support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  1. Home
  2. Exams
  3. EC-Council
  4. 312-50v13

EC-Council 312-50v13 Exam Actual Questions
Certified Ethical Hacker v13 (Page 7 )

Updated On: 31-Jul-2026
Page 7 of 133
PDF with 1065 Questions

John wants to send Marie an email that includes sensitive information, and he does not trust the network that he is connected to. Marie gives him the idea of using PGP.
What should John do to communicate correctly using this type of encryption?

  1. Use his own private key to encrypt the message.
  2. Use his own public key to encrypt the message.
  3. Use Marie’s private key to encrypt the message.
  4. Use Marie’s public key to encrypt the message.

Answer(s): D

Explanation:

D is correct because using Marie's public key ensures that only she can decrypt the message with her corresponding private key.
When John encrypts a message with Marie’s public key, he guarantees that only Marie, who possesses the corresponding private key, can decrypt and access the sensitive information. This process maintains confidentiality even in an untrusted network environment.
Evaluation of Other Options:

A: Use his own private key to encrypt the message. This is incorrect because using a private key for encryption provides no confidentiality. Instead, the message would be readable by anyone who has access to John’s public key, defeating the purpose of secure communication.
B: Use his own public key to encrypt the message. This option is also misleading. If John encrypts the message with his own public key, he is the only one who can decrypt it using his private key. Consequently, Marie would not be able to access the sensitive information, which is the primary objective.
C: Use Marie’s private key to encrypt the message. This is highly inappropriate because private keys should never be used to encrypt messages for others. Doing so would expose Marie’s private key to potential compromise and undermine the security framework established by public key cryptography.
Effective use of PGP requires a proper understanding of key management principles, ensuring that public keys remain secure while facilitating encrypted communication.
References:
https://www.pgp.com/what-is-pgp https://www.ncsc.gov.uk/information/protecting-your-data https://www.cloudflare.com/learning/how-tls-works/what-is-pretty-good-privacy-pgp/


Reference:

References:
https://www.pgp.com/what-is-pgp https://www.ncsc.gov.uk/information/protecting-your-data https://www.cloudflare.com/learning/how-tls-works/what-is-pretty-good-privacy-pgp/



In the Common Vulnerability Scoring System (CVSS) v3.1 severity ratings, what range does medium vulnerability fall in?

  1. 4.0-6.0
  2. 3.9-6.9
  3. 3.0-6.9
  4. 4.0-6.9

Answer(s): D

Explanation:

D is correct because in CVSS v3.1, medium vulnerabilities are explicitly defined to have a base score range of 4.0 to 6.9.
The CVSS framework categorizes vulnerabilities into different severity levels, each with specific numeric ranges. Scores from 4.0 to 6.9 correspond to medium impact vulnerabilities that could lead to moderate consequences. Understanding this classification allows security professionals to prioritize remediation efforts effectively.
Evaluation of Other Options:

A: 4.0-6.0 : This option is incorrect because it underestimates the upper boundary for medium vulnerabilities. According to the CVSS v3.1, the maximum score for a medium vulnerability is 6.9, not 6.0.
B: 3.9-6.9 : Although this range includes part of the medium classification, it incorrectly encompasses scores that are considered low severity (3.9 and below). Medium vulnerabilities necessitate a clear demarcation starting at 4.0 to maintain consistency and clarity in assessment.
C: 3.0-6.9 : This option incorrectly categorizes low vulnerabilities (ranging from 3.0 to 3.9) as medium. The CVSS v3.1 framework distinctly separates these categories to enhance precision in vulnerability management and to guide risk assessment strategies accurately.
For further understanding of the CVSS framework, here are authoritative references:
1. https://www.first.org/cvss/specification-document 2. https://www.first.org/cvss/user-guide 3. https://www.nist.gov/itl/publications/cvss-v31-user-guide



Bill is a network administrator. He wants to eliminate unencrypted traffic inside his company’s network. He decides to setup a SPAN port and capture all traffic to the datacenter. He immediately discovers unencrypted traffic in port UDP 161.
What protocol is this port using and how can he secure that traffic?

  1. RPC and the best practice is to disable RPC completely.
  2. SNMP and he should change it to SNMP V3.
  3. SNMP and he should change it to SNMP V2, which is encrypted.
  4. It is not necessary to perform any actions, as SNMP is not carrying important information.

