Introduction of ECCouncil CEH-v11 Exam!

The EC-Council Certified Ethical Hacker (CEH v11) exam is a comprehensive exam that tests a candidate's knowledge and skills in ethical hacking and network security. The exam covers topics such as network scanning, system hacking, malware threats, cryptography, and more. Candidates must demonstrate their ability to assess the security posture of an organization by identifying vulnerabilities in the network and system infrastructure. The exam also tests a candidate's knowledge of countermeasures and best practices for mitigating security threats.

What is the Duration of ECCouncil CEH-v11 Exam?

The duration of the ECCouncil CEH-v11 exam is 4 hours.

What are the Number of Questions Asked in ECCouncil CEH-v11 Exam?

The ECCouncil CEH-v11 exam consists of 125 multiple-choice questions.

What is the Passing Score for ECCouncil CEH-v11 Exam?

The passing score required in the ECCouncil CEH-v11 exam is 70%.

What is the Competency Level required for ECCouncil CEH-v11 Exam?

The required competency level for the ECCouncil CEH-v11 exam is an individual who has an intermediate level of knowledge in IT security.

What is the Question Format of ECCouncil CEH-v11 Exam?

The ECCouncil CEH-v11 exam consists of multiple-choice questions and performance-based questions.

How Can You Take ECCouncil CEH-v11 Exam?

The EC-Council Certified Ethical Hacker (CEH-v11) exam can be taken online or at a testing center. To take the exam online, you must register and pay the exam fee through the EC-Council website. You will then be provided with a link to the online exam platform. Once you have completed the exam, you will receive your score and a certificate of completion. To take the exam at a testing center, you must register and pay the exam fee through the EC-Council website. You will then be provided with a voucher code and instructions on how to schedule your exam at a testing center near you. Once you have completed the exam, you will receive your score and a certificate of completion.

What Language ECCouncil CEH-v11 Exam is Offered?

ECCouncil CEH-v11 exam is offered in the English language.

What is the Cost of ECCouncil CEH-v11 Exam?

The cost of the ECCouncil CEH-v11 exam is $950 USD.

What is the Target Audience of ECCouncil CEH-v11 Exam?

The target audience for the ECCouncil CEH-v11 Exam are security professionals who are looking to become certified ethical hackers. They should have at least two years of experience in the field of information security and a strong technical background.

What is the Average Salary of ECCouncil CEH-v11 Certified in the Market?

The average salary of Certified Ethical Hacker CEH v11 certified professionals varies widely by role, region, and experience, because it depends on the job the certification is combined with. Check current listings in your market for an up-to-date figure.

Who are the Testing Providers of ECCouncil CEH-v11 Exam?

The ECCouncil CEH-v11 exam is administered by the ECCouncil. The ECCouncil is the only organization authorized to provide testing for the CEH-v11 exam.

What is the Recommended Experience for ECCouncil CEH-v11 Exam?

The recommended experience for the ECCouncil CEH-v11 Exam is a minimum of two (2) years of hands-on information security experience.

What are the Prerequisites of ECCouncil CEH-v11 Exam?

The prerequisite for the ECCouncil CEH-v11 exam is that candidates must have a minimum of two years of information security related experience. Additionally, candidates must have a working knowledge of network security and ethical hacking concepts.

What is the Expected Retirement Date of ECCouncil CEH-v11 Exam?

The ECCouncil CEH-v11 exam is the current version of the Certified Ethical Hacker CEH v11 exam, and ECCouncil has not announced a retirement date for it. When ECCouncil introduces a newer version, the retirement date for the older version is published on the ECCouncil certification site.

What is the Difficulty Level of ECCouncil CEH-v11 Exam?

The difficulty level of the ECCouncil CEH-v11 exam is considered to be moderate to difficult. It requires a good understanding of the material and the ability to apply the knowledge in the exam.

What is the Roadmap / Track of ECCouncil CEH-v11 Exam?

