Sample Questions from Certified Ethical Hacker (CEH / 312-50) by EC-Council

Preview a few questions below — answers are revealed when you take the exam.

1. A security analyst is investigating a potential SQL injection attack on a web application. The analyst suspects that the attack is exploiting a vulnerability in the application's login form. Which of the following techniques should the analyst use to confirm the presence of a SQL injection vulnerability?

   • A: Use a web application vulnerability scanner to automatically identify SQL injection vulnerabilities in the application.
   • B: Manually test the login form by inputting various SQL injection payloads, such as ' OR '1'='1, and observing the application's response.
   • C: Review the application's source code to identify any instances where user input is directly concatenated into SQL queries.
   • D: Perform a network traffic analysis to capture and analyze the SQL queries sent by the application to the database server.

2. An organization is implementing a new wireless network for its employees. The network must support secure communication and prevent unauthorized access. Which of the following wireless security protocols should the organization use to achieve these goals?

   • A: WEP (Wired Equivalent Privacy), as it provides strong encryption and is widely supported by wireless devices.
   • B: WPA (Wi-Fi Protected Access), as it offers improved security over WEP and is compatible with most modern wireless devices.
   • C: WPA2 (Wi-Fi Protected Access 2), as it provides stronger encryption and better security features than WPA.
   • D: WPA3 (Wi-Fi Protected Access 3), as it offers the latest security enhancements and is designed to address the vulnerabilities of previous wireless security protocols.

3. A security consultant is conducting a penetration test on a client's network. The consultant has identified a potential vulnerability in the client's web server that could allow an attacker to execute arbitrary code. Which of the following actions should the consultant take to responsibly disclose this vulnerability to the client?

   • A: Immediately publish the vulnerability details on a public security mailing list to raise awareness and encourage the client to fix the issue.
   • B: Contact the client's management team and provide them with a detailed report of the vulnerability, including steps to reproduce the issue and recommended mitigation strategies.
   • C: Exploit the vulnerability to demonstrate the potential impact to the client and use the results to negotiate a higher fee for the penetration test.
   • D: Share the vulnerability details with other security researchers to collaborate on developing a proof-of-concept exploit and publish the findings jointly.

4. A company is experiencing a series of distributed denial-of-service (DDoS) attacks on its e-commerce website. The attacks are causing significant downtime and financial losses. Which of the following strategies should the company implement to mitigate the impact of future DDoS attacks?

   • A: Deploy a content delivery network (CDN) to distribute the website's content across multiple servers and reduce the impact of traffic spikes.
   • B: Implement rate limiting on the web server to restrict the number of requests that can be processed from a single IP address within a given time period.
   • C: Utilize a DDoS mitigation service provided by a third-party provider to absorb and filter malicious traffic before it reaches the company's network.
   • D: Increase the capacity of the company's web server infrastructure to handle higher traffic volumes and reduce the likelihood of downtime during an attack.

5. A security researcher is analyzing a malware sample that appears to be a ransomware variant. The researcher wants to understand the malware's behavior and identify any potential indicators of compromise (IOCs). Which of the following techniques should the researcher use to dynamically analyze the malware sample?

   • A: Use a static analysis tool to examine the malware's binary code and identify any suspicious patterns or signatures.
   • B: Execute the malware sample in a controlled sandbox environment and monitor its behavior, network activity, and system changes.
   • C: Reverse-engineer the malware's binary code using a disassembler or decompiler to understand its functionality and identify any hardcoded IOCs.
   • D: Perform a network traffic analysis to capture and analyze the malware's communication with its command-and-control (C2) server.