312-50v13 Exam Questions and Answers

QUESTION: 56

Abel, a security professional, conducts penetration testing in his client organization to check for any security loopholes. He launched an attack on the DHCP servers by broadcasting forged DHCP requests and leased all the DHCP addresses available in the DHCP scope until the server could not issue any more IP addresses. This led to a DoS attack, and as a result, legitimate employees were unable to access the client’s network.

Which of the following attacks did Abel perform in the above scenario?

Rogue DHCP server attack
VLAN hopping
STP attack
DHCP starvation

Answer(s): D

Reveal Solution Next Question

QUESTION: 57

This form of encryption algorithm is a symmetric key block cipher that is characterized by a 128-bit block size, and its key size can be up to 256 bits. Which among the following is this encryption algorithm?

HMAC encryption algorithm
Twofish encryption algorithm
IDEA
Blowfish encryption algorithm

Answer(s): B

Reveal Solution Next Question

QUESTION: 58

Jude, a pen tester working in Keiltech Ltd., performs sophisticated security testing on his company's network infrastructure to identify security loopholes. In this process, he started to circumvent the network protection tools and firewalls used in the company. He employed a technique that can create forged TCP sessions by carrying out multiple SYN, ACK, and RST or FIN packets. Further, this process allowed Jude to execute DDoS attacks that can exhaust the network resources.

What is the attack technique used by Jude for finding loopholes in the above scenario?

Spoofed session flood attack
UDP flood attack
Peer-to-peer attack
Ping-of-death attack

Answer(s): A

Reveal Solution Next Question

QUESTION: 59

Jim, a professional hacker, targeted an organization that is operating critical industrial infrastructure. Jim used Nmap to scan open ports and running services on systems connected to the organization’s OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered information such as the vendor name, product code and name, device name, and IP address.

Which of the following Nmap commands helped Jim retrieve the required information?

nmap -Pn -sT --scan-delay 1s --max-parallelism 1 -p < Port List > < Target IP >
nmap -Pn -sU -p 44818 --script enip-info < Target IP >
nmap -Pn -sT -p 46824 < Target IP >
nmap -Pn -sT -p 102 --script s7-info < Target IP >

Answer(s): B

Reveal Solution Next Question

QUESTION: 60

While testing a web application in development, you notice that the web server does not properly ignore the “dot dot slash” (../) character string and instead returns the file listing of a folder higher up in the folder structure of the server.

What kind of attack is possible in this scenario?

Cross-site scripting
SQL injection
Denial of service
Directory traversal

Answer(s): D

Reveal Solution Next Question

EC-Council 312-50v13 Exam (page: 12) EC-Council Certified Ethical Hacker v13 Updated on: 25-Dec-2025

QUESTION: 56

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60

EC-Council 312-50v13 Exam (page: 12)
EC-Council Certified Ethical Hacker v13
Updated on: 25-Dec-2025