Online Access Free 312-50v13 Exam Questions
| Exam Code: | 312-50v13 |
| Exam Name: | Certified Ethical Hacker Exam (CEH v13 AI) |
| Certification Provider: | ECCouncil |
| Free Question Number: | 925 |
| Posted: | Oct 19, 2026 |
While observing operations at an automated container-handling system in Antwerp, Belgium, industrial security tester Viktor Petrov monitored wireless signals exchanged between a handheld RF controller and a heavy-duty crane. Using a software-defined radio, he captured multiple command transmissions during normal lifting and positioning operations. After analyzing the captured data offline, he identified patterns in how different control actions were encoded within the RF packets.
He then constructed modified transmissions by altering specific portions of the previously captured signals to represent new operational behaviors that were never originally issued by the operator. When these crafted signals were transmitted, the crane executed entirely different movements than those previously observed.
During testing, Viktor also experimented with pairing sequences and briefly examined firmware-update interfaces, but the successful control of the crane was achieved solely through manipulation of the wireless command structure.
From the available options, determine the attack technique demonstrated in this scenario.
A subscription-based analytics platform in Portland, Oregon provides enterprise clients with API access to project dashboards. Each dashboard is associated with a unique identifier included in client-side API requests when retrieving project data.
While evaluating access controls, a security analyst signs in using a standard user account and captures a legitimate API request used to retrieve a specific project dashboard. By altering only the identifier value within the request and replaying it through the same authenticated session, the analyst receives data belonging to a different client organization.
The session remains valid, and no elevated privileges are granted. The behavior indicates that access validation does not adequately verify whether the requesting user is authorized to access the referenced resource.
Identify the OWASP API security risk illustrated in this scenario.
At a fast-growing startup in Austin, Texas, an ethical hacker is asked to simulate how attackers might gather information to gain initial access. During the assessment, she poses as a recruiter on a professional networking site and convinces several employees to share details about the company's internal software and VPN setup.
Which type of threat best represents this adversary's method of information gathering?
An authorized security assessment is performed on a public-sector services portal in Madison, Wisconsin.
After authenticating with a controlled test account, the assessor captures the authentication identifier issued by the application.
Under controlled lab conditions, she attempts to reuse the captured identifier from a separate machine connected through a different encrypted channel. Although the identifier remains valid and within its lifetime, the application rejects the request when presented from the alternate environment.
Analysis indicates that the server evaluates characteristics associated with the original secure exchange before allowing continued use of the issued identifier.
Which defensive mechanism most likely explains this behavior?
During a red-team exercise for a healthcare network in Boston, Massachusetts, penetration tester Jordan deploys a covert data-capture mechanism on a target endpoint. The mechanism is embedded as a modified system component that operates at the core processing level, intercepting input signals directly through driver- level overrides without relying on user-space applications.
Further review indicates that the mechanism remains hidden from standard detection utilities and stores captured keystroke sequences in a concealed file for later retrieval.
Based on the described deployment, identify the type of keystroke logger being simulated.