Certified Ethical Hacker Practice Test

▶

CEH Practice Test

Updated for November 2026
Home›CEH

The Certified Ethical Hacker has 125 questions and takes about 4 hours[1] (EC-Council, verified Oct 25, 2026).

  • The Certified Ethical Hacker (CEH) exam has 125 multiple-choice questions.[1]
  • The Certified Ethical Hacker (CEH) knowledge exam has a 4-hour time limit.[1]
  • The CEH exam uses a cut score that varies by exam form, with typical passing cut scores ranging from 60% to 85%.[1]
  • CEH candidates without official training must submit an eligibility application with a non-refundable $100 application fee.[2]
  • EC-Council allows CEH candidates to re-attempt the examination up to 4 times in one year.[2]
  • The CEH exam can be taken at the training center, online with EC-Council's remote proctoring service, or at over 4,500 VUE testing centers worldwide.[1]
  • CEH candidates need two years of work experience in an information security role, or must complete official EC-Council training.[2]

Numbers in brackets link to the official sources listed under Sources & last verified. Dates that have passed are removed automatically.

Certified Ethical Hacker Exam at a Glance

ItemDetailSource · Verified
Number of questions125 multiple-choice questions[1]EC-Council · Oct 25, 2026
Time limit4 hours[1]EC-Council · Oct 25, 2026
Passing scoreCut score varies by form, typically 60%–85%[1]EC-Council · Oct 25, 2026
Exam fee (eligibility application)$100 non-refundable application fee[2]EC-Council · Oct 25, 2026
Retake policyUp to 4 re-attempts in one year[2]EC-Council · Oct 25, 2026
DeliveryTraining center, EC-Council remote proctoring, or VUE test centers[1]EC-Council · Oct 25, 2026
Eligibility2 years of IT security experience, or official training[2]EC-Council · Oct 25, 2026

In this comprehensive guide, we will provide you with essential tips and resources to help you prepare for the Certified Ethical Hacker (CEH) exam. Whether you’re a beginner or an experienced professional looking to enhance your hacking skills, our CEH practice test prep guide is here to support your journey towards success.

Free CEH Practice Test Online

Preparing for the CEH exam involves a combination of theoretical knowledge and practical application. To excel in both areas, incorporating practice tests into your study routine is crucial. By simulating the exam environment, practice tests can help you assess your strengths and weaknesses, identify knowledge gaps, and refine your problem-solving abilities.

To assist you further, we have compiled a list of the best CEH practice test sites available online. These resources offer a wide range of practice questions, mock exams, and interactive learning materials that align with the CEH exam objectives. By using these reputable sites, you can gain valuable insights into the exam format and significantly improve your chances of success.

Whether you prefer an online CEH practice test or a certification practice test, our guide will point you towards the best resources to suit your learning style and goals. So, let’s dive into the world of CEH exam preparation and equip ourselves for a successful hacking career.

CEH vs AZ-900: Choosing Between Ethical Hacking and Azure Fundamentals

Candidates weighing the CEH against the az-900 (Microsoft Azure Fundamentals) should understand that these certifications serve different career paths. CEH validates offensive security skills across 20 modules including footprinting, scanning, and system hacking, while az-900 covers cloud concepts, Azure pricing, and core services at a beginner level. Many security professionals pursue az-900 first to build cloud literacy before tackling CEH's 125-question, four-hour exam.

Cloud Security Topics: Where CEH Overlaps with AZ-900 Knowledge

Module 19 of the CEH exam covers cloud computing threats, container security, and serverless vulnerabilities, which benefits from the foundational Azure knowledge tested in az-900. The az-900 exam costs $99 and includes 40-60 questions on shared responsibility, identity services, and governance, all concepts that reinforce CEH domains on cloud penetration testing. Understanding Azure AD, network security groups, and role-based access control helps CEH candidates answer cloud-specific questions correctly.

According to EC-Council, “This 4-hour exam with 125 multiple-choice questions will test your skills in:”[1]

Worked examples: how to reason through Certified Ethical Hacker questions

These are practice questions written for this site, not questions from the real exam. Each explanation shows why the right answer is right and why the others are wrong.

Example 1

Question: Let's say you want to find information about a website by crawling through it. Which application do you apply?

