#1 India's Top IT Training Institute

×

About Uncodemy

Know more about who we are and what we stand for.

About Us

About Us

Discover our mission to equip individuals with essential IT skills and industry expertise.

Read More →
UnCodeMy Gallery

UnCodeMy Gallery

Explore highlights from our IT training sessions and success stories.

Read More →
×

Free Resources

Learn, practice and plan your career — bilkul free.

Tutorials

Tutorials

Step-by-step written tutorials to learn any technology at your own pace.

Read More →
Free Counselling

Free Counselling

Book a free video counselling session and pick the right course for you.

Read More →
Online Compiler

Online Compiler

Write, run and test your code online — no setup required.

Read More →
🕵️ FREE · CEH

CEH Practice Test: 25 Ethical Hacking Questions

The phases, tools and attacks the CEH exam covers, with countermeasures explained.

  • 🔎 Recon and scanning
  • 🌐 Web attacks
  • 🧰 Common tools

How to use the CEH Practice Test

  1. 1. Start the testTake all 25 questions in 35 minutes, a half test, or a quick 10. A test code repeats the same set.
  2. 2. AnswerUse the palette to move between questions and mark the ones you want to revisit.
  3. 3. ReviewYour score and every question with the right answer and the reason appear at the end.

What the questions cover

The questions follow the ethical hacking phases (reconnaissance, scanning, gaining access, maintaining access, covering tracks) and the tools and attacks used in each: passive recon, Nmap SYN scans, Wireshark, banner grabbing, Metasploit, dictionary attacks, ARP poisoning, SYN floods, CSRF, directory traversal, Burp Suite, buffer overflows, vishing, tailgating, Aircrack-ng, SQLmap, steganography, rules of engagement, honeypots, trojans, IoT botnets and session hijacking defences.

A sample question explained

"An Nmap SYN scan (-sS) is called a half-open scan because it…" never completes the TCP three-way handshake. Nmap sends a SYN; an open port replies with SYN-ACK, and Nmap answers with RST instead of ACK. Because the connection never fully opens, the scan is faster and was historically less likely to be logged by applications, though modern firewalls and IDS detect it easily.

In this practice set, 19 out of 25 is 76%. EC-Council sets the format and pass mark of each CEH exam form.

Getting the most from it

  • Practise only in labs you own or are authorised to test, such as intentionally vulnerable VMs.
  • Pair every attack you learn with how to detect and stop it.
  • Know which tool fits which phase.

The questions in this CEH Practice Test are original practice questions by Uncodemy, not exam dumps, and Uncodemy is not connected with the exam provider. Check the official exam guide before booking.

Frequently asked questions

Is it legal to try these techniques?

Only on systems you own or have written permission to test. Unauthorised testing is a crime.

Is CEH practical?

There's a separate CEH Practical exam. This set covers the knowledge exam.

Is the CEH practice test free?

Yes. You can answer all 25 questions of the CEH practice test without signing up. At your first score screen we ask for your name and WhatsApp number once; after that the CEH practice test and every other Uncodemy tool open directly.

More free tools

See all free tools