CEH Readiness Test

10 questions, balanced across the exam's topics. Answer each one, then submit for your practice readiness estimate and per-topic breakdown. This is a practice estimate — not a prediction or guarantee of your official exam result.

Question 1

How is risk calculated?

likelihood times impact threats plus patches vulnerabilities only impact minus likelihood

Question 2

Your -O results show five different OS guesses. Why?

a firewall normalizes packets or a load balancer fronts many hosts the target runs Linux scanning from the same subnet combining -O with -sV

Question 3

The 'half-open' in a SYN flood refers to

half the packets being encrypted ports that are half filtered a half-completed download connections stuck after SYN/ACK, awaiting the final ACK

Question 4

ARP spoofing enables a man-in-the-middle attack by

flooding the switch CAM table poisoning the DNS cache sending forged ARP replies that map the attacker's MAC to the gateway's IP cracking the WPA key

Question 5

Cloud IR readiness requires

disabling all logs to save cost no preparation deleting accounts after incidents pre-enabled logging (CloudTrail), snapshots, runbooks, and defined provider escalation paths

Question 6

Insecure deserialization

SQL injection exploiting object deserialization to execute code via gadget chains XSS a DoS only

Question 7

How was KRACK fixed?

vendor patches preventing key reinstallation longer passwords hiding SSIDs disabling Wi-Fi

Question 8

Why do analysts unpack samples before static review?

dynamic analysis entirely network forensics log review static analysis, by obscuring code until runtime unpacking

Question 9

Which framework automates phishing and credential-harvester attacks?

craft phishing emails, fake login pages, and payload delivery for authorized tests patch operating systems configure firewalls monitor networks defensively

Question 10

An audit shows AXFR allowed to the world. What should you do?

disable DNS recursion entirely restrict zone transfers to authorized secondary name servers via ACLs block outbound port 53 enable DNSSEC only

Unanswered questions count as incorrect. Your answers are graded on the server; no answer key is sent to your browser.

← Back to the CEH page

About Contact Privacy Policy Terms of Service Refund Policy

Home Exams Simulations WorkTrials GameScope Account