CEH - Certified Ethical Hacker Cheat Sheet

20 practice tests · 813 questions

Pick an answer to see if it was correct and why, then continue.

Test 1
Information Security Fundamentals, Attack Classification, and Hacker Classes, Ethical Hacking, CEH Methodology, and AI-Driven Hacking, Cyber Kill Chain and MITRE ATT&CK Framework
38 questions
Test 2
Information Assurance, Risk Management, Threat Intelligence, and Incident Management, Information Security Laws, Standards, and Compliance Regulations, Footprinting Concepts and Search Engine, OSINT, and Social Networking Footprinting
37 questions
Test 3
Whois, DNS, and Network Footprinting, Email, Social Engineering Footprinting, and AI-Powered OSINT, Network Scanning Concepts and Host Discovery Techniques
37 questions
Test 4
Port Scanning Techniques and Service Version Discovery, OS Discovery, Banner Grabbing, and Scanning Beyond IDS and Firewall, Enumeration Concepts, NetBIOS, and SMB Enumeration
38 questions
Test 5
SNMP, LDAP, NTP, NFS, and RPC Enumeration, SMTP, DNS, IPsec, VoIP, Unix/Linux Enumeration, and Countermeasures, Vulnerability Classification and Scoring Systems
37 questions
Test 6
Vulnerability Management Lifecycle, Assessment Types, and Tools, Password Cracking Concepts and Password Attack Types, Windows and Linux Authentication Attacks and Password-Cracking Tools
42 questions
Test 7
Vulnerability Exploitation, Metasploit Framework, and Buffer Overflow, Active Directory Enumeration and Privilege Escalation, Maintaining Access: Executing Applications, Keyloggers, Spyware, and Rootkits
45 questions
Test 8
Steganography and Steganalysis, Covering Tracks and Clearing Logs, Malware Concepts, Trojans, and Advanced Persistent Threats
42 questions
Test 9
Viruses, Worms, Ransomware, and Fileless and AI-Based Malware, Malware Analysis, Detection Methods, and Countermeasures, Sniffing Concepts, MAC Flooding, and DHCP Starvation
36 questions
Test 10
ARP Poisoning, MAC Spoofing, VLAN Hopping, and STP Attacks, DNS Poisoning, Sniffing Tools, and Sniffer Detection, Social Engineering Concepts and Human-Based Techniques
38 questions
Test 11
Phishing, Identity Theft, and Social Engineering Countermeasures, DoS and DDoS Attack Techniques and Botnets, DoS and DDoS Detection, Protection Tools, and Services
42 questions
Test 12
Application-Level Session Hijacking, Network-Level Session Hijacking, Tools, and Prevention, IDS, IPS, and Firewall Concepts and Types
37 questions
Test 13
IDS and Firewall Evasion Techniques and Antivirus Bypass, Honeypots and IDS/Firewall Evasion Countermeasures, Web Server Architecture, Vulnerabilities, and Attacks
44 questions
Test 14
Web Server Attack Methodology, Tools, and Countermeasures, Web Application Concepts and OWASP Top 10 Application Security Risks 2021, Web Application Hacking Methodology and Client-Side Bypass
44 questions
Test 15
Web Services, Web API, and Webhook Hacking, SQL Injection Types and Attack Techniques, SQL Injection Methodology, Tools, Evasion, and Countermeasures
40 questions
Test 16
Wireless Standards, Encryption, and Threats, Wireless Hacking Methodology, Attacks, and Countermeasures, Mobile Attack Vectors and OWASP Top 10 Mobile Risks 2024
41 questions
Test 17
Android Hacking and Security, iOS Hacking and Mobile Device Management, IoT Architecture, Protocols, and OWASP IoT Threats
37 questions
Test 18
IoT Attacks, Hacking Methodology, and Tools, OT, ICS, and SCADA Hacking, Cloud Computing Concepts, Containers, Kubernetes, and Serverless
48 questions
Test 19
Cloud Threats, Container/Kubernetes Vulnerabilities, and Attacks, Cloud Hacking (AWS, Azure, GCP, Container) and Cloud Security Controls, Cryptography Concepts, Ciphers, and Encryption Algorithms
46 questions
Test 20 · Final
Hash Functions, PKI, Digital Signatures, and Certificates, Email Encryption, Disk Encryption, Blockchain, and Cryptography Tools, Cryptanalysis and Cryptography Attacks
44 questions
+150 XP

