EC-COUNCIL

EC-Council Ethical Hacking Essentials

EHE

The EC-Council Ethical Hacking Essentials (EHE) certification is your entry point into the world of ethical hacking and penetration testing. This beginner-friendly program requires no prior IT or cybersecurity experience, yet it delivers hands-on skills through 47 guided labs and real-world CTF challenges. You'll learn to think like an attacker, understand the full hacking lifecycle, and validate your abilities with a globally recognized credential that sets you on the path to advanced certifications like CEH.

Practice Free Questions

8Domains

36Objectives

318Practice pages

1527Free questions

EHE free practice questions

Choose any objective and open any question page — no sign-in required.

Overview of information security and defense strategies

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Threats, threat sources, and vulnerabilities

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Cryptography concepts

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Information security laws, regulations, and standards

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Hacking concepts and hacker classes

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

Ethical hacking scope, methodologies, and frameworks

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Malware concepts, types, and attack mechanisms

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Malware propagation techniques and indicators

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Malware countermeasures

58 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–58

Password cracking techniques

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Password cracking countermeasures

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Reconnaissance, footprinting, and OSINT techniques

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Scanning and enumeration methodologies

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Vulnerability scanning and assessment

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Gaining access, maintaining access, and covering tracks

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

Countermeasures across hacking phases

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Insider threats and identity theft

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Packet sniffing concepts

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

DoS and DDoS attack methods

63 questions · 13 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60 61–63

Session hijacking techniques

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

Network attack detection and countermeasures

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Web server attacks

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

Web application attack techniques and exploitation

57 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–57

SQL injection attacks and countermeasures

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Wireless network security and attack techniques

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Bluetooth threats and wireless security risks

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Mobile attack vectors and vulnerabilities

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Mobile Device Management (MDM) and BYOD security

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

IoT and OT attacks and countermeasures

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

Cloud computing and containerization concepts

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Cloud computing threats and attacks

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Cloud attack countermeasures

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Types, phases, and approaches to penetration testing

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

Penetration testing guidelines and recommendations

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (36 objectives · 318 pages).

EC-Council Ethical Hacking Essentials

EHE free practice questions

Domain 1 · Information Security and Ethical Hacking Foundations16% of practice bank · 6 objectives · 247 questions16%

Domain 2 · Malware and Password Attacks14% of practice bank · 5 objectives · 218 questions14%

Domain 3 · Ethical Hacking Methodology12% of practice bank · 5 objectives · 190 questions12%

Domain 4 · Social Engineering9% of practice bank · 3 objectives · 138 questions9%

Domain 5 · Network-Level Attacks and Countermeasures12% of practice bank · 4 objectives · 181 questions12%

Domain 6 · Web Application Attacks and Countermeasures9% of practice bank · 3 objectives · 144 questions9%

Domain 7 · Wireless, Mobile, IoT, and OT Attacks15% of practice bank · 5 objectives · 231 questions15%

Domain 8 · Cloud Computing and Penetration Testing12% of practice bank · 5 objectives · 178 questions12%