  1. Web Ant
  2. Web Bug
  3. Web Spiders
  4. Web Scorpion

Answer: C. Web Spiders

Explanation:

The correct answer is Web Spiders. A spider, also called a crawler or bot, is an automated program that follows links from page to page and records what it finds. Attackers and defenders both use this kind of crawling during reconnaissance to map a site's structure, links and content.

Web Ant, Web Bug and Web Scorpion are wrong because they are not standard names for crawling tools. A web bug is a different idea: a tiny hidden image used to track whether a page or email was opened, not to explore a site.

Rule to remember: when a question describes automatically following links to map a site, think spider or crawler. Tracking pixels are called web bugs.

Example 2

Question: Which cloud service model gives the customer the most control over the underlying infrastructure?

  1. SaaS
  2. PaaS
  3. IaaS
  4. FaaS

Answer: C. IaaS

Explanation:

The correct answer is IaaS. With Infrastructure as a Service, the provider supplies the virtual machines, storage and networking, and the customer controls the operating system and everything installed on top of it. That gives the customer the most control, and also the most security responsibility.

SaaS is wrong because the provider runs the whole application and the customer only uses it. PaaS is wrong because the provider manages the operating system and runtime, leaving the customer with the application and its data. FaaS is wrong because the customer supplies only function code, while the provider handles nearly everything underneath.

Rule to remember: moving from IaaS to PaaS to SaaS shifts control and responsibility toward the provider.

Example 3

Question: What is steganography and how does it differ from encryption?

  1. Hiding data within other files (images, audio) to conceal its existence, versus encryption which makes data unreadable
  2. A type of encryption algorithm
  3. A method for compressing images
  4. A handwriting analysis technique

Answer: A. Hiding data within other files (images, audio) to conceal its existence, versus encryption which makes data unreadable

Explanation:

The correct answer is hiding data inside other files to conceal that it exists, in contrast to encryption, which makes data unreadable. Steganography embeds a message in something innocent such as an image or audio file, so an observer may not realise a message is there. With encryption, an observer can see that protected data exists but cannot read it.

The option calling it an encryption algorithm is wrong because steganography does not scramble content by itself. The option about compressing images is wrong because compression reduces file size and does not hide anything. The handwriting analysis option is wrong because that is a forensic technique unrelated to concealing data.

Rule to remember: encryption protects the content of a message, and steganography hides the fact that a message exists. The two can be combined.

How to use these practice tests

Start by reading the official EC-Council exam page so you know the topic areas the exam covers and how it is delivered. Then take a practice set cold, without notes, to see where you stand.

Review every question you got wrong, and also the ones you guessed correctly. Read the explanation, then write a short note in your own words about the rule behind the answer. Group your notes by topic, such as reconnaissance, cloud models, cryptography and attack techniques, so patterns in your mistakes become visible.

Next, study the weak topics using official EC-Council material or your training course, and use a lab environment where you can try tools hands-on. Reading about a scanner is not the same as running one, and the exam rewards understanding what a tool does and when you would use it.

Return to the Certified Ethical Hacker practice test and repeat in short sessions, focusing on topics you flagged. Because the cut score varies by form, keep practising until your results are consistently well above the top of the typical range. In the last days, practise in a single sitting to build the stamina needed for a long exam, and check your delivery method and ID requirements with EC-Council.

Key Takeaways:

Understanding the Certified Ethical Hacker Exam

Before diving into practice tests, it is crucial to understand the format and content of the Certified Ethical Hacker (CEH) exam. In this section, we will provide an overview of the exam structure, including the topics covered and the types of questions to expect. This knowledge will help you tailor your study plan and focus on areas that require more attention.

The CEH exam is designed to evaluate your knowledge and skills in ethical hacking. It consists of multiple-choice questions that assess your understanding of various hacking techniques, tools, and methodologies. The exam is conducted online and proctored, ensuring its integrity and reliability.

The CEH exam covers a wide range of topics, including:

These topics encompass a wide range of knowledge and skills required to become a successful ethical hacker. Understanding the exam’s content and structure will help you allocate your study time effectively and focus on areas where you may need more practice.

