ECCouncil 312-50v13日本語 Exam Overview:

Certification Vendor:	EC-Council
Exam Name:	Certified Ethical Hacker (CEH) Exam
Exam Number:	312-50v13
Passing Score:	70%
Exam Price:	USD 1,199
Available Languages:	English
Real Exam Qty:	125
Exam Duration:	240 minutes
Exam Format:	Multiple Choice, Drag & Drop, Hands-on Performance Based
Related Certifications:	CEH (Master)
Certificate Validity Period:	3 years
Sample Questions:	ECCouncil 312-50v13日本語 Sample Questions
Exam Way:	In-person at Pearson VUE testing centers or Online Proctored (OnVue)
Pre Condition:	Mandatory: 2 years of work experience in the domain OR completion of an EC-Council official training. For candidates without experience, an alternative is to take the CEH exam and submit an exam eligibility application with USD 100 fee.
Official Syllabus URL:	https://www.eccouncil.org/certifications/certified-ethical-hacker/

ECCouncil 312-50v13日本語 Exam Syllabus Topics:

Section	Weight	Objectives
Vulnerability Analysis	7%	- Vulnerability Assessment Concepts 1. Vulnerability Assessment Solutions 2. Vulnerability Assessment Tools and Software 3. Vulnerability Scoring Systems
Reconnaissance Techniques	21%	- Scanning Networks 1. Hping2 and Hping3 2. Scan for Vulnerabilities 3. Masscan 4. Banner Grabbing 5. Nmap and Zenmap 6. Proxy Servers and Anonymizers 7. Port Scanning Techniques 8. Scanning Tools 9. Drawing Network Diagrams 10. NIDS, NIPS, and Firewall Evasion Techniques 11. Scanning Countermeasures 12. Network Scanning Concepts 13. Detecting Live Systems - Footprinting and Reconnaissance 1. Footprinting through Web Services 2. Email Footprinting 3. Footprinting Tools 4. Footprinting through Search Engines 5. Network Footprinting 6. Footprinting through Social Networking Sites 7. Competitive Intelligence Gathering 8. AWS Cloud Footprinting 9. Footprinting Countermeasures 10. DNS Footprinting 11. Website Footprinting
Sniffing and Evasion	10%	- Social Engineering 1. Insider Threats and Identity Theft 2. Social Engineering Techniques 3. Social Engineering Concepts 4. Social Engineering Tools and Countermeasures - Network Evasion 1. IDS/Firewall Evasion Tools 2. Evasion Techniques 3. Denial of Service Attacks 4. Firewalls and Intrusion Detection/Prevention Systems - Network Sniffing 1. Sniffing Concepts 2. STP Attacks and DNS Poisoning 3. ARP Spoofing 4. Sniffing Tools 5. Sniffing Detection and Countermeasures 6. MAC Flooding and Switch Port Stealing 7. VLAN Hopping and DHCP Starvation
Web Application Attacks	19%	- Web Application Concepts and Attacks 1. Injection Attacks 2. Web Application Password Cracking and Clickjacking 3. OWASP Top 10 Vulnerabilities 4. Web Application Scanning and Testing Tools 5. Web Application Architecture 6. Web Application Countermeasures 7. Authentication and Session Management Attacks 8. Cross-Site Scripting (XSS) and Request Forgery - Hacking Web Servers and Web Applications 1. Web Server Attacks 2. Web Server and Web Application Countermeasures 3. Web Server Attack Methodology
Cryptography and Post-Exploitation	13%	- Cryptography Concepts 1. Hashing and Digital Signatures 2. Encryption Algorithms (Symmetric and Asymmetric) 3. Public Key Infrastructure (PKI) 4. Encryption Fundamentals 5. Cryptography Countermeasures 6. Cryptography Tools 7. Disk Encryption and Cryptanalysis 8. Code Signing and Email Encryption - Post-Exploitation Techniques 1. Post-Exploitation Concepts 2. Covering Tracks and Maintaining Access 3. Reporting and Documentation 4. Advanced Persistent Threat (APT) 5. Lateral Movement and Tunneling
