System Hacking
12 practice questions under this official exam objective (312-50v12, 312-50v13), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
12 total · page 1 of 1Hybrid Attack for Non-Dictionary Password Modifications
This question explores password cracking techniques when passwords are known words but not found in standard dictionaries. The page establishes that a
Immediate Remediation for Kerberoasting Attack
This question addresses the immediate remediation steps following a detected Kerberoasting attack where TGS tickets were extracted from memory. The co
Tool Identification for Password Cracking
This question tests the ability to distinguish between password cracking utilities and network communication tools. Netcat is the correct answer as it
File-less Malware Bypassing Application Whitelisting
This question addresses file-less malware, which operates in memory using legitimate system tools to bypass traditional AV and application whitelistin
How Linux Hides Files with a Leading Period Character
On Linux, files and directories whose names begin with a period (.) are treated as hidden and are omitted from standard directory listings such as ls.
Buffer Overflow vs SQL Injection Attack Analysis
This question tests the ability to distinguish between buffer overflow and SQL injection attacks by analyzing a code snippet involving array index acc
Metasploit Post-Exploitation Privilege Escalation Module
Identifies the specific Metasploit post-exploitation module used to escalate privileges on Windows systems. This page confirms that getsystem is the c
First Step Before Enabling Auditing on a Loan System
For a bank processing sensitive home-loan privacy data with no prior auditing, the correct first action is to determine the impact of enabling the aud
DLL Hijacking for Server Privilege Escalation
This CEH 312-50v12 question describes a malicious DLL with no fully qualified path appearing in an application directory on a server where a non-admin
Rule-based vs Hybrid Attack for Password Modification Patterns
This question examines the distinction between rule-based and hybrid attacks when targeting passwords that follow predictable modification patterns. T
Kerberoasting Attack Next Step
This question identifies the immediate next step in a Kerberoasting attack after obtaining a TGT. It establishes that requesting a service ticket is t
Why LM Hashes Are Blank in Windows Vista and Later
This question explains why NTLM hashes from the SAM file lack LM hash counterparts in modern Windows environments, confirming that default configurati