CEH Practice Test 2026 — free exam prep

CEH Practice Test

Updated October 2026
Oct 31, 202612 min read

Facts verified Oct 25, 2026 against EC-Council

The Certified Ethical Hacker has 125 questions and takes about 4 hours[1] (EC-Council, verified Oct 25, 2026).

  • The Certified Ethical Hacker (CEH) exam has 125 multiple-choice questions.[1]
  • The Certified Ethical Hacker (CEH) knowledge exam has a 4-hour time limit.[1]
  • The CEH exam uses a cut score that varies by exam form, with typical passing cut scores ranging from 60% to 85%.[1]
  • CEH candidates without official training must submit an eligibility application with a non-refundable $100 application fee.[2]
  • EC-Council allows CEH candidates to re-attempt the examination up to 4 times in one year.[2]
  • The CEH exam can be taken at the training center, online with EC-Council's remote proctoring service, or at over 4,500 VUE testing centers worldwide.[1]
  • CEH candidates need two years of work experience in an information security role, or must complete official EC-Council training.[2]

Numbers in brackets link to the official sources listed under Sources & last verified. Dates that have passed are removed automatically.

Certified Ethical Hacker Exam at a Glance

ItemDetailSource · Verified
Number of questions125 multiple-choice questions[1]EC-Council · Oct 25, 2026
Time limit4 hours[1]EC-Council · Oct 25, 2026
Passing scoreCut score varies by form, typically 60%–85%[1]EC-Council · Oct 25, 2026
Exam fee (eligibility application)$100 non-refundable application fee[2]EC-Council · Oct 25, 2026
Retake policyUp to 4 re-attempts in one year[2]EC-Council · Oct 25, 2026
DeliveryTraining center, EC-Council remote proctoring, or VUE test centers[1]EC-Council · Oct 25, 2026
Eligibility2 years of IT security experience, or official training[2]EC-Council · Oct 25, 2026
Hacking Techniques - Certified Ethical Hacker study guide

In this comprehensive guide, we will provide you with essential tips and resources to help you prepare for the Certified Ethical Hacker (CEH) exam. Whether you’re a beginner or an experienced professional looking to enhance your hacking skills, our CEH practice test prep guide is here to support your journey towards success.

Free CEH Practice Test Online

Preparing for the CEH exam involves a combination of theoretical knowledge and practical application. To excel in both areas, incorporating practice tests into your study routine is crucial. By simulating the exam environment, practice tests can help you assess your strengths and weaknesses, identify knowledge gaps, and refine your problem-solving abilities.

To assist you further, we have compiled a list of the best CEH practice test sites available online. These resources offer a wide range of practice questions, mock exams, and interactive learning materials that align with the CEH exam objectives. By using these reputable sites, you can gain valuable insights into the exam format and significantly improve your chances of success.

Whether you prefer an online CEH practice test or a certification practice test, our guide will point you towards the best resources to suit your learning style and goals. So, let’s dive into the world of CEH exam preparation and equip ourselves for a successful hacking career.

CEH vs AZ-900: Choosing Between Ethical Hacking and Azure Fundamentals

Candidates weighing the CEH against the az-900 (Microsoft Azure Fundamentals) should understand that these certifications serve different career paths. CEH validates offensive security skills across 20 modules including footprinting, scanning, and system hacking, while az-900 covers cloud concepts, Azure pricing, and core services at a beginner level. Many security professionals pursue az-900 first to build cloud literacy before tackling CEH's 125-question, four-hour exam.

Cloud Security Topics: Where CEH Overlaps with AZ-900 Knowledge

Module 19 of the CEH exam covers cloud computing threats, container security, and serverless vulnerabilities, which benefits from the foundational Azure knowledge tested in az-900. The az-900 exam costs $99 and includes 40-60 questions on shared responsibility, identity services, and governance, all concepts that reinforce CEH domains on cloud penetration testing. Understanding Azure AD, network security groups, and role-based access control helps CEH candidates answer cloud-specific questions correctly.

