← All exams
Home · Certified Ethical Hacker (CEH)

Certified Ethical Hacker (CEH)

This certification is intended for security officers, auditors, site administrators, and anyone concerned with the integrity of network infrastructure. It validates the knowledge required to assess security vulnerabilities and use the same tools as a malicious hacker, but in a lawful and legitimate manner.

Pass mark 28/40 45 minutes Real test fee approx EC-Council How many can I get wrong?
Weak on a topic? Drill just that one till it clicks, then move on.
Free practice questions
Try 3 real Certified Ethical Hacker (CEH) questions
Have a go, then reveal the worked explanation. A taster from a bank of 208 original questions — unlock for unlimited drills and full timed mocks.
Q1. What is the primary objective of the footprinting phase in an ethical hacking engagement?
  • A.  To gain unauthorized access to the target system.
  • B.  To gather as much information as possible about the target.
  • C.  To launch a Denial-of-Service (DoS) attack.
  • D.  To install malware on the target's servers.
Show answer & explanation
✓ Answer: B. To gather as much information as possible about the target.
Footprinting is the initial information-gathering phase, focused on collecting data to understand the target's security posture and potential vulnerabilities.
Q2. An ethical hacker is attempting to map out the ruleset of a stateless firewall. Which Nmap scan is specifically designed for this purpose by sending packets with only the ACK flag set?
  • A.  FIN Scan (-sF)
  • B.  NULL Scan (-sN)
  • C.  ACK Flag Probe Scan (-sA)
  • D.  Window Scan (-sW)
Show answer & explanation
✓ Answer: C. ACK Flag Probe Scan (-sA)
The ACK scan (-sA) is used to map firewall rulesets. It determines if they are stateful or stateless and which ports are filtered, as unfiltered ports will return an RST packet.
Q3. During post-exploitation on a Windows system, an ethical hacker wants to hide a malicious payload within a legitimate text file without altering its visible size or content. Which NTFS file system feature is ideal for this purpose?
  • A.  Volume Shadow Copy Service (VSS)
  • B.  Encrypting File System (EFS)
  • C.  Alternate Data Streams (ADS)
  • D.  Master File Table (MFT) slack space
Show answer & explanation
✓ Answer: C. Alternate Data Streams (ADS)
Alternate Data Streams (ADS) is an NTFS feature that allows data to be stored in a separate, hidden stream attached to a file, making it invisible to standard directory listings.
Start here
Ten questions to see where you stand
Two minutes, no timer, marked the moment you finish with every answer explained. Then you'll know which topics need the work before you sit a full mock.
Exam mode
Full mock exam
40 random questions, real timing, marked against the official pass mark. Different every time.
Create a free account for a full mock
No card needed. A free account unlocks a full timed mock and 3 drills on every exam.
Try it free
Topic drills
Ten quick questions on one topic, marked instantly with explanations.
1 free drill left — then a free account unlocks 3 + a full mock.
Footprinting and Reconnaissance · 30
Scanning Networks · 30
System Hacking · 29
Malware Threats · 30
Social Engineering · 29
Hacking Web Applications · 20
Hacking Wireless Networks · 20
Cryptography · 20
Certified Ethical Hacker (CEH) — common questions
Frequently asked
How many questions are in the Certified Ethical Hacker (CEH)?
The exam has 40 questions. Every Revision Robin mock uses the same 40-question format so your practice matches the real thing.
What is the pass mark for the Certified Ethical Hacker (CEH)?
You need 28 out of 40 correct to pass, which is about 70%. Our mocks mark you against this exact threshold.
How long do you get?
The test is timed at 45 minutes. Our full mock runs on the same clock so you can practise your pacing.
Are these the real exam questions?
No. Our questions are original and written to match the current syllabus, so they give realistic practice without copying the official paper. Every answer comes with a plain-English explanation. Always confirm current rules and content with EC-Council.
How much does the official test cost?
The official EC-Council fee is approx. Revision Robin practice is separate and helps you pass first time so you only pay that fee once.