ECCouncil Certified Ethical Hacker Exam (CEHv13) Sample Questions:

1. Attackers abused Android Debug Bridge (ADB) to issue unauthorized commands. What is the strongest countermeasure?

A) Disable ADB except in strictly controlled environments
B) Adopt biometric authentication
C) Enforce VPN usage
D) Frequently update MDM systems

2. A city's power management system relies on SCADA infrastructure. Recent anomalies include inconsistent sensor readings and intermittent outages. Security analysts suspect a side-channel attack designed to extract sensitive information covertly from SCADA devices. Which investigative technique would best confirm this type of attack?

A) Assessing SCADA user interfaces for unauthorized access or misuse.
B) Identifying weak cryptographic configurations in device communications.
C) Measuring unusual physical or electrical fluctuations during device operation at the hardware level.

3. A penetration tester evaluates a secure web application using HTTPS, secure cookies, and multi-factor authentication. To hijack a legitimate user's session without triggering alerts, which technique should be used?

A) Implement a man-in-the-middle attack by compromising a trusted network device
B) Perform a Cross-Site Request Forgery (CSRF) attack to manipulate session tokens
C) Exploit a browser zero-day vulnerability to inject malicious scripts
D) Utilize a session token replay attack by capturing encrypted tokens

4. During a red team engagement for a client in the financial sector, ethical hacker Tyler Brooks conducts a phishing campaign using a crafted internal web page disguised as a company VPN login. After several users enter their credentials, Tyler confirms that the payload successfully recorded input without triggering antivirus or requiring local installation privileges. The captured keystrokes came exclusively from a web-based form embedded in the fake login page.
Based on the technique used, which type of keylogger did Tyler most likely deploy?

A) Application Keylogger
B) Hypervisor-based Keylogger
C) Keylogger Keyboard
D) JavaScript-based Keylogger

5. During a penetration test at Rocky Mountain Insurance in Denver, ethical hacker Sophia Nguyen attempts to evade detection by fragmenting malicious traffic into smaller packets. The IT security team counters her strategy with a system that monitors traffic for deviations from established baselines, flagging behavior that does not match normal network activity. This allows them to stop Sophia's evasion attempts in real time.
Which detection technique is the IT team most likely using in this case?

A) Anomaly-Based Detection
B) Stateful Packet Inspection
C) Signature-Based Detection
D) Deep Packet Inspection

Solutions: