English
中文English

312-50v13 Practice Exam — 312-50v13：CEH (Certified Ethical Hacker Version 13 )

1. The question bank is cloud‑connected and updates automatically; no manual re‑acquisition is required.

2. Start practicing right after activating the question bank. It supports simultaneous use on websites and mini‑programs, with one‑click bilingual switching for each question.

3. Functions include online practice, mock tests, note‑taking, wrong‑question recording, etc., valid for one year.

4. Recommended practice order: Turn on review mode to browse questions → Complete sequential practice → Take mock exams for pre‑test self‑assessment.

5. Activation codes can be purchased by clicking Buy Now on the right or via our official Tmall flagship store.

6. For inquiries, contact customer service through mini‑program, WeChat, WhatsApp or LINE.

Exam information

Exam Code: 312-50v13

Full Certification Name

Certified Ethical Hacker v13, abbreviated as CEH


Certification Overview

It is a globally mainstream entry-level white hat penetration testing certification. Training is delivered from an attacker’s perspective on vulnerability discovery, and it serves as a standard prerequisite qualification widely recognized by cybersecurity service vendors, enterprise government network security teams, and equal-level protection compliance projects.


Exam Language

Simplified Chinese, English, Japanese, Korean, and Spanish are supported.

Simplified Chinese exam papers can be selected directly when booking either offline Pearson VUE test centers or online RPS remote proctoring sessions. Official standardized translations are used for all cybersecurity terminology, and Chinese certificates carry the exact same validity as English counterparts.


Mandatory Eligibility Requirements (Two mutually exclusive paths; one must be satisfied to purchase an exam voucher)

Path 1: Zero prior experience / Recent graduates / Less than 2 years of full-time cybersecurity work experience

Complete the 40-hour official CEH v13 standard training program delivered by an EC-Council Authorized Training Center (ATC) and obtain a training completion certificate, which grants direct exam eligibility. The only age restriction is a minimum of 18 years old; no academic requirements apply.


Path 2: Training waiver for experienced industry practitioners

Hold a minimum of 2 years of full-time work experience in network security, IT operations, penetration testing, or information security roles.

Process: Log in to cert.eccouncil.org, submit employment verification documents and a resume for manual eligibility review. Once approved, candidates may skip the 40-hour training requirement and purchase an exam voucher directly.


Exam Specifications

- Question Format: 125 single-choice and multiple-choice questions, with a large volume of real-world enterprise attack and defense scenario case questions

- Exam Duration: 240 minutes

- Full Score / Passing Threshold: Full score of 1000 points; a minimum score of 700 points is required to pass

- Exam Delivery Modes:

 1. Physical offline Pearson VUE test centers

 2. EC-Council RPS online remote proctoring (taken at home)

- Score Release Rule: Final total score and pass/fail result are displayed immediately upon exam submission; an electronic transcript is synchronized to the candidate’s official EC-Council account instantly.


Certification Validity Period

3 years


19 Core Domains Tested in CEH v13 (New AI Attack & Defense content is a key focus of Version 13)

1. Footprinting and Intelligence Gathering

2. Network Scanning, Port and Service Enumeration

3. System Vulnerability Assessment and Risk Rating

4. Malware Fundamentals & Analysis (Ransomware, Trojans, Spyware)

5. Social Engineering Attack Vectors and Mitigations

6. Web Application Penetration Testing (OWASP Top 10)

7. Wireless Network and Bluetooth Device Attacks & Defenses

8. Mobile Application Vulnerability Discovery (Android / iOS)

9. IoT Device Exploitation

10. ICS/OT Industrial Control System Security and Industrial Ransomware Mitigation

11. Public Cloud (AWS/Azure/GCP), Docker & Kubernetes Container Attack Surface Analysis

12. API Security and Third-Party Component Vulnerabilities in Software Supply Chains

13. AI Hacking Tools, Deepfake Forgery, LLM Vulnerabilities, AI Phishing (core updated module in v13)

14. Credential Theft and Privilege Escalation Bypass Attacks

15. Database Penetration Testing

16. Encrypted Traffic Vulnerabilities and Traffic Hijacking

17. Zero Trust Architecture Attack & Defense Logic

18. Basic Red Team Operations and Standardized Penetration Testing Workflows

19. Penetration Testing Compliance and Legal Authorization Boundaries


Distinction Between Written Exam 312-50v13 and CEH Practical Exam

Full industry-recognized CEH qualification requires both the written exam and practical exam; holding only the written certificate grants theoretical credentials alone:

1. 312-50v13 (Written Exam): Multiple-choice questions only, covering theory, vulnerability fundamentals and procedural standards with no hands-on lab operations.

