u/After-Fishing-9222

This is for the CEHv13 Knowledge Exam.
Study plan: I’m going to tackle the last two chapters, cryptography and cloud computing, this week, do two practice exams untimed, and then a full simulation, and if it goes well, schedule the exam.

Study Material: I’m using Codecademy by SkillSoft to learn the material, and Logan Pierce’s CEH study guide and Wiley Sybex CEHv12 for practice questions.

Question: The general pattern for questions seems to be a bunch of words in a scenario, and they go: which one best describes the vulnerability of the attack, and what would be the best tool, or what tool is being described here.

I’m unsure if it’s against the NDA, but can anyone confirm whether the questions are phrased as I mentioned above? Should I study the commands and execution a little more in depth, beyond the basic commands for popular tools?

So I use Skillsoft/CodeAcademy CEHv13 to learn, and I have like three more modules left before I complete and I’m gonna start doing assessment tests and practice exams.
I also have a CEH v12 Wiley book, but I’m very concerned because the questions are too easy and I’m reading the post here at everyone’s like it’s hard and then I showed someone a question that I have on my practice exams and they’re just like those are it’s nothing like those so I need some advice.

Is the question below similar to how CEH is set up or is it nothing like that and they’re just giving me false security? What’s the best study guide because using skillsoft it’s doing like individual testing for each module, which is all well and good but they’re so easy. I’m concerned that they aren’t accurate reflectors it’s gonna be on there and I’m gonna walk in there thinking all this test is so easy you know I know what’s gonna happen and then I just get kind of smacked in the face.

Example practice question from Skillsoft:
“Emma, a junior senior analysis at a midsize security firm, is reviewing logs from recent breach. She noticed that a small, seemingly harmless program was implemented during the initial phase. Soon after, the system connected to an external server and pulled in more malicious files. Eventually, the system activated a file-encrypting program, locking critical documents and demanding you were handsome based on this behavior which malware component was most likely responsible for getting additional threats after the initial infection?
Dropper
Intruder
Payload
Downloader”
Or worse of all
“At a healthcare company, Marcus to text as usual now activity. The most program entered quietly through a fishing email, observed user behavior, adjusted his actions based on the system defenses, and later source sensitive login data.
Which type of best describes this case
Root kit using privilege escalation
Traditional viruses with polymorphic features
Fileless worm using memory injection
AI powered malware with adaptive feature”

And there’s a lot of questions like this and I’m getting really confident because I’m scoring well and they are very common sense, but it seems like these are too easy and I don’t wanna go in there thinking it’s gonna be just like this and then I’m smacked in the face by oh no it was nothing like that and now I just failed and I have to pay again.