ECCouncil Certified Ethical Hacker Exam (CEHv13) 認定 312-50v13 試験問題:

1. Joe, a cybersecurity analyst at Norwest Freight Services, has been assigned to run a vulnerability scan across the organization ' s infrastructure. He is specifically tasked with detecting weaknesses such as missing patches, unnecessary services, weak encryption, and authentication flaws across multiple servers. His scan identifies open ports and active services throughout the environment, providing a clear map of potential entry points for attackers.
Which type of vulnerability scanning best matches Joe ' s assignment?

A) Network-based Scanning
B) Application Scanning
C) Host-based Scanning
D) External Scanning

2. Attackers persisted by modifying legitimate system utilities and services. What key step helps prevent similar threats?

A) Update antivirus and firewalls
B) Disable unused ports
C) Weekly off-site backups
D) Monitor file hashes of sensitive executables

3. At a Los Angeles-based online gaming company, penetration tester John investigates a recent cloud breach that caused downtime and delayed alerts. He finds that the root issue was management ' s lack of defined responsibilities for monitoring, auditing, and securing serverless services, which left critical functions unmanaged. Which cloud computing threat does this scenario best illustrate?

A) Privilege escalation
B) Insufficient logging and monitoring
C) Side-channel attacks
D) Loss of governance

4. A WPA2-PSK wireless network is tested. Which method would allow identification of a key vulnerability?

A) Rogue AP revealing PSK
B) MITM to steal the PSK directly
C) De-authentication attack to capture the four-way handshake
D) Jamming to force PSK disclosure

5. A penetration tester is tasked with compromising a company's wireless network, which uses WPA2-PSK encryption. The tester wants to capture the WPA2 handshake and crack the pre-shared key. What is the most appropriate approach to achieve this?

A) Conduct a Man-in-the-Middle attack by spoofing the router ' s MAC address
B) Execute a Cross-Site Scripting (XSS) attack on the router ' s admin panel
C) Use a de-authentication attack to force a client to reconnect, capturing the WPA2 handshake
D) Perform a brute-force attack directly on the WPA2 encryption

質問と回答：