2. CEH Practical (Exam Code: 312-58): A 6-hour virtual offensive and defensive hands-on lab exam, requiring manual exploitation of vulnerabilities, local privilege escalation, and lateral movement tasks. Government defense contractors, equal-level protection auditors and enterprise internal security teams prioritize candidates holding both certificates.


Exam Registration Workflow

1. Meet the eligibility criteria (possess a training completion certificate or pass the work experience eligibility review)

2. Purchase the corresponding exam voucher via EC-Council official store: store.eccouncil.org

3. Exam Booking:

  - Offline Test Centers: Book local physical exam venues via the official Pearson VUE China website

  - At-Home Online Exam: Register an RPS remote proctoring account on eccexam.com to schedule your session

4. Your final score will be shown right after completing the exam on test day.


Recertification Rules

Recertification must be completed before the 3-year certificate expiry date; expired certificates require retaking exam 312-50v13 to reinstate validity.

- Continuing Education Unit (ECU) Credit Requirement: Accumulate 120 ECU credits within the 3-year validity window

- Credit Acquisition Channels: Official security training courses, industry cybersecurity summits, published technical security articles, or higher-tier EC-Council certifications (such as ECSA, LPT) which grant large bulk credit exemptions upon completion.

Sample questions

312-50v13 · Q1
Question #1 In this form of encryption algorithm, every individual block contains 64-bit data, and three keys are used, where each key consists of 56 bits. Which is this encryption algorithm?
  • A.
    IDEA
  • B.
    Triple Data Encryption Standard
  • C.
    AES
  • D.
    MD5 encryption algorithm

Answer: B

Option Analysis: A. Incorrect: IDEA is a 64-bit block cipher that uses a single 128-bit encryption key, not three separate 56-bit keys as described in the question. B. Correct: Triple Data Encryption Standard (3DES/TDEA) is a symmetric block cipher that operates on 64-bit data blocks and uses three independent 56-bit keys for encryption, matching the question specifications. C. Incorrect: AES is a symmetric block cipher that uses 128-bit data blocks and supports 128, 192, or 256-bit key sizes, so it does not match the 64-bit block and three 56-bit key criteria. D. Incorrect: MD5 is a cryptographic hash function, not an encryption algorithm, and produces 128-bit fixed hash outputs rather than encrypting 64-bit data blocks with keys. Key Concept: The core concept tested is distinguishing symmetric block ciphers by their block size and key parameters, specifically that Triple DES uses 64-bit data blocks and three 56-bit keys for its encryption process. References: NIST SP 800-67 Rev. 2: Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher, https://csrc.nist.gov/publications/detail/sp/800-67/rev-2/final EC-Council CEH v13 Exam Blueprint
312-50v13 · Q2
Question #2 John is investigating web-application firewall logs and observers that someone is attempting to inject the following: " target="_blank" rel="nofollow noopener">https://img.examtopics.com/312-50v13/image1.png"> What type of attack is this?
  • A.
    SQL injection
  • B.
    Buffer overflow
  • C.
    CSRF
  • D.
    XSS

Answer: B

Option Analysis: A. SQL injection is incorrect because this attack type injects structured query language syntax to manipulate backend databases, which does not match the observed payload targeting application memory. B. Buffer overflow is correct because this attack type sends oversized, malformed input to overwrite an application's allocated memory buffers to trigger memory corruption or arbitrary code execution, matching the payload observed in the WAF logs. C. CSRF is incorrect because this attack leverages an authenticated end user's existing session to force unintended actions on a web application, which is not the goal of the observed injected payload. D. XSS is incorrect because this attack injects malicious client-side scripts to execute in end users' web browsers, which is not the purpose of the observed injected payload. Key Concept: Buffer overflow is an application layer attack that exploits insufficient input validation to send input larger than the designated memory buffer, leading to unauthorized memory manipulation, which is a core attack vector covered in the EC-Council 312-50v13 (CEH v13) certification. References: OWASP Buffer Overflow Attack, https://owasp.org/www-community/attacks/Buffer_overflow_attack Microsoft Learn - Buffer Overflow Overview
312-50v13 · Q3
Question #3 John, a professional hacker, performs a network attack on a renowned organization and gains unauthorized access to the target network. He remains in the network without being detected for a long time and obtains sensitive information without sabotaging the organization.Which of the following attack techniques is used by John?
  • A.
    Insider threat
  • B.
    Diversion theft
  • C.
    Spear-phishing sites
  • D.
    Advanced persistent threat

