CEH Practice Test
Tests readiness for EC-Council's Certified Ethical Hacker (CEH) exam — ethical hacking methodology and reconnaissance, scanning, enumeration and vulnerability analysis, system and network attacks, web, wireless, mobile and cloud hacking, and social engineering and cryptography, with the defences for each. Pass to earn CEH Exam Readiness SOA-CEH.
- Advanced difficulty.Assumes years in the role or deep specialist knowledge.
- 25 scenario questions
- 25 minutes, timed
- 70% to pass · 90% for distinction
- Free no sign-up needed
- LinkedIn-ready · add it to your profile in one clickSee how ↓
What is the CEH Practice Test?
The CEH Practice Test is a free advanced-level, 25-minute skill test from Science of Apps. It tests readiness for EC-Council's Certified Ethical Hacker (CEH) exam — ethical hacking methodology and reconnaissance, scanning, enumeration and vulnerability analysis, system and network attacks, web, wireless, mobile and cloud hacking, and social engineering and cryptography, with the defences for each. Score 70% or more on its 25 questions to earn a verifiable CEH Exam Readiness certificate (SOA-CEH). Every question is based on published standards and research — including Certified Ethical Hacker (CEH) (EC-Council), Penetration Testing Execution Standard (PTES), Nmap Reference Guide (Nmap Project) — and each answer is explained with its source.
Built for your job title
Penetration tester, SOC analyst, Security engineer, Network administrator and Cybersecurity student — and anyone who wants quick, verifiable proof of CEH skills for a CV or LinkedIn.
- Penetration tester
- SOC analyst
- Security engineer
- Network administrator
- Cybersecurity student
What the test covers
Five skill areas with 5 questions each, drawn from a bank of 10 per area, so a retake brings questions you haven't seen.
- 01
Methodology and Reconnaissance
20%- Ethics, scope and phases
- Passive and active footprinting
- OSINT
- 02
Scanning, Enumeration and Vulnerability Analysis
20%- Nmap and port scanning
- Enumeration
- Vulnerability assessment
- 03
System and Network Attacks
20%- Password attacks and privilege escalation
- Malware
- Sniffing, DoS and evasion
- 04
Web, Wireless, Mobile and Cloud
20%- Web application attacks
- Wireless attacks
- Mobile, IoT and cloud
- 05
Social Engineering and Cryptography
20%- Social engineering
- Encryption and hashing
- PKI
Independent practice test. Science of Apps is not affiliated with, endorsed by or sponsored by EC-Council. Product and exam names are trademarks of their owners. Passing earns a Science of Apps certificate, not the official exam credential.
Based on published standards
The questions are original scenarios, and each one names the public standard, official guide or research it draws on — shown under the question while you answer, and linked in your review. These are the sources behind this test:
- Certified Ethical Hacker (CEH)EC-Council9 questions
- Penetration Testing Execution StandardPTES7 questions
- Nmap Reference GuideNmap Project7 questions
- OWASP Cheat Sheet SeriesOWASP6 questions
- Recognize and report phishingCISA3 questions
- SP 800-115: Technical guide to information security testingNIST2 questions
- Adversary-in-the-Middle: ARP Cache Poisoning (T1557.002)MITRE ATT&CK2 questions
- Understanding Denial-of-Service AttacksCISA2 questions
- SQL InjectionOWASP2 questions
- Wi-Fi security (WPA3)Wi-Fi Alliance2 questions
- Common Vulnerability Scoring SystemFIRST1 question
- Service name and port number registryIANA1 question
- Use Alternate Authentication Material: Pass the Hash (T1550.002)MITRE ATT&CK1 question
- Steal or Forge Kerberos Tickets: Kerberoasting (T1558.003)MITRE ATT&CK1 question
- Cross Site Scripting (XSS)OWASP1 question
- Cross Site Request Forgery (CSRF)OWASP1 question
- Web Security Testing GuideOWASP1 question
- Shared Responsibility ModelAWS1 question
Try a sample question
Before any penetration test begins, an ethical hacker must have
- a copy of the source code for all systems
- a list of every employee's password
- access to the company's bank account
- written authorisation and an agreed scope
Show the answer
D. written authorisation and an agreed scope — Authorisation separates testing from crime. The real test has 25 questions like this.
How the test works
25 minutes, 25 questions
One question per screen, with a progress bar and a countdown. Your progress is saved on this device if you need to pause.
Graded on our server
Answers reach the page only after you submit, so the certificate can only be earned by passing.
Every answer explained
Pass or not, you see every question with the right answer, why, and the source behind it. Pass mark 70%, distinction 90%.
