EC-Council 312-50v13 Practice Exams
Last updated on Oct 22,2026- Exam Code: 312-50v13
- Exam Name: Certified Ethical Hacker Exam (CEHv13)
- Certification Provider: EC-Council
- Latest update: Oct 22,2026
Attacker Rony Installed a rogue access point within an organization’s perimeter and attempted to Intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack.
What is the type of vulnerability assessment performed by Johnson in the above scenario?
- A . Distributed assessment
- B . Wireless network assessment
- C . Host-based assessment
- D . Application assessment
You want to do an ICMP scan on a remote computer using hping2.
What is the proper syntax?
- A . hping2 host.domain.com
- B . hping2 –set-ICMP host.domain.com
- C . hping2 -i host.domain.com
- D . hping2 -1 host.domain.com
You want to do an ICMP scan on a remote computer using hping2.
What is the proper syntax?
- A . hping2 host.domain.com
- B . hping2 –set-ICMP host.domain.com
- C . hping2 -i host.domain.com
- D . hping2 -1 host.domain.com
Jane is working as a security professional at CyberSol Inc. She was tasked with ensuring the authentication and integrity of messages being transmitted in the corporate network. To encrypt the messages, she implemented a security model in which every user in the network maintains a ring of public keys. In this model, a user needs to encrypt a message using the receiver’s public key, and only the receiver can decrypt the message using their private key.
What is the security model implemented by Jane to secure corporate messages?
- A . Zero trust network
- B . Transport Layer Security (TLS)
- C . Secure Socket Layer (SSL)
- D . Web of trust (WOT)
What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?
- A . Copy the system files from a known good system
- B . Perform a trap and trace
- C . Delete the files and try to determine the source
- D . Reload from a previous backup
- E . Reload from known good media
Upon establishing his new startup, Tom hired a cloud service provider (CSP) but was dissatisfied with their service and wanted to move to another CSP.
What part of the contract might prevent him from doing so?
- A . Virtualization
- B . Lock-in
- C . Lock-down
- D . Lock-up
Lewis, a professional hacker, targeted the loT cameras and devices used by a target venture-capital firm. He used an information-gathering tool to collect information about the loT devices connected to a network, open ports and services, and the attack surface area. Using this tool, he also generated statistical reports on broad usage patterns and trends. This tool helped Lewis continually monitor every reachable server and device on the Internet, further allowing him to exploit these devices in the network.
Which of the following tools was employed by Lewis in the above scenario?
- A . Censys
- B . Wapiti
- C . NeuVector
- D . Lacework
An organization decided to harden its security against web-application and web-server attacks. John, a security personnel in the organization, employed a security scanner to automate web-application security testing and to guard the organization’s web infrastructure against web-application threats. Using that tool, he also wants to detect XSS, directory transversal problems, fault injection, SQL injection, attempts to execute commands, and several other attacks.
Which of the following security scanners will help John perform the above task?
- A . AlienVault®OSSIM™
- B . Syhunt Hybrid
- C . Saleae Logic Analyzer
- D . Cisco ASA
When configuring wireless on his home router, Javik disables SSID broadcast. He leaves authentication “open” but sets the SSID to a 32-character string of random letters and numbers.
What is an accurate assessment of this scenario from a security perspective?
- A . Since the SSID is required in order to connect, the 32-character string is sufficient to prevent brute-force attacks.
- B . Disabling SSID broadcast prevents 802.11 beacons from being transmitted from the access point, resulting in a valid setup leveraging “security through obscurity”.
- C . It is still possible for a hacker to connect to the network after sniffing the SSID from a successful wireless association.
- D . Javik’s router is still vulnerable to wireless hacking attempts because the SSID broadcast setting can be enabled using a specially crafted packet sent to the hardware address of the access point.
An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network’s external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file.
What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?
- A . Protocol analyzer
- B . Network sniffer
- C . Intrusion Prevention System (IPS)
- D . Vulnerability scanner