Free Preparation Discussions
MENU
Eccouncil 312-50 Exam Questions
- Topic 1: Introduction to Ethical Hacking: This module covers ethical hacking fundamentals such as elements of information security, Chain Methodology, Hacker Classes, Risk Management, DSS, HIPPA, and SOX.
- Topic 2: Foot Printing and Reconnaissance: In this module, candidates are tested for performing footprinting on the target network, and performing website, email, whois, and DNS footprinting. Other topics include Advanced Google Hacking Techniques, Deep and Dark Web Footprinting, Website Mirroring, Traceout Analysis, and other tools.
- Topic 3: Scanning Networks: The topics covered in this module include network scanning, host discovery, port scanning, OS Discovery, and packet Fragmentation.
- Topic 4: Enumeration: The current domain covers NetBIOS Enumeration, SNMP, NFS, SMTP Enumeration and also covers DNS Cache Snooping and VoIP Enumeration.
- Topic 5: Vulnerability Analysis: It covers vulnerability research, assessment, management and lifecycle, classification, and assessment tools.
- Topic 6: System Hacking: This section covers password cracking, wire sniffing, buffer overflow, keylogger, spyware, anti-keyloggers, rootKits, post-exploitation, and covering tracks.
- Topic 7: Malware Threats: This section covers Malware components, APT, Trojan, Virus, Ransomware, Worms, Virus detection, and Anti-trojan software.
- Topic 8: Sniffing: This module covers sniffing, MAC flooding, MAC Spoofing, DNS Poisoning tools, and Sniffing tools.
- Topic 9: Social Engineering: This section of the exam covers social engineering types, Phishing, insider threats, and identity theft.
- Topic 10: Denial-of-Service: This section covers DoS Attacks, DDos Attacks, Botnets, DoS/DDoS Attack Tools, DoS Protection Tools.
- Topic 11: Session Hijacking: This section covers types of session hacking, Spoofing, client-side attacks, session replay attacks, CRIME attacks, and Hijacking tools.
- Topic 12: Evading IDS, Firewalls, and Honeypots: This section covers intrusion detection systems, firewall types, intrusion prevention, intrusion detection tools, Evading NAC Endpoint security, IDS/Firewall Evading Tools, and Honeypot detection tools.
- Topic 13: Hacking Web Servers: This section covers web server operations, web server attacks, DNS Server Hijacking, website defacement, Web Cache Positioning Attack, web server security tools, and patch management tools.
- Topic 14: Hacking Web Applications: This section covers web applications architecture, web application threats, application security risks, web shell, web API Hacking Methodology.
- Topic 15: SQL Injection: In this section, topics covered SQJ injection, SQJ Injection methodology, tools signature evasion, and injection detection tools.
- Topic 16: Hacking Wireless Networks: This section covers wireless terminology, wireless networks, encryption, wireless threats, Wi-Fi encryption cracking, Bluetooth hacking, Wi-Fi security auditing, and Bluetooth security tools.
- Topic 17: Hacking Mobile Platforms: This section covers Mobile Platform Attack Vectors, App sandboxing, SMS Phishing attacks, hacking Android devices, and mobile security tools.
- Topic 18: IoT and OT Hacking: In this section, topics covered IoT Architecture, IoT Communication, top ten IoT threats, ICS and SCADA, OT Vulnerabilities, and OT Security Tools.
- Topic 19: Cloud Computing: This section covers types of cloud computing, cloud deployment, Fog and Edge computing, cloud service providers, serverless computing, and cloud attacks.
- Topic 20: Cryptography: This section covers cryptography, Encryption Algorithms, Cryptography tools, disk encryption, and Key Stretching.
Free Eccouncil 312-50 Exam Actual Questions
Note: Premium Questions for 312-50 were last updated On Mar. 20, 2025 (see below)
Being a Certified Ethical Hacker (CEH), a company has brought you on board to evaluate the safety measures in place for their network system. The company uses a network time protocol server in the demilitarized zone.
During your enumeration, you decide to run a ntptrace command. Given the syntax: ntptrace [-n] [-m maxhosts] [servername/IP_address], which command usage would best serve your objective to find where the NTP server obtains the time from and to trace the list of NTP servers connected to the network?
In a large organization, a network security analyst discovered a series of packet captures that seem unusual.
The network operates on a switched Ethernet environment. The security team suspects that an attacker might
be using a sniffer tool. Which technique could the attacker be using to successfully carry out this attack,
considering the switched nature of the network?
Your network infrastructure is under a SYN flood attack. The attacker has crafted an automated botnet to
simultaneously send 's' SYN packets per second to the server. You have put measures in place to manage 'f
SYN packets per second, and the system is designed to deal with this number without any performance issues.
If 's' exceeds 'f', the network infrastructure begins to show signs of overload. The system's response time
increases exponentially (24k), where 'k' represents each additional SYN packet above the ff limit. Now, considering 's=500' and different 'f values, in which scenario is the server most likely to experience overload and significantly increased response times?
A well-resourced attacker intends to launch a highly disruptive DDoS attack against a major online retailer. The attacker aims to exhaust all the network resources while keeping their identity concealed. Their method should be resistant to simple defensive measures such as IP-based blocking. Based on these objectives, which of the following attack strategies would be most effective?
You are an ethical hacker contracted to conduct a security audit for a company. During the audit, you discover that the company's wireless network is using WEP encryption. You understand the vulnerabilities associated with WEP and plan to recommend a more secure encryption method. Which of the following would you recommend as a Suitable replacement to enhance the security of the company's wireless network?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Rashad
12 days agoBlair
22 days agoAlonzo
27 days agoSherron
1 months agoZita
2 months agoLeota
2 months agoDeane
2 months agoAnjelica
2 months agoOmega
3 months agoRodrigo
3 months agoEmilio
3 months agoJoesph
3 months agoBernardo
4 months agoCyndy
4 months agoAmos
4 months agoLauran
4 months agoLigia
4 months agoErasmo
5 months agoJustine
5 months agoJerilyn
5 months agoFidelia
5 months agoYun
5 months agoCathrine
6 months agoGail
6 months agoShenika
6 months agoSanda
6 months agoDaniela
6 months agoDorsey
7 months agoMargart
7 months agoRashad
8 months agoSvetlana
8 months agoDesmond
9 months agoPansy
9 months agoKarl
9 months agoVenita
10 months ago