ECCouncil 312-50v13日本語 Exam Overview:

Certification Vendor:	EC-Council
Exam Name:	Certified Ethical Hacker (CEH) Exam
Exam Number:	312-50v13
Related Certifications:	CEH (Master)
Exam Duration:	240 minutes
Passing Score:	70%
Real Exam Qty:	125
Available Languages:	English
Exam Format:	Hands-on Performance Based, Multiple Choice, Drag & Drop
Certificate Validity Period:	3 years
Exam Price:	USD 1,199
Sample Questions:	ECCouncil 312-50v13日本語 Sample Questions
Exam Way:	In-person at Pearson VUE testing centers or Online Proctored (OnVue)
Pre Condition:	Mandatory: 2 years of work experience in the domain OR completion of an EC-Council official training. For candidates without experience, an alternative is to take the CEH exam and submit an exam eligibility application with USD 100 fee.
Official Syllabus URL:	https://www.eccouncil.org/certifications/certified-ethical-hacker/

ECCouncil 312-50v13日本語 Exam Syllabus Topics:

Section	Weight	Objectives
Mobile Platform and IoT Attacks	7%	- Mobile Platform Attack Vectors 1. Mobile Platform Overview 2. Mobile Security Tools and Countermeasures 3. Mobile Device Management (MDM) 4. Mobile Malware and Mobile Spyware 5. Mobile Attack Techniques 6. Mobile Attack Surfaces and Vulnerabilities - IoT and OT Attacks 1. IoT Concepts and Architecture 2. IoT Vulnerabilities and Threats 3. IoT Attack Tools and Countermeasures 4. IoT Hacking Methodology 5. OT Concepts and Attacks
Enumeration	15%	- Enumeration Concepts 1. Enumeration Fundamentals 2. Enumeration Techniques - Enumeration Process 1. SMB and SAMBA Enumeration 2. VoIP Enumeration 3. Mail Server Enumeration 4. RPC and NFS Enumeration 5. SNMP Enumeration 6. NTP Enumeration 7. LDAP Enumeration 8. Enumeration Countermeasures 9. NetBIOS Enumeration
Vulnerability Analysis	7%	- Vulnerability Assessment Concepts 1. Vulnerability Assessment Tools and Software 2. Vulnerability Scoring Systems 3. Vulnerability Assessment Solutions
System Hacking	17%	- System Hacking Tools and Countermeasures 1. Covering Tracks Countermeasures 2. Keyloggers and Spyware 3. Steganography 4. Rootkits 5. Password Recovery Tools 6. Ports and Log Files - System Hacking Methodologies 1. Gaining Access 2. Cracking Passwords 3. Escalating Privileges 4. Hiding Files 5. Executing Applications 6. Covering Tracks
Wireless Network Attacks	9%	- Wireless Hacking Methodology 1. Bluetooth and RFID Attacks 2. Wireless Sniffing and Wardriving 3. Wireless Network Countermeasures 4. Wireless Network Hacking Tools 5. Cracking WPA/WPA2 and WEP Encryption - Wireless Network Concepts 1. Wireless Encryption and Security 2. Wireless Network Topology and Threats 3. Wireless Terminology and Standards
Sniffing and Evasion	10%	- Social Engineering 1. Social Engineering Techniques 2. Insider Threats and Identity Theft 3. Social Engineering Tools and Countermeasures 4. Social Engineering Concepts - Network Sniffing 1. VLAN Hopping and DHCP Starvation 2. STP Attacks and DNS Poisoning 3. Sniffing Detection and Countermeasures 4. Sniffing Tools 5. MAC Flooding and Switch Port Stealing 6. Sniffing Concepts 7. ARP Spoofing - Network Evasion 1. Evasion Techniques 2. Denial of Service Attacks 3. Firewalls and Intrusion Detection/Prevention Systems 4. IDS/Firewall Evasion Tools
