Use this quick start guide to collect all the information about EC-Council CEH (312-50) Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the 312-50 EC-Council Certified Ethical Hacker exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual EC-Council CEH v13 certification exam.
The EC-Council CEH certification is mainly targeted to those candidates who want to build their career in Cyber Security domain. The EC-Council Certified Ethical Hacker (CEH) exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of EC-Council CEH v13.
EC-Council CEH Exam Summary:
| Exam Name | EC-Council Certified Ethical Hacker (CEH) |
| Exam Code | 312-50 |
| Exam Price | $850 (USD) |
| Duration | 240 mins |
| Number of Questions | 125 |
| Passing Score | 60-85% |
| Books / Training | Courseware |
| Schedule Exam | Pearson VUE OR ECC Exam Center |
| Sample Questions | EC-Council CEH Sample Questions |
| Practice Exam | EC-Council 312-50 Certification Practice Exam |
EC-Council 312-50 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Introduction to Ethical Hacking | - Learn the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures. |
| Foot Printing and Reconnaissance | - Learn how to use the latest techniques and tools to perform footprinting and reconnaissance, a critical pre-attack phase of the ethical hacking process. |
| Scanning Networks | - Learn different network scanning techniques and countermeasures. |
| Enumeration | - Learn various enumeration techniques, including Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits and associated countermeasures. |
| Vulnerability Analysis | - Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools are included as well. |
| System Hacking | - Learn about the various system hacking methodologies used to discover system and network vulnerabilities, including steganography, steganalysis attacks, and how to cover tracks. |
| Malware Threats | - Learn about different types of malware (Trojan, viruses, worms, etc.), APT and fileless malware, malware analysis procedures, and malware countermeasures. |
| Sniffing | - Learn about packet-sniffing techniques and their uses for discovering network vulnerabilities, plus countermeasures to defend against sniffing attacks. |
| Social Engineering | - Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures. |
| Denial-of-Service | - Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, plus the tools used to audit a target and devise DoS and DDoS countermeasures and protections. |
| Session Hijacking | - Learn the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures. |
| Evading IDS, Firewalls, and Honeypots | - Learn about firewall, intrusion detection system (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures. |
| Hacking Web Servers | - Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures. |
| Hacking Web Applications | - Learn about web application attacks, including a comprehensive web application hacking methodology used to audit vulnerabilities in web applications and countermeasures. |
| SQL Injection | - Learn about SQL injection attack techniques, evasion techniques, and SQL injection countermeasures. |
| Hacking Wireless Networks | - Learn about different types of encryption, threats, hacking methodologies, hacking tools, security tools, and countermeasures for wireless networks. |
| Hacking Mobile Platforms | - Learn mobile platform attack vectors, Android and iOS hacking, mobile device management, mobile security guidelines, and security tools. |
| IoT and OT Hacking | - Learn different types of Internet of Things (IoT) and operational technology (OT) attacks, hacking methodologies, hacking tools, and countermeasures. |
| Cloud Computing | - Learn different cloud computing concepts, such as container technologies and serverless computing, various cloud computing threats, attacks, hacking methodologies, and cloud security techniques and tools. |
| Cryptography | - Learn about encryption algorithms, cryptography tools, Public Key Infrastructure (PKI), email encryption, disk encryption, cryptography attacks, and cryptanalysis tools. |
To ensure success in EC-Council CEH v13 certification exam, we recommend authorized training course, practice test and hands-on experience to prepare for EC-Council Certified Ethical Hacker (312-50) exam.