Disagreement ranking

312-50v12 — most debated topics

Community-voted ranking of 155 topics, sorted by disagreement level. A higher dispute score means more test-takers disagree on the answer.

Full ranking

155 topics · highest disagreement first

  1. Comprehensive Network Scanning Sequence

    S-grade Dispute: 62% 7 comments

  2. NetBIOS Enumeration on IPv6 Networks

    S-grade Dispute: 54% 13 comments

  3. Ethical Hacker Liability and Organizational Risk Acceptance

    S-grade Dispute: 53% 15 comments

  4. Least Likely Social Engineering Method Based on Footprinting Data

    S-grade Dispute: 50% 5 comments

  5. How to Confirm XSS When CSP Allows Only Same-Domain Scripts?

    S-grade Dispute: 50% 5 comments

  6. SQL Injection Evasion Techniques for IDS Bypass

    S-grade Dispute: 47% 14 comments

  7. Whaling and Targeted Attacks in Social Engineering

    S-grade Dispute: 46% 16 comments

  8. Instant Messenger Malware Distribution Prevention

    S-grade Dispute: 46% 13 comments

  9. NetBIOS Enumeration on Port 139 for CEH

    S-grade Dispute: 46% 14 comments

  10. Mitigating Evil Twin Attacks in Public Wi-Fi

    S-grade Dispute: 44% 11 comments

  11. Immediate Remediation for Kerberoasting Attack

    S-grade Dispute: 43% 14 comments

  12. BYOD Phishing Mitigation via MDM and Training

    S-grade Dispute: 42% 24 comments

  13. Hybrid Attack for Non-Dictionary Password Modifications

    S-grade Dispute: 42% 17 comments

  14. Detecting Data Tampering in Transit with IPsec

    S-grade Dispute: 41% 10 comments

  15. Risk of Host Misconfigurations: Debugging and Admin Permissions

    S-grade Dispute: 40% 13 comments

  16. SQL Injection Evasion: Char Encoding vs. White Space

    S-grade Dispute: 40% 8 comments

  17. What Follows a Completed TCP Handshake During Scanning?

    S-grade Dispute: 40% 12 comments

  18. Identifying Metamorphic and Rootkit Malware Techniques

    S-grade Dispute: 40% 8 comments

  19. What Is Web Server Footprinting in CEH Reconnaissance?

    S-grade Dispute: 36% 10 comments

  20. bettercap vs DroidSheep for WPA-PSK Session Hijacking

    S-grade Dispute: 33% 13 comments

  21. Preventing DDoS on Smart City IoT Networks

    S-grade Dispute: 33% 9 comments

  22. Which SQL Injection Technique Bypasses Input Validation?

    A-grade Dispute: 33% 4 comments

  23. IDLE/IPID Header Scan IPID Increment Analysis

    S-grade Dispute: 31% 10 comments

  24. Limitations of Vulnerability Assessment in Legacy and Default Configurations

    S-grade Dispute: 29% 7 comments

  25. Securing Web Servers: Priority for Common Threats

    S-grade Dispute: 29% 5 comments

  26. Which Nmap Switch Helps Evade IDS or Firewalls?

    S-grade Dispute: 29% 5 comments

  27. Which Tool Intercepts and Tests Web Session Traffic?

    A-grade Dispute: 29% 4 comments

  28. First Step to Mitigate DDoS Attack

    S-grade Dispute: 25% 6 comments

  29. Speculative Execution Side-Channel Attack Identification

    A-grade Dispute: 25% 3 comments

  30. Host Discovery with Strict TCP Firewall Filtering

    A-grade Dispute: 25% 4 comments

  31. Vulnerability Assessment Report Components

    S-grade Dispute: 22% 13 comments

  32. Least Useful Google Operator for VPN Footprinting

    S-grade Dispute: 22% 8 comments

  33. SQL Injection Payload Impact Analysis

    S-grade Dispute: 20% 5 comments

  34. Best Tool for Generating YARA Rules to Complement IDS

    S-grade Dispute: 20% 5 comments

  35. Comprehensive Protection for Industrial IoT Devices

    A-grade Dispute: 20% 3 comments

  36. Protecting IoT Device Communication from MitM Attacks

    A-grade Dispute: 20% 4 comments

  37. Which Technique Does NOT Help Detect a Honeypot?

    S-grade Dispute: 17% 7 comments

  38. MAC Flooding for Switch Sniffing on CEH

    S-grade Dispute: 17% 13 comments

