This certification is intended for security officers, auditors, site administrators, and anyone concerned with the integrity of network infrastructure. It validates the knowledge required to assess security vulnerabilities and use the same tools as a malicious hacker, but in a lawful and legitimate manner.
About this practice. Revision Robin is built and maintained by Bloor Engineering Ltd, a UK-registered company. Our Certified Ethical Hacker (CEH) questions are written and reviewed in-house to match the current syllabus, each with a plain-English worked explanation. They are original practice material, not the official exam questions and not affiliated with or endorsed by EC-Council. Always confirm current test rules, fees and content with the official provider. See our Terms and Privacy.
Weak on a topic? Drill just that one till it clicks, then move on.
Free practice questions
Try 3 real Certified Ethical Hacker (CEH) questions
Have a go, then reveal the worked explanation. A taster from a bank of 208 original questions. Unlock for unlimited drills and full timed mocks.
Q1. What is the primary objective of the footprinting phase in an ethical hacking engagement?
A. To gain unauthorized access to the target system.
B. To gather as much information as possible about the target.
C. To launch a Denial-of-Service (DoS) attack.
D. To install malware on the target's servers.
Show answer & explanation
✓ Answer: B. To gather as much information as possible about the target.
Footprinting is the initial information-gathering phase, focused on collecting data to understand the target's security posture and potential vulnerabilities.
Q2. An ethical hacker is attempting to map out the ruleset of a stateless firewall. Which Nmap scan is specifically designed for this purpose by sending packets with only the ACK flag set?
A. FIN Scan (-sF)
B. NULL Scan (-sN)
C. ACK Flag Probe Scan (-sA)
D. Window Scan (-sW)
Show answer & explanation
✓ Answer: C. ACK Flag Probe Scan (-sA)
The ACK scan (-sA) is used to map firewall rulesets. It determines if they are stateful or stateless and which ports are filtered, as unfiltered ports will return an RST packet.
Q3. During post-exploitation on a Windows system, an ethical hacker wants to hide a malicious payload within a legitimate text file without altering its visible size or content. Which NTFS file system feature is ideal for this purpose?
A. Volume Shadow Copy Service (VSS)
B. Encrypting File System (EFS)
C. Alternate Data Streams (ADS)
D. Master File Table (MFT) slack space
Show answer & explanation
✓ Answer: C. Alternate Data Streams (ADS)
Alternate Data Streams (ADS) is an NTFS feature that allows data to be stored in a separate, hidden stream attached to a file, making it invisible to standard directory listings.
Exam mode
Full mock exam
40 random questions, real timing, marked against the official pass mark. Different every time.
The first 8 of 40 questions are free, with your score on them. Finishing the paper, your result against the pass mark and every answer explained come with the paid version.
Try it free
Topic drills
Ten quick questions on one topic, marked instantly with explanations.
1 free drill left.
Who has to sit the Certified Ethical Hacker (CEH)
Who needs a Certified Ethical Hacker (CEH)?
Security analysts, penetration testers, IT/network administrators, and professionals needing a broad ethical hacking foundation.
The real Certified Ethical Hacker (CEH): format
How many questions are in the Certified Ethical Hacker (CEH)?
The real Certified Ethical Hacker (CEH) has 125 questions and lasts 240 minutes. Our mock uses 40 questions in 45 minutes.
What it costs, and what a resit costs
How much does the Certified Ethical Hacker (CEH) cost?
Real exam fee: £850-£1,000. Resit fee: £850-£1,000. Rebooking after a fail: First retake no wait; subsequent failures, 14 days; max 5 attempts in 12 months.
How hard is it
What is the Certified Ethical Hacker (CEH) pass rate?
Real exam first-time pass rate: Approx. 40% for international candidates (due to US-centric content). Difficulty: Moderately challenging; intermediate level, broad scope requiring true understanding beyond memorization.
Why people fail it
Why do people fail the Certified Ethical Hacker (CEH)?
Underestimating the breadth and depth of the 20 modules and topics covered.
Lack of practical, hands-on experience with ethical hacking tools and scenarios.
Figures for the real exam from vertexaisearch.cloud.google.com, checked October 2026. Fees and rules change, so confirm with the test provider before you book.
Certified Ethical Hacker (CEH): common questions
Frequently asked
What is the pass mark for the Certified Ethical Hacker (CEH)?
You need 28 out of 40 correct to pass, which is about 70%. Our mocks mark you against this exact threshold.
How long do you get?
The test is timed at 45 minutes. Our full mock runs on the same clock so you can practise your pacing.
Are these the real exam questions?
No. Our questions are original and written to match the current syllabus, so they give realistic practice without copying the official paper. Every answer comes with a plain-English explanation. Always confirm current rules and content with EC-Council.