Evading IDS, Firewalls, and honeypots
4 practice questions under this official exam objective (312-50v12) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
Which Technique Does NOT Help Detect a Honeypot?
Honeypot detection depends on behavioral probing, specialized detection tools, and virtualization artifacts such as VMware MAC addresses. A brute-forc
Adversary using multiple domains to avoid detection
This question tests the identification of evasion techniques where an adversary uses multiple domains pointing to a single host. The correct answer is
Which Nmap Switch Helps Evade IDS or Firewalls?
Nmap's -D decoy switch mixes real scan traffic with spoofed decoy source addresses, making IDS and firewall logs much harder to attribute. This page c
How Should YARA Rules Reduce IDS False Positives from Goodware?
This CEH 312-50v12 question tests how YARA rules can be used to suppress IDS false positives caused by benign goodware while keeping real threat detec