EC-COUNCIL

EC-Council Certified Ethical Hacker

CEH

The EC-Council Certified Ethical Hacker (CEH) certification validates your ability to think like a hacker and proactively defend against cyber threats. It covers over 550 attack techniques across 20 modules, with 221 hands-on labs and AI-powered learning. CEH is the world's #1 ethical hacking certification, mapped to 45+ job roles and recognized globally.

Practice Free Questions

9Domains

50Objectives

469Practice pages

2246Free questions

CEH free practice questions

Choose any objective and open any question page — no sign-in required.

Elements of Information Security

57 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–57

Classification and Types of Attacks

52 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–52

Hacker Classes and Motives

13 questions · 3 pages

Questions 1–5 6–10 11–13

Ethical Hacking Concepts and Scope

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Cyber Kill Chain Methodology

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

MITRE ATT&CK Framework

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Information Assurance and Risk Management

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Threat Intelligence and Incident Management

60 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60

Footprinting and OSINT

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Whois, DNS and Email Footprinting

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Network Scanning and Host Discovery

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Port Scanning Techniques

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Service and OS Discovery

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Enumeration (NetBIOS, SNMP, LDAP, SMB)

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Enumeration Countermeasures

65 questions · 13 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60 61–65

Vulnerability Analysis and CVSS

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Password Cracking and Attacks

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Vulnerability Exploitation and Metasploit

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Privilege Escalation

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Maintaining Access and Persistence

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Covering Tracks

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Malware Threats (Trojans, Viruses, Ransomware)

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Malware Analysis and Countermeasures

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Sniffing and ARP Poisoning

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Denial-of-Service and DDoS

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Session Hijacking

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Evading IDS, Firewalls and Honeypots

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Hacking Web Servers

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Web Application Attacks and OWASP Top 10

61 questions · 13 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60 61–61

SQL Injection

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

API and Webhook Hacking

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Wireless Encryption and Threats

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Wireless Hacking Methodology

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Wi-Fi Encryption Cracking

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Wireless Attack Countermeasures

52 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–52

Mobile Attack Vectors and OWASP Mobile Top 10

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Android and iOS Hacking

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

Mobile Device Management

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

IoT Attacks and Methodology

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

OT and SCADA Attacks

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Cloud Concepts and Container Technology

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Cloud Computing Threats

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Cloud Hacking Methodology

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Cloud Security Controls

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Encryption Algorithms (Symmetric/Asymmetric)

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Public Key Infrastructure and Digital Signatures

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

Cryptanalysis and Attacks

63 questions · 13 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60 61–63

Disk and Email Encryption

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (50 objectives · 469 pages).

EC-Council Certified Ethical Hacker

CEH free practice questions

Domain 1 · Information Security and Ethical Hacking Overview17% of practice bank · 9 objectives · 388 questions17%

Domain 2 · Reconnaissance Techniques14% of practice bank · 7 objectives · 322 questions14%

Domain 3 · System Hacking Phases and Attack Techniques16% of practice bank · 8 objectives · 350 questions16%

Domain 4 · Network and Perimeter Hacking9% of practice bank · 5 objectives · 213 questions9%

Domain 5 · Web Application Hacking8% of practice bank · 4 objectives · 188 questions8%

Domain 6 · Wireless Network Hacking8% of practice bank · 4 objectives · 176 questions8%

Domain 7 · Mobile, IoT and OT Hacking11% of practice bank · 5 objectives · 247 questions11%

Domain 8 · Cloud Computing7% of practice bank · 4 objectives · 163 questions7%

Domain 9 · Cryptography9% of practice bank · 4 objectives · 199 questions9%