CEH v13 Practice Exam Simulator & Cybersecurity Quiz (2026)

During an authorized penetration test, you want to scan TCP ports without completing the 3-way handshake so the target application layer never logs a connection. Which Nmap flag do you use?

A firewall drops all ICMP Echo Requests, causing Nmap to exit early claiming the host is down. Which flag forces Nmap to treat the host as online and proceed with port scanning?

Which Google Dork operator restricts search results strictly to URLs containing a specific administrative path segment such as '/wp-admin'?

An attacker requests 'https://bank.example/login?user=admin'--' and bypasses password validation. Which defense completely neutralizes SQL injection at the database driver level?

Which HTTP response header prevents a web page from being embedded inside a malicious third-party <iframe> during a Clickjacking attack?

While analyzing an urgent wire-transfer email, you notice 'From: ceo@company.com' but 'Authentication-Results: spf=softfail; dkim=fail; dmarc=fail' and 'Reply-To: ceo.office@ExternalMail.ru'. What is this?

An attacker requests Kerberos TGS service tickets for accounts with SPNs and cracks them offline using Hashcat mode 13100. What is this MITRE ATT&CK technique called (T1558.003)?

Which Windows process memory does Mimikatz 'sekurlsa::logonpasswords' read to extract NTLM hashes and Kerberos tickets?

In a YARA malware signature rule, what does the condition 'uint16(0) == 0x5A4D' verify?

In a DNS-over-HTTPS (DoH) response JSON, which boolean flag confirms that the recursive resolver validated the DNSSEC cryptographic chain of trust?

How does HaveIBeenPwned's k-Anonymity API verify if a password is breached without learning the user's password?

Which password hashing algorithm won the Password Hashing Competition and resists GPU/ASIC cracking by requiring configurable memory hardness?