312-50v13試験無料問題集「ECCouncil Certified Ethical Hacker Exam (CEH v13 AI) 認定」
In Miami, Florida, cybersecurity analyst Laura Bennett is responding to a series of unauthorized access attempts targeting Sunshine Credit Union's online banking platform. She observes unusual network activity that suggests attackers may be intercepting session IDs transmitted over unsecured connections to hijack active user sessions. To prevent further compromise, Laura works with the network team to apply a control that secures session-related communications throughout the entire portal, ensuring sensitive tokens are no longer exposed to interception during user interactions.
What countermeasure should Laura implement to prevent session hijacking in this scenario?
What countermeasure should Laura implement to prevent session hijacking in this scenario?
正解：D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
During a controlled malware detonation test at a financial institution in New York City, ethical hacker Elena Vasquez executes a suspicious sample in a sandbox environment to observe its runtime effects on system behavior.
To identify persistence mechanisms, she compares system snapshots taken before and after execution, focusing on newly introduced entries that trigger additional components during normal system initialization.
This monitoring reveals unauthorized additions that ensure the malware reloads after system restarts, allowing her to determine how the threat maintains long-term persistence without immediate detection.
What type of host integrity monitoring is primarily being used in this analysis?
To identify persistence mechanisms, she compares system snapshots taken before and after execution, focusing on newly introduced entries that trigger additional components during normal system initialization.
This monitoring reveals unauthorized additions that ensure the malware reloads after system restarts, allowing her to determine how the threat maintains long-term persistence without immediate detection.
What type of host integrity monitoring is primarily being used in this analysis?
正解：A
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
On a misty winter morning in Cape Town, South Africa, certified ethical hacker Nadia Verma was conducting an authorized red-team assessment for Harbor Retail Group, a major e-commerce platform. While testing the product-search endpoint, she first captured several normal responses and fed the observed parameter behavior and sample output into an AI assistant. She then requested payload suggestions that could retrieve additional data from other database structures within the same response. Some earlier tests produced responses that were consistently delayed by several seconds and occasionally displayed brief database error messages before the page rendered normally.
After testing one of the AI-suggested inputs on the search parameter using the command:
sqlmap -u " https://harborretail.com/search?product=1 " --technique=U --batch the application returned the expected product list along with extra rows containing sensitive customer order details that were never part of the original search logic. The tester continued refining the prompts based on the results to improve the injected data retrieval.
What SQL injection detection technique is being demonstrated in this scenario?
After testing one of the AI-suggested inputs on the search parameter using the command:
sqlmap -u " https://harborretail.com/search?product=1 " --technique=U --batch the application returned the expected product list along with extra rows containing sensitive customer order details that were never part of the original search logic. The tester continued refining the prompts based on the results to improve the injected data retrieval.
What SQL injection detection technique is being demonstrated in this scenario?
正解：B
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
As a Certified Ethical Hacker assessing session management vulnerabilities in a secure web application using MFA, encrypted cookies, and a WAF, which technique would most effectively exploit a session management weakness while bypassing these defenses?
正解：D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
At a financial headquarters in Denver, Colorado, ethical hacker Jordan Lee moves beyond cataloging IoT devices and begins testing them for weaknesses. He runs specialized tools against smart lighting and HVAC systems to check for outdated firmware, default passwords, and open service ports. Which step of the IoT hacking methodology is Jordan carrying out?
正解：D
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
In the bustling tech hub of Silicon Valley, cybersecurity investigator Elena Martinez found herself deep into a late-night investigation at Horizon Tech Solutions on July 7, 2025. The company had reported sporadic network disruptions affecting their research team ' s access to critical project files. Elena, working under the cover of a maintenance window from midnight to 3 AM PDT, began monitoring the internal network, focusing on a subnet reserved for the R & D department. She noticed a pattern of failed connection attempts logged just before each disruption, with multiple hosts reporting temporary IP address conflicts. Suspecting foul play, Elena deployed a discreet test to simulate an internal threat scenario. Shortly afterward, several workstations began showing unfamiliar gateway settings and redirected users to misleading login portals during routine access attempts. Despite these anomalies, no security alerts were triggered.
What type of attack technique did Elena most likely simulate?
What type of attack technique did Elena most likely simulate?
正解：C
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
In downtown Chicago, Illinois, security analyst Mia Torres investigates a breach at Windy City Enterprises, a logistics firm running an Apache HTTP Server. The attacker exploited a known vulnerability in an outdated version, gaining unauthorized access to customer shipment data. Mia's analysis reveals the server lacked recent security updates, leaving it susceptible to remote code execution. Determined to prevent future incidents, Mia recommends a strategy to the IT team to address this exposure.
Which approach should Mia recommend to secure Windy City Enterprises ' Apache HTTP Server against such vulnerabilities?
Which approach should Mia recommend to secure Windy City Enterprises ' Apache HTTP Server against such vulnerabilities?
正解：C
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
A healthcare organization in Seattle detects unusual activity on an endpoint after a phishing campaign. During the investigation, analysts discover that a Microsoft Word document automatically launched a PowerShell script upon opening, which then initiated remote command execution without the user ' s knowledge.
The security team determines that identifying this abnormal execution pattern is more effective than relying solely on known malicious IP addresses or file hashes.
What category of Indicators of Compromise (IOCs) best represents the evidence identified in this investigation?
The security team determines that identifying this abnormal execution pattern is more effective than relying solely on known malicious IP addresses or file hashes.
What category of Indicators of Compromise (IOCs) best represents the evidence identified in this investigation?
正解：C
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)