  39. Network Sniffing Techniques for Comprehensive Data Analysis

    S-grade Dispute: 17% 5 comments

  40. Best Symmetric Encryption for Quantum-Resistant Balance

    S-grade Dispute: 14% 8 comments

  41. Identifying RST Hijacking via Spoofed Reset Packets

    S-grade Dispute: 14% 6 comments

  42. Exploiting XSS with HTTPOnly Cookies

    S-grade Dispute: 14% 7 comments

  43. Identifying APT Infiltration Indicators

    S-grade Dispute: 14% 13 comments

  44. Protecting Web Servers from Misconfiguration-Based Attacks

    A-grade Dispute: 14% 3 comments

  45. Mobile App MitM Prevention via Encryption

    S-grade Dispute: 12% 9 comments

  46. Effective Host Discovery Behind Restrictive Firewalls

    S-grade Dispute: 12% 6 comments

  47. Best Initial Approach to Vulnerability Assessment

    S-grade Dispute: 11% 6 comments

  48. Using ntptrace to Trace NTP Server Chains

    S-grade Dispute: 11% 12 comments

  49. What Is the Correct Sequence of Vulnerability-Management Life Cycle Steps?

    S-grade Dispute: 11% 6 comments

  50. Slow HTTP POST Attack Duration Calculation

    S-grade Dispute: 10% 9 comments

  51. eMailTrackerPro Email Footprinting Capabilities

    S-grade Dispute: 10% 9 comments

  52. ACK Flag Probe Scan for BSD TCP/IP Stack

    S-grade Dispute: 10% 8 comments

  53. Which Attack Technique Did Stephen Use Against Industrial Systems?

    S-grade Dispute: 10% 9 comments

  54. Choosing a Vulnerability Assessment Solution for an External View

    S-grade Dispute: 9% 8 comments

  55. Which Security Strategy Best Addresses an Unidentified Vulnerability Breach?

    S-grade Dispute: 8% 6 comments

  56. CVSS Metric Types: Base, Temporal, and Environmental

    S-grade Dispute: 8% 6 comments

  57. How to Keep Full Control of Cloud Encryption Keys at Rest?

    A-grade Dispute: 0% 6 comments

  58. OS Fingerprinting via SYN and ECN-Echo TCP Flags

    A-grade Dispute: 0% 5 comments

  59. Maximizing SQL Injection Data Extraction Volume

    A-grade Dispute: 0% 6 comments

  60. Identifying Ping of Death via Oversized Packets

    A-grade Dispute: 0% 5 comments

  61. How Should YARA Rules Reduce IDS False Positives from Goodware?

    A-grade Dispute: 0% 4 comments

  62. Which Network-Level Session Hijacking Uses Forged ICMP and ARP Spoofing?

    A-grade Dispute: 0% 3 comments

  63. Bypassing Input Filters via Encoding in SQL Injection

    A-grade Dispute: 0% 4 comments

  64. Protecting IoMT Devices from Ransomware via Segmentation

    A-grade Dispute: 0% 3 comments

  65. Why LM Hashes Are Blank in Windows Vista and Later

    A-grade Dispute: 0% 3 comments

  66. Why does secure LDAP enumeration fail without use_ssl in ldap3?

    A-grade Dispute: 0% 4 comments

  67. Which DNSRecon Command Performs Reverse DNS on an IP Range?

    A-grade Dispute: 0% 7 comments

  68. Which Zenmap Scan Hides the Scanner's IP While Finding Open Ports?

    A-grade Dispute: 0% 7 comments

  69. Which Control Best Counters a Broad Range of Social Engineering Techniques?

    A-grade Dispute: 0% 4 comments

  70. Which Measure Best Prevents Email-Delivered Targeted Malware Attacks?

    A-grade Dispute: 0% 4 comments

  71. Kerberoasting Attack Next Step

    A-grade Dispute: 0% 3 comments

  72. Identifying IoT Vulnerabilities in ICS Environments

    A-grade Dispute: 0% 5 comments

  73. Enumerating Remote IPC Shares via Brute Force

    A-grade Dispute: 0% 4 comments

  74. IoT Network Segmentation for Smart Home Security

    A-grade Dispute: 0% 4 comments

  75. Suppressing Detailed Web Server Error Messages

    A-grade Dispute: 0% 4 comments

  76. Secure Symmetric Key Distribution Strategy

    A-grade Dispute: 0% 5 comments

  77. Client-Side Encryption for Healthcare Cloud Data

    A-grade Dispute: 0% 3 comments

  78. Thin vs Thick Whois Models in Footprinting

    A-grade Dispute: 0% 9 comments

  79. Cloud Access Security Broker for Cloud Security Monitoring

    A-grade Dispute: 0% 3 comments

  80. Replacing WEP with Secure Wireless Encryption

    A-grade Dispute: 0% 3 comments

  81. Hybrid Encryption Security vs Performance Balance

    A-grade Dispute: 0% 8 comments

  82. Preventing Data Leakage via Mobile App Installation Policies

    A-grade Dispute: 0% 3 comments

  83. Mitigating Wi-Fi Eavesdropping in Home Networks

    A-grade Dispute: 0% 4 comments

  84. Effective DDoS Attack Strategy for Concealment and Resistance

    A-grade Dispute: 0% 4 comments

  85. SNMP Enumeration Tools for Ethical Hackers

    A-grade Dispute: 0% 4 comments

  86. Security Risks of Web Server Default Settings

    A-grade Dispute: 0% 3 comments

  87. Extracting Database Info via Time Delays in SQL Injection

    A-grade Dispute: 0% 3 comments

  88. Identifying Script Kiddies in Ethical Hacking Scenarios

    A-grade Dispute: 0% 3 comments

  89. Insider Threats: Identifying and Preventing Internal Breaches

    A-grade Dispute: 0% 11 comments

  90. Unified Multi-Cloud Security Management Recommendation

    A-grade Dispute: 0% 4 comments

  91. Restricting Services on Web Servers

    A-grade Dispute: 0% 4 comments

  92. Mitigating Credential Sharing with 802.1X Authentication

    A-grade Dispute: 0% 4 comments

  93. Hping3 IP Spoofing Command for Anonymity

    A-grade Dispute: 0% 4 comments

  94. Ensuring Data Privacy in SaaS via Client-Side Encryption

    A-grade Dispute: 0% 3 comments

  95. Next Countermeasure Against Persistent Network Sniffing Attacks

    A-grade Dispute: 0% 3 comments

  96. Cyber Kill Chain: Delivery Stage Next Step

    A-grade Dispute: 0% 3 comments

  97. DoS Attack Threshold: Packet Rate vs Server Capacity

    A-grade Dispute: 0% 4 comments

  98. UDP Traceroute to Bypass ICMP Blocking

    A-grade Dispute: 0% 3 comments

  99. Enumerating Subdomains Using OSINT Tools

    A-grade Dispute: 0% 3 comments

  100. SYN Flood Attack Analysis and Server Overload

    A-grade Dispute: 0% 3 comments

  101. Exploiting Verbose Errors and No Lockout for Brute Force

    A-grade Dispute: 0% 3 comments

  102. Identifying Error-Based SQL Injection in Web Applications

    A-grade Dispute: 0% 3 comments

  103. Best Vulnerability Tool for Hybrid On-Prem and Cloud Networks

    A-grade Dispute: 0% 5 comments

  104. RSA Signing for Email Confidentiality and Non-Repudiation

    A-grade Dispute: 0% 5 comments

  105. Best Way to Secure Payment Data Stored on a Mobile Device

    A-grade Dispute: 0% 3 comments

  106. Mitigating TOC/TOU Race Condition Vulnerabilities

    A-grade Dispute: 0% 3 comments

  107. Preparing a Sheep Dip Computer for Malware Analysis

    A-grade Dispute: 0% 6 comments

  108. Which Protocol Securely Exchanges a Symmetric Key Over an Unsecured Channel?

    A-grade Dispute: 0% 3 comments

  109. Best Wi-Fi Security for a Public Coffee Shop

    A-grade Dispute: 0% 3 comments

  110. Exploiting Client-Side Sanitization and Missing HttpOnly Cookies

    A-grade Dispute: 0% 3 comments

  111. User-Directed Spidering Past robots.txt in Footprinting

    A-grade Dispute: 0% 3 comments

  112. Why WPA2 Personal AES Wi-Fi Password Is Hard to Crack

    A-grade Dispute: 0% 8 comments

  113. DLL Hijacking for Server Privilege Escalation

    A-grade Dispute: 0% 4 comments

  114. Docker Container Technology in Cloud Application Delivery

    A-grade Dispute: 0% 3 comments

  115. DNS cache snooping technique used during enumeration

    A-grade Dispute: 0% 3 comments

  116. First Step Before Enabling Auditing on a Loan System

    A-grade Dispute: 0% 4 comments

  117. Google site: Operator for Domain-Restricted Footprinting

    A-grade Dispute: 0% 3 comments

  118. WPA3 SAE Dragonfly Key Exchange Explained

    A-grade Dispute: 0% 4 comments

  119. Which Zenmap Option Performs an ICMP Timestamp Ping Scan?

    A-grade Dispute: 0% 4 comments

  120. Timing Side-Channel Attack on ICS Passwords

    A-grade Dispute: 0% 3 comments

  121. Which Attack Overflows an Ethernet Switch CAM Table?

    A-grade Dispute: 0% 3 comments

  122. What Does the sqlmap --dbs Option Do?

    A-grade Dispute: 0% 3 comments

  123. Web of Trust Model for Public Key Encryption

    A-grade Dispute: 0% 3 comments

  124. Which BtleJack Command Hijacks a BLE Connection

    A-grade Dispute: 0% 4 comments

  125. Which Tool Scans IoT Devices for Default Credentials?

    A-grade Dispute: 0% 5 comments

  126. How Linux Hides Files with a Leading Period Character

    A-grade Dispute: 0% 5 comments

  127. Identifying Serpent From Its Cipher Characteristics

    A-grade Dispute: 0% 3 comments

  128. Extracting Mobile App Source Code via Reverse Engineering

    A-grade Dispute: 0% 3 comments

  129. Which Attack Do Mirai IoT Botnets Launch?

    A-grade Dispute: 0% 4 comments

  130. Which Security Standard Applies to a Credit Card Company Penetration Test?

    A-grade Dispute: 0% 3 comments

  131. Which Kubernetes master component schedules new pods to nodes?

    A-grade Dispute: 0% 4 comments

  132. Which NIST Cloud Role Provides Connectivity and Transport Services?

    A-grade Dispute: 0% 5 comments

  133. Which Term Describes Driving Around to Find Open Wireless Networks?

    A-grade Dispute: 0% 4 comments

  134. Which Option Best Illustrates the Delivery Step of the Cyber Kill Chain?

    A-grade Dispute: 0% 4 comments

  135. Which Web Service Architecture Component Secures SOAP Message Integrity and Confidentiality?

    A-grade Dispute: 0% 3 comments

  136. Which wireless protocol replaces PSK with SAE and resists offline dictionary attacks?

    A-grade Dispute: 0% 3 comments

  137. Which Threat Intelligence Type Feeds Security Devices in Digital Format?

    A-grade Dispute: 0% 5 comments

  138. Which SQL Injection Type Uses True/False Responses?

    A-grade Dispute: 0% 4 comments

  139. What Is the Best Example of a Scareware Attack?

    A-grade Dispute: 0% 3 comments

  140. What Type of Threat Intelligence Uses Human and Social Media Sources?

    A-grade Dispute: 0% 4 comments

  141. Which Law Protects Stakeholders From Accounting Errors and Fraud?

    A-grade Dispute: 0% 3 comments

  142. Which Web Vulnerability Is Exploited by an XML External Entity DTD Payload?

    A-grade Dispute: 0% 4 comments

  143. Which Open-Source Framework Automates Footprinting and Reconnaissance?

    A-grade Dispute: 0% 3 comments

  144. What Is the Purpose of wget -q -S Against a Web Server?

    A-grade Dispute: 0% 3 comments

  145. Which Injection Attack Exploits SSI Directives in a Web Application?

    A-grade Dispute: 0% 3 comments

  146. Which Tool Does Jack Use for Automated Web Server Vulnerability Scanning?

    A-grade Dispute: 0% 3 comments

  147. Which Tool Does Hailey Use to Harvest Words from the Target Website for Brute-Force?

    A-grade Dispute: 0% 4 comments

  148. Which Technique Strengthens an Encryption Key Against Brute-Force Attacks?

    A-grade Dispute: 0% 4 comments

  149. What Type of Mobile Attack Uses Loudspeaker Data to Breach Speech Privacy?

    A-grade Dispute: 0% 4 comments

  150. Detecting Honeyd Honeypots via Time-Based TCP Fingerprinting

    A-grade Dispute: 0% 4 comments

  151. Identifying WPS-enabled APs using wash

    A-grade Dispute: 0% 3 comments

  152. Identifying Malware That Spreads Between Systems

    A-grade Dispute: 0% 3 comments

  153. Identifying API Vulnerability: Missing ABAC Validation

    A-grade Dispute: 0% 4 comments

  154. Cloudborne Attack on Bare-Metal Firmware

    A-grade Dispute: 0% 3 comments

  155. Pharming: Malicious Code Redirecting Web Traffic

    A-grade Dispute: 0% 5 comments

← Back to 312-50v12 CEH Study Guide