The EC-Council CEH-v11 certification track/roadmap is a series of exams designed to help IT professionals gain expertise in the field of ethical hacking and information security. The CEH-v11 certification track consists of four exams: Certified Ethical Hacker (CEH-v11), Certified Security Analyst (ECSA-v11), Licensed Penetration Tester (LPT-v11), and Certified Chief Information Security Officer (CCISO-v11). The CEH-v11 exam is the first step in the certification track and is designed to assess a candidate’s knowledge of the core concepts of ethical hacking, including network security, cryptography, and web application security. The ECSA-v11 exam is the second step in the certification track and is designed to assess a candidate’s ability to analyze and interpret the results of a penetration test. The LPT-v11 exam is the third step in the certification track and is designed to assess a

What are the Topics ECCouncil CEH-v11 Exam Covers?

The ECCouncil CEH-v11 exam covers the following topics: 1. Network Security: This topic covers the fundamentals of network security, including security policies, firewalls, intrusion detection systems, and network traffic analysis. 2. System Security: This topic covers the fundamentals of system security, including system hardening, system security policies, and system monitoring. 3. Cryptography: This topic covers the fundamentals of cryptography, including encryption algorithms, hashing algorithms, and digital signatures. 4. Malware: This topic covers the fundamentals of malware, including types of malware, malware analysis, and malware prevention. 5. Web Application Security: This topic covers the fundamentals of web application security, including web application vulnerabilities, web application firewalls, and secure coding practices. 6. Mobile Security: This topic covers the fundamentals of mobile security, including mobile device security, mobile application security, and mobile security best practices.

What are the Sample Questions of ECCouncil CEH-v11 Exam?

1. What is the purpose of a Footprinting phase in the ethical hacking process? 2. What type of attack is used to gain access to a system by guessing the passwords? 3. What is the term used to describe the process of exploiting a vulnerability in a system to gain control of it? 4. What is the purpose of a Vulnerability Assessment? 5. What is the most common type of encryption used in wireless networks? 6. What is the name of the tool used to scan and identify potential vulnerabilities in a network? 7. What is the name of the tool used to perform a Denial of Service attack? 8. What is the most common type of attack used to gain access to a network? 9. What is the difference between a white-box and a black-box penetration test? 10. What is the purpose of a Social Engineering attack?

← Back to exam page

Free CEH-v11 – Certified Ethical Hacker CEH v11 Practice Test Question

Free demo downloads

Loading demo links...

Showing 1–20 of 20 questions

Question 1

Windows LAN Manager (LM) hashes are known to be weak.

Which of the following are known weaknesses of LM? (Choose three.)

Select all that apply, then click Submit answer.

○
Converts passwords to uppercase.
○
Hashes are sent in clear text over the network.
○
Makes use of only 32-bit encryption.
○
Effective length is 7 characters.

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 2

Which of the following tools can be used to perform a zone transfer?

Select all that apply, then click Submit answer.

○
NSLookup
○
Finger
○
Dig
○
Sam Spade
○
Host
○
Netcat
○
Neotrace

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 3

As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security?

Select all that apply, then click Submit answer.

○
Use the same machines for DNS and other applications
○
Harden DNS servers
○
Use split-horizon operation for DNS servers
○
Restrict Zone transfers
○
Have subnet diversity between DNS servers

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 4

Which of the following tools are used for enumeration? (Choose three.)

Select all that apply, then click Submit answer.

○
SolarWinds
○
USER2SID
○
Cheops
○
SID2USER
○
DumpSec

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 5

Which of the following statements about a zone transfer is correct? (Choose three.)

Select all that apply, then click Submit answer.

○
A zone transfer is accomplished with the DNS
○
A zone transfer is accomplished with the nslookup service
○
A zone transfer passes all zone information that a DNS server maintains
○
A zone transfer passes all zone information that a nslookup server maintains
○
A zone transfer can be prevented by blocking all inbound TCP port 53 connections
○
Zone transfers cannot occur on the Internet

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 6

What ports should be blocked on the firewall to prevent NetBIOS traffic from not coming through the firewall if your network is comprised of Windows NT, 2000, and XP?

Select all that apply, then click Submit answer.

○
110
○
135
○
139
○
161
○
445
○
1024

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 7

Which of the following are well known password-cracking programs?

Select all that apply, then click Submit answer.