According to EC-Council, “This 4-hour exam with 125 multiple-choice questions will test your skills in:”[1]

Worked examples: how to reason through Certified Ethical Hacker questions

These are practice questions written for this site, not questions from the real exam. Each explanation shows why the right answer is right and why the others are wrong.

Example 1

Question: Let's say you want to find information about a website by crawling through it. Which application do you apply?

  1. Web Ant
  2. Web Bug
  3. Web Spiders
  4. Web Scorpion

Answer: C. Web Spiders

Explanation:

The correct answer is Web Spiders. A spider, also called a crawler or bot, is an automated program that follows links from page to page and records what it finds. Attackers and defenders both use this kind of crawling during reconnaissance to map a site's structure, links and content.

Web Ant, Web Bug and Web Scorpion are wrong because they are not standard names for crawling tools. A web bug is a different idea: a tiny hidden image used to track whether a page or email was opened, not to explore a site.

Rule to remember: when a question describes automatically following links to map a site, think spider or crawler. Tracking pixels are called web bugs.

Example 2

Question: Which cloud service model gives the customer the most control over the underlying infrastructure?

  1. SaaS
  2. PaaS
  3. IaaS
  4. FaaS

Answer: C. IaaS

Explanation:

The correct answer is IaaS. With Infrastructure as a Service, the provider supplies the virtual machines, storage and networking, and the customer controls the operating system and everything installed on top of it. That gives the customer the most control, and also the most security responsibility.

SaaS is wrong because the provider runs the whole application and the customer only uses it. PaaS is wrong because the provider manages the operating system and runtime, leaving the customer with the application and its data. FaaS is wrong because the customer supplies only function code, while the provider handles nearly everything underneath.

Rule to remember: moving from IaaS to PaaS to SaaS shifts control and responsibility toward the provider.

Example 3

Question: What is steganography and how does it differ from encryption?

  1. Hiding data within other files (images, audio) to conceal its existence, versus encryption which makes data unreadable
  2. A type of encryption algorithm
  3. A method for compressing images
  4. A handwriting analysis technique

Answer: A. Hiding data within other files (images, audio) to conceal its existence, versus encryption which makes data unreadable

Explanation:

The correct answer is hiding data inside other files to conceal that it exists, in contrast to encryption, which makes data unreadable. Steganography embeds a message in something innocent such as an image or audio file, so an observer may not realise a message is there. With encryption, an observer can see that protected data exists but cannot read it.

The option calling it an encryption algorithm is wrong because steganography does not scramble content by itself. The option about compressing images is wrong because compression reduces file size and does not hide anything. The handwriting analysis option is wrong because that is a forensic technique unrelated to concealing data.

Rule to remember: encryption protects the content of a message, and steganography hides the fact that a message exists. The two can be combined.

How to use these practice tests

Start by reading the official EC-Council exam page so you know the topic areas the exam covers and how it is delivered. Then take a practice set cold, without notes, to see where you stand.

Review every question you got wrong, and also the ones you guessed correctly. Read the explanation, then write a short note in your own words about the rule behind the answer. Group your notes by topic, such as reconnaissance, cloud models, cryptography and attack techniques, so patterns in your mistakes become visible.

Next, study the weak topics using official EC-Council material or your training course, and use a lab environment where you can try tools hands-on. Reading about a scanner is not the same as running one, and the exam rewards understanding what a tool does and when you would use it.

Return to the Certified Ethical Hacker practice test and repeat in short sessions, focusing on topics you flagged. Because the cut score varies by form, keep practising until your results are consistently well above the top of the typical range. In the last days, practise in a single sitting to build the stamina needed for a long exam, and check your delivery method and ID requirements with EC-Council.

