Certified Ethical Hacker (CEH)

Certified Ethical Hacker (CEH)

Focus

The Certified Ethical Hacker (CEH) certification focuses on InfoSec, Penetration Testing, and Ethical Hacking.

Exam Duration

The Certified Ethical Hacker (CEH) exam duration is 4 hours

Num of Question

The exam contains a total of 125 multiple-choice questions

Exam Fee

The exam fee is $100-$200.

Exam Validity

The CCRN-Pediatric certification is valid for 3 years.

Prior Certification

• None

Exam Format

The Certified Ethical Hacker (CEH) exam is a Digital

Passing Conditions

To pass Certified Ethical Hacker (CEH) exam, applicants must achieve a minimum score of 67% (84 questions correct out of 125)

Who Should Take

Professionals seeking a career in information security, security professionals, auditors, and anyone interested in penetration testing or ethical hacking.

• Security Consultant
• Penetration Tester
• Incident Responder
• Cybersecurity Analyst
• Compliance Auditor

Prerequisites

The minimum of 2 years of information security experience (recommended, but N/A for experience before taking the exam)

Or can substitute with certifications:

• EC-Council Certified Security Manager (ECSM)
• EC-Council Certified Incident Handler (ECIH)
• EC-Council Certified Security Analyst (ECSA)
• Certified Associate in Cybersecurity (ABC
• Certified Chief Information Security Officer (CISSP)

Certification Process

• Step 1: Register for the exam through EC-Council
• Step 2: Receive a unique exam voucher containing exam details
• Step 3: Schedule the exam with a testing center
• Step 4: Pass the exam within a 3-year window.

Domains with Weights

• Domain 1: Malware Analysis (10%) (10%): Candidates will learn to identify, analyze, and evade various types of malware, including Trojans, rootkits, and viruses.
• Domain 2: Vulnerability Analysis (15%) (15%): The exam assesses a candidate"s ability to identify and exploit vulnerabilities in operating systems, network devices, and web applications.
• Domain 3: Penetration Testing Methodologies (22%) (22%): This domain focuses on methods for testing network devices, web applications, and operating systems, as well as ethical hacking methods and techniques.
• Domain 4: Network Architecture and Security (15%) (15%): Candidates will learn to identify network architecture, analyze network protocols, and configure firewalls and intrusion detection systems.
• Domain 5: Operational Security (10%) (10%): This domain covers various operational security topics, including auditing, hardening, and patch management.
• Domain 6: Cryptography (12%) (12%): The candidates will learn to apply cryptographic techniques and algorithms effectively within the information security context.
• Domain 7: Web Applications Domain (16%) (16%): This domain includes web server attacks, web applications, and mobile platform vulnerabilities.