CEH 312-50 Exam Prep: Understanding Farming and Social Engineering Techniques

CEH Exam Question Breakdown

• 🎯 Chris Hare and Troy McMillan discuss a practice question for the EC-Council Certified Ethical Hacker (CEH) exam, ID 312-50.
• 🔑 The question focuses on a computer-based social engineering technique that redirects web traffic to malicious websites via DNS poisoning.
• 🧠 The options presented were Farming, Spear Phishing, Whaling, and Spamming.

Analyzing Social Engineering Techniques

• 💡 Chris successfully identifies Spear Phishing (targeting specific individuals) and Whaling (targeting high-ranking officials) as incorrect based on the question's description.
• 🧩 Using morphological analysis, Chris breaks down the terms "Farming" (fishing + data farming) and "Spamming" (spamming + instant messaging).
• ✅ By process of elimination, Chris correctly identifies Farming as the technique that redirects web traffic through DNS poisoning.

Deep Dive into Farming and Related Attacks

• ⚡ Troy confirms Farming is the correct answer, explaining it involves redirecting users to fraudulent websites by attacking DNS servers or modifying host files.
• 🎣 Spear Phishing is defined as a targeted phishing attack, while Whaling specifically targets senior executives.
• 📱 Spamming is described as a fishing attack using text messages or instant messaging, often impersonating trusted entities like banks or support desks.

CEH Certification Impact and Value

• 🚀 The CEH certification is highlighted as a career game-changer, with 92% of employers preferring CEH graduates for ethical hacking roles.
• 📈 Professionals often receive promotions or transition into new jobs, with some starting their own ethical hacking or penetration testing businesses.
• 💼 The exam consists entirely of multiple-choice questions, making it accessible for candidates.

Essential Study Tip for CEH Candidates

• 🛠️ Troy recommends mastering the command-based tool Nmap (Network Mapper), including its various commands and switches.
• 🔍 Familiarity with Nmap is crucial as the CEH exam often includes questions about its specific functionalities for network reconnaissance.