Information Security Fundamentals, Attack Classification, and Hacker Classes, Ethical Hacking, CEH Methodology, and AI-Driven Hacking, Cyber Kill Chain and MITRE ATT&CK Framework

Information Assurance, Risk Management, Threat Intelligence, and Incident Management, Information Security Laws, Standards, and Compliance Regulations, Footprinting Concepts and Search Engine, OSINT, and Social Networking Footprinting

Whois, DNS, and Network Footprinting, Email, Social Engineering Footprinting, and AI-Powered OSINT, Network Scanning Concepts and Host Discovery Techniques

Port Scanning Techniques and Service Version Discovery, OS Discovery, Banner Grabbing, and Scanning Beyond IDS and Firewall, Enumeration Concepts, NetBIOS, and SMB Enumeration

SNMP, LDAP, NTP, NFS, and RPC Enumeration, SMTP, DNS, IPsec, VoIP, Unix/Linux Enumeration, and Countermeasures, Vulnerability Classification and Scoring Systems

Vulnerability Management Lifecycle, Assessment Types, and Tools, Password Cracking Concepts and Password Attack Types, Windows and Linux Authentication Attacks and Password-Cracking Tools

Vulnerability Exploitation, Metasploit Framework, and Buffer Overflow, Active Directory Enumeration and Privilege Escalation, Maintaining Access: Executing Applications, Keyloggers, Spyware, and Rootkits

Steganography and Steganalysis, Covering Tracks and Clearing Logs, Malware Concepts, Trojans, and Advanced Persistent Threats

Viruses, Worms, Ransomware, and Fileless and AI-Based Malware, Malware Analysis, Detection Methods, and Countermeasures, Sniffing Concepts, MAC Flooding, and DHCP Starvation

ARP Poisoning, MAC Spoofing, VLAN Hopping, and STP Attacks, DNS Poisoning, Sniffing Tools, and Sniffer Detection, Social Engineering Concepts and Human-Based Techniques

Phishing, Identity Theft, and Social Engineering Countermeasures, DoS and DDoS Attack Techniques and Botnets, DoS and DDoS Detection, Protection Tools, and Services

Application-Level Session Hijacking, Network-Level Session Hijacking, Tools, and Prevention, IDS, IPS, and Firewall Concepts and Types

IDS and Firewall Evasion Techniques and Antivirus Bypass, Honeypots and IDS/Firewall Evasion Countermeasures, Web Server Architecture, Vulnerabilities, and Attacks

Web Server Attack Methodology, Tools, and Countermeasures, Web Application Concepts and OWASP Top 10 Application Security Risks 2021, Web Application Hacking Methodology and Client-Side Bypass

Web Services, Web API, and Webhook Hacking, SQL Injection Types and Attack Techniques, SQL Injection Methodology, Tools, Evasion, and Countermeasures

Wireless Standards, Encryption, and Threats, Wireless Hacking Methodology, Attacks, and Countermeasures, Mobile Attack Vectors and OWASP Top 10 Mobile Risks 2024

Android Hacking and Security, iOS Hacking and Mobile Device Management, IoT Architecture, Protocols, and OWASP IoT Threats

IoT Attacks, Hacking Methodology, and Tools, OT, ICS, and SCADA Hacking, Cloud Computing Concepts, Containers, Kubernetes, and Serverless

Cloud Threats, Container/Kubernetes Vulnerabilities, and Attacks, Cloud Hacking (AWS, Azure, GCP, Container) and Cloud Security Controls, Cryptography Concepts, Ciphers, and Encryption Algorithms