○
L0phtcrack
○
NetCat
○
Jack the Ripper
○
Netbus
○
John the Ripper

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 8

A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

Select all that apply, then click Submit answer.

○
Use port security on his switches.
○
Use a tool like ARPwatch to monitor for strange ARP activity.
○
Use a firewall between all LAN segments.
○
If you have a small network, use static ARP entries.
○
Use only static IP addresses on all PC's.

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 9

Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.

Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

Select all that apply, then click Submit answer.

○
SNMPUtil
○
SNScan
○
SNMPScan
○
Solarwinds IP Network Browser
○
NMap

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 10

Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

Select all that apply, then click Submit answer.

○
BA810DBA98995F1817306D272A9441BB
○
44EFCE164AB921CQAAD3B435B51404EE
○
0182BD0BD4444BF836077A718CCDF409
○
CEC52EB9C8E3455DC2265B23734E0DAC
○
B757BF5C0D87772FAAD3B435B51404EE
○
E52CAC67419A9A224A3B108F3FA6CB6D

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 11

Heather’s company has decided to use a new customer relationship management tool. After performing the appropriate research, they decided to purchase a subscription to a cloud-hosted solution. The only

administrative task that Heather will need to perform is the management of user accounts. The provider will take care of the hardware, operating system, and software administration including patching and monitoring. Which of the following is this type of solution?

Select an option, then click Submit answer.

○
SaaS
○
IaaS
○
CaaS
○
PasS

Ask AI for More Explanation

— your own AI account, opens inside the app

Reference / correct answer:

SaaS

Software as a service (SaaS) allows users to attach to and use cloud-based apps over the web. Common examples ar email, calendaring and workplace tool (such as Microsoft workplace 365).

SaaS provides a whole software solution that you get on a pay-as-you-go basis from a cloud service provider. You rent the use of an app for your organisation and your users connect with it over the web, typically with an internet browser. All of the underlying infrastructure, middleware, app software system and app knowledge ar located within the service provider’s knowledge center. The service provider manages the hardware and software system and with the appropriate service agreement, can make sure the availability and also the security of the app and your data as well. SaaS allows your organisation to induce quickly up and running with an app at token upfront cost.

Common SaaS scenariosThis tool having used a web-based email service like Outlook, Hotmail or Yahoo! Mail, then you have got already used a form of SaaS. With these services, you log into your account over the web, typically from an internet browser. the e-mail software system is found on the service provider’s network and your messages ar hold on there moreover. you can access your email and hold on messages from an internet browser on any laptop or Internet-connected device.

The previous examples are free services for personal use. For organisational use, you can rent productivity apps, like email, collaboration and calendaring; and sophisticated business applications like client relationship management (CRM), enterprise resource coming up with (ERP) and document management. You buy the use of those apps by subscription or per the level of use.

Advantages of SaaSGain access to stylish applications. to supply SaaS apps to users, you don’t ought to purchase, install, update or maintain any hardware, middleware or software system. SaaS makes even sophisticated enterprise applications, like ERP and CRM, affordable for organisations that lack the resources to shop for, deploy and manage the specified infrastructure and software system themselves.

Pay just for what you utilize. you furthermore may economize because the SaaS service automatically scales up and down per the level of usage.

Use free shopper software system. Users will run most SaaS apps directly from their web browser without needing to transfer and install any software system, though some apps need plugins. this suggests that you simply don’t ought to purchase and install special software system for your users.

Mobilise your hands simply. SaaS makes it simple to “mobilise” your hands as a result of users will access

SaaS apps and knowledge from any Internet-connected laptop or mobile device. You don’t ought to worry concerning developing apps to run on differing types of computers and devices as a result of the service supplier has already done therefore. additionally, you don’t ought to bring special experience aboard to manage the safety problems inherent in mobile computing. A fastidiously chosen service supplier can make sure the security of your knowledge, no matter the sort of device intense it.

Access app knowledge from anyplace. With knowledge hold on within the cloud, users will access their info from any Internet-connected laptop or mobile device. And once app knowledge is hold on within the cloud, no knowledge is lost if a user’s laptop or device fails.

Question 12

DNS cache snooping is a process of determining if the specified resource address is present in the DNS cache records. It may be useful during the examination of the network to determine what software update resources are used, thus discovering what software is installed.

