Free practice test
CEHFree Certified Ethical Hacker (CEH) practice test
10 original CEH questions, playable right now. No account, no card, no email gate. Every answer opens the full explanation: the concept, why the right option is right, and why each wrong option is wrong, cited to the authoritative documentation behind it.
Sample question 1 of 10
A finance clerk takes a call whose caller ID shows the company's main line, and the caller asks for a change to payment details. Why is that display weak evidence?
Sample question 2 of 10
After an intrusion, a team finds the attacker enumerated services across flat internal subnets. Which listed mitigation limits how far that enumeration reaches?
Sample question 3 of 10
Your verifier must cap consecutive failed authentication attempts on one account before it disables the authenticator. Which upper bound does the guidance set?
Sample question 4 of 10
A team moves all data access into stored procedures and grants the web account rights to run them. Which new risk does the change introduce?
Sample question 5 of 10
An Android app still calls the SafetyNet Attestation API for device integrity and the call now fails everywhere. A developer must restore integrity checks. What is the move?
Sample question 6 of 10
A design team needs a repeatable prompt list so threat identification does not depend on who is in the room. What does STRIDE give them?
Sample question 7 of 10
An engineer applies a default deny all NetworkPolicy to a namespace, yet a pod there still connects to every other namespace. The policy object is present and correctly written. What explains it?
Sample question 8 of 10
A developer appends a plain SHA-256 digest to each API message for integrity. An attacker who can modify traffic recomputes the digest and stays undetected. What does HMAC add?
Sample question 9 of 10
A tester recovers a branch router's WPA2 passphrase in three hours without capturing any handshake. WPS is enabled and the router never locks out after failed PINs. Which WPS design flaw shortens that attack?
Sample question 10 of 10
An analyst finds a workstation whose ARP cache maps the gateway address to an unexpected MAC, although the workstation never sent a request for it. Which technique fits?
That’s 10 of the full CEH bank.
Keep going free: 10 questions per certification in bank practice, with no account.
Continue practicingWhat this test covers
These 10 questions are drawn across the published exam blueprint rather than from one chapter: this set touches Network and Perimeter Hacking, Reconnaissance Techniques, System Hacking Phases and Attack Techniques, Web Application Hacking, Mobile Platform, IoT, and OT Hacking, Information Security and Ethical Hacking Overview, Cloud Computing, Cryptography, Wireless Network Hacking. Every question is original, written from the official objectives, and verified against a cited vendor page before it serves. None are recalled exam content, which is why the explanations can cite their sources.
A 10-question sample tells you where you stand, not whether you are ready. The full experience is numbered practice exams: 125 questions apportioned to the official domain weightings, sat under the real 240-minute clock and scored against the published cut score.
Keep reading
- CEH practice questions
Free sample questions with the full explanation on every answer.
- CEH exam objectives
The full official blueprint, with practice pages on covered objectives.
- CEH exam format
How many questions, how long, what the items look like, and how long it stays valid.
- CEH passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is CEH?
An honest difficulty read from the format, the clock and the weights.