ECCouncil 312-50v13日本語 Exam Overview:

Certification Vendor:	EC-Council
Exam Name:	Certified Ethical Hacker (CEH) Exam
Exam Number:	312-50v13
Real Exam Qty:	125
Exam Format:	Drag & Drop, Hands-on Performance Based, Multiple Choice
Exam Duration:	240 minutes
Exam Price:	USD 1,199
Related Certifications:	CEH (Master)
Available Languages:	English
Certificate Validity Period:	3 years
Passing Score:	70%
Sample Questions:	ECCouncil 312-50v13日本語 Sample Questions
Exam Way:	In-person at Pearson VUE testing centers or Online Proctored (OnVue)
Pre Condition:	Mandatory: 2 years of work experience in the domain OR completion of an EC-Council official training. For candidates without experience, an alternative is to take the CEH exam and submit an exam eligibility application with USD 100 fee.
Official Syllabus URL:	https://www.eccouncil.org/certifications/certified-ethical-hacker/

ECCouncil 312-50v13日本語 Exam Syllabus Topics:

Section	Weight	Objectives
Web Application Attacks	19%	- Web Application Concepts and Attacks 1. Web Application Countermeasures 2. Web Application Architecture 3. Injection Attacks 4. OWASP Top 10 Vulnerabilities 5. Cross-Site Scripting (XSS) and Request Forgery 6. Web Application Scanning and Testing Tools 7. Authentication and Session Management Attacks 8. Web Application Password Cracking and Clickjacking - Hacking Web Servers and Web Applications 1. Web Server Attack Methodology 2. Web Server and Web Application Countermeasures 3. Web Server Attacks
Cloud and Container Attacks	10%	- Cloud Computing Concepts 1. Cloud Architecture and Deployment Models 2. Container Technology 3. Cloud Service Models (IaaS, PaaS, SaaS) 4. Serverless Architecture - Cloud Attacks and Security 1. Cloud Security Tools and Best Practices 2. Container Security Tools and Countermeasures 3. Cloud Penetration Testing 4. Cloud Security Threats and Attacks
Cryptography and Post-Exploitation	13%	- Cryptography Concepts 1. Cryptography Countermeasures 2. Public Key Infrastructure (PKI) 3. Cryptography Tools 4. Encryption Fundamentals 5. Hashing and Digital Signatures 6. Encryption Algorithms (Symmetric and Asymmetric) 7. Code Signing and Email Encryption 8. Disk Encryption and Cryptanalysis - Post-Exploitation Techniques 1. Advanced Persistent Threat (APT) 2. Lateral Movement and Tunneling 3. Covering Tracks and Maintaining Access 4. Post-Exploitation Concepts 5. Reporting and Documentation
Mobile Platform and IoT Attacks	7%	- IoT and OT Attacks 1. OT Concepts and Attacks 2. IoT Vulnerabilities and Threats 3. IoT Concepts and Architecture 4. IoT Hacking Methodology 5. IoT Attack Tools and Countermeasures - Mobile Platform Attack Vectors 1. Mobile Malware and Mobile Spyware 2. Mobile Device Management (MDM) 3. Mobile Attack Techniques 4. Mobile Platform Overview 5. Mobile Security Tools and Countermeasures 6. Mobile Attack Surfaces and Vulnerabilities
System Hacking	17%	- System Hacking Tools and Countermeasures 1. Rootkits 2. Covering Tracks Countermeasures 3. Ports and Log Files 4. Steganography 5. Keyloggers and Spyware 6. Password Recovery Tools - System Hacking Methodologies 1. Covering Tracks 2. Gaining Access 3. Cracking Passwords 4. Hiding Files 5. Executing Applications 6. Escalating Privileges
