Ethical Hacking and Countermeasures Exam CEH v7

certified ethical hacker exam


CEH Course Outline      Download CEH Brochure      Take CEH Assessment       CEH Exam Eligibility Application Form



Exam Details

Credits Towards Certification
Certified Ethical Hacker 7

Exam Details
  • Number of Questions: 150
  • Passing Score: 70%
  • Test Duration: 4 hours
  • Test Format: Multiple choice
  • Test Delivery:
  • Web based via Prometric Prime (Available from March 14th, 2011)
  • Authorized Prometric Testing Centers (Available from May 1st, 2011)
  • Vue Testing Center (Available from May 1st, 2011)

 
 

Exam Code

Exam Code
The exam code varies when taken at different testing centers.
  • Exam 312-50v7: Web based ‘Prometric Prime’ at Accredited Training Centers (ATC).
  • Exam EC0-350: Proctored test at Authorized Prometric Testing Centers (APTC) globally.
  • Exam 312-50v7: VUE Testing centers
 
 

Skills Measured

Skills Measured
The exam 312-50 tests CEH candidates on the following 19 domains.
  • Introduction to Ethical Hacking
  • Footprinting and Reconnaissance
  • Scanning Networks
  • Enumeration
  • System Hacking
  • Trojans and Backdoors
  • Viruses and Worms
  • Sniffers
  • Social Engineering
  • Denial of Service
  • Session Hijacking
  • Hacking Webservers
  • Hacking Web Applications
  • SQL Injection
  • Hacking Wireless Networks
  • Evading IDS, Firewalls, and Honeypots
  • Buffer Overflow
  • Cryptography
  • Penetration Testing

CEH (312-50) EXAM



Modules

Introduction to Ethical Hacking

  • Understand the issues plaguing the information security world
  • Gain knowledge on various hacking terminologies
  • Learn the basic elements of information security
  • Understand the security, functionality and ease of use triangle
  • Know the 5 stages of ethical hacking
  • Understand the different types and implications of hacker attacks
  • Understand hactivism and understand the classification of hackers
  • Understand who is an ethical hacker
  • Gain  Information on how to become an ethical hacker
  • Learn the profile of a typical ethical hacker
  • Understand scope and limitations of ethical hacking
  • Understand vulnerability research and list the various vulnerability research tools
  • Learn the different ways an ethical hacker tests a target network
  • Understand penetration testing and the various methodologies used

Footprinting and Reconnaissance

  • Understand the term Footprinting
  • Learn the areas and information that hackers seek
  • Gain knowledge on information gathering tools and methodology
  • Understand the role of financial websites in footprinting
  • Understand competitive intelligence and its need
  • Understand DNS enumeration
  • Understand Whois
  • Learn different types of DNS records
  • Understand how  traceroute is used in Footprinting
  • Recognize the Role of search engines in footprinting
  • Learn the website mirroring tools
  • Understand how e-mail tracking works
  • Understand Google hacking and its tools
  • Learn the countermeasures to be taken in footprinting
  • Understand pen testing

Scanning Networks

  • Understand the term port scanning, network scanning and vulnerability scanning
  • Understand the objectives of scanning
  • Learn the CEH scanning methodology
  • Understand Ping Sweep techniques
  • Understand the Firewalk tool
  • Gain knowledge on Nmap command switches
  • Understand the three way handshake
  • Understand the following Scans:
    • SYN, Stealth, XMAS, NULL, IDLE, FIN, ICMP Echo, List, TCP Connect, Full Open, FTP Bounce, UDP, Reverse Ident, RPC, Window
  • Learn TCP communication flag types
  • Gain knowledge on War dialing techniques
  • Understand banner grabbing using OS fingerprinting, Active Stack Fingerprinting, Passive Fingerprinting and other techniques and tools
  • Learn vulnerability scanning using BidiBlah and other hacking tools
  • Learn to draw network diagrams of vulnerable hosts using various tools
  • Understand how proxy servers are used in launching an attack
  • Gain insights on working of anonymizers
  • Identify HTTP tunneling techniques
  • Identify IP spoofing techniques
  • Understand various scanning countermeasures

Enumeration

  • Learn the system hacking cycle
  • Understand  Enumeration and its techniques
  • Understand null sessions and its countermeasures
  • Understand SNMP enumeration and its countermeasures
  • Describe the steps involved in performing enumeration

System Hacking

  • Understand the different types of passwords
  • Identify the different types of password attacks
  • Identify password cracking techniques
  • Understand Microsoft Authentication mechanism
  • Describe password sniffing
  • Identifying various password cracking tools
  • Identify various password cracking countermeasures
  • Understand privilege escalation
  • Gain insights on key loggers and other spyware technologies
  • Learn how to defend against spyware
  • Identify different ways to hide files
  • Understanding rootkits
  • Learn how to identify rootkits and steps involved
  • Understand Alternate Data Streams
  • Understand Steganography technologies and tools used
  • Understand covering tracks, tools used and erase evidences

Trojans and Backdoors

  • Define a Trojan
  • Identify overt and covert channels
  • Understand working of Trojans
  • Identify the different types of Trojans
  • What do Trojan creators look for
  • Identify the different ways a Trojan can infect a system
  • How to indicate a Trojan attack
  • Identify the ports used by Trojan
  • Identify listening ports using netstat
  • Understand “wrapping”
  • Understand Reverse Shell Trojan
  • Understand ICMP tunneling
  • Identify various classic Trojans
  • Learn windows start up monitoring tools
  • Understand the Trojan horse constructing kit
  • Learn Trojan detection techniques
  • Learn Trojan evading techniques
  • Learn how to avoid a Trojan infection

Viruses and Worms

  • Understand virus and its history
  • Characteristics of a virus
  • Learn the working of a virus
  • Understand the motive behind writing a virus
  • Understand how does a computer get infected by viruses
  • Gain insights on virus hoax
  • Understand virus analysis
  • Understand the difference between a virus and a worm
  • Understand the life cycle of virus
  • Identify the types of viruses
  • Understand how a virus spreads and infects the system
  • Understand the storage pattern of virus
  • Identify various types of classic virus found in the wild
  • Virus writing technique
  • Virus construction kits
  • Understand antivirus evasion techniques
  • Understand Virus detection methods and countermeasures
  • Understand worm analysis

Sniffers

  • Understand sniffing and protocols vulnerable to it
  • Identify types of sniffing
  • Understand Address Resolution Protocol (ARP)
  • Understanding the process of ARP Spoofing
  • Understand active and passive sniffing
  • Understand ARP poisoning
  • Understand MAC duplicating
  • Learn ethereal capture and display filters
  • Understand MAC flooding
  • Understand DNS spoofing techniques
  • Identify sniffing countermeasures
  • Know various sniffing tools
  • Identify sniffing detection and defensive techniques

Social Engineering

  • Understand Social Engineering
  • Understand human weakness
  • Identify the different types of social engineering
  • Learn warning signs of an attack
  • Understand Dumpster Diving
  • Understand Human-based Social Engineering
  • Understand Insider attacks and its countermeasures
  • Gain insights on Social Engineering threats and defense
  • Comprehend Identity Theft
  • Understand Phishing Attacks
  • Identify Online Scams
  • Understand URL obfuscation
  • Understand social engineering on social networking sites
  • Identify Social Engineering countermeasures

Denial of service

  • Understand a Denial of Service Attack
  • Gain insights on Distributed Denial of Service Attacks
  • Examine  the working of Distributed Denial of Service Attacks
  • Analyze Symptoms of a DoS Attack
  • Understand Internet Chat Query (ICQ)
  • Understand Internet Relay Chat  (IRC)
  • Assess DoS Attack Techniques
  • Understand Botnets
  • Assess DoS/DDoS Attack Tools
  • Describe Detection Techniques
  • Identify DoS/DDoS Countermeasure Strategies
  • Analyze Post-Attack Forensics
  • Identify DoS/DDoS Protection Tools
  • Understand DoS/DDoS Penetration Testing

Session Hijacking

  • Understand what is Session Hijacking
  • Identify Key Session Hijacking Techniques
  • Understand Brute Forcing Attack
  • Understand HTTP Referrer Attack
  • Spoofing vs. Hijacking
  • Understand Session Hijacking Process
  • Identify types of Session Hijacking
  • Analyze Session Hijacking in OSI Model
  • Understand Application Level Session Hijacking
  • Discuss Session Sniffing
  • Describe Man-in-the-Middle Attack
  • Understand Man-in-the-Browser Attack
  • Examine Steps to Perform Man-in-the-Browser Attack
  • Understand Client-side Attacks
  • Understand Cross-site Script Attack
  • Understand Session Fixation Attack
  • Describe Network Level Session Hijacking
  • Understand TCP/IP Hijacking
  • Identify Session Hijacking Tools
  • Identify Countermeasures of Session Hijacking
  • Understand Session Hijacking Pen Testing

Hacking Webservers

  • Understand Open Source Webserver Architecture
  • Examine IIS Webserver Architecture
  • Understand Website Defacement
  • Understand why Web Servers are compromised
  • Analyze Impact of  Webserver Attacks
  • Examine Webserver Misconfiguration
  • Understand Directory Traversal Attacks
  •  Learn regarding HTTP Response Splitting Attack
  • Understand Web Cache Poisoning Attack
  • Understand HTTP Response Hijacking
  • Discuss SSH Bruteforce Attack
  • Examine Man-in-the-Middle Attack
  • Learn Webserver Password Cracking Techniques
  • Identify Web Application Attacks
  • Understand Webserver Attack Methodology
  • Identify Webserver Attack Tools
  • Identify Counter-measures against Webserver Attacks
  • Understand Patch Management
  • Assess Webserver Security Tools
  • Understand Webserver Pen Testing

