Chapter 4 of 9 · EC-Council 312-50
Network and Perimeter Hacking
Sniffing, social engineering, DoS and DDoS, session hijacking and evading IDS and firewalls.
- 9topics
- 42 minfast track
- 3diagrams and exhibits
- 24%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Sniffing, MAC, DHCP and ARP AttacksLearn how packet sniffing works, then recognize MAC flooding, DHCP starvation and rogue servers, and ARP poisoning, with the…Diagram5 min
- 2Spoofing, DNS Poisoning and Sniffing DefenseSpoofing and DNS poisoning attacks, the sniffing tools the exam names, and the countermeasures and detection techniques that find…5 min
- 3Social Engineering and Insider ThreatsSocial engineering concepts, human, computer and mobile techniques such as phishing and tailgating, and how insider threats…4 min
- 4Impersonation, Identity Theft and Social Engineering DefenseHow attackers impersonate people on social networks, the main identity theft types, and the training and technical controls that…4 min
- 5DoS and DDoS Concepts, Botnets and Attack TechniquesUnderstand DoS and DDoS attacks, how botnets and command and control work, and recognize volumetric, protocol and application…Diagram5 min
- 6DDoS Case Study, Countermeasures and Protection ToolsA memcached amplification DDoS case study, then DoS and DDoS countermeasures such as SYN cookies, filtering and sinkholing, plus…4 min
- 7Session HijackingSession hijacking explained: application and network level attacks, the tools used, and countermeasures such as HTTPS, secure…5 min
- 8IDS, IPS, Firewalls and Honeypots, and IDS EvasionIDS, IPS, firewall and honeypot types with example products, then how attackers evade an intrusion detection system and how…Diagram5 min
- 9Evading Firewalls and NAC, Honeypot Detection and CountermeasuresRecognize firewall, NAC and endpoint evasion ideas, the Nmap options involved, how honeypots are detected, and the…5 min
About this chapter
What this chapter covers
This chapter is 24% of the EC-Council CEH v13 312-50 exam, the largest of the nine blueprint domains. It covers attacks on the network itself and on the people and controls around it: sniffing and its related spoofing attacks, social engineering, denial of service, session hijacking, and evading intrusion detection, firewalls and honeypots.
The exam uses single-answer multiple choice questions. Most ask you to recognize a technique from a short description, name the tool, or choose the countermeasure that stops it.
The chapter has 34 outline topics, grouped into nine pages. It stays at the level of concepts, tools and defenses and contains no attack walkthroughs.
How the topics fit together
The pages follow an attacker moving from the local network outwards to the perimeter defenses.
- Sniffing: MAC, DHCP and ARP attacks put an attacker on the path, and DNS poisoning redirects users.
- Social engineering: people are manipulated into giving access, and insiders already have it.
- DoS and DDoS: botnets and amplification overwhelm availability.
- Session hijacking: a valid session is taken over, either at application level or at network level.
- Evasion: attackers try to slip past the IDS, firewall, network access control and honeypots, and defenders close the gaps.
For every attack on these pages, learn the pair: the one phrase that identifies it, and the one control that stops it. Most questions ask for one or the other.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Try to match each short scenario to its attack category before reading the answer. The exam often describes symptoms and asks for the attack name or the best fix.
Ready for more practice?
The full EC-Council 312-50 question bank has 1,000 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by EC-Council. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.