Web Application Attacks	19%	- Hacking Web Servers and Web Applications 1. Web Server and Web Application Countermeasures 2. Web Server Attack Methodology 3. Web Server Attacks - Web Application Concepts and Attacks 1. Web Application Architecture 2. Injection Attacks 3. Web Application Password Cracking and Clickjacking 4. OWASP Top 10 Vulnerabilities 5. Authentication and Session Management Attacks 6. Cross-Site Scripting (XSS) and Request Forgery 7. Web Application Countermeasures 8. Web Application Scanning and Testing Tools
Cryptography and Post-Exploitation	13%	- Cryptography Concepts 1. Disk Encryption and Cryptanalysis 2. Cryptography Tools 3. Encryption Algorithms (Symmetric and Asymmetric) 4. Cryptography Countermeasures 5. Hashing and Digital Signatures 6. Code Signing and Email Encryption 7. Encryption Fundamentals 8. Public Key Infrastructure (PKI) - Post-Exploitation Techniques 1. Lateral Movement and Tunneling 2. Reporting and Documentation 3. Advanced Persistent Threat (APT) 4. Post-Exploitation Concepts 5. Covering Tracks and Maintaining Access
Information Security and Ethical Hacking Overview	6%	- Ethical Hacking Overview 1. What is Ethical Hacking? 2. Skills and Mindset of an Ethical Hacker 3. Need for Ethical Hackers 4. Security Testing Methodologies 5. Governance and Compliance - Information Security Overview 1. Information Security Threats and Attack Vectors 2. Proactive Cyber Defense 3. Understanding Information Security Controls 4. Understanding Information Security Laws and Standards 5. Understanding Information Security
Malware Threats	8%	- Malware Analysis and Distribution 1. Malware Analysis Techniques 2. Malware Detection Methods 3. Malware Countermeasures - Malware and Its Types 1. Types of Malware 2. Malware Fundamentals 3. APT Concepts 4. APT and Futuristic Malware
Reconnaissance Techniques	21%	- Scanning Networks 1. Drawing Network Diagrams 2. Masscan 3. Scan for Vulnerabilities 4. Port Scanning Techniques 5. Proxy Servers and Anonymizers 6. Network Scanning Concepts 7. Detecting Live Systems 8. Banner Grabbing 9. NIDS, NIPS, and Firewall Evasion Techniques 10. Scanning Tools 11. Nmap and Zenmap 12. Scanning Countermeasures 13. Hping2 and Hping3 - Footprinting and Reconnaissance 1. Footprinting Countermeasures 2. Footprinting through Search Engines 3. Network Footprinting 4. Footprinting through Social Networking Sites 5. Footprinting through Web Services 6. AWS Cloud Footprinting 7. Competitive Intelligence Gathering 8. Footprinting Tools 9. Email Footprinting 10. DNS Footprinting 11. Website Footprinting
Cloud and Container Attacks	10%	- Cloud Computing Concepts 1. Cloud Architecture and Deployment Models 2. Container Technology 3. Cloud Service Models (IaaS, PaaS, SaaS) 4. Serverless Architecture - Cloud Attacks and Security 1. Cloud Penetration Testing 2. Container Security Tools and Countermeasures 3. Cloud Security Tools and Best Practices 4. Cloud Security Threats and Attacks

ECCouncil Certified Ethical Hacker Exam (CEHv13) (312-50v13日本語版) Sample Questions:

Question #1

バージニア州アーリントンの高セキュリティ運用センターで、倫理的ハッカーのマーカス・リードは、防衛関連企業のレッドチーム演習の一環として、高度なマルウェアの挙動をシミュレーションしていた。サーバーへの初期侵入に成功した後、彼はペイロードがシステム上で既に稼働している正規のプロセスのみで実行される手法を発動させた。悪意のある機能は、従来のセキュリティツールで容易にスキャンまたは検出できるような新たな独立したコンポーネントを導入することなく、他のホストへと拡散し続けた。
この方法により、シミュレーションされた脅威は、通常のシステム動作を忠実に模倣しながら、活動状態を維持することが可能になった。
マーカスはどのようなファイルレス伝播技術を最も利用していた可能性が高いか？

A. 正規の申請
B. フィッシングメール
C. 横方向への移動による感染
D. メモリコードインジェクション

Reveal Solution Discussion 0

Correct Answer: D 🗳️