Your certificate
Founder-signed, with a QR code and credential ID. Download PDF or PNG, add to LinkedIn, and it's emailed to you.
What you earn

Pass, then add it to LinkedIn in one click
No typing. The Add to LinkedIn button opens your profile’s Licenses & certifications form already filled in: the certificate name, Science of Apps as the issuer, the issue date, your credential ID and a link recruiters can use to verify it.
- 1Take the 25-minute test
- 2Score 70% or more
- 3Click Add to LinkedIn

CEH Exam Readiness
Science of Apps
Show credential ↗Try another skill test
- 10 minSOA-CYF
Cybersecurity Fundamentals Certification
Tests core cybersecurity — the CIA triad, common threats, NIST CSF 2.0, authentication and MFA, patching, backups, encryption basics and security culture.
Difficulty: BeginnerTake the 10-minute test → - 10 minSOA-SAPD
Security Awareness and Phishing Detection Certification
Tests everyday security awareness — spotting phishing emails, texts and calls, suspicious links and attachments, safe reporting, passwords, MFA fatigue and deepfake scams.
Difficulty: BeginnerTake the 10-minute test → - 15 minSOA-NSF
Network Security Fundamentals Certification
Tests network security — firewalls and segmentation, VPNs and zero trust, TLS, DNS security, common ports, IDS/IPS, Wi-Fi security and DDoS basics.
Difficulty: IntermediateTake the 15-minute test →
Frequently asked questions
What is the CEH Practice Test?
The CEH Practice Test is a free advanced-level, 25-minute skill test from Science of Apps. It tests readiness for EC-Council's Certified Ethical Hacker (CEH) exam — ethical hacking methodology and reconnaissance, scanning, enumeration and vulnerability analysis, system and network attacks, web, wireless, mobile and cloud hacking, and social engineering and cryptography, with the defences for each. Score 70% or more on its 25 questions to earn a verifiable CEH Exam Readiness certificate (SOA-CEH). Every question is based on published standards and research — including Certified Ethical Hacker (CEH) (EC-Council), Penetration Testing Execution Standard (PTES), Nmap Reference Guide (Nmap Project) — and each answer is explained with its source.
How do I take the CEH Practice Test for free?
Read the five skill areas on this page, then take the 25-minute test online — no fee, course or sign-up. You see every answer explained when you finish. Score 70% or more and you get a CEH Exam Readiness certificate straight away, on screen, as a PDF and by email, with a credential ID anyone can verify.
Are the CEH Practice Test questions based on real standards?
Yes. The questions are original scenarios written by Science of Apps, and each one is based on a public source you can read: Certified Ethical Hacker (CEH) (EC-Council); Penetration Testing Execution Standard (PTES); Nmap Reference Guide (Nmap Project); OWASP Cheat Sheet Series (OWASP); Recognize and report phishing (CISA); SP 800-115: Technical guide to information security testing (NIST). The source is shown under each question and linked in the answer review. Science of Apps doesn't copy questions from other tests.
What does the CEH Practice Test cover?
Five skill areas with five questions each, drawn from a bank of 10 per area so a retake brings new questions: Methodology and Reconnaissance (Ethics, scope and phases, Passive and active footprinting and OSINT); Scanning, Enumeration and Vulnerability Analysis (Nmap and port scanning, Enumeration and Vulnerability assessment); System and Network Attacks (Password attacks and privilege escalation, Malware and Sniffing, DoS and evasion); Web, Wireless, Mobile and Cloud (Web application attacks, Wireless attacks and Mobile, IoT and cloud); Social Engineering and Cryptography (Social engineering, Encryption and hashing and PKI). Every question is an original scenario based on a published standard, official documentation or research, named under the question.
Who should take the CEH Practice Test?
Penetration tester, SOC analyst, Security engineer, Network administrator and Cybersecurity student. It suits anyone who wants a quick, verifiable way to show CEH skills, from students and career switchers to experienced professionals.
Can I use this for ceh exam questions, certified ethical hacker practice exam or ceh v13 practice test?
Yes. The CEH Practice Test is free and covers all of these: 25 scenario questions in 25 minutes, each answer explained with the source it comes from, so it works as interview and exam practice. It isn't a full course, so use the areas you miss as your study list. Scoring 70% or more earns a verifiable certificate.
Is this the official CEH exam?
No. It is an independent practice test written to the publicly available CEH content outline, for checking your readiness before you book the real exam. Science of Apps is not affiliated with EC-Council, and passing earns a Science of Apps certificate rather than the official credential.