Familiarize Yourself with Different Question Types

The CEH exam includes different types of questions to assess your understanding and application of hacking concepts. Being familiar with these question types will help you approach each question strategically and maximize your chances of success. Here are some of the question types you may encounter:

  1. Multiple-choice questions: These questions have a single correct answer from the options provided.
  2. Drag and drop questions: You will be required to match items from one column to another.
  3. Hotspot questions: These questions require you to click on specific areas of an image or diagram.
  4. Simulation questions: You will be presented with a virtual environment where you need to perform certain tasks.

It is essential to practice with different types of questions to become familiar with their formats and develop effective strategies for answering them.

“Understanding the format and content of the CEH exam is the first step towards successful exam preparation. By knowing what to expect, you can tailor your study plan to focus on the areas that require more attention.”

Now that we have a clear understanding of the CEH exam structure and question types, let’s explore the benefits of incorporating CEH practice tests into your exam preparation strategy.

Improved Time Management Skills

The Benefits of CEH Practice Tests

Practice makes perfect, and the same applies to the CEH exam. Incorporating practice tests into your exam preparation can provide numerous benefits that will enhance your performance. Whether you’re a beginner or have some hacking experience, CEH practice tests are an essential tool to help you succeed.

CEH practice tests are designed to simulate the real exam experience, including time restrictions. By regularly taking timed practice tests, you can develop effective time management skills. This will ensure that you can allocate the right amount of time to each question and complete the exam within the given time frame.

Start Practice Test

Exam Environment Familiarization

The CEH exam can be intense, causing anxiety for many test-takers. Practice tests can help alleviate this stress by familiarizing you with the exam environment. By experiencing similar question formats, interface, and overall exam structure, you will feel more comfortable and confident on the actual exam day.

Enhanced Question-Answering Proficiency

CEH practice tests consist of a variety of question types, including multiple-choice, scenarios, and simulated hacking challenges. By exposing yourself to different question formats and learning how to analyze and interpret them accurately, you will enhance your ability to choose the right answers. This skill is crucial for successfully answering various question types on the actual CEH exam.

Reputable Sources for CEH Practice Questions and Mock Tests

When preparing for the CEH exam, it’s crucial to use reliable and high-quality practice materials. There are several reputable sources that offer CEH practice questions and mock tests. These resources provide a wide range of questions that cover all the exam domains, allowing you to thoroughly assess your knowledge and identify areas that require further improvement.

By incorporating CEH practice tests into your exam preparation, you can gain a competitive edge and maximize your chances of success on the CEH exam.

Continue your CEH exam preparation journey by exploring the effective strategies in Section 4: Effective Strategies for CEH Exam Prep.

Organize Your Study Schedule

Effective Strategies for CEH Exam Prep

Preparing for the CEH exam requires careful planning and effective strategies. In this section, we will discuss some essential methods to optimize your CEH exam preparation. By following these strategies, you can confidently approach the exam and increase your chances of success.

Creating a structured study schedule is crucial for effective CEH exam preparation. Divide your study time into manageable blocks, ensuring that you allocate sufficient time for each CEH domain. This will help you cover all the necessary topics and prevent cramming at the last minute. Consider using study planner apps or calendars to stay organized and track your progress.

Use Practice Tests for Targeted Practice

Practice tests play a vital role in preparing for the CEH exam. They not only help you assess your knowledge but also provide valuable insight into the exam format, question types, and time management. Dedicate time to take practice tests regularly, focusing on your weaker areas. Analyze your performance and identify the topics that require more attention. This targeted practice will enhance your understanding and ensure a comprehensive exam preparation.

Use Additional Study Resources

In addition to practice tests, use other study resources to strengthen your knowledge in specific CEH domains. These resources can include textbooks, online courses, video tutorials, and review guides. Identify reputable sources that align with the CEH exam objectives and incorporate them into your study plan. Supplementing your knowledge with diverse learning materials will provide a well-rounded understanding of the concepts covered in the exam.

By implementing these effective strategies, you can optimize your CEH exam preparation and increase your confidence. Remember to stay consistent, maintain a disciplined study routine, and adapt your approach based on your performance in practice tests. With dedication and perseverance, you will be well-prepared to excel in the CEH exam and earn your certification.

Related IT Certification Practice Tests

If you are preparing for a career in it certification, you may also find these related practice tests helpful:

Prepare for the CompTIA - CompTIA Computing Technology Industry Association — the Computing Technology Industry Association vendor-neutral IT certifications covering hardware, networking, and security.

