312-50v13 Exam Questions and Answers

QUESTION: 16

Becky has been hired by a client from Dubai to perform a penetration test against one of their remote offices. Working from her location in Columbus, Ohio, Becky runs her usual reconnaissance scans to obtain basic information about their network. When analyzing the results of her Whois search, Becky notices that the IP was allocated to a location in Le Havre, France.

Which regional Internet registry should Becky go to for detailed information?

ARIN
LACNIC
APNIC
RIPE

Answer(s): A

Reveal Solution Next Question

QUESTION: 17

Harry, a professional hacker, targets the IT infrastructure of an organization. After preparing for the attack, he attempts to enter the target network using techniques such as sending spear-phishing emails and exploiting vulnerabilities on publicly available servers. Using these techniques, he successfully deployed malware on the target system to establish an outbound connection.

What is the APT lifecycle phase that Harry is currently executing?

Initial intrusion
Persistence
Cleanup
Preparation

Answer(s): A

Reveal Solution Next Question

QUESTION: 18

Robin, a professional hacker, targeted an organization’s network to sniff all the traffic. During this process, Robin plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the network.

What is the attack performed by Robin in the above scenario?

ARP spoofing attack
STP attack
DNS poisoning attack
VLAN hopping attack

Answer(s): B

Reveal Solution Next Question

QUESTION: 19

An attacker utilizes a Wi-Fi Pineapple to run an access point with a legitimate-looking SSID for a nearby business in order to capture the wireless password.

What kind of attack is this?

MAC spoofing attack
War driving attack
Phishing attack
Evil-twin attack

Answer(s): D

Reveal Solution Next Question

QUESTION: 20

CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such attacks. Bob adopted a practice whereby only a list of entities such as the data type, range, size, and value, which have been approved for secured access, is accepted.

What is the defensive technique employed by Bob in the above scenario?

Whitelist validation
Output encoding
Blacklist validation
Enforce least privileges

Answer(s): A

Reveal Solution Next Question

EC-Council 312-50v13 Exam (page: 4) EC-Council Certified Ethical Hacker v13 Updated on: 25-Dec-2025

QUESTION: 16

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20

EC-Council 312-50v13 Exam (page: 4)
EC-Council Certified Ethical Hacker v13
Updated on: 25-Dec-2025