Hacking Web Applications

  • Understand Introduction to Web Applications
  • Identify Web Application Components
  • Understand working of Web Applications
  • Examine Web Application Architecture
  • Assess Parameter/Form Tampering
  • Understand Injection Flaws
  • Discuss Hidden Field Manipulation Attack
  • Describe Cross-Site Scripting (XSS) Attacks
  • Understand Web Services Attack
  • Understand Web Application Hacking Methodology
  • identify Web Application Hacking Tools
  • Understand how to Defend Against Web Application Attacks
  • Identify Web Application Security Tools
  • Understand Web Application Firewalls
  • Gain insights on Web Application Pen Testing

SQL Injection

  • Understand SQL Injection
  • Examine SQL Injection Attacks
  • Understand working of Web Applications
  • Identify Server Side Technologies
  • Understand SQL Injection Detection
  • Discuss SQL Injection Black Box Pen Testing
  • Types of SQL Injection
  • Understand Blind SQL Injection
  • Learn SQL Injection Methodology
  • Understanding SQL Query
  • Examine Advanced Enumeration
  • Describe Password Grabbing
  • Discuss Grabbing SQL Server Hashes
  • Identify SQL Injection Tools
  • Understand Evasion Techniques for SQL Injection
  • Understand Defensive strategies Against SQL Injection Attacks
  • Identify SQL Injection Detection Tools

Hacking Wireless Networks

  • Understand Wireless Networks
  • Gain Insights on Wireless Networks
  • Understand various types of  Wireless Networks
  • Understand Wi-Fi Authentication Modes
  • Identify types of Wireless Encryption
  • Understand WEP Encryption
  • Understand WPA/WPA2
  • Discuss Wireless Threats
  • Understand Wireless Hacking Methodology
  • Assess Wireless Hacking Tools
  • Understand Bluetooth Hacking
  • Understand how to Defend Against Bluetooth Hacking
  • Understand how to Defend against Wireless Attacks
  • Identify Wi-Fi Security Tools
  • Examine Wireless Penetration Testing Framework

Evading IDS, Firewalls, and Honeypots

  • Understand Intrusion Detection Systems (IDS)  
  • Learn Ways to Detect an Intrusion
  • Acquire knowledge on various types of Intrusion Detection Systems
  • Understand what is a Firewall
  • Types of Firewall
  • Identify Firewall Identification Techniques
  • Understand Honeypot
  • Assess various types of Honeypot
  • Understand how to Set up a Honeypot
  • Understand IDS, Firewall and Honeypot System
  • Examine Evading IDS
  • Understand Evading Firewall
  • Learn detecting Honeypots
  • Identify Firewall Evading tools
  • Identify Countermeasures
  • Analyze Firewall and IDS Penetration Testing

Buffer Overflow

  • Understand Buffer Overflows (BoF)
  • Understand Stack-Based Buffer Overflow
  • Know Heap-Based Buffer Overflow
  • Understand Stack Operations
  • Identify Buffer Overflow Steps
  • Analyze attacking a Real Program
  • Examine Smashing the Stack
  • Examples of Buffer Overflow
  • Understand how to Mutate a Buffer Overflow Exploit
  • Learn how to identify Buffer Overflows
  • Testing for Heap Overflow Conditions: heap.exe
  • Understand steps for Testing Stack Overflow in OllyDbg Debugger
  • Identify Buffer Overflow Detection Tools
  • Understand Defense Against Buffer Overflows
  • Identify Buffer Overflow Countermeasures Tools
  • Understand Buffer Overflow Pen Testing

Cryptography

  • Understand Cryptography
  • Learn various types of Cryptography
  • Understand Ciphers
  • Gain insights on Advanced Encryption Standard (AES)
  • Understand RC4, RC5, RC6 Algorithms
  • Examine RSA (Rivest Shamir Adleman)
  • Explain Message Digest Function: MD5
  • Understand Secure Hashing Algorithm (SHA)
  • Identify Cryptography Tools
  • Understand Public Key Infrastructure (PKI)
  • Understand Email Encryption
  • Identify Digital Signature
  • Describe SSL (Secure Sockets Layer)
  • Examine Disk Encryption
  • Identify Disk Encryption Tools
  • Understand Cryptography Attacks
  • Identify Cryptanalysis Tools

Penetration Testing

  • Understand Penetration Testing (PT)
  • Identify Security Assessments
  • Examine Risk Management
  • Understand various types of Penetration Testing
  • Understand Automated Testing
  • Understand Manual Testing
  • Understand Penetration Testing Techniques
  • Know the Penetration Testing Phases
  • Understand Enumerating Devices
  • Understand Penetration Testing Roadmap
  • Understand Denial of Service Emulation
  • Outsourcing Pen Testing Services
  • Identify various Penetration testing tools