Can I take the CEH Practice Test from any country?
Yes. The test is online, in English and free everywhere — people take it from India, the US, the UK, Europe, Africa, Latin America and Asia-Pacific. Your certificate is dated with your own local date and can be verified from anywhere at scienceofapps.com/certification/verify/.
How long is the CEH Practice Test?
25 questions — 5 from each of 5 skill areas — with a 25-minute limit. You need 70% (18 of 25) to pass and 90% for distinction.
How hard is the CEH Practice Test?
We rate it Advanced: assumes years in the role or deep specialist knowledge. It has 25 scenario questions — 5 from each of 5 skill areas — and a 25-minute limit. You need 70% (18 of 25) to pass and 90% for distinction.
How much do Science of Apps certifications cost?
Nothing. There is no fee to take a test, to receive the certificate, to have it emailed or to verify it, and no sign-up.
How are the tests graded?
On our server, not in your browser. The answers never reach the page until you submit, so a certificate can only be earned by passing. Each certificate gets a unique credential ID stored by Science of Apps.
What happens if I don't pass?
You see your score for each area and every question with the correct answer and why, with the published source behind it. You can retake after 30 minutes, and the retake draws questions you haven't seen yet.
Do the certificates expire?
No. Every certificate is dated, so it always shows when you passed. Retake a test any time for a newer date or a higher score.
Can I add the certificate to LinkedIn?
Yes. After you pass, Add to LinkedIn opens the Licenses & certifications form with the certificate name, Science of Apps as the issuer, the issue date, your credential ID and the verification link filled in. You can also download it as a PDF or PNG, and it's emailed to you as a PDF.
How can an employer verify my certificate?
Every certificate has a credential ID and a QR code. Scanning it, or entering the ID at scienceofapps.com/certification/verify/, shows the holder's name, the certification, the score and the issue date from our records.
Are these accredited qualifications?
No. They are Science of Apps' own assessments of applied skill. They aren't issued by a university or standards body, and they work best alongside a portfolio that shows the skills in real work.
990 more certifications to collect
Cybersecurity, IT, Cloud & DevOps
- Cybersecurity Fundamentals Certification10 min · Beginner
- Security Awareness and Phishing Detection Certification10 min · Beginner
- Network Security Fundamentals Certification15 min · Intermediate
- Identity and Access Management Certification15 min · Intermediate
- Cloud Security Fundamentals Certification15 min · Intermediate
- Application Security Fundamentals Certification15 min · Intermediate
- Privacy and Data Protection Fundamentals Certification10 min · Beginner
- Security Incident Response Certification15 min · Intermediate
- Security Operations Center (SOC) Fundamentals Certification15 min · Intermediate
- Vulnerability Management Certification15 min · Intermediate
- Threat Modeling Certification20 min · Advanced
- Ethical Hacking Fundamentals Certification15 min · Intermediate
- IT Support and Troubleshooting Certification10 min · Beginner
- Linux Fundamentals Certification10 min · Beginner
- Networking Fundamentals Certification10 min · Beginner
- Cloud Computing Fundamentals Certification10 min · Beginner
- AWS Cloud Fundamentals Certification10 min · Beginner
- Microsoft Azure Fundamentals Certification10 min · Beginner
- Google Cloud Fundamentals Certification10 min · Beginner
- Docker and Containers Certification15 min · Intermediate
- Kubernetes Fundamentals Certification15 min · Intermediate
- CI/CD and DevOps Fundamentals Certification15 min · Intermediate
- Infrastructure as Code Certification15 min · Intermediate
- Site Reliability Engineering Fundamentals Certification20 min · Advanced
- Cloud Cost Optimization Certification15 min · Intermediate
- ServiceNow Certification Practice (CSA)20 min · Advanced
- CompTIA A+ Practice Test20 min · Advanced
- CompTIA Network+ Practice Test20 min · Advanced
- CompTIA Security+ Practice Test20 min · Advanced
- CompTIA Linux+ Practice Test20 min · Advanced
- Cisco CCNA Practice Test20 min · Advanced
- ISC2 CC (Certified in Cybersecurity) Practice Test20 min · Advanced
- CISSP Practice Test20 min · Advanced
- CISA Practice Test20 min · Advanced
- CISM Practice Test20 min · Advanced
- AWS Solutions Architect Associate Practice Exam20 min · Advanced
- Azure Administrator AZ-104 Practice Test20 min · Advanced
- Google Cloud Certification Practice Exams20 min · Advanced
- Linux Foundation Certification Practice (LFCS)20 min · Advanced
- Kubernetes CKA & CKAD Practