EC-Council CEH (312-50) Certification Sample Questions

CEH Dumps, 312-50 Dumps, 312-50 PDF, CEH VCE, EC-Council 312-50 VCE, EC-Council CEH v13 PDF The purpose of this Sample Question Set is to provide you with information about the EC-Council Certified Ethical Hacker exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the 312-50 certification test. To get familiar with real exam environment, we suggest you try our Sample EC-Council CEH Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual EC-Council Certified Ethical Hacker (CEH) certification exam.

These sample questions are simple and basic questions that represent likeness to the real EC-Council 312-50 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium EC-Council CEH Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

EC-Council 312-50 Sample Questions:

01. Which filesystems are supported by Alternate Data Streams (ADSes)?

a) VHD

b) NTFS

c) FAT32

d) CDFS

02. Even though IDS and firewall security controls can prevent any unauthorized network access, there are many evasion techniques used by attackers to exploit security limitations. One such technique is where the attacker changes the source IP addresses so that the attacks appear to be coming in as someone else. Identify the IDS/firewall evasion technique used by the attacker?

a) Source Routing

b) Packet Fragmentation

c) IP Address Spoofing

d) IP Address Decoy

03. Which term describes gathering and publishing personally identifiable information, such as an individual's name and email address, or other sensitive information about an entire organization?

a) Exploit

b) Daisy-chaining

c) Payload

d) Doxing

04. SQL injection attacks use a series of malicious SQL queries or SQL statements to manipulate the database directly. In which SQL injection attack does an attacker deface a web page, insert malicious content into web pages, or alter the contents of a database?

a) Compromised Data Integrity

b) Information Disclosure

c) Authentication Bypass

d) Remote Code Execution

05. An attacker collects a password database and splits each password into syllables of two and three characters. These elements form a new alphabet, which is then used to generate candidates that are matched against the password database.

Which password attack does this describe?

a) Toggle-case attack

b) Fingerprint attack

c) PRINCE attack

d) Markov chain attack

06. In which phase of the IoT hacking methodology is the Shodan search engine most likely to be used?

a) Information gathering

b) Vulnerability scanning

c) Gaining access

d) Launching attacks

07. Which of the following is NOT one of the three service models defined in the NIST definition of cloud computing?

a) IaaS

b) LaaS

c) SaaS

d) PaaS

08. An organization has invested heavily in protecting its network: a well-tuned IDS, a firewall with strict rules and correctly configured routers.

Which technique could an attacker still use to exploit human behavior and make the network vulnerable?

a) SQL injection

b) Buffer overflow

c) Social engineering

d) Denial of service

09. Network Time Protocol (NTP) synchronizes the clocks of networked computers.

Which port does NTP use as its primary means of communication?

a) UDP port 161

b) UDP port 113

c) UDP port 320

d) UDP port 123

10. Which SQL injection testing technique is used to discover coding errors by inputting a massive amount of random data and observing the changes in the output and security loopholes in web applications?

a) Function Testing

b) Fuzzing Testing

c) Static Testing

d) Dynamic Testing

Answers:

Question: 01 Answer: b	Question: 02 Answer: c	Question: 03 Answer: d	Question: 04 Answer: a	Question: 05 Answer: d
Question: 06 Answer: a	Question: 07 Answer: b	Question: 08 Answer: c	Question: 09 Answer: d	Question: 10 Answer: b

Note: For any error in EC-Council Certified Ethical Hacker (CEH) (312-50) certification exam sample questions, please update us by writing an email on feedback@edusum.com.