ECCouncil 312-50v13 試験概要:

ECCouncil 312-50v13 試験シラバストピック:

ECCouncil Certified Ethical Hacker Exam (CEHv13) 認定 312-50v13 試験問題：

1. Lewis, a professional hacker, targeted the IoT cameras and devices used by a target venture- capital firm. He used an information-gathering tool to collect information about the IoT devices connected to a network, open ports and services, and the attack surface area. Using this tool, he also generated statistical reports on broad usage patterns and trends. This tool helped Lewis continually monitor every reachable server and device on the Internet, further allowing him to exploit these devices in the network. Which of the following tools was employed by Lewis in the above scenario?

A) Wapiti
B) Lacework
C) NeuVector
D) Censys

2. A U.S.-based online securities trading firm in New York is reviewing its transaction authentication process. The security team confirms that each transaction is processed by first generating a hash of the transaction data. The hash value is then signed using the sender's private key. During verification, the recipient uses the corresponding public key to validate the signature before approving the transaction. The system documentation specifies that the same algorithm supports encryption, digital signatures, and key exchange mechanisms within the organization's secure communications infrastructure. Which encryption algorithm is being used in this implementation?

A) ElGamal
B) RSA
C) Diffie-Hellman
D) DSA

3. In Atlanta, Georgia, ethical hacker James Patel is hired by Southern Retail, a major e-commerce chain, to test the security of their online shopping platform. During his penetration test, James aims to simulate a session hijacking attack by setting up a proxy to intercept HTTP traffic between customers and the platform, log the requests, and perform advanced searches on the captured data to identify session tokens. He needs a lightweight tool specifically designed for security research that can handle these tasks in a controlled environment to demonstrate vulnerabilities to the company's security team. Which tool should James use to perform this session hijacking simulation?

A) Bettercap
B) Caido
C) Hetty
D) Wireshark

4. A certified ethical hacker is conducting a Whois footprinting activity on a specific domain. The individual is leveraging various tools such as Batch IP Converter and Whois Analyzer Pro to retrieve vital details but is unable to gather complete Whois information from the registrar for a particular set of data. As the hacker, what might be the probable data model being utilized by the domain's registrar for storing and looking up Whois information?

A) Thin Whois model with a malfunctioning server
B) Thick Whois model with a malfunctioning server
C) Thin Whois model working correctly
D) Thick Whois model working correctly

5. In Miami, Florida, cybersecurity analyst Laura Bennett is responding to a series of unauthorized access attempts targeting Sunshine Credit Union's online banking platform. She observes unusual network activity that suggests attackers may be intercepting session IDs transmitted over unsecured connections to hijack active user sessions. To prevent further compromise, Laura works with the network team to apply a control that secures session-related communications throughout the entire portal, ensuring sensitive tokens are no longer exposed to interception during user interactions. What countermeasure should Laura implement to prevent session hijacking in this scenario?

A) Do not create sessions for unauthenticated users
B) Implement SSL to encrypt all information in transit via the network
C) Regenerate the session ID after a successful login
D) Use restrictive cache directives such as "Cache-Control: no-cache"

質問と回答：