312-50V9 Exam Questions and Answers

QUESTION: 9

You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it.
What tool will help you with the task?

Armitage
Dimitry
cdpsnarf
Metagoofil

Answer(s): D

Reveal Solution Next Question

QUESTION: 10

A Regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server.
Based on this information, what should be one of your key recommendations to the bank?

Move the financial data to another server on the same IP subnet
Place a front-end web server in a demilitarized zone that only handles external web traffic
Issue new certificates to the web servers from the root certificate authority
Require all employees to change their passwords immediately

Answer(s): A

Reveal Solution Next Question

QUESTION: 11

Under the "Post-attach Phase and Activities, " it is the responsibility of the tester to restore the system to a pre-test state.
Which of the following activities should not be included in this phase?

I). Removing all files uploaded on the system
II). Cleaning all registry entries
III). Mapping of network state
IV). Removing all tools and maintaining backdoor for reporting

III
IV
III and IV
All should be included.

Answer(s): A

Reveal Solution Next Question

QUESTION: 12

Which of the following is a low-tech way of gaining unauthorized access to systems?

Sniffing
Social engineering
Scanning
Eavesdropping

Answer(s): B

Reveal Solution Next Question

QUESTION: 13

Which of the following statements regarding ethical hacking is incorrect?

Testing should be remotely performed offsite.
Ethical hackers should never use tools that have potential of exploiting vulnerabilities in the
organizations IT system.
Ethical hacking should not involve writing to or modifying the target systems.
An organization should use ethical hackers who do not sell hardware/software or other consulting services.

Answer(s): B

Reveal Solution Next Question

QUESTION: 14

Session splicing is an IDS evasiontechnique in which an attacker delivers data in multiple, smallsized packets to the target computer, making it very difficult for an IDS to detect the attack signatures.
Which tool can used to perform session splicing attacks?

Hydra
Burp
Whisker
Tcpsplice

Answer(s): C

Reveal Solution Next Question

QUESTION: 15

You have compromised a server on a network and successfully open a shell. You aimed to identify all operating systems running on the network. However, as you attemptto fingerprint all machines in the machines in the network using the nmap syntax below, it is not going through.
invictus@victim_server:~$nmap T4 O 10.10.0.0/24
TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxxx.
QUITTING!
What seems to be wrong?

The outgoing TCP/IP fingerprinting is blocked by the host firewall.
This is a common behavior for a corrupted nmap application.
OS Scan requires root privileged.
The nmap syntax is wrong.

Answer(s): D

Reveal Solution Next Question

QUESTION: 16

After trying multiple exploits, you've gained root access to a Centos 6 answer. To ensure you maintain access. What would you do first?

Disable IPTables
Create User Account
Downloadand Install Netcat
Disable Key Services

Answer(s): C

Reveal Solution Next Question

EC-Council 312-50V9 Exam (page: 2) EC-Council Certified Ethical Hacker Exam V9 Updated on: 12-Feb-2026

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

EC-Council 312-50V9 Exam (page: 2)
EC-Council Certified Ethical Hacker Exam V9
Updated on: 12-Feb-2026