Certified Ethical Hacker (CEH)

Certified Ethical Hacker (CEH) 2.0

The Certified Ethical Hacker (CEH) certification is awarded by the EC-Council to professionals who possess the necessary skills and knowledge to conduct an ethical hacking operation successfully.

Focus

The Certified Ethical Hacker (CEH) certification focuses on Information Security, Network Security, Risk Management, Web Applications, Cryptography, and more

Exam Duration

The Certified Ethical Hacker (CEH) exam duration is 4 hours

Num of Question

The exam contains a total of 125 questions

Exam Fee

The exam fee is 566 USD (member), $969 USD (non-member).

Exam Validity

The CCRN-Pediatric certification is valid for This certification is valid for 3 years.

Prior Certification

• No prior certification is required

Exam Format

The Certified Ethical Hacker (CEH) exam is a Multiple choice, Fill-in-the-blanks, and hands-on exercises

Passing Conditions

To pass Certified Ethical Hacker (CEH) exam, applicants must achieve a minimum score of Passing score: 70% (175 or more questions answered correctly)

Who Should Take

The CEH certification is ideal for security professionals, incident responders, security analysts, penetration testers, and anybody interested in network security and risk management.

• Security Consultant
• Penetration Tester
• Security Analyst
• Network Administrator
• Incident Responder

Prerequisites

No prior work experience is required.

Or can substitute with certifications:

• Computer Network Defense In-Residence Program (CNDIR) operated by the National Information Assurance Centers of Excellence
• NSA and CNSS equivalent training
• CEH (v9) holder must take the additional exam by the program transition to CEH v10
• EC-Council Continuing Education Program (ECCP) certified professionals
• Any associate-level certification in a related field (EC-Council, NSA, DoD approved)

Certification Process

• Step 1: Prepare for the CEH exam
• Step 2: Register for the exam
• Step 3: Take the exam and receive the CEH certification

Domains with Weights

• Domain 1: Network Security (22%): Network security protocols, network infrastructure security, and network risk management
• Domain 2: System hacking (15%): System hacking techniques, vulnerability exploitation, and access to network resources
• Domain 3: Web Application Hacking (13%): Web application attacks, web application security testing, and vulnerabilities in web applications
• Domain 4: Malware Threats (8%): Malware and its implications, types of malware, and malware removal techniques
• Domain 5: Cloud Computing Security (10%): Cloud computing security threats, best practices for cloud security, and virtualization security
• Domain 6: Cryptography (12%): Cryptography, symmetric and asymptomatic key algorithms, digital signatures, and cryptographic protocols
• Domain 7: Internet Security (8%): Wi-Fi security, IoT security, and online threat intelligence
• Domain 8: Perimeter Security (5%): Firewalls, Virtual Private Networks (VPNs), and security incident response
• Domain 9: Security and Risk Management (9%): Threat analysis, threat intelligence, risk assessments, and risk management plan
• Domain 10: Mobile Security (2%): Android and iOS device hacking, mobile app security testing, and BYOD