CEH v13 Study Plan 2026: A Blueprint-Based 12-Week System
Video
What is the primary purpose of ethical hacking?
Ceh Overview Ethics
Question · Easy
Movie hacker vs real life
Short
Build a current CEH v13 12-week plan from EC-Council's nine-domain blueprint, with verified eligibility, fees, retakes, labs, scoring, and renewal rules.
Blog
Five phases of the CEH hacking methodology
Information Security Overview
Flashcard
Which of the following best describes the difference between a black hat and white hat hacker?
Measure of how much an entity is threatened by an event, combining the harm that would result with how likely the event is.
Information security concepts
Guess the Term
Introduction & Exam Overview
1.1 CEH Exam Format, Cost & Eligibility
Study guide
Cheat sheet
What legal document is required before conducting a penetration test?
Read the clue and guess the term in 6 tries.
Game
White box vs. black box vs. gray box testing
In the context of penetration testing, what does the term "scope" refer to?
Hardware device that can reach a network through an interface, address or protocol stack, including a client station but not a router or switch that directs traffic.
Reconnaissance and scanning
Which phase of the ethical hacking methodology involves gathering information about the target without directly interacting with it?
Ceh Reconnaissance
AWS or YOU?
CIA triad
What is the term for a hacker who operates between ethical and malicious boundaries, often hacking without permission but claiming to have good intentions?
16-bit number that can identify the application protocol and service a transport session uses.
1.2 The Five Phases of Ethical Hacking
According to the CEH methodology, what are the five phases of ethical hacking in correct order?
Question · Medium
Swap tiles to line up three of the same term.
Term Match
Why a Rules of Engagement / authorization is mandatory before testing
Which of the following is NOT a type of information security control?
Information such as an application's type and version that a remote service sends when a connection opens.
What is the primary difference between vulnerability assessment and penetration testing?
8 DNS records for the CCNA
Passive vs. active reconnaissance
Reconnaissance Techniques
Which regulation in the United States requires organizations to protect the confidentiality, integrity, and availability of electronic protected health information (ePHI)?
Unique random string added to each password before hashing so identical passwords get different stored values.
System hacking and malware
1.3 Information Security Fundamentals
What does the principle of "least privilege" mean in information security?
Flip two cards at a time to find matching terms.
Term Pairs
Google dorking (Google hacking)
During a penetration test, a tester discovers critical patient data on a compromised system. What should be the tester's immediate action?
Kind of malware that appears useful but hides a harmful function that runs when invoked.
What is the purpose of the "change freeze" period mentioned in penetration testing rules of engagement?
New hire access: Expectation vs Reality
DNS zone transfer (AXFR)
Which of the following best describes the CIA triad in information security?
Malicious code that spreads by inserting a copy of itself into other programs and runs when they do.
1.4 Ethical Hacking Concepts, Scope & Legal Framework
What type of penetration testing provides the testing team with no prior knowledge of the target environment?
Find five hidden terms in a grid of letters.
Term Search
Enumeration vs. scanning
Loading more…
