Certified Ethical Hacker Exam (CEH v10)

Certified Ethical Hacker Exam (CEH v10)

The Certified Ethical Hacker program is a course that teaches students to utilize the same knowledge and approach exploited by malicious hackers, but in a lawful and legitimate manner to help organizations spot weaknesses and vulnerabilities in their infrastructure.

Focus

The Certified Ethical Hacker Exam (CEH v10) certification focuses on Information Security

Exam Duration

The Certified Ethical Hacker Exam (CEH v10) exam duration is 4 hours

Num of Question

The exam contains a total of

Exam Fee

The exam fee is $950-$1250.

Exam Validity

The CCRN-Pediatric certification is valid for 3 years.

Prior Certification

• CEH v8 or higher

Exam Format

The Certified Ethical Hacker Exam (CEH v10) exam is a Online and Onsite

Passing Conditions

To pass Certified Ethical Hacker Exam (CEH v10) exam, applicants must achieve a minimum score of At least 70% of the total marks is required to pass the exam

Who Should Take

IT professionals, security analysts, and anyone working in a security-related field.

• Pentester
• Security Consultant
• Chief Information Security Officer (CISO)

Prerequisites

2+ years of hands-on experience in the IT security field, with a focus on penetration testing and vulnerability assessment.

Or can substitute with certifications:

• The EC-Council Certified Security Analyst (ECSA) certification
• The EC-Council Certified Network Security Administrator (ECSA-LAB) certification

Certification Process

• Step 1: Meet the prerequisites and pay for the exam fee
• Step 2: Pass the exam (CEH v10)
• Step 3: Maintain the certification by attending required continuing education credits

Domains with Weights

• Domain 1: Network Security (25%): This domain focuses on understanding network-based attacks and defense mechanisms, including firewalls, VPNs, and intrusion detection/prevention systems.
• Domain 2: Vulnerability Assessment Methodology (20%): This domain covers the different methods of gathering information, identifying vulnerabilities, and creating a report of findings.
• Domain 3: Penetration Testing Methodologies (30%): This domain explains how to conduct a penetration test, including reconnaissance, gaining access, maintaining access, covering tracks and post exploitation.
• Domain 4: Steganography, Cryptography and Wireless Network Security (10%): This domain covers various techniques of hiding information and protecting it using cryptography and understanding of network protocol used by wireless networks.
• Domain 5: Web Server and Web Application Security (5%): This domain explains about technologies involved with the web, understanding web servers, working of different attacks on them, identifying vulnerabilities in web applications.
• Domain 6: Deception and Detection Evasion (5%): This domain explains about a way to deceive hackers and use of threats such as countermeasures used to analyze, prevent and also evade.
• Domain 7: Attacks, Incidents and Report Writing (5%): This domain covers penetration testing, understanding the importance of creating pen test report that’s structured, as well as reporting the incidents caused due to same techniques.