CEH · Independent introductory draft
Ethical security testing foundations
Learn how an authorized assessment moves from scope and discovery to evidence, remediation and retesting. Basic networking knowledge is helpful.
Start with the syllabus chapters
Study 20 dedicated topic chapters before using the domain overviews and practice below.
Open the CEH syllabus chapters →Try the CEH evidence workbench
Twenty original fictional exercises connect the chapter topics to evidence interpretation and scoped reporting. These are local learning activities, not a hosted cyber range.
Open the evidence workbench →Domain overviews and applied practice
Read the lessons in order, try each fictional scenario, then use the practice questions to identify concepts to revisit. Reading and practice are free. No academy account is required.
Your CEH progress
Loading progress…
Saving is off; progress stays in this course session only. No academy account or cloud sync. Each course has separate data.
Individual quiz answers remain in memory only. Completed score summaries can be saved and backed up. Storage details
Practice history
No completed attempts in this course history.
Find a lesson
6 matching lessons
Assessment foundations · About 16 minutes
Start an ethical assessment with permission and purpose
Define written scope, rules of engagement and stop conditions.
Not marked complete · Not bookmarked
Discovery and vulnerability analysis · About 16 minutes
Move from reconnaissance to a validated finding
Distinguish passive research, active discovery and enumeration.
Not marked complete · Not bookmarked
Host and identity security · About 16 minutes
Assess host access and malware defenses responsibly
Distinguish authentication weakness from privilege escalation.
Not marked complete · Not bookmarked
Network and social engineering concepts · About 16 minutes
Evaluate network, wireless and human defenses
Explain interception, segmentation and layered detection.
Not marked complete · Not bookmarked
Web server, application and API security · About 16 minutes
Check web permissions, input handling and sessions
Distinguish server hardening from application authorization.
Not marked complete · Not bookmarked
Cloud, mobile, IoT and cryptography concepts · About 16 minutes
Review cloud, connected devices and cryptographic trust
Assign cloud configuration and identity responsibilities.
Not marked complete · Not bookmarked
Practice with explanations
36 original questions, with six questions per lesson, including two applied scenarios. Every option has an explanation and a related lesson link. These are not copied exam questions.
Start CEH practice →Active answers remain in memory while navigating within this course. Refreshing or leaving the course resets the attempt. Completed summaries can be saved in this course’s separate history and backups.
Practice with CEH flashcards · Applied frameworks and Indian regulatory context
Edition and applied coverage mapFurther study still needed
- Full mapping to every official module and exam objective, and independent subject-matter review, are pending.
- Hands-on exploitation, tool proficiency, advanced network evasion, denial-of-service testing and malware analysis are not taught in this introductory release.
- No external cyber range, provider lab access, official training materials, exam voucher or certification is provided. The local evidence workbench uses fictional records.
Official orientation and background reading
- EC-Council: CEH course overview and modules
- NIST SP 800-115: planning and assessing security tests
- OWASP: Web Security Testing Guide project
- RST Forum: curriculum comparison reference
- RST Forum: provider lab comparison reference
Lessons, scenarios and questions are original Safehouse learning material. Source links provide orientation and background; they do not certify completeness.
Found an issue? Report a correction.