Key Takeaways:

  • Practice tests are essential for effective CEH exam preparation.
  • They help assess your knowledge gaps and improve problem-solving abilities.
  • Choose reputable CEH practice test sites to optimize your study efforts.
  • Practice tests simulate the exam environment, enhancing your comfort and confidence.
  • Use a combination of practice tests, mock exams, and additional study materials for comprehensive preparation.

Understanding the Certified Ethical Hacker Exam

Before diving into practice tests, it is crucial to understand the format and content of the Certified Ethical Hacker (CEH) exam. In this section, we will provide an overview of the exam structure, including the topics covered and the types of questions to expect. This knowledge will help you tailor your study plan and focus on areas that require more attention.

The CEH exam is designed to evaluate your knowledge and skills in ethical hacking. It consists of multiple-choice questions that assess your understanding of various hacking techniques, tools, and methodologies. The exam is conducted online and proctored, ensuring its integrity and reliability.

The CEH exam covers a wide range of topics, including:

  • Information Security and Ethical Hacking
  • Footprinting and Reconnaissance
  • Scanning Networks
  • Enumeration
  • Vulnerability Analysis
  • System Hacking
  • Malware Threats
  • Sniffing
  • Social Engineering
  • Denial-of-Service
  • Session Hijacking
  • Evading IDS, Firewalls, and Honeypots
  • Hacking Web Applications
  • SQL Injection
  • Wireless Network Hacking
  • Mobile Platform Hacking
  • Cryptography
  • Cloud Computing

These topics encompass a wide range of knowledge and skills required to become a successful ethical hacker. Understanding the exam’s content and structure will help you allocate your study time effectively and focus on areas where you may need more practice.

Cybersecurity Certification 3 X - Certified Ethical Hacker study guide

Familiarize Yourself with Different Question Types

The CEH exam includes different types of questions to assess your understanding and application of hacking concepts. Being familiar with these question types will help you approach each question strategically and maximize your chances of success. Here are some of the question types you may encounter:

  1. Multiple-choice questions: These questions have a single correct answer from the options provided.
  2. Drag and drop questions: You will be required to match items from one column to another.
  3. Hotspot questions: These questions require you to click on specific areas of an image or diagram.
  4. Simulation questions: You will be presented with a virtual environment where you need to perform certain tasks.

It is essential to practice with different types of questions to become familiar with their formats and develop effective strategies for answering them.

“Understanding the format and content of the CEH exam is the first step towards successful exam preparation. By knowing what to expect, you can tailor your study plan to focus on the areas that require more attention.”

Now that we have a clear understanding of the CEH exam structure and question types, let’s explore the benefits of incorporating CEH practice tests into your exam preparation strategy.

Improved Time Management Skills

The Benefits of CEH Practice Tests

Practice makes perfect, and the same applies to the CEH exam. Incorporating practice tests into your exam preparation can provide numerous benefits that will enhance your performance. Whether you’re a beginner or have some hacking experience, CEH practice tests are an essential tool to help you succeed.

CEH practice tests are designed to simulate the real exam experience, including time restrictions. By regularly taking timed practice tests, you can develop effective time management skills. This will ensure that you can allocate the right amount of time to each question and complete the exam within the given time frame.

Exam Environment Familiarization

The CEH exam can be intense, causing anxiety for many test-takers. Practice tests can help alleviate this stress by familiarizing you with the exam environment. By experiencing similar question formats, interface, and overall exam structure, you will feel more comfortable and confident on the actual exam day.

Enhanced Question-Answering Proficiency

CEH practice tests consist of a variety of question types, including multiple-choice, scenarios, and simulated hacking challenges. By exposing yourself to different question formats and learning how to analyze and interpret them accurately, you will enhance your ability to choose the right answers. This skill is crucial for successfully answering various question types on the actual CEH exam.

Reputable Sources for CEH Practice Questions and Mock Tests

When preparing for the CEH exam, it’s crucial to use reliable and high-quality practice materials. There are several reputable sources that offer CEH practice questions and mock tests. These resources provide a wide range of questions that cover all the exam domains, allowing you to thoroughly assess your knowledge and identify areas that require further improvement.

