ECCouncil Certified Ethical Hacker Exam (CEHv13) Sample Questions:

1. You are an ethical hacker at Sentinel Cyberworks, engaged to assess the wireless defenses of HarborTrust Bank in Portland, Oregon. During your assessment, the security team shows you a production system that continuously places selected APs into a passive scan mode, aggregates alarms from multiple wireless controllers into a central engine for forensic storage, and can automatically apply countermeasures (for example, time-sliced channel scanning and remote configuration changes) across the campus when it classifies a nearby device as malicious. Based on the described capabilities, which Wi-Fi security solution is this most consistent with?

A) WatchGuard Wi-Fi Cloud WIPS
B) RFProtect
C) Cisco Adaptive Wireless IPS
D) Fern WiFi Cracker

2. During an internal assessment, a penetration tester gains access to a hash dump containing NTLM password hashes from a compromised Windows system. To crack the passwords efficiently, the tester uses a high- performance CPU setup with Hashcat, attempting millions of password combinations per second. Which technique is being optimized in this scenario?

A) Exploit dictionary rules with appended symbols
B) Spoof NetBIOS to impersonate a file server
C) Leverage hardware acceleration for cracking speed
D) Dump SAM contents for offline password retrieval

3. An AWS security operations team receives an alert regarding abnormal outbound traffic from an EC2 instance. The instance begins transmitting encrypted data packets to an external domain that resolves to a Dropbox account not associated with the organization. Further analysis reveals that a malicious executable silently modified the Dropbox sync configuration to use the attacker ' s access token, allowing automatic synchronization of internal files to the attacker's cloud storage. What type of attack has likely occurred?

A) Cryptojacking using Coin Hive scripts
B) Side-channel attack exploiting CPU cache
C) Man-in-the-Cloud (MITC) attack
D) Cloud Snooper attack leveraging port masquerading

4. During a quarterly vulnerability management review at RedCore Motors, Priya finalizes the deployment of Nessus Essentials across the company ' s IT infrastructure. The solution is selected for its ability to support diverse technologies including operating systems, databases, web servers, and virtual environments. While preparing a training session for junior analysts, Priya asks them to identify a capability that Nessus Essentials is specifically designed to provide as part of its scanning process.
Which capability is Nessus Essentials specifically designed to provide?

A) Checks for outdated versions across a wide range of server and service technologies
B) Agent-based detection
C) High-speed asset discovery
D) Patch management for operating systems and third-party applications

5. In Miami, Florida, a luxury resort deploys smart climate control units in guest rooms. During a red team engagement, ethical hacker Sophia Bennett discovers that once a compromised device is restarted, it continues running altered instructions without any integrity check before the operating system loads. This allows tampered firmware to run as if it were legitimate. Which secure development practice would most directly prevent this weakness?

A) Utilize secure communication protocols
B) Allow code signing
C) Secure firmware or software updates
D) Ensure secure boot

Solutions: