Free 312-50v13: Certified Ethical Hacker v13 Exam Questions and Answers
Replaces 312-50v12: Certified Ethical Hacker v12 Exam. Questions from the earlier version are also in this bank.
Certified Ethical Hacker v13 is exam 312-50v13, part of EC-Council certification. EC-Council codes run three digits, a hyphen and two more, where the prefix marks the family — 212 for technician level, 312 for the main practitioner range including CEH, 712 for the executive CCISO — and the version is appended to the code rather than changing it. Formats differ sharply: some are four-hour multiple-choice papers, while CPENT is a 24-hour hands-on exam with a written report due within seven days.
If you searched for 312-50v13 dumps, a 312-50v13 ExamTopics discussion or a free 312-50v13 PDF, this is the 312-50v13: Certified Ethical Hacker v13 question bank: practice questions with verified answers and explanations, a timed 312-50v13 practice test and updates whenever ECCouncil changes the exam.
Last updated: October 11, 2026
- Exam code
- 312-50v13
- Provider
- ECCouncil
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Our test mode duration & pass mark
- 130 mins · 70%
- Verified answers
- Reviewed weekly
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
A zone file consists of which of the following Resource Records (RRs)?
Correct answer: D
Explanation
Zone files hold SOA, NS, A and MX records. AXFR is a zone transfer type rather than a resource record.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #2
“........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hot-spot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there.” Fill in the blank with appropriate choice.
Correct answer: A
Explanation
https://en.wikipedia.org/wiki/Evil_twin_(wireless_networks) An evil twin attack is a hack attack in which a hacker sets up a fake Wi-Fi network that looks like a legitimate access point to steal victims' sensitive details. Most often, the victims of such attacks are ordinary people like you and me. The attack can be performed as a man-in-the-middle (MITM) attack. The fake Wi-Fi access point is used to eavesdrop on users and steal their login credentials or other sensitive information. Because the hacker owns the equipment being used, the victim will have no idea that the hacker might be intercepting things like bank transactions. An evil twin access point can also be used in a phishing scam. In this type of attack, victims will connect to the evil twin and will be lured to a phishing site. It will prompt them to enter their sensitive data, such as their login details. These, of course, will be sent straight to the hacker. Once the hacker gets them, they might simply disconnect the victim and show that the server is temporarily unavailable. ADDITION: It may not seem obvious what happened. The problem is in the question statement. The attackers were not Alice and John, who were able
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #3
Which Intrusion Detection System is the best applicable for large environments where critical assets on the network need extra scrutiny and is ideal for observing sensitive network segments?
Correct answer: C
Explanation
A network-based IDS monitors whole network segments, giving the broad visibility needed in large environments where critical assets require extra scrutiny. HIDS only covers individual hosts.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #4
A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the corporate network. What tool should the analyst use to perform a Blackjacking attack?
Correct answer: B
Explanation
Blackjacking uses BBProxy, a BlackBerry proxy tool that tunnels traffic through the handheld device and bypasses perimeter firewalls and IPS to reach the internal network.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #5
During a black-box pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?
Correct answer: C
Explanation
Only an application-layer (proxy) firewall inspects payload content, so it can tell IRC traffic from genuine HTTP on port 80 and block it while allowing web traffic through.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #6
Which of the following is not a Bluetooth attack?
Correct answer: A
Explanation
https://github.com/verovaleros/bluedriving Bluedriving is a bluetooth wardriving utility. It can capture bluetooth devices, lookup their services, get GPS information and present everything in a nice web page. It can search for and show a lot of information about the device, the GPS address and the historic location of devices on a map. The main motivation of this tool is to research about the targeted surveillance of people by means of its cellular phone or car. With this tool you can capture information about bluetooth devices and show, on a map, the points where you have seen the same device in the past.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #7
Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?
Correct answer: B
Explanation
A stealth, or tunnelling, virus intercepts and alters the service-call interrupts used by anti-virus programs so its activity stays hidden. Polymorphic, cavity and macro viruses conceal themselves differently.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #8
What is the proper response for a NULL scan if the port is closed?
Correct answer: E
Explanation
RFC 793 requires a closed port to answer a segment that is not itself an RST with RST, so a NULL scan to a closed port yields RST. This inverted behaviour, RST from closed ports and silence from open ones, is how the scan finds listening ports.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #9
An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to "www.MyPersonalBank.com", the user is directed to a phishing site. Which file does the attacker need to modify?
Correct answer: D
Explanation
The hosts file resolves hostnames locally, so editing it redirects the banking URL to the attacker's phishing server.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #10
Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?
Correct answer: C
Explanation
https://en.wikipedia.org/wiki/Network_Time_Protocol The Network Time Protocol (NTP) is a networking protocol for clock synchronization between computer systems over packet-switched, variable-latency data networks. NTP is intended to synchronize all participating computers within a few milliseconds of Coordinated Universal Time (UTC). It uses the intersection algorithm, a modified version of Marzullo's algorithm, to select accurate time servers and is designed to mitigate variable network latency effects. NTP can usually maintain time to within tens of milliseconds over the public Internet and achieve better than one millisecond accuracy in local area networks. Asymmetric routes and network congestion can cause errors of 100 ms or more. The protocol is usually described in terms of a client-server model but can easily be used in peer-to-peer relationships where both peers consider the other to be a potential time source. Implementations send and receive timestamps using the User Datagram Protocol (UDP) on port number 123.
Continue with 312-50v13: Certified Ethical Hacker v13
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 312-50v13: Certified Ethical Hacker v13, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Discussion
Explain your reasoning, not just the letterOther ECCouncil certifications
- 312-49v10: Computer Hacking Forensic Investigator (opens in a new tab)
- 312-50v11: Certified Ethical Hacker v11 Exam (opens in a new tab)
- 312-50v12: Certified Ethical Hacker v12 Exam (opens in a new tab)
- 712-50: EC-Council Certified CISO (opens in a new tab)
- 312-50: CEH Certified Ethical Hacker (312-50v9) (opens in a new tab)
- 212-89: EC-Council Certified Incident Handler (opens in a new tab)
- 312-39: Certified SOC Analyst (opens in a new tab)
- 312-49v9: ECCouncil Computer Hacking Forensic Investigator (V9) (opens in a new tab)
- 312-38: Certified Network Defender (opens in a new tab)
- 312-85: Certified Threat Intelligence Analyst (opens in a new tab)
- 412-79v8: EC-Council Certified Security Analyst (opens in a new tab)
- 212-82: Certified Cybersecurity Technician (opens in a new tab)
Reviews
Write a review★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit SharmaVerified buyer
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar NyströmVerified buyer
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah SmithVerified buyer
FAQ
Learn More: https://cert.eccouncil.org/
- Q1: How many questions are on the CEH v13 exam and how long is it?
- A: The real knowledge exam (312-50) has 125 multiple-choice questions and a four-hour time limit, and it is not open book. The separate, optional CEH Practical exam is six hours with 20 hands-on challenges, and passing both earns CEH Master.
- Q2: What is the passing score for the CEH exam?
- A: EC-Council does not use a single fixed pass mark. Each exam form is rated by subject matter experts, so the cut score ranges from 60% to 85% depending on which form you receive.
- Q3: How much does the CEH exam cost?
- A: As of October 2026 the EC-Council store lists the CEH exam voucher at US$1,199 for a Pearson VUE test centre and US$950 for the remote-proctored (RPS) option; both vouchers are valid for one year. Self-study candidates also pay a non-refundable US$100 eligibility application fee, and an RPS retake voucher is US$500.
- Q4: What are the eligibility requirements for the CEH exam?
- A: You must either complete official EC-Council CEH training, or document at least two years of information security work experience and pay the US$100 application fee. Holders of older CEH versions have the application fee waived, and application approval is valid for three months.
- Q5: Where can you take the CEH exam?
- A: The exam is delivered at Pearson VUE testing centres, through the ECC Exam Centre, or online via EC-Council's Remote Proctoring Service, which must be booked at least three days in advance.
