EC-COUNCILEC-Council Certified Ethical Hacker
The EC-Council Certified Ethical Hacker (CEH) certification validates your ability to think like a hacker and proactively defend against cyber threats. It covers over 550 attack techniques across 20 modules, with 221 hands-on labs and AI-powered learning. CEH is the world's #1 ethical hacking certification, mapped to 45+ job roles and recognized globally.
2246 practice questions · Updated 2026-07-30
9Domains
50Objectives
425Concepts
2246Questions
CEH Curriculum
Every domain, objective, and concept the CEH exam measures.
- CIA Triad
- Confidentiality
- Integrity
- Availability
- Non-Repudiation
- Authentication
- Authorization
- Accountability
- Privacy
- Security vs. Usability Trade-off
- Attack Classification Overview
- Passive vs. Active Attacks
- Insider vs. Outsider Attacks
- Attack Vectors and Surfaces
- Malware-Based Attacks
- Network Attacks
- Web Application Attacks
- Wireless Attacks
- Social Engineering Attacks
- Cryptographic Attacks
- Physical Attacks
- Zero-Day and Advanced Persistent Threats (APTs)
- Hacker Classes
- Hacker Motives
- Definition of Ethical Hacking
- Scope of Ethical Hacking
- Ethical Hacking vs. Penetration Testing
- Roles and Responsibilities of an Ethical Hacker
- Legal and Ethical Implications
- Cyber Kill Chain Overview
- Reconnaissance
- Weaponization
- Delivery
- Exploitation
- Installation
- Command and Control (C2)
- Actions on Objectives
- Applying the Cyber Kill Chain
- MITRE ATT&CK Framework Overview
- ATT&CK Matrices and Platforms
- Tactics and Techniques Mapping
- Using ATT&CK in Threat Intelligence
- ATT&CK in Security Operations
- ATT&CK for Gap Analysis and Risk Assessment
- ATT&CK Navigator and Tooling
- Information Assurance (IA) Core Principles
- Risk Management Fundamentals
- Risk Assessment Methodologies
- Risk Mitigation Strategies
- Security Policies and Governance
- Compliance and Legal Frameworks
- Business Continuity and Disaster Recovery
- Risk Management Frameworks
- Threat Intelligence Fundamentals
- Threat Intelligence Lifecycle
- Threat Intelligence Sources and Feeds
- Threat Intelligence Data Collection
- Threat Intelligence Processing and Analysis
- Threat Intelligence Dissemination and Integration
- Threat Intelligence Feedback and Improvement
- Incident Management Overview
- Incident Response Process
- Incident Classification and Triage
- Incident Handling and Escalation
- Post-Incident Activities
- PCI DSS Overview
- PCI DSS Requirements
- PCI DSS Compliance Levels
- HIPAA Overview
- HIPAA Privacy Rule
- HIPAA Security Rule
- HIPAA Breach Notification Rule
- GDPR Overview
- GDPR Data Subject Rights
- GDPR Compliance Obligations
- GDPR Penalties and Enforcement
- Comparative Analysis of Compliance Standards
- Footprinting Fundamentals
- OSINT Sources and Tools
- Search Engine Hacking
- Website Footprinting
- WHOIS and DNS Footprinting
- Network Footprinting
- Social Engineering Footprinting
- Competitive Intelligence
- Footprinting Countermeasures
- Whois Query Fundamentals
- Interpreting Whois Records
- Whois Data Privacy and Limitations
- DNS Record Types
- DNS Enumeration Techniques
- Zone Transfer Attacks
- Reverse DNS Lookup
- Email Header Analysis
- Email Tracking and Spoofing Detection
- Email Harvesting Methods
- Integrating Footprinting Data
- Network Scanning Fundamentals
- Host Discovery Techniques
- Port Scanning Techniques
- Service and Version Detection
- OS Fingerprinting
- Scanning Tools
- Scanning Evasion Techniques
- Scanning Countermeasures
- Port Scanning Fundamentals
- TCP/IP Basics for Scanning
- Scanning Techniques
- Scanning Tools
- Stealth and Evasion
- Firewall and IDS Evasion
- Scanning Countermeasures
- Service Discovery Fundamentals
- Port Scanning Techniques
- Service Version Detection
- OS Fingerprinting
- Nmap Usage for Service and OS Discovery
- Banner Grabbing
- Common Service Ports and Protocols
- Evasion Techniques in Discovery
- NetBIOS Enumeration
- SNMP Enumeration
- LDAP Enumeration
- SMB Enumeration
- Enumeration Countermeasures
- Enumeration Countermeasures Overview
- Network Enumeration Countermeasures
- Port Scanning Countermeasures
- Service Enumeration Countermeasures
- SNMP Enumeration Countermeasures
- DNS Enumeration Countermeasures
- Active Directory Enumeration Countermeasures
- SMB Enumeration Countermeasures
- LDAP Enumeration Countermeasures
- Email Enumeration Countermeasures