What command is used to determine if the entry is present in DNS cache?

Select an option, then click Submit answer.

○
nslookup -fullrecursive update.antivirus.com
○
dnsnooping –rt update.antivirus.com
○
nslookup -norecursive update.antivirus.com
○
dns --snoop update.antivirus.com

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 13

Attacker Steve targeted an organization's network with the aim of redirecting the company's web traffic to another malicious website. To achieve this goal, Steve performed DNS cache poisoning by exploiting the vulnerabilities In the DNS server software and modified the original IP address of the target website to that of a fake website. What is the technique employed by Steve to gather information for identity theft?

Select an option, then click Submit answer.

○
Pretexting
○
Pharming
○
Wardriving
○
Skimming

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 14

Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security breach to his company's email server based on analysis of a suspicious connection from the email server to an unknown IP Address.

What is the first thing that Nedved needs to do before contacting the incident response team?

Select an option, then click Submit answer.

○
Leave it as it Is and contact the incident response te3m right away
○
Block the connection to the suspicious IP Address from the firewall
○
Disconnect the email server from the network
○
Migrate the connection to the backup email server

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 15

Samuel, a professional hacker, monitored and Intercepted already established traffic between Bob and a host machine to predict Bob's ISN. Using this ISN, Samuel sent spoofed packets with Bob's IP address to the host machine. The host machine responded with <| packet having an Incremented ISN. Consequently. Bob's connection got hung, and Samuel was able to communicate with the host machine on behalf of Bob. What is the type of attack performed by Samuel in the above scenario?

Select an option, then click Submit answer.

○
UDP hijacking
○
Blind hijacking
○
TCP/IP hacking
○
Forbidden attack

Ask AI for More Explanation

— your own AI account, opens inside the app

Reference / correct answer:

TCP/IP hacking

A TCP/IP hijack is an attack that spoofs a server into thinking it’s talking with a sound client, once actually it’s communication with an assaulter that has condemned (or hijacked) the tcp session. Assume that the client has administrator-level privileges, which the attacker needs to steal that authority so as to form a brand new account with root-level access of the server to be used afterward. A tcp Hijacking is sort of a two-phased man-in-the-middle attack. The man-in-the-middle assaulter lurks within the circuit between a shopper and a server so as to work out what port and sequence numbers are being employed for the conversation.

First, the attacker knocks out the client with an attack, like Ping of Death, or ties it up with some reasonably ICMP storm. This renders the client unable to transmit any packets to the server. Then, with the client crashed, the attacker assumes the client’s identity so as to talk with the server. By this suggests, the attacker gains administrator-level access to the server.

One of the most effective means of preventing a hijack attack is to want a secret, that’s a shared secret between the shopper and also the server. looking on the strength of security desired, the key may be used for random exchanges. this is often once a client and server periodically challenge each other, or it will occur with each exchange, like Kerberos.

Question 16

is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

Select an option, then click Submit answer.

○
Trojan
○
RootKit
○
DoS tool
○
Scanner
○
Backdoor

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 17

Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

Select an option, then click Submit answer.

○
Error-based injection
○
Boolean-based blind SQL injection
○
Blind SQL injection
○
Union SQL injection

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 18

You are working as a Security Analyst in a company XYZ that owns the whole subnet range of 23.0.0.0/8 and 192.168.0.0/8.

While monitoring the data, you find a high number of outbound connections. You see that IP’s owned by XYZ (Internal) and private IP’s are communicating to a Single Public IP. Therefore, the Internal IP’s are sending data to the Public IP.

After further analysis, you find out that this Public IP is a blacklisted IP, and the internal communicating devices are compromised.

What kind of attack does the above scenario depict?

Select an option, then click Submit answer.

○
Botnet Attack
○
Spear Phishing Attack
○
Advanced Persistent Threats
○
Rootkit Attack

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 19

Which system consists of a publicly available set of databases that contain domain name registration contact information?

Select an option, then click Submit answer.

