ECCouncil Certified Ethical Hacker Exam (CEH v13 AI) - 312-50v13무료 덤프문제 풀어보기
As part of a penetration test for a financial firm's smart headquarters in Denver, Colorado, ethical hacker Jordan Lee begins evaluating the IoT infrastructure responsible for lighting, HVAC, and badge-controlled access. Jordan documents details such as device models, manufacturer names, firmware versions, and supported protocols like Zigbee and BLE. This information is used to understand the device ecosystem.
Which step of the IoT hacking methodology is being carried out in this phase?
Which step of the IoT hacking methodology is being carried out in this phase?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
An ethical hacker needs to gather detailed information about a company ' s internal network without initiating any direct interaction that could be logged or raise suspicion. Which approach should be used to obtain this information covertly?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
During a security assessment of a cloud-hosted application using SOAP-based web services, a red team operator intercepts a valid SOAP request, duplicates the signed message body, inserts it into the same envelope, and forwards it. Due to improper validation, the server accepts the duplicated body and executes unauthorized code. What type of attack does this represent?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
As part of a quarterly security review at EvoTrans Logistics, a global freight optimization firm, you have been brought in as a senior cybersecurity analyst to audit perimeter firewall configurations across cloud-hosted application clusters. During your investigation, you notice that TCP port 1433 is open on a virtual machine tagged as svc-node-east-14, which was provisioned by a now-defunct third-party vendor. The node is not referenced in any current infrastructure diagrams, yet live traffic logs suggest it is still handling requests during peak hours. No documentation exists regarding its service role, but you are tasked with flagging misconfigurations that may violate policy or expose critical services unnecessarily. Based on your understanding of standard port assignments, you must determine what service this port likely represents and whether its exposure warrants escalation.
Which of the following services is most likely running on this port and requires immediate review?
Which of the following services is most likely running on this port and requires immediate review?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
A logistics management system in Atlanta, Georgia, recently incorporates new network hardware devices to expand its operational capacity. During a routine security evaluation, analyst Maria Lopez discovers concealed malicious software embedded within the newly added devices, which begins propagating to connected systems once the equipment is activated.
Further investigation determines that the hardware had not been thoroughly inspected for pre-existing threats before deployment, allowing the infection to spread across the environment without triggering the initial detection controls.
Based on the scenario, which vulnerability classification best describes the issue identified?
Further investigation determines that the hardware had not been thoroughly inspected for pre-existing threats before deployment, allowing the infection to spread across the environment without triggering the initial detection controls.
Based on the scenario, which vulnerability classification best describes the issue identified?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
A Nessus scan reports a CVSS 9.0 SSH vulnerability allowing remote code execution. What should be immediately prioritized?
정답: C
You are part of the red team assigned to evaluate the physical and social vulnerabilities of a government contractor's office located in a metropolitan business hub. During your pretexting phase, you decide to simulate the role of a third-party IT technician.
Upon arrival, the receptionist allows you entry without verification, assuming you are there for scheduled printer maintenance. While moving through the workspace, you casually observe open terminals, unattended printouts, and discarded sticky notes at workstations. You later report several user credentials and partial access details acquired during this visit.
Which social engineering technique does this scenario best illustrate?
Upon arrival, the receptionist allows you entry without verification, assuming you are there for scheduled printer maintenance. While moving through the workspace, you casually observe open terminals, unattended printouts, and discarded sticky notes at workstations. You later report several user credentials and partial access details acquired during this visit.
Which social engineering technique does this scenario best illustrate?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
A national logistics company in Atlanta, Georgia maintains a segmented research VLAN inside its primary data center to study emerging supply-chain targeting tactics. The environment includes enterprise-grade server platforms hosting web applications, database services populated with curated operational data, and identity services configured to resemble production access structures.
During a red team engagement, external adversaries who gained initial access were observed interacting with systems inside this VLAN for several days. They escalated privileges, accessed structured data repositories, moved between internal hosts, and attempted to reach additional internal segments. All activity occurred within the controlled environment and was instrumented to capture attacker techniques in depth.
Which honeypot deployment model most accurately describes this research environment?
During a red team engagement, external adversaries who gained initial access were observed interacting with systems inside this VLAN for several days. They escalated privileges, accessed structured data repositories, moved between internal hosts, and attempted to reach additional internal segments. All activity occurred within the controlled environment and was instrumented to capture attacker techniques in depth.
Which honeypot deployment model most accurately describes this research environment?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Ethical hacker Ryan Brooks, a skilled penetration tester from Austin, Texas, was hired by Skyline Aeronautics, a leading aerospace firm in Denver, to conduct a security assessment. One stormy morning, Ryan noticed an unexpected lag in the routine system update process while running his tests, sparking his curiosity. During a late-night session, he observed a junior analyst, Chris Miller, cautiously modifying a legacy server's configuration, including a scheduled task set to a specific date. The lead developer, Jessica Hayes, casually mentioned receiving an odd email from an unfamiliar source, which she ignored as clutter. As Ryan probed deeper, he detected a faint increase in network activity only after the scheduled date passed, and a systems admin, Mark Thompson, quickly pointed out some unusual code traces on a dormant workstation.
Which type of threat best characterizes this attack?
Which type of threat best characterizes this attack?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
While simulating a reconnaissance phase against a cloud-hosted retail application, your team attempts to gather DNS records to map the infrastructure. You avoid brute-forcing subdomains and instead aim to collect specific details such as the domain's mail server, authoritative name servers, and potential administrative information like serial number and refresh interval.
Given these goals, which DNS record type should you query to extract both administrative and technical metadata about the target zone?
Given these goals, which DNS record type should you query to extract both administrative and technical metadata about the target zone?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A logistics technology provider in Kansas City, Missouri conducts an internal review after an ethical hacker demonstrates several recurring input-handling weaknesses across different customer-facing web applications.
The findings show that validation logic varies between modules, with many controls implemented inconsistently across components developed by separate teams.
Although immediate patches are applied to address the identified flaws, similar issues have surfaced in previous platform iterations despite corrective updates. Leadership determines that isolated fixes are insufficient and initiates an effort to standardize how security requirements are defined and incorporated across future development initiatives.
Based on the web application attack countermeasures, which category best aligns with this remediation approach?
The findings show that validation logic varies between modules, with many controls implemented inconsistently across components developed by separate teams.
Although immediate patches are applied to address the identified flaws, similar issues have surfaced in previous platform iterations despite corrective updates. Leadership determines that isolated fixes are insufficient and initiates an effort to standardize how security requirements are defined and incorporated across future development initiatives.
Based on the web application attack countermeasures, which category best aligns with this remediation approach?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
During planning for an authorized test, the security team reviews the organization ' s DNS configuration to minimize information exposure. They note that public name servers currently allow external queries to retrieve complete lists of internal hostnames and subdomains.
To prevent unnecessary bulk disclosure while maintaining normal domain resolution, the team recommends a specific restriction.
Which defensive measure most directly addresses this concern?
To prevent unnecessary bulk disclosure while maintaining normal domain resolution, the team recommends a specific restriction.
Which defensive measure most directly addresses this concern?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
In a bustling tech firm in Seattle, Michael, an ethical hacker, is conducting a security assessment to identify potential risks. During his evaluation, he notices that sensitive employee details and system configurations have been exposed through public forums, likely due to careless online behavior. His manager suspects this could lead to unauthorized access or data theft. As part of his testing, what type of threat should Michael focus on to simulate the adversary ' s method of gathering this exposed information?
정답: B
설명: (Fast2test 회원만 볼 수 있음)