the attacker acquired