Hash Functions, PKI, Digital Signatures, and Certificates, Email Encryption, Disk Encryption, Blockchain, and Cryptography Tools, Cryptanalysis and Cryptography Attacks

Information Security Fundamentals, Attack Classification, and Hacker Classes, Ethical Hacking, CEH Methodology, and AI-Driven Hacking, Cyber Kill Chain and MITRE ATT&CK Framework

Information Assurance, Risk Management, Threat Intelligence, and Incident Management, Information Security Laws, Standards, and Compliance Regulations, Footprinting Concepts and Search Engine, OSINT, and Social Networking Footprinting

Whois, DNS, and Network Footprinting, Email, Social Engineering Footprinting, and AI-Powered OSINT, Network Scanning Concepts and Host Discovery Techniques

Port Scanning Techniques and Service Version Discovery, OS Discovery, Banner Grabbing, and Scanning Beyond IDS and Firewall, Enumeration Concepts, NetBIOS, and SMB Enumeration

SNMP, LDAP, NTP, NFS, and RPC Enumeration, SMTP, DNS, IPsec, VoIP, Unix/Linux Enumeration, and Countermeasures, Vulnerability Classification and Scoring Systems

Vulnerability Management Lifecycle, Assessment Types, and Tools, Password Cracking Concepts and Password Attack Types, Windows and Linux Authentication Attacks and Password-Cracking Tools

Vulnerability Exploitation, Metasploit Framework, and Buffer Overflow, Active Directory Enumeration and Privilege Escalation, Maintaining Access: Executing Applications, Keyloggers, Spyware, and Rootkits

Steganography and Steganalysis, Covering Tracks and Clearing Logs, Malware Concepts, Trojans, and Advanced Persistent Threats

Viruses, Worms, Ransomware, and Fileless and AI-Based Malware, Malware Analysis, Detection Methods, and Countermeasures, Sniffing Concepts, MAC Flooding, and DHCP Starvation

ARP Poisoning, MAC Spoofing, VLAN Hopping, and STP Attacks, DNS Poisoning, Sniffing Tools, and Sniffer Detection, Social Engineering Concepts and Human-Based Techniques

Phishing, Identity Theft, and Social Engineering Countermeasures, DoS and DDoS Attack Techniques and Botnets, DoS and DDoS Detection, Protection Tools, and Services

Application-Level Session Hijacking, Network-Level Session Hijacking, Tools, and Prevention, IDS, IPS, and Firewall Concepts and Types

IDS and Firewall Evasion Techniques and Antivirus Bypass, Honeypots and IDS/Firewall Evasion Countermeasures, Web Server Architecture, Vulnerabilities, and Attacks

Web Server Attack Methodology, Tools, and Countermeasures, Web Application Concepts and OWASP Top 10 Application Security Risks 2021, Web Application Hacking Methodology and Client-Side Bypass

Web Services, Web API, and Webhook Hacking, SQL Injection Types and Attack Techniques, SQL Injection Methodology, Tools, Evasion, and Countermeasures

Wireless Standards, Encryption, and Threats, Wireless Hacking Methodology, Attacks, and Countermeasures, Mobile Attack Vectors and OWASP Top 10 Mobile Risks 2024

Android Hacking and Security, iOS Hacking and Mobile Device Management, IoT Architecture, Protocols, and OWASP IoT Threats

IoT Attacks, Hacking Methodology, and Tools, OT, ICS, and SCADA Hacking, Cloud Computing Concepts, Containers, Kubernetes, and Serverless

Cloud Threats, Container/Kubernetes Vulnerabilities, and Attacks, Cloud Hacking (AWS, Azure, GCP, Container) and Cloud Security Controls, Cryptography Concepts, Ciphers, and Encryption Algorithms

Hash Functions, PKI, Digital Signatures, and Certificates, Email Encryption, Disk Encryption, Blockchain, and Cryptography Tools, Cryptanalysis and Cryptography Attacks