Answer: D

Option Analysis: A. This option is incorrect because an insider threat refers to a current or former employee, contractor, or partner with legitimate internal access who misuses that access, not an external hacker gaining unauthorized entry to the network. B. This option is incorrect because diversion theft is a social engineering technique that tricks parties into diverting physical or digital assets to the attacker, not a long-term undetected network presence attack. C. This option is incorrect because spear-phishing sites are targeted fake web portals used to steal credentials as an initial access method, not the broader attack type described in the scenario. D. This option is correct because an advanced persistent threat (APT) is a sophisticated targeted attack where an adversary gains unauthorized network access, remains undetected for an extended period, and exfiltrates sensitive data without disrupting the target organization. Key Concept: The key concept tested is the definition of an advanced persistent threat (APT), a class of targeted cyberattacks defined by prolonged undetected adversary access to a target network and stealthy exfiltration of sensitive information without overt destructive activity. References: Cybersecurity and Infrastructure Security Agency (CISA) Advanced Persistent Threats Overview, EC-Council Certified Ethical Hacker (CEH) v13 Official Program Page, https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/ceh-v13/
312-50v13 · Q4
Question #4 You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?
  • A.
    nmap -A - Pn
  • B.
    nmap -sP -p-65535 -T5
  • C.
    nmap -sT -O -T0
  • D.
    nmap -A --host-timeout 99 -T1

Answer: C

Option Analysis: A. This option uses the aggressive (-A) scan mode which enables OS detection, version scanning, script scanning, and traceroute, generating high levels of easily detectable noise, so it is incorrect. B. This option scans all 65535 ports and uses the maximum-speed T5 timing template, which produces extremely high traffic volume and noise that is easily picked up by IDS, so it is incorrect. C. This option uses the slow T0 paranoid timing template that sends packets at very low frequency to avoid IDS threshold triggers, uses standard TCP connect (-sT) scans that appear as normal traffic, and scans only common default ports, resulting in the least noise for evasion, so it is correct. D. This option uses the noisy aggressive (-A) scan mode which includes multiple intrusive detection functions that produce detectable traffic even with the slower T1 timing template, so it is incorrect. Key Concept: Nmap IDS evasion is achieved by selecting low-numbered, slow timing templates (T0/T1) that reduce traffic frequency to avoid IDS alert thresholds, and avoiding aggressive scan modes that generate unusual, easily identifiable traffic patterns. References: Nmap Official Guide: Timing and Performance, https://nmap.org/book/man-performance.html Nmap Official Guide: IDS Evasion and Spoofing
312-50v13 · Q5
Question #5 This wireless security protocol allows 192-bit minimum-strength security protocols and cryptographic tools to protect sensitive data, such as GCMP-256, HMAC-SHA384, and ECDSA using a 384-bit elliptic curve.Which is this wireless security protocol?
  • A.
    WPA3-Personal
  • B.
    WPA3-Enterprise
  • C.
    WPA2-Enterprise
  • D.
    WPA2-Personal

Answer: B

Option Analysis: A. WPA3-Personal uses a 128-bit minimum security strength and does not support the 192-bit minimum requirement or the listed 384-bit/256-bit cryptographic suites, so this option is incorrect. B. WPA3-Enterprise includes a 192-bit minimum security mode that explicitly uses GCMP-256, HMAC-SHA384, and 384-bit ECDSA for high-sensitivity data protection, so this option is correct. C. WPA2-Enterprise relies on 128-bit AES-CCMP as its standard encryption and does not support the 192-bit minimum security or the specified newer cryptographic tools, so this option is incorrect. D. WPA2-Personal uses 128-bit AES with pre-shared keys and lacks both the 192-bit minimum security requirement and the listed high-strength cryptographic suites, so this option is incorrect. Key Concept: WPA3-Enterprise is the only listed wireless security protocol that provides a mandatory 192-bit minimum security mode with government-grade cryptographic algorithms for protecting highly sensitive wireless data transmissions. References: Wi-Fi Alliance WPA3 Overview, NIST SP 800-97 Rev 1: Guide to Securing Wireless Local Area Networks

FAQ

How many practice questions are available for 312-50v13?

This question bank includes 965 312-50v13 practice questions covering single and multiple choice, each with answers and explanations.

Are 312-50v13 practice questions available in Chinese and English?

Yes, 312-50v13 practice questions are provided in both Chinese and English.

Can I try 312-50v13 practice questions for free?

Yes. Free sample questions are available on this page, and the full question bank is available after signing up on Zhangxuetu.

Try practice questions Get the question bank

Related exams