Certified Ethical Hacker Study Guide 2026

Everything you need to pass the Certified Ethical Hacker exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.

📋 Certified Ethical Hacker Exam Format at a Glance

125

Questions

240 min

Time Limit

70.00%

Passing Score

Take a Full Certified Ethical Hacker Exam Simulation →

📚 Certified Ethical Hacker Topics to Study (56)

Ethical Hacker Security · 11 cards Certified Ethical Hacker MCQ · 11 cards Certified Ethical Hacker MCQ · 7 cards Certified Ethical Hacker MCQ · 7 cards Certified Ethical Hacker MCQ · 7 cards Certified Ethical Hacker MCQ · 7 cards Cryptography Fundamentals · 7 cards Cryptography Fundamentals · 7 cards Cryptography Fundamentals · 7 cards Cryptography Fundamentals · 7 cards Ethical Hacker Methodology · 7 cards Ethical Hacker Methodology · 7 cards Ethical Hacker Methodology · 7 cards Ethical Hacker Methodology · 7 cards Ethical Hacker Security · 7 cards Ethical Hacker Security · 7 cards Ethical Hacker Security · 7 cards Ethical Hacker Security · 7 cards Footprinting and Reconnaissance · 7 cards Footprinting and Reconnaissance · 7 cards Footprinting and Reconnaissance · 7 cards Network Security and Scanning · 7 cards Network Security and Scanning · 7 cards Network Security and Scanning · 7 cards Network Security and Scanning · 7 cards Social Engineering and Physical Security · 7 cards Social Engineering and Physical Security · 7 cards Social Engineering and Physical Security · 7 cards Social Engineering and Physical Security · 7 cards System Hacking and Malware · 7 cards

See all 56 topics as flashcards →

✍️ Sample Certified Ethical Hacker Questions & Answers

1. After compromising one host, a tester uses it to attack deeper internal systems. What is this called?

✓ Pivoting

Pivoting uses a compromised host as a stepping stone to reach other internal systems.

2. Which Google search operator is used to search for specific file types hosted on a target website?

✓ filetype:

The 'filetype:' Google dork operator restricts results to specific file extensions (e.g., PDF, XLS, DOC) which may expose sensitive documents.

3. A polymorphic virus evades antivirus primarily by doing what on each infection?

✓ Changing its decryption routine/code signature

Polymorphic viruses mutate their code or decryption routine each time to alter their signature.

4. What distinguishes an IPS from an IDS?

✓ An IPS can actively block or drop malicious traffic

An IPS is inline and can actively block or drop malicious traffic, while an IDS only detects and alerts.

5. An attacker enumerates valid usernames by observing different error messages. This is a flaw in:

✓ Username enumeration / verbose feedback

Distinct responses for valid vs invalid users leak account existence (username enumeration).

6. What is the key size used by the AES algorithm in its strongest standard configuration?

✓ 256 bits

AES supports 128, 192, and 256-bit keys, with 256-bit being the strongest.

🎯 Free Certified Ethical Hacker Practice Tests

Certified Ethical Hacker MCQ · 11 questions Ethical Hacker Security · 11 questions Social Engineering and Physical Security · 7 questions Web Application Security · 7 questions Web Application Security · 7 questions Web Application Security · 7 questions Certified Ethical Hacker MCQ · 7 questions Web Application Security · 7 questions Certified Ethical Hacker MCQ · 7 questions Social Engineering and Physical Security · 7 questions

📖 Certified Ethical Hacker Guides & Articles

Your Certified Ethical Hacker Study Path

1. Learn with Flashcards → 2. Drill Practice Tests → 3. Take the Full Exam Simulation

🃏 Flashcards (385)🏆 Exam Simulation