ECCouncil 312-50v13 問題集

質問 1：
As a cybersecurity analyst at XYZ Corp., you're examining system logs and notice an array of activities that suggest the presence of an elusive rootkit. Given the stealthy nature of rootkits, their detection and eradication are pivotal to maintaining system security and preventing data compromise. Assessing the system, you find the rootkit has been embedded deeply within the operating system kernel. In this critical situation, which strategy should you follow to remediate the rootkit effectively while minimizing potential damage?
A. Take the extreme measure of initiating a complete system format, followed by reinstalling the operating system from a trusted source.
B. Employ a systematic, multi-layered strategy, starting with the deployment of a specialized rootkit detection tool to verify the presence and type of rootkit, followed by an appropriately tailored removal procedure, specific to the identified rootkit.
C. Immediately opt for the radical approach, which includes powering down the system and disconnecting it from the network, to cease the rootkit's activities.
D. Implement a proactive defensive strategy by running a variety of high-interaction honeypots on the network, aiming to lure the attacker and reveal their tactics.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Given below are different steps involved in the vulnerability-management life cycle.
1) Remediation
2) Identify assets and create a baseline
3) Verification
4) Monitor
5) Vulnerability scan
6) Risk assessment
Identify the correct sequence of steps involved in vulnerability management.
A. 2 → 4 → 5 → 3 → 6 → 1
B. 2 → 1 → 5 → 6 → 4 → 3
C. 2 → 5 → 6 → 1 → 3 → 4
D. 1 → 2 → 3 → 4 → 5 → 6
正解：C

質問 3：
A web application allows users to upload files and later include them in pages dynamically.
Attackers exploit this to execute code. Which vulnerability exists?
A. RFI
B. LFI
C. CSRF
D. XSS
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A penetration tester is tasked with identifying vulnerabilities on a web server running outdated software. The server hosts several web applications and is protected by a basic firewall. Which technique should the tester use to exploit potential server vulnerabilities?
A. Execute a buffer overflow attack targeting the web server software
B. Conduct a SQL injection attack on the web application's login form
C. Perform a brute-force login attack on the admin panel
D. Use directory traversal to access sensitive configuration files
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
On July 25, 2025, during a security assessment at Apex Technologies in Boston, Massachusetts, ethical hacker Sophia Patel conducts a penetration test to evaluate the company's defenses against a simulated DDoS attack targeting their e-commerce platform. The simulated attack floods the platform with traffic from multiple sources, attempting to overwhelm server resources.
The IT team activates a specific tool that successfully mitigates the attack by distributing traffic across multiple servers and filtering malicious requests. Sophia's test aims to verify the effectiveness of this tool in maintaining service availability. Which DoS/DDoS protection tool is most likely being utilized by the IT team in this scenario?
A. Web Application Firewall (WAF)
B. Intrusion Prevention System (IPS)
C. Firewall
D. Load Balancer
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A security consultant is performing an authorized assessment of a regional healthcare provider's patient portal in Portland, Oregon. During testing, he observes that authenticated users are assigned session identifiers embedded within URL parameters after login.
To evaluate the robustness of the session management implementation, he initiates multiple authentication requests in rapid succession using controlled test accounts. He then compares the issued identifiers and notices that although parts of the value remain constant, certain segments change in a predictable progression over time.
By analyzing the incremental pattern across a controlled batch of issued identifiers generated within the same time window, he is able to anticipate future valid identifiers without capturing traffic from other users.
Which token prediction mechanism best explains the weakness identified in this scenario?
A. Timestamp-based Tokens
B. Weak Random Number Generator (PRNG)
C. Small Token Space
D. Seguential Tokens
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
FILL BLANK
Scenario
Instructions
You have been hired as a part of the Red Team at CEHORG, an IT and ITES organization that deals with advanced research and development in the field of information security. It has offices all over the country connected in real-time by its network infrastructure.
Your organization is worried about rising cybersecurity incidents and has entrusted you with a comprehensive security audit of the complete infrastructure.
CEHORG's internal network consists of several subnets housing various organizational units like any large organization. The front office is connected to a separate subnet that connects to the company's public-facing computers. The company has installed multiple kiosks to help customers understand their products and services. The front office also has Wi-Fi connectivity to cater to the users who carry their smartphones and laptops.
The CEHORG's internal network is made up of Militarized and Demilitarized zones. As a security precaution and by design, all the internal resource zones are configured with different subnet IPs.
The militarized zone houses the application servers that provide application frameworks for various departments. The Demilitarized Zone contains public-facing systems of the organization, such as web and mail servers. The headquarters' network topology and protocols are replicated worldwide in all its satellite offices for efficient communication with the headquarters.
Description
CEH Practical exam presents you with 20 challenges built on the ethical hacking domains covered in the C|EH program. The exam hosts multiple hidden machines, each containing a set of vulnerable applications and services. You must apply your knowledge and skills in various ethical hacking domains and solve the challenges. The exam duration is 6 hours. Each challenge in CEH Practical weighs 10 points, and you are required to solve a minimum of 14 challenges out of 20, which would sum up to 140 points, to become a CEH (Practical) Credential Holder.
On the cyber range, you will have access to Ethical Hacker Workstations, EH Workstation - 1 and EH Workstation - 2. EH Workstation - 1 is a Parrot Security machine and EH Workstation
- 2 is a Windows 11 machine. You can switch to these machines from the Resources tab.
Please note that there are a maximum of 3 attempts for each challenge.
Available target networks:
10.10.55.0/24
192.168.44.0/24
192.168.200.0/24
Exclusions:
10.10.55.1, 10.10.55.2
192.168.44.1, 192.168.44.2
192.168.200.1, 192.168.200.2
The credentials to access EH Workstation - 1 (Parrot Security) machine are as below:
Username: attacker Password: toor
The credentials to access EH Workstation - 2 (Windows 11) are as below:
Username: Admin Password: Pa$$w0rd
The credentials to access OpenVAS on EH Workstation - 1 (Parrot Security) machine are as below:
Username: admin Password: password
To open OpenVAS tool, click Applications at the top of the Desktop window and navigate to Pentesting → Vulnerability Analysis → Openvas - Greenbone → Start Greenbone Vulnerability Manager Service to launch OpenVAS tool.
Note: You can use username.txt and password.txt available on the Desktop of the EH Workstation - 1 (Parrot Security) machine for any credentials/password cracking attempt.
Flags
Challenge:
Conduct a comprehensive scan of the target network to identify the DNS computer name of the Domain Controller. (Format: AaaaaAaaa*AAAAAA*aaa)
正解：
AdminTeam.ECCCEH.com

質問 8：
A penetration tester is evaluating an organization's endpoint security controls. During testing, a known malware sample is detected immediately based on its file signature, while a slightly modified version is not. What limitation of the security product is MOST clearly demonstrated?
A. Sandboxing only detects ransomware.
B. Endpoint protection cannot detect executable files.
C. Behavioral analysis requires no execution of malicious code.
D. Signature-based detection can miss previously unseen or modified malware.
正解：D
解説: (Topexam メンバーにのみ表示されます)