Reconnaissance Techniques	21%	- Scanning Networks 1. Port Scanning Techniques 2. Scan for Vulnerabilities 3. Scanning Countermeasures 4. Proxy Servers and Anonymizers 5. Scanning Tools 6. Hping2 and Hping3 7. Nmap and Zenmap 8. Detecting Live Systems 9. Network Scanning Concepts 10. Masscan 11. NIDS, NIPS, and Firewall Evasion Techniques 12. Banner Grabbing 13. Drawing Network Diagrams - Footprinting and Reconnaissance 1. Footprinting through Search Engines 2. Footprinting through Web Services 3. Footprinting through Social Networking Sites 4. DNS Footprinting 5. Website Footprinting 6. AWS Cloud Footprinting 7. Email Footprinting 8. Footprinting Tools 9. Competitive Intelligence Gathering 10. Footprinting Countermeasures 11. Network Footprinting
Wireless Network Attacks	9%	- Wireless Network Concepts 1. Wireless Network Topology and Threats 2. Wireless Encryption and Security 3. Wireless Terminology and Standards - Wireless Hacking Methodology 1. Wireless Sniffing and Wardriving 2. Wireless Network Hacking Tools 3. Cracking WPA/WPA2 and WEP Encryption 4. Bluetooth and RFID Attacks 5. Wireless Network Countermeasures
Enumeration	15%	- Enumeration Concepts 1. Enumeration Techniques 2. Enumeration Fundamentals - Enumeration Process 1. RPC and NFS Enumeration 2. Enumeration Countermeasures 3. NTP Enumeration 4. VoIP Enumeration 5. LDAP Enumeration 6. SMB and SAMBA Enumeration 7. Mail Server Enumeration 8. SNMP Enumeration 9. NetBIOS Enumeration
Information Security and Ethical Hacking Overview	6%	- Information Security Overview 1. Understanding Information Security 2. Understanding Information Security Controls 3. Information Security Threats and Attack Vectors 4. Understanding Information Security Laws and Standards 5. Proactive Cyber Defense - Ethical Hacking Overview 1. Security Testing Methodologies 2. Need for Ethical Hackers 3. Skills and Mindset of an Ethical Hacker 4. What is Ethical Hacking? 5. Governance and Compliance
Malware Threats	8%	- Malware Analysis and Distribution 1. Malware Analysis Techniques 2. Malware Detection Methods 3. Malware Countermeasures - Malware and Its Types 1. APT and Futuristic Malware 2. Types of Malware 3. Malware Fundamentals 4. APT Concepts
Vulnerability Analysis	7%	- Vulnerability Assessment Concepts 1. Vulnerability Assessment Tools and Software 2. Vulnerability Assessment Solutions 3. Vulnerability Scoring Systems
Sniffing and Evasion	10%	- Network Evasion 1. Firewalls and Intrusion Detection/Prevention Systems 2. Evasion Techniques 3. IDS/Firewall Evasion Tools 4. Denial of Service Attacks - Network Sniffing 1. STP Attacks and DNS Poisoning 2. Sniffing Tools 3. MAC Flooding and Switch Port Stealing 4. Sniffing Concepts 5. VLAN Hopping and DHCP Starvation 6. ARP Spoofing 7. Sniffing Detection and Countermeasures - Social Engineering 1. Social Engineering Techniques 2. Social Engineering Tools and Countermeasures 3. Insider Threats and Identity Theft 4. Social Engineering Concepts

ECCouncil Certified Ethical Hacker Exam (CEHv13) (312-50v13日本語版) Sample Questions:

Question #1

アリゾナ州フェニックスの陽光あふれるテクノロジーのオアシスで、倫理的ハッカーのナディア・パテルは、数千人の学生にサービスを提供する米国拠点のeラーニングプラットフォーム、LearnSphereのセキュリティ体制を調査した。テスト中、ナディアは意図的にプラットフォームのコンテンツ配信システムに無効な入力を送信した。すると、アプリケーションは一般的なエラー通知を返す代わりに、データベースクエリ文字列やディレクトリパスを含む詳細なシステム情報で応答した。このような応答は、攻撃者にアプリケーションの内部動作に関する貴重な情報を提供し、より精密で破壊的な攻撃を仕掛けるために悪用される可能性がある。
どのような問題が指摘されているのでしょうか？

A. 詳細なエラーメッセージ
B. ディレクトリトラバーサル
C. 不適切なエラー処理
D. CORS設定ミス

Reveal Solution Discussion 0

Correct Answer: A 🗳️