Prepare for the CompTIA Network+ — the CompTIA Network+ certification validating networking concepts, infrastructure, and troubleshooting skills.

Prepare for the CISSP - Certified Information Systems Security Professional — the Certified Information Systems Security Professional exam, the gold standard in cybersecurity certification.

Prepare for the AZ-900 - Microsoft Azure Fundamentals — the Microsoft Azure Fundamentals certification covering cloud concepts, Azure services, and pricing models.

Prepare for the AWS - Amazon Web Services — the Amazon Web Services cloud certification validating cloud architecture and deployment skills.

Pros

  • Validates your knowledge and skills objectively
  • Increases job market competitiveness
  • Provides structured learning goals
  • Networking opportunities with other certified professionals

Cons

  • Study materials can be expensive
  • Exam anxiety can affect performance
  • Requires dedicated preparation time
  • Retake fees apply if you don't pass

CEH Questions and Answers

What is the CEH certification exam?

The Certified Ethical Hacker (CEH) exam is an EC-Council credential that validates skills in identifying vulnerabilities and weaknesses in target systems using the same knowledge and tools as malicious hackers. It covers penetration testing, reconnaissance, system hacking, and countermeasures across 20 domains aligned with real-world security roles.

What is the format of the CEH exam?

The CEH (312-50) exam is a computer-based, multiple-choice test delivered through Pearson VUE or ECC Exam Portal. Candidates have four hours to complete it, and questions are scenario-based, testing both theoretical knowledge and practical application of ethical hacking concepts and tools.

How many questions are on the CEH exam?

The CEH knowledge exam contains 125 multiple-choice questions that must be answered within the four-hour time limit. EC-Council also offers an optional CEH Practical, a separate six-hour hands-on exam with 20 real-world challenges performed in a live cyber range environment.

What is the passing score for the CEH exam?

The CEH exam does not have a fixed passing score. EC-Council uses a cut score that varies between 60% and 85% depending on the difficulty of the specific exam form a candidate receives. Scores are determined through psychometric analysis to ensure fairness across different test versions.

What topics does the CEH exam cover?

The exam covers 20 modules including footprinting and reconnaissance, scanning networks, enumeration, vulnerability analysis, system hacking, malware threats, sniffing, social engineering, denial-of-service, session hijacking, web application hacking, SQL injection, wireless and mobile hacking, IoT and OT hacking, cloud computing, and cryptography.

What are the eligibility requirements for the CEH exam?

Candidates must either complete official EC-Council CEH training or demonstrate at least two years of verified information security work experience and pay a non-refundable eligibility application fee of $100. Self-study candidates must submit an eligibility form with employer verification before being approved to sit the exam.

How do I register for the CEH exam?

Registration is handled through EC-Council's ECC Exam Portal or via Pearson VUE testing centers. Candidates purchase an exam voucher from EC-Council or an authorized training partner, then schedule their exam at a physical Pearson VUE center or through remote online proctoring. The standard exam fee is approximately $1,199 plus the application fee.

What are the best tips for preparing for the CEH exam?

Focus on hands-on practice with tools like Nmap, Metasploit, Wireshark, Burp Suite, and John the Ripper rather than memorization alone. Study the official EC-Council courseware, set up a home lab for practical experimentation, review all 20 modules systematically, and take timed practice tests to build familiarity with scenario-based questions and pacing.

How long is the Certified Ethical Hacker?

The EC-Council Certified Ethical Hacker (CEH) knowledge exam is a 4-hour exam. (Verified Oct 20, 2026 against EC-Council.)

How much does the Certified Ethical Hacker cost?

Candidates who apply for CEH eligibility based on work experience pay a non-refundable $100 application fee. (Verified Oct 20, 2026 against EC-Council.)

Sources & last verified

  1. EC-Council — number of questions, time limit, passing score, delivery (official source). “This 4-hour exam with 125 multiple-choice questions will test your skills in:” Verified Oct 25, 2026 · source checked Oct 18, 2026.
  2. EC-Council — exam fee, retake policy, eligibility (official source). “Submit their eligibility application along with a non-refundable $100 application fee.” Verified Oct 25, 2026 · source checked Oct 17, 2026.

How we verify: editorial & fact-checking policy. Report an error: contact us.

▶ Start Quiz