- User Enumeration Countermeasures
- Web Enumeration Countermeasures
- Wireless Enumeration Countermeasures
- Cloud Enumeration Countermeasures
- IoT Enumeration Countermeasures
- Enumeration Countermeasure Tools and Techniques
- Vulnerability Assessment Fundamentals
- Vulnerability Classification
- Vulnerability Scoring Systems
- CVSS Vector String
- CVSS Metrics and Values
- Severity Rating Scale
- Vulnerability Databases
- Practical Application of CVSS
- Password Cracking Fundamentals
- Password Storage and Hashing
- Password Cracking Techniques
- Rainbow Table Attacks
- Password Cracking Tools
- Online vs Offline Attacks
- Default and Weak Passwords
- Password Policy and Best Practices
- Vulnerability Exploitation Fundamentals
- Exploitation Phases and Methodology
- Metasploit Framework Architecture
- Metasploit Module Types
- Metasploit Command-Line Interface
- Exploit Selection and Configuration
- Payload Generation and Selection
- Running Exploits and Handling Sessions
- Post-Exploitation Techniques
- Metasploit Auxiliary Modules
- Evasion and Anti-Virus Bypass
- Metasploit Database Integration
- Metasploit Scripting and Automation
- Ethical and Legal Considerations
- Privilege Escalation Fundamentals
- Windows Privilege Escalation Vectors
- Linux Privilege Escalation Vectors
- Exploiting Misconfigurations
- Credential Harvesting and Reuse
- Privilege Escalation Tools
- Post-Exploitation and Persistence
- Maintaining Access Overview
- Persistence Mechanisms
- Backdoors
- Trojans
- Rootkits
- Privilege Escalation for Persistence
- Steganography in Persistence
- Covering Tracks
- Detection and Countermeasures
- Purpose of Covering Tracks
- Log Clearing Techniques
- Log Manipulation and Obfuscation
- Steganography
- Alternate Data Streams (ADS)
- Rootkit Fundamentals
- Rootkit Detection and Countermeasures
- Windows and Linux Track-Covering Commands
- Auditing and Logging Configuration
- Anti-Forensics Techniques
- Malware Classification
- Trojan Attack Vectors
- Virus Infection Mechanisms
- Ransomware Operation
- Malware Lifecycle
- Persistence Techniques
- Obfuscation and Evasion
- Malware Detection Methods
- Malware Analysis Basics
- Mitigation and Defense
- Malware Analysis Overview
- Static Malware Analysis
- Dynamic Malware Analysis
- Malware Analysis Tools
- Malware Countermeasures
- Network Sniffing Fundamentals
- Sniffing Techniques and Tools
- ARP Protocol and ARP Poisoning
- ARP Poisoning Attack Execution
- Detection and Countermeasures
- DoS/DDoS Fundamentals
- Attack Vectors and Techniques
- Botnets and DDoS Infrastructure
- Attack Tools and Methods
- Detection and Mitigation Strategies
- Countermeasures and Best Practices
- Session Hijacking Fundamentals
- Session Management Mechanisms
- Session Hijacking Attack Vectors
- Network-Level Session Hijacking
- Application-Level Session Hijacking
- Session Hijacking Tools
- Session Hijacking Countermeasures
- Detection and Prevention Techniques
- IDS and Firewall Fundamentals
- Firewall Architecture and Filtering
- IDS Detection Methods
- Evasion Techniques for IDS
- Evasion Techniques for Firewalls
- Honeypot Concepts and Types
- Honeypot Evasion and Detection
- Tools for Evasion and Detection
- Countermeasures and Best Practices
- Web Server Architecture
- Web Server Attacks
- Web Server Vulnerability Assessment
- Web Server Hacking Methodology
- Web Server Attack Tools
- Web Server Countermeasures
- Web Application Attack Surface
- OWASP Top 10 Overview
- Injection Attacks
- Broken Authentication and Session Management
- Sensitive Data Exposure
- XML External Entity (XXE) Attacks
- Broken Access Control
- Security Misconfiguration
- Cross-Site Scripting (XSS)
- Insecure Deserialization
- Using Components with Known Vulnerabilities
- Insufficient Logging and Monitoring
- Web Application Attack Methodologies
- Web Application Defense Mechanisms
- SQL Injection Fundamentals
- SQL Injection Types
- SQL Injection Detection
- SQL Injection Exploitation
- SQL Injection Prevention
- SQL Injection Tools
- API Authentication and Authorization
- API Injection Attacks
- API Rate Limiting and Resource Exhaustion
- API Mass Assignment
- API Security Misconfiguration
- Webhook Endpoint Security
- Webhook Data Injection and Manipulation
- Webhook Denial of Service
- WEP Vulnerabilities
- WPA/WPA2 Security Mechanisms
- WPA3 Enhancements
- Wireless Attack Types
- Wireless Threat Mitigation