○
WHOIS
○
CAPTCHA
○
IANA
○
IETF

Ask AI for More Explanation

— your own AI account, opens inside the app

Question 20

Scenario1:

1. Victim opens the attacker's web site.

2. Attacker sets up a web site which contains interesting and attractive content like 'Do you want to make

$1000 in a day?'.

3. Victim clicks to the interesting and attractive content URL.

4. Attacker creates a transparent 'iframe' in front of the URL which victim attempts to click, so victim thinks that he/she clicks to the 'Do you want to make $1000 in a day?' URL but actually he/she clicks to the content or URL that exists in the transparent 'iframe' which is setup by the attacker.

What is the name of the attack which is mentioned in the scenario?

Select an option, then click Submit answer.

○
Session Fixation
○
HTML Injection
○
HTTP Parameter Pollution
○
Clickjacking Attack

Ask AI for More Explanation

— your own AI account, opens inside the app

About the CEH-v11 Free Practice Test

This free practice test covers the Certified Ethical Hacker CEH v11 (CEH-v11) exam from ECCouncil. The 20 questions are a free sample of the full Study4Pass practice set of 528 questions, so you can check your level before you commit to the real exam. The free sample includes 10 single-answer and 10 multiple-answer questions — the same mix of formats you will meet in the full set. Questions are spread across the areas that matter most on the real exam: Network Security, System Security, Cryptography and Malware. The EC-Council Certified Ethical Hacker (CEH v11) exam is a comprehensive exam that tests a candidate's knowledge and skills in ethical hacking and network security.

The target audience for the ECCouncil CEH-v11 Exam are security professionals who are looking to become certified ethical hackers. The prerequisite for the ECCouncil CEH-v11 exam is that candidates must have a minimum of two years of information security related experience.

Certification: Certified Ethical Hacker CEH v11 (CEH-v11)
Vendor: ECCouncil
Free on this page: 20 practice questions with answers and explanations
Full practice set: 528 questions

Treat this sample as a diagnostic. Answer honestly, check the explanation after every question, and note which topics feel shaky. A short, focused review of those topics is worth more than re-reading everything — and the full set lets you drill them topic by topic.

A good way to use this page: take the whole sample in one sitting, then go back over every explanation with fresh eyes. Mark the topics that felt uncertain, not just the ones you got wrong — uncertain answers are unmarked risk on the real exam. One or two focused passes like this usually move a score more than days of passive reading.

Inside the full CEH-v11 practice set:

All 528 questions with answers and explanations
Timed Exam Simulation that mirrors the real exam pressure
Topic Training to drill one domain at a time
Ask AI for More Explanation on every question
Flag questions and review them before you finish

How to use this CEH-v11 free practice test

Answer a question, then check the result to see the correct answer and the explanation behind it. Work at your own pace — there is no timer and no signup. Stuck on a concept? This is an AI-Enabled practice test: use Ask AI on any question and get the underlying concept explained in plain words, so you learn the reasoning instead of memorizing answers. Ready for more? The full 528-question set adds a timed Exam Simulation mode, topic training for your weak areas, and a flagged-question review, so you can practise the way the real exam feels.

What to study for each CEH-v11 domain

Network Security — This topic covers the fundamentals of network security, including security policies, firewalls, intrusion detection systems, and network traffic analysis.
System Security — This topic covers the fundamentals of system security, including system hardening, system security policies, and system monitoring.
Cryptography — This topic covers the fundamentals of cryptography, including encryption algorithms, hashing algorithms, and digital signatures.
Malware — This topic covers the fundamentals of malware, including types of malware, malware analysis, and malware prevention.
Web Application Security — This topic covers the fundamentals of web application security, including web application vulnerabilities, web application firewalls, and secure coding practices.
Mobile Security — This topic covers the fundamentals of mobile security, including mobile device security, mobile application security, and mobile security best practices.

CEH-v11 practice test — quick questions

Is this CEH-v11 practice test free?

Yes — the 20 questions on this page are completely free, with no signup and no payment details needed.

How many questions are in the full CEH-v11 set?

528 questions. The 20 free questions above are a sample of that full set, in the same style and topic balance.

Does the free test show the answers?

Yes — every question shows the correct answer with an explanation, and Ask AI can explain the concept behind a question in plain words if you want to go deeper.