Information Security and Ethical Hacking Overview	6%	- Ethical Hacking Overview 1. Skills and Mindset of an Ethical Hacker 2. Governance and Compliance 3. Need for Ethical Hackers 4. Security Testing Methodologies 5. What is Ethical Hacking? - Information Security Overview 1. Proactive Cyber Defense 2. Understanding Information Security Controls 3. Information Security Threats and Attack Vectors 4. Understanding Information Security Laws and Standards 5. Understanding Information Security
Mobile Platform and IoT Attacks	7%	- Mobile Platform Attack Vectors 1. Mobile Security Tools and Countermeasures 2. Mobile Malware and Mobile Spyware 3. Mobile Attack Techniques 4. Mobile Platform Overview 5. Mobile Attack Surfaces and Vulnerabilities 6. Mobile Device Management (MDM) - IoT and OT Attacks 1. IoT Vulnerabilities and Threats 2. OT Concepts and Attacks 3. IoT Concepts and Architecture 4. IoT Attack Tools and Countermeasures 5. IoT Hacking Methodology
Cloud and Container Attacks	10%	- Cloud Computing Concepts 1. Serverless Architecture 2. Cloud Service Models (IaaS, PaaS, SaaS) 3. Container Technology 4. Cloud Architecture and Deployment Models - Cloud Attacks and Security 1. Cloud Security Threats and Attacks 2. Cloud Security Tools and Best Practices 3. Cloud Penetration Testing 4. Container Security Tools and Countermeasures
Malware Threats	8%	- Malware and Its Types 1. Malware Fundamentals 2. APT Concepts 3. Types of Malware 4. APT and Futuristic Malware - Malware Analysis and Distribution 1. Malware Analysis Techniques 2. Malware Countermeasures 3. Malware Detection Methods
System Hacking	17%	- System Hacking Tools and Countermeasures 1. Ports and Log Files 2. Steganography 3. Password Recovery Tools 4. Rootkits 5. Covering Tracks Countermeasures 6. Keyloggers and Spyware - System Hacking Methodologies 1. Gaining Access 2. Cracking Passwords 3. Covering Tracks 4. Hiding Files 5. Escalating Privileges 6. Executing Applications
Wireless Network Attacks	9%	- Wireless Hacking Methodology 1. Wireless Sniffing and Wardriving 2. Cracking WPA/WPA2 and WEP Encryption 3. Wireless Network Hacking Tools 4. Bluetooth and RFID Attacks 5. Wireless Network Countermeasures - Wireless Network Concepts 1. Wireless Network Topology and Threats 2. Wireless Encryption and Security 3. Wireless Terminology and Standards
Enumeration	15%	- Enumeration Concepts 1. Enumeration Techniques 2. Enumeration Fundamentals - Enumeration Process 1. NetBIOS Enumeration 2. NTP Enumeration 3. SNMP Enumeration 4. VoIP Enumeration 5. Enumeration Countermeasures 6. SMB and SAMBA Enumeration 7. RPC and NFS Enumeration 8. Mail Server Enumeration 9. LDAP Enumeration

ECCouncil Certified Ethical Hacker Exam (CEHv13) (312-50v13日本語版) Sample Questions:

Question #1

ニューヨークのメディア企業に対する攻撃のフォレンジック調査において、アナリストは、攻撃者が正規の場所よりも先にWindowsが検索するディレクトリに不正なファイルを配置したため、本来のライブラリではなく、非特権プロセスが悪意のあるライブラリをロードしたことを発見した。信頼できるアプリケーションが起動すると、攻撃者のコードはアプリケーションの権限で実行された。レジストリの変更やカーネルの脆弱性の悪用はなかった。どの手法が権限昇格を可能にした可能性が最も高いか？

A. 脆弱性を悪用した権限昇格
B. アクセストークンの操作
C. ユーザーアカウント制御をバイパスした権限昇格
D. DLLハイジャックを利用した権限昇格

Reveal Solution Discussion 0

Correct Answer: D 🗳️