Introduction to Ethical Hacking
18 practice questions under this official exam objective (312-50v12, 312-50v13), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
18 total · page 1 of 1Ethical Hacker Liability and Organizational Risk Acceptance
This question tests the ethical hacker's scope of liability versus the organization's ultimate responsibility for risk management. The page establishe
Insider Threats: Identifying and Preventing Internal Breaches
This question addresses insider threats where attackers exploit deep knowledge of internal systems to bypass controls. The correct countermeasure is r
Cyber Kill Chain Weaponization Stage Identification
This question tests the identification of the Weaponization stage in the Cyber Kill Chain. The correct answer is B because creating a backdoor payload
Which Security Strategy Best Addresses an Unidentified Vulnerability Breach?
This CEH 312-50v12 scenario asks which strategy provides comprehensive network defense after an unidentified vulnerability causes a major breach. The
Ethical Hacker Liability for Unpatched Vulnerabilities
This question explores the professional boundaries and liability of an ethical hacker versus the client organization in risk management. The correct a
Which Threat Intelligence Type Feeds Security Devices in Digital Format?
Technical threat intelligence is the machine-readable threat data — IoCs such as hashes, domains and IP addresses — that firewalls, IPS/IDS and SIEM p
Common Name for Vulnerability Disclosure Program on HackerOne
The common name for a vulnerability disclosure program opened by companies on platforms such as HackerOne is a bug bounty program. This page establish
Defense-in-Depth vs Adaptive Security for Unknown Vulnerabilities
This question addresses the strategic approach to securing complex networks against unidentified vulnerabilities. It establishes that Defense-in-Depth
What Type of Threat Intelligence Uses Human and Social Media Sources?
Arnold's collection of event context from human, social-media, and chat-room sources, plus his report of malicious activity and recommended actions, d
Which Option Best Illustrates the Delivery Step of the Cyber Kill Chain?
The cyber kill chain's third phase, Delivery, is the transmission of a weaponized payload to the victim — here, emailing a malicious attachment. This
Identifying Gray Hat Hackers: Zero-Day Disclosure Ethics
This question defines the ethical hacker classification for Nicolas, who discovered a zero-day vulnerability without permission but disclosed it respo
Risk of Host Server Misconfigurations
This question evaluates the primary security risk arising from server misconfigurations, specifically enabled debugging and unauthorized administrativ
Mitigating BYOD Phishing Risks via MDM
This question addresses securing Bring Your Own Device (BYOD) environments by balancing user autonomy with organizational security. It establishes tha
Which Law Protects Stakeholders From Accounting Errors and Fraud?
Information security laws each address a different risk domain, and this question asks which one targets accounting accuracy and fraudulent financial
Which Security Standard Applies to a Credit Card Company Penetration Test?
This CEH question asks which information security standard governs a penetration tester and auditor hired by a major credit card company. PCI-DSS is t
Extracting Mobile App Source Code via Reverse Engineering
Jacob extracts a mobile application's source code and disassembles it to find design flaws, bugs, and vulnerabilities — this is reverse engineering, a
Cyber Kill Chain: Delivery Stage Next Step
Identifies the next phase in the Cyber Kill Chain after Delivery, which is Weaponization and Exploitation to establish a foothold. This page clarifies
Identifying Script Kiddies in Ethical Hacking Scenarios
This question tests the classification of threat actors based on their skill level and methods, specifically identifying script kiddies. It establishe