Answer(s): B

Explanation:

B is correct because UDP port 161 is used by the Simple Network Management Protocol (SNMP), and upgrading to SNMPv3 enhances security through authentication and encryption.
SNMP operates in three versions, with SNMPv1 and SNMPv2 lacking robust security measures, mainly transmitting data in clear text, which makes it vulnerable to interception and manipulation. SNMPv3, on the other hand, introduces features like authentication based on HMAC and encryption via DES or AES, safeguarding sensitive information. Transitioning to SNMPv3 mitigates risks associated with unencrypted traffic, as network configurations and hardware performance could expose vulnerabilities.
Evaluating the alternatives:
Option A suggests disabling RPC. While this may reduce attack vectors, RPC is a crucial protocol for various services, and disabling it entirely may not be feasible or beneficial without architecting suitable substitutes. Option C proposes changing to SNMPv2, which is misleading since SNMPv2 still lacks the comprehensive security features introduced in SNMPv3, rendering it inadequate for environments requiring secure communication. Option D underestimates the importance of SNMP traffic. Even if it appears non-critical, unencrypted SNMP can allow unauthorized access to network management data, encouraging adversaries to exploit vulnerabilities therein.
In summary, switching to SNMPv3 is essential for fortifying the integrity and confidentiality of network management operations.
https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/4962-what-is-snmpv3.html https://www.networkworld.com/article/3331139/whats-new-in-snmph-what-you-need-to-know.html https://www.sans.org/white-papers/33735/



Consider the following Nmap output:

What command-line parameter could you use to determine the type and version number of the web server?

  1. -sV
  2. -sS
  3. -Pn
  4. -V

Answer(s): A

Explanation:

Version detection is enabled and controlled with the following options: -sV (Version detection) --> Alternatively, you can use -A, which enables version detection among other things (including all relevant NSE scripts). https://nmap.org/book/man-version-detection.html



Bob was recently hired by a medical company after it experienced a major cyber security breach. Many patients are complaining that their personal medical records are fully exposed on the Internet and someone can find them with a simple Google search. Bob’s boss is very worried because of regulations that protect those data.
Which of the following regulations is mostly violated?

  1. PCI DSS
  2. PII
  3. ISO 2002
  4. HIPPA/PHI

Answer(s): D

Explanation:

D is correct as the exposure of personal medical records primarily violates HIPAA regulations regarding Protected Health Information (PHI).
The Health Insurance Portability and Accountability Act (HIPAA) mandates stringent protections of patient health information to ensure confidentiality and integrity. The breach described indicates that medical records, classified as PHI, were publicly accessible, undermining HIPAA's fundamental requirements for safeguarding sensitive health information. Non-compliance not only exposes the organization to legal repercussions but also erodes patient trust.
Evaluation of Other Options:

A: PCI DSS: The Payment Card Industry Data Security Standard (PCI DSS) pertains to the secure handling of payment card information, which is not relevant in this context as it deals with health records, not financial data.
B: PII: While Personally Identifiable Information (PII) addresses the confidentiality of personal data, HIPAA includes specific provisions for health-related data, making it more pertinent to the exposure of medical records. PII regulations alone would not encompass the detailed protections required for health information.
C: ISO 2002: This reference likely intends to reference ISO standards related to information security management.
While ISO standards provide frameworks for managing risk and ensuring security, they do not enforce specific legal requirements for health records akin to HIPAA. Hence, they cannot be deemed as directly applicable in this breach scenario.
The implications of the breach underscore the necessity for strict adherence to HIPAA in the medical domain to avoid financial penalties and damage to reputation.
For further understanding, the following sources provide comprehensive insights into these regulations:
HIPAA Official Site PCI Security Standards Council NIST Guidelines on PII



Infecting a system with malware and using phishing to gain credentials to a system or web application are examples of which phase of the ethical hacking methodology?

  1. Scanning
  2. Gaining access
  3. Maintaining access
  4. Reconnaissance

Answer(s): B

Explanation:

B is correct because infecting a system with malware and using phishing techniques directly leads to gaining unauthorized access to a system or web application.
In ethical hacking, the phases are strategically structured to methodically assess and exploit security vulnerabilities. The "Gaining Access" phase is characterized by the execution of tactics designed to compromise networks or systems following reconnaissance and scanning. In this phase, the ethical hacker employs various methods, such as malware installation and social engineering techniques like phishing, aimed at obtaining credentials or escalating privileges. This critical step not only exposes weaknesses but also serves as a practical demonstration of potential real-world threats.
Evaluating the other options:

A: Scanning : This phase primarily involves identifying live hosts, ports, and services, but does not entail direct engagement with systems or data compromise. Focus here is on gathering information necessary for subsequent phases.
C: Maintaining Access : Following successful exploitation, this phase involves establishing a foothold within the target system to facilitate ongoing access. It assumes that initial access has already been achieved, thus is not relevant to the action described.
D: Reconnaissance : This preliminary phase focuses on collecting intelligence, such as potential targets and network layout, without engaging with the systems in a disruptive manner or gaining access. It is foundational but does not involve the execution of exploits.
For further reading, consider the following resources:
https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/ https://www.cybrary.it/course/ethical-hacking/ https://www.infosecinstitute.com/careers/how-to-start-your-career-in-ethical-hacking/



Larry, a security professional in an organization, has noticed some abnormalities in the user accounts on a web server. To thwart evolving attacks, he decided to harden the security of the web server by adopting a few countermeasures to secure the accounts on the web server.
Which of the following countermeasures must Larry implement to secure the user accounts on the web server?

