EC-Council 312-50v13 Practice Exams
Last updated on Oct 22,2026- Exam Code: 312-50v13
- Exam Name: Certified Ethical Hacker Exam (CEHv13)
- Certification Provider: EC-Council
- Latest update: Oct 22,2026
jane, an ethical hacker. Is testing a target organization’s web server and website to identity security loopholes. In this process, she copied the entire website and its content on a local drive to view the complete profile of the site’s directory structure, file structure, external links, images, web pages, and so on. This information helps jane map the website’s directories and gain valuable information.
What is the attack technique employed by Jane in the above scenario?
- A . website mirroring
- B . Session hijacking
- C . Web cache poisoning
- D . Website defacement
Calvin, a software developer, uses a feature that helps him auto-generate the content of a web page without manual involvement and is integrated with SSI directives. This leads to a vulnerability in the developed web application as this feature accepts remote user inputs and uses them on the page.
Hackers can exploit this feature and pass malicious SSI directives as input values to perform malicious activities such as modifying and erasing server files.
What is the type of injection attack Calvin’s web application is susceptible to?
- A . Server-side template injection
- B . Server-side JS injection
- C . CRLF injection
- D . Server-side includes injection
When a security analyst prepares for the formal security assessment – what of the following should be done in order to determine inconsistencies in the secure assets database and verify that system is compliant to the minimum security baseline?
- A . Data items and vulnerability scanning
- B . Interviewing employees and network engineers
- C . Reviewing the firewalls configuration
- D . Source code review
E-mail scams and mail fraud are regulated by which of the following?
- A . 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers
- B . 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices
- C . 18 U.S.C. par. 1362 Communication Lines, Stations, or Systems
- D . 18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication
Dorian Is sending a digitally signed email to Polly, with which key is Dorian signing this message and how is Poly validating It?
- A . Dorian is signing the message with his public key. and Poly will verify that the message came from Dorian by using Dorian’s private key.
- B . Dorian Is signing the message with Polys public key. and Poly will verify that the message came from Dorian by using Dorian’s public key.
- C . Dorian is signing the message with his private key. and Poly will verify that the message came from Dorian by using Dorian’s public key.
- D . Dorian is signing the message with Polys private key. and Poly will verify mat the message came from Dorian by using Dorian’s public key.
By using a smart card and pin, you are using a two-factor authentication that satisfies
- A . Something you are and something you remember
- B . Something you have and something you know
- C . Something you know and something you are
- D . Something you have and something you are
Mary, a penetration tester, has found password hashes in a client system she managed to breach. She needs to use these passwords to continue with the test, but she does not have time to find the passwords that correspond to these hashes.
Which type of attack can she implement in order to continue?
- A . LLMNR/NBT-NS poisoning
- B . Internal monologue attack
- C . Pass the ticket
- D . Pass the hash
Mary, a penetration tester, has found password hashes in a client system she managed to breach. She needs to use these passwords to continue with the test, but she does not have time to find the passwords that correspond to these hashes.
Which type of attack can she implement in order to continue?
- A . LLMNR/NBT-NS poisoning
- B . Internal monologue attack
- C . Pass the ticket
- D . Pass the hash
You are an ethical hacker tasked with conducting an enumeration of a company’s network. Given a Windows system with NetBIOS enabled, port 139 open, and file and printer sharing active, you are about to run some nbtstat commands to enumerate NetBIOS names. The company uses |Pv6 for its network.
Which of the following actions should you take next?
- A . Use nbtstat -c to get the contents of the NetBIOS name cache
- B . use nbtstat -a followed by the IPv6 address of the target machine
- C . Utilize Nmap Scripting Engine (NSE) for NetBIOS enumeration
- D . Switch to an enumeration tool that supports IPv6
A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network.
What are some things he can do to prevent it? Select the best answers.
- A . Use port security on his switches.
- B . Use a tool like ARPwatch to monitor for strange ARP activity.
- C . Use a firewall between all LAN segments.
- D . If you have a small network, use static ARP entries.
- E . Use only static IP addresses on all PC’s.