EC-COUNCIL 312-50 試験概要:

EC-COUNCIL 312-50 認定試験の出題範囲：

参照：https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/

EC-COUNCIL Certified Ethical Hacker v13 認定 312-50 試験問題：

問題 #1
In Portland, Oregon, ethical hacker Olivia Harper is hired by Cascade Biotech to test the security of their research network. During her penetration test, she simulates an attack by sending malicious packets to a server hosting sensitive genetic data. To evade detection, she needs to understand the monitoring system deployed near the network's perimeter firewall, which analyzes incoming and outgoing traffic for suspicious patterns across the entire subnet. Olivia's goal is to bypass this system to highlight vulnerabilities for the security team.
Which security system is Olivia attempting to bypass during her penetration test of Cascade Biotech's network?

A. Host-Based Firewalls
B. Host-Based Intrusion Detection System
C. Network-Based Intrusion Detection System
D. Network-Based Firewalls

問題 #2
Kevin and his friends are going through a local IT firm's garbage. Which of the following best describes this activity?

A. Dumpster diving
B. Social engineering
C. Intelligence gathering
D. Reconnaissance

問題 #3
A threat intelligence review at a manufacturing firm in Pittsburgh, Pennsylvania, revealed repeated external queries targeting the organization's public name servers. Although no intrusion occurred, analysts observed that the queries appeared designed to systematically map internal naming conventions and infrastructure patterns.
The security team determined that the issue was not excessive traffic volume but rather the exposure of internal namespace details through responses handled by the same server used for both internal and external resolution. To reduce the risk of disclosing sensitive structural information to outside systems, the team redesigned their DNS deployment.
Which countermeasure best addresses the risk described in this scenario?

A. Implementing Rate Limiting on DNS Servers
B. Implementing a Split DNS Architecture
C. Enabling DNS Logging and Anomaly Detection
D. Randomizing DNS Source Ports and Query Identifiers

問題 #4
In a controlled testing environment in Houston, Sarah, an ethical hacker, is tasked with evaluating the security posture of a financial firm's network using the cyber kill chain methodology. She begins by simulating an attack, starting with gathering publicly available data about the company's employees and infrastructure. Next, she plans to craft a mock phishing email to test employee responses, followed by deploying a harmless payload to assess system vulnerabilities. As part of her authorized penetration test, what phase of the cyber kill chain should Sarah prioritize to simulate the adversary's approach effectively?

A. Delivery
B. Weaponization
C. Reconnaissance
D. Exploitation

問題 #5
A penetration tester discovers that a system is infected with malware that encrypts all files and demands payment for decryption. What type of malware is this?

A. Ransomware
B. Spyware
C. Keylogger
D. Worm

解説：