By incorporating CEH practice tests into your exam preparation, you can gain a competitive edge and maximize your chances of success on the CEH exam.

Continue your CEH exam preparation journey by exploring the effective strategies in Section 4: Effective Strategies for CEH Exam Prep.

Ethical Hacking X - Certified Ethical Hacker study guide

Organize Your Study Schedule

Effective Strategies for CEH Exam Prep

Preparing for the CEH exam requires careful planning and effective strategies. In this section, we will discuss some essential methods to optimize your CEH exam preparation. By following these strategies, you can confidently approach the exam and increase your chances of success.

Creating a structured study schedule is crucial for effective CEH exam preparation. Divide your study time into manageable blocks, ensuring that you allocate sufficient time for each CEH domain. This will help you cover all the necessary topics and prevent cramming at the last minute. Consider using study planner apps or calendars to stay organized and track your progress.

Key Takeaways: guide - Certified Ethical Hacker certification study resource

Use Practice Tests for Targeted Practice

Practice tests play a vital role in preparing for the CEH exam. They not only help you assess your knowledge but also provide valuable insight into the exam format, question types, and time management. Dedicate time to take practice tests regularly, focusing on your weaker areas. Analyze your performance and identify the topics that require more attention. This targeted practice will enhance your understanding and ensure a comprehensive exam preparation.

Use Additional Study Resources

In addition to practice tests, use other study resources to strengthen your knowledge in specific CEH domains. These resources can include textbooks, online courses, video tutorials, and review guides. Identify reputable sources that align with the CEH exam objectives and incorporate them into your study plan. Supplementing your knowledge with diverse learning materials will provide a well-rounded understanding of the concepts covered in the exam.

By implementing these effective strategies, you can optimize your CEH exam preparation and increase your confidence. Remember to stay consistent, maintain a disciplined study routine, and adapt your approach based on your performance in practice tests. With dedication and perseverance, you will be well-prepared to excel in the CEH exam and earn your certification.

If you are preparing for a career in it certification, you may also find these related practice tests helpful:

Prepare for the CompTIA - CompTIA Computing Technology Industry Association — the Computing Technology Industry Association vendor-neutral IT certifications covering hardware, networking, and security.

Prepare for the CompTIA Network+ — the CompTIA Network+ certification validating networking concepts, infrastructure, and troubleshooting skills.

Prepare for the CISSP - Certified Information Systems Security Professional — the Certified Information Systems Security Professional exam, the gold standard in cybersecurity certification.

Prepare for the AZ-900 - Microsoft Azure Fundamentals — the Microsoft Azure Fundamentals certification covering cloud concepts, Azure services, and pricing models.

Prepare for the AWS - Amazon Web Services — the Amazon Web Services cloud certification validating cloud architecture and deployment skills.

✅Pros
  • +Validates your knowledge and skills objectively
  • +Increases job market competitiveness
  • +Provides structured learning goals
  • +Networking opportunities with other certified professionals
❌Cons
  • −Study materials can be expensive
  • −Exam anxiety can affect performance
  • −Requires dedicated preparation time
  • −Retake fees apply if you don't pass

CEH Questions and Answers

Sources & last verified

  1. EC-Council — number of questions, time limit, passing score, delivery (official source). “This 4-hour exam with 125 multiple-choice questions will test your skills in:” Verified Oct 25, 2026 · source checked Oct 18, 2026.
  2. EC-Council — exam fee, retake policy, eligibility (official source). “Submit their eligibility application along with a non-refundable $100 application fee.” Verified Oct 25, 2026 · source checked Oct 17, 2026.

How we verify: editorial & fact-checking policy. Report an error: contact us.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. cert.eccouncil.org — Eligibility, fees, retake policy · verified Oct 2026
  2. eccouncil.org — Test delivery, exam format, passing score, time limit · verified Oct 2026