ECCouncil 312-50v13 real exam prep : Certified Ethical Hacker Exam (CEH v13 AI)

During a browser security evaluation for a technology startup in Austin, Texas, ethical hacker Mia Lopez tests user-interface manipulation risks by embedding a link in a simulated internal collaboration site.
When a user clicks the link and switches to another tab to continue working, the original page dynamically reloads in the background, transforming into a fake login portal that mimics the company ' s email system.
Upon returning to the tab, the user unknowingly enters credentials on the altered page, which captures the information before redirecting the user to the legitimate site.
The test demonstrates how an inactive browser tab can be exploited without direct user awareness.
Which type of social engineering attack does this scenario accurately represent?

• A. Clone Phishing
• B. Consent Phishing
• C. Tabnabbing
• D. Search Engine Phishing

A global fintech company receives extortion emails threatening a severe DDoS attack unless ransom is paid.
The attacker briefly launches an HTTP flood to demonstrate capability. The attack uses incomplete POST requests that overload application-layer resources, causing performance degradation. The attacker reinforces their demand with a second threat email. What type of DDoS attack is being carried out?

• A. Pulse wave attack with burst patterns
• B. DRDoS attack using intermediaries
• C. RDDoS attack combining threat and extortion
• D. Recursive GET flood disguised as crawling

A malware analyst is tasked with evaluating a suspicious PDF file suspected of launching attacks through embedded JavaScript. Initial scans using pdfid show the presence of /JavaScript and /OpenAction keywords.
What should the analyst do next to understand the potential impact?

• A. Disassemble the PDF using PE Explorer
• B. Upload the file to VirusTotal and rely on engine consensus
• C. Extract and analyze stream objects using PDFStreamDumper
• D. Compute file hashes using HashMyFiles for signature matching

As part of an insider threat simu-lation at a multinational insurance firm, lead red teamer John is asked to assess whether internal directory services are exposing sensitive user data. Gaining limited VPN access, he begins probing port 389 on a staging environment connected to the main domain infrastructure. After discovering that anonymous binds are accepted by the directory service, John launches a utility from his Kali machine that allows command-line interaction with directory entries. He structures his query to search for user objects with associated organizational units. Moments later, John reviews the output which includes usernames, group memberships, and departmental hierarchies all retrieved without authentication.

• A. nbtstat -A
• B. ldapsearch
• C. dig AXFR
• D. smtp-user-enum

A multinational organization is implementing a security upgrade for its corporate wireless infrastructure. The current WPA2-Personal configuration relies on a shared passphrase, which the IT team finds difficult to rotate and manage securely across hundreds of employee devices. To enhance security and scalability, the organization decides to migrate to WPA2-Enterprise. The new setup must allow for centralized control of user authentication, support certificate-based identity verification, and ensure that each authenticated client is assigned a unique session encryption key to prevent key reuse and limit the blast radius of potential breaches.
Which component is essential for enabling this centralized, certificate-based authentication with unique key generation per session in a WPA2-Enterprise environment?

• A. Pre-Shared Key (PSK)
• B. RADIUS with Extensible Authentication Protocol (EAP)
• C. Opportunistic Wireless Encryption (OWE)
• D. Temporal Key Integrity Protocol (TKIP)