ECCouncil 312-50v13 問題集 : Certified Ethical Hacker Exam (CEH v13 AI)

In the humid afternoon haze of Singapore, certified ethical hacker Priya Rao was performing an authorized red-team assessment for Meridian Analytics, a high-volume financial analytics platform. While testing the archived transaction search feature, she submitted input that appeared as a normal keyword string but contained alternate character representations that differed from typical input patterns. The application processed the request without errors and returned an expanded result set far beyond the intended filtering criteria.
Subsequent analysis confirmed that the backend database had interpreted these alternate representations as valid query instructions, allowing the request to bypass input-filtering mechanisms that normally blocked direct keyword usage. The visible behavior of the application remained consistent, but the underlying query logic had been successfully altered without triggering any defensive controls.
What type of SQL injection technique is being demonstrated in this scenario?

• A. Performing Heavy Query-Based Blind SQL Injection
• B. Executing Out-of-Band SQL Injection via database-initiated HTTP requests
• C. Applying Hex Encoding Evasion to obfuscate SQL keywords
• D. Using HTTP Parameter Fragmentation to bypass firewall filtering

While assessing a web server, a tester sends malformed HTTP requests and compares responses to identify the server type and version. What technique is being employed?

• A. Sending phishing emails to extract web server login credentials
• B. Conducting session fixation using malformed cookie headers
• C. Fingerprinting server identity using banner-grabbing techniques
• D. Injecting scripts into headers for persistent XSS attacks

At HarborGrid Utilities in Oregon, a security assessment team is reviewing how the organization's network monitoring platform evaluates inbound traffic targeting its SCADA management interface. During testing, the red team introduces carefully crafted packets that adhere to known protocol standards but contain payload sequences previously identified in documented exploit repositories.
The monitoring system immediately flags the activity because it matches patterns stored in its internal threat database. However, when the team slightly modifies the exploit sequence while preserving its overall malicious intent, the alerts are no longer triggered.
Based on this behavior, which intrusion detection method is most likely deployed in this environment?

• A. Signature Recognition
• B. Protocol Anomaly Detection
• C. Anomaly Detection
• D. Stateful Protocol Analysis

During a security audit, a penetration tester observes abnormal redirection of all traffic for a financial institution's primary domain. Users are being redirected to a phishing clone of the website. Investigation shows the authoritative DNS server was compromised and its zone records modified to point to the attacker's server. This demonstrates total manipulation of domain-level resolution, not cache poisoning or client-side attacks. Which technique is being used in this scenario?

• A. Perform DNS rebinding to manipulate browser-origin interactions
• B. Initiate a DNS amplification attack using recursive servers
• C. Carry out DNS server hijacking by tampering with the legitimate name-resolution infrastructure
• D. Establish covert communication using DNS tunneling over standard DNS queries

A corporation migrates to a public cloud service, and the security team identifies a critical vulnerability in the cloud provider's API. What is the most likely threat arising from this flaw?

• A. Distributed Denial-of-Service (DDoS) attacks on cloud servers
• B. Physical security compromise of data centers
• C. Compromise of encrypted data at rest
• D. Unauthorized access to cloud resources