- Wireless Network Discovery
- Wireless Traffic Analysis
- WEP/WPA/WPA2 Cracking
- Evil Twin Attack
- Rogue Access Point Detection
- MAC Spoofing and Filtering Bypass
- Wireless Sniffing
- Deauthentication Attack
- WPS Attack
- Bluetooth Attacks
- Wireless Hacking Methodology Steps
- WEP Encryption Vulnerabilities
- WPA/WPA2 PSK Cracking
- WPA3 Security Features
- Wi-Fi Protected Setup (WPS) Attack
- Evil Twin Attack
- Deauthentication Attack
- PMKID Attack
- WPA/WPA2 Enterprise Attacks
- KRACK Attack
- Wi-Fi Password Cracking Tools
- Wireless Attack Countermeasures Overview
- Wireless Intrusion Prevention Systems (WIPS)
- Wireless Intrusion Detection Systems (WIDS)
- Rogue Access Point Detection and Mitigation
- Wireless Encryption Protocols (WPA2/WPA3)
- Wireless Authentication Mechanisms (802.1X/EAP)
- Wireless Network Segmentation and Isolation
- Wireless Security Policies and Auditing
- Mobile Attack Vectors Overview
- OWASP Mobile Top 10
- Mobile Platform Security Features
- Mobile Malware and Threats
- Mobile App Security Testing
- Mobile Device Management (MDM) and BYOD
- Android architecture and security model
- Android app attack surface
- Android reverse engineering
- Android rooting and its security implications
- Android exploitation techniques
- iOS architecture and security model
- iOS app attack surface
- iOS reverse engineering
- iOS jailbreaking and its security implications
- iOS exploitation techniques
- Mobile app security testing methodology
- Mobile device management (MDM) and enterprise security
- Mobile Device Management (MDM) Fundamentals
- MDM Architecture and Components
- MDM Enrollment and Provisioning
- MDM Policy Management
- MDM and Mobile Application Management (MAM)
- MDM Security Risks and Bypass Techniques
- MDM in the Context of CEH
- IoT Attack Surface
- IoT Attack Vectors
- IoT Attack Methodology
- IoT Device Discovery
- IoT Firmware Analysis
- IoT Communication Protocols
- IoT Exploitation Techniques
- IoT Post-Exploitation
- IoT Security Countermeasures
- OT/SCADA Fundamentals
- OT/SCADA Attack Surface
- Common OT/SCADA Vulnerabilities
- OT/SCADA Attack Vectors
- OT/SCADA Attack Methodologies
- OT/SCADA Attack Examples
- OT/SCADA Security Controls
- Cloud Computing Fundamentals
- Cloud Service Models
- Cloud Deployment Models
- Container Technology Basics
- Container Orchestration
- Container Security
- Cloud Threat Landscape
- Cloud Attack Vectors
- Cloud-Specific Threats
- Cloud Service Provider Threats
- Cloud Deployment Model Threats
- Cloud Threat Mitigation
- Cloud Hacking Methodology Overview
- Cloud Reconnaissance Techniques
- Cloud Service Enumeration
- Cloud Misconfiguration Exploitation
- Cloud Credential Attacks
- Cloud Privilege Escalation
- Cloud Lateral Movement
- Cloud Data Exfiltration
- Cloud Persistence Mechanisms
- Cloud Logging and Monitoring Evasion
- Cloud Security Controls Overview
- Cloud Security Control Types
- Cloud Security Control Frameworks
- Cloud Security Control Implementation
- Cloud Security Control Monitoring
- Symmetric Encryption Fundamentals
- Asymmetric Encryption Fundamentals
- Key Distribution and Management
- Common Symmetric Algorithms
- Common Asymmetric Algorithms
- Hybrid Encryption Systems
- Strengths and Weaknesses
- Use Cases and Applications
- PKI Fundamentals
- Digital Certificates
- Certificate Authorities (CAs)
- Registration Authorities (RAs)
- Certificate Lifecycle Management
- Certificate Revocation
- Digital Signatures
- Digital Signature Creation and Verification
- Hash Functions in Digital Signatures
- Non-Repudiation
- PKI Trust Models
- PKI in Cryptography
- Cryptanalysis Fundamentals
- Types of Cryptanalytic Attacks
- Brute-Force Attack
- Dictionary Attack
- Rainbow Table Attack
- Frequency Analysis
- Known-Plaintext Attack
- Chosen-Plaintext Attack
- Chosen-Ciphertext Attack
- Related-Key Attack
- Side-Channel Attacks
- Man-in-the-Middle Attack
- Replay Attack
- Birthday Attack
- Meet-in-the-Middle Attack
- Cryptanalytic Tools and Techniques
- Disk encryption fundamentals
- Disk encryption technologies
- Email encryption fundamentals
- Email encryption protocols and standards
- Email encryption implementation
- Key management for disk and email encryption
- Best practices and limitations
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for CEH, so none is invented.
Social Engineering and Phishing
6 concepts · 38 questions