  1. Retain all unused modules and application extensions.
  2. Limit the administrator or root-level access to the minimum number of users.
  3. Enable all non-interactive accounts that should exist but do not require interactive login.
  4. Enable unused default user accounts created during the installation of an OS.

Answer(s): B

Explanation:

B is the correct answer because limiting administrator or root-level access minimizes the risk of unauthorized access and potential misuse of privileged accounts, an essential aspect of account security on servers.
The principle of least privilege dictates that users should have only the access necessary to perform their duties. By minimizing the number of users with elevated privileges, Larry reduces the attack surface and the likelihood of privilege escalation attacks. Access control is crucial in maintaining the integrity and security of systems, as it mitigates risks associated with internal threats and compromised accounts.
Evaluation of Other Options:

A: Retain all unused modules and application extensions : This approach is ineffective as unused modules may contain vulnerabilities that could be exploited by attackers. Unused features increase complexity and potential security risks, contradicting the notion of securing an environment through reduced attack vectors.
C: Enable all non-interactive accounts that should exist but do not require interactive login : Activating these accounts could inadvertently provide avenues for exploitation by attackers who could utilize these accounts for lateral movement or privilege escalation within the network, subsequently compromising overall security.
D: Enable unused default user accounts created during the installation of an OS : Default accounts often come with known vulnerabilities and are well-documented, making them prime targets for attackers. Enabling such accounts without proper oversight invites unnecessary risks and undermines the security posture.
In conclusion, limiting administrator access ensures that only trusted personnel can make significant changes to critical systems, safeguarding against both external and internal threats.
References:
https://www.cisecurity.org/white-papers/the-cis-controls-a-policies-and-procedures-index/ https://www.nist.gov/publications/effective-security-investments-using-the-nist-cybersecurity-framework https://www.isaca.org/resources/news-and-trends/isaca-newsroom/blogs/2020/how-to-use-identity-and-access-management-for-effective-security


Reference:

References:
https://www.cisecurity.org/white-papers/the-cis-controls-a-policies-and-procedures-index/ https://www.nist.gov/publications/effective-security-investments-using-the-nist-cybersecurity-framework https://www.isaca.org/resources/news-and-trends/isaca-newsroom/blogs/2020/how-to-use-identity-and-access-management-for-effective-security



There are multiple cloud deployment options depending on how isolated a customer’s resources are from those of other customers. Shared environments share the costs and allow each customer to enjoy lower operations expenses. One solution is for a customer to join with a group of users or organizations to share a cloud environment.
What is this cloud deployment option called?

  1. Private
  2. Community
  3. Public
  4. Hybrid

Answer(s): B

Explanation:

B: Community is correct because it describes a cloud deployment model where a group of users or organizations share infrastructure, resources, and costs within a secure environment tailored to their shared needs.
In the context of cloud deployment models, a Community Cloud allows multiple organizations with shared concerns—such as security requirements, compliance needs, or common goals—to collaborate and utilize a shared infrastructure, thus optimizing resource management and reducing costs. This model promotes collaboration among participants and leverages economies of scale, making it appealing for organizations that require some level of isolation from the general public but still wish to share resources with similar entities.
Evaluation of Incorrect Options:

A: Private Cloud - This model is dedicated to a single organization. It offers complete control and higher security but lacks the cost-sharing benefits inherent in community models, making it less efficient for organizations that can collaborate.
C: Public Cloud - In a public cloud, services are offered over the internet and shared among multiple users. This model does not provide the requisite shared governance or specific use-case relevance that the community model does, as it serves a broader audience without tailoring to specific mutual interests.
D: Hybrid Cloud - This integrates public and private cloud models, allowing data and applications to be shared between them.
While it enhances flexibility, it does not focus on the collaborative aspect shared by community cloud models, which are specifically designed for joint organizations in the same field or sector.
https://www.ibm.com/cloud/learn/public-private-hybrid-cloud https://aws.amazon.com/what-is-cloud-computing/ https://azure.microsoft.com/en-us/overview/what-is-cloud-computing/



  PDF
Viewing page 7 of 133
Viewing questions 31 - 35 out of 1065 questions


Post your Comments and Discuss EC-Council 312-50v13 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!