- Q6: How long is CEH valid and how do you maintain it?
- A: CEH is valid for three years. To keep it you must earn 120 EC-Council Continuing Education (ECE) credits within the three-year cycle and pay an annual continuing education fee of US$80.
- Q7: What is the CEH retake policy?
- A: There is no waiting period for a first retake, but from the third attempt onward you must wait 14 days between attempts. You may not exceed five attempts in any 12-month period, after which a 12-month wait applies before a sixth attempt.
- Q8: Is CEH v13 the current version?
- A: Yes. As of October 2026 EC-Council markets CEH v13 (branded CEH AI), built on 20 learning modules covering more than 550 attack techniques, and the knowledge exam remains 312-50.
- Q9: What is the 312-50v13: Certified Ethical Hacker v13 exam?
- A: 312-50v13: Certified Ethical Hacker v13 is a ECCouncil certification exam. Judging by the questions in our bank, it concentrates on vlady, wireless, attacker, attack and accountant.
- Q10: What topics does the 312-50v13: Certified Ethical Hacker v13 exam cover?
- A: Questions in our 312-50v13: Certified Ethical Hacker v13 bank cluster around vlady, wireless, attacker, attack, accountant, nmap, zone and delete. Working through the full set is the quickest way to find which of these you are weakest on.
- Q11: How should I prepare for 312-50v13: Certified Ethical Hacker v13?
- A: Work through the 312-50v13: Certified Ethical Hacker v13 practice questions here, checking your answer on each one, then sit the practice test to rehearse the exam under timed conditions before the real thing.
- Q12: Are these real 312-50v13: Certified Ethical Hacker v13 exam questions?
- A: They are drawn from officially released past questions and from community members who have sat 312-50v13: Certified Ethical Hacker v13. Answers are verified and updated weekly.
- Q13: Where do I register for the 312-50v13: Certified Ethical Hacker v13 exam?
- A: Register through ECCouncil directly. Exampractice is not affiliated with ECCouncil and does not administer the exam.
- Q14: Is there a free 312-50v13: Certified Ethical Hacker v13 sample?
- A: Yes. Every 312-50v13: Certified Ethical Hacker v13 page shows a free sample of real questions. Upgrading opens the full bank and the practice test.
- Q15: What are EC-Council Certification Exams?
- A: EC-Council Certification Exams validate your expertise in various aspects of cybersecurity, including ethical hacking, network security, and forensic investigation. These certifications demonstrate your proficiency in identifying, preventing, and mitigating cyber threats.
- Q16: Why should I pursue EC-Council Certification?
- A: EC-Council Certification enhances your professional credibility, showcasing your skills and knowledge in cybersecurity. This can lead to better job opportunities, higher salaries, and career advancement in the IT and cybersecurity industries.
- Q17: What are the benefits of EC-Council Certification?
- A: Benefits include recognition as a certified cybersecurity professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest cybersecurity trends and best practices.
- Q18: Who should take EC-Council Certification Exams?
- A: IT professionals, security analysts, ethical hackers, network administrators, and anyone involved in protecting and securing information systems should consider these certifications to validate their expertise and advance their careers.
- Q19: What types of EC-Council Certification Exams are available?
- A: EC-Council offers various certification paths, including:
- Q20: How do I prepare for EC-Council Certification Exams?
- A: Preparation can include official EC-Council training courses, study guides, practice exams, online tutorials, and hands-on experience in cybersecurity practices.
- Q21: Where can I take EC-Council Certification Exams?
- A: EC-Council Certification Exams can be taken at authorized Pearson VUE testing centers worldwide or online, providing flexibility to fit your schedule and location.
- Q22: How do EC-Council Certifications impact my career?
- A: EC-Council Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in cybersecurity and IT.
- Q23: Are there any prerequisites for EC-Council Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior certifications. Check the specific requirements for each certification path on the EC-Council website.
- Q24: How often do I need to recertify for EC-Council Certifications?
- A: EC-Council Certifications typically require recertification every three years to ensure that certified professionals stay updated with the latest cybersecurity technologies and industry practices.



