312-50v13 Exam Questions and Answers

QUESTION: 31

John, a disgruntled ex-employee of an organization, contacted a professional hacker to exploit the organization. In the attack process, the professional hacker installed a scanner on a machine belonging to one of the victims and scanned several machines on the same network to identify vulnerabilities to perform further exploitation.

What is the type of vulnerability assessment tool employed by John in the above scenario?

Agent-based scanner
Network-based scanner
Cluster scanner
Proxy scanner

Answer(s): A

Reveal Solution Next Question

QUESTION: 32

Joel, a professional hacker, targeted a company and identified the types of websites frequently visited by its employees. Using this information, he searched for possible loopholes in these websites and injected a malicious script that can redirect users from the web page and download malware onto a victim's machine. Joel waits for the victim to access the infected web application so as to compromise the victim's machine.

Which of the following techniques is used by Joel in the above scenario?

Watering hole attack
DNS rebinding attack
MarioNet attack
Clickjacking attack

Answer(s): A

Reveal Solution Next Question

QUESTION: 33

Security administrator John Smith has noticed abnormal amounts of traffic coming from local computers at night. Upon reviewing, he finds that user data have been exfiltrated by an attacker. AV tools are unable to find any malicious software, and the IDS/IPS has not reported on any non-whitelisted programs.

What type of malware did the attacker use to bypass the company’s application whitelisting?

File-less malware
Zero-day malware
Phishing malware
Logic bomb malware

Answer(s): A

Reveal Solution Next Question

QUESTION: 34

Dorian is sending a digitally signed email to Poly. With which key is Dorian signing this message and how is Poly validating it?

Dorian is signing the message with his public key, and Poly will verify that the message came from Dorian by using Dorian’s private key.
Dorian is signing the message with Poly’s private key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Dorian is signing the message with his private key, and Poly will verify that the message came from Dorian by using Dorian’s public key.
Dorian is signing the message with Poly’s public key, and Poly will verify that the message came from Dorian by using Dorian’s public key.

Answer(s): C

Reveal Solution Next Question

QUESTION: 35

Scenario: Joe turns on his home computer to access personal online banking. When he enters the URL www.bank.com, the website is displayed, but it prompts him to re-enter his credentials as if he has never visited the site before. When he examines the website URL closer, he finds that the site is not secure and the web address appears different.

What type of attack he is experiencing?

DHCP spoofing
DoS attack
ARP cache poisoning
DNS hijacking

Answer(s): D

Reveal Solution Next Question

EC-Council 312-50v13 Exam (page: 7) EC-Council Certified Ethical Hacker v13 Updated on: 25-Dec-2025

QUESTION: 31

QUESTION: 32

QUESTION: 33

QUESTION: 34

QUESTION: 35

EC-Council 312-50v13 Exam (page: 7)
EC-Council Certified Ethical Hacker v13
Updated on: 25-Dec-2025