Chapter 1 of 9 · EC-Council 312-50
Information Security and Ethical Hacking
Core security terms, hacker types, frameworks, controls and the laws behind them.
- 3topics
- 14 minfast track
- 1diagrams and exhibits
- 6%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Security and Hacking ConceptsLearn the CEH basics: the five elements of information security, key hacking terms, hacker classes, hacking phases and what an…5 min
- 2Hacking Methodologies and FrameworksLearn the Cyber Kill Chain, MITRE ATT&CK tactics, the Diamond Model, TTPs, indicators of compromise and the CEH hacking…Diagram5 min
- 3Controls, Laws and StandardsReview defense in depth, risk management, incident handling, access control types and the laws and standards CEH tests: PCI DSS…4 min
About this chapter
What this chapter covers
This chapter is 6% of the EC-Council CEH v13 312-50 exam. It sets the vocabulary and the mental models for the rest of the course: what information security protects, how attackers are classified, how attacks are structured, and which controls and laws shape the work of an ethical hacker.
Questions are single-answer multiple choice. They usually describe a situation and ask you to recognize the term, the framework stage or the control that fits.
It has six outline topics, grouped into three pages.
How the topics fit together
The pages start with the basic ideas, then add the frameworks that describe attacks, then the controls and rules that answer them.
- Security and hacking concepts define the goals of security, the attacker types and the legal role of an ethical hacker.
- Methodologies and frameworks describe an attack as a sequence of stages that defenders can map.
- Controls, laws and standards show how organizations reduce risk and what they must comply with.
Learn each framework as an ordered list. Exam questions often give one stage and ask for the stage before or after it.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Try to match each short scenario to its attack category before reading the answer. The exam often describes symptoms and asks for the attack name or the best fix.
Ready for more practice?
The full EC-Council 312-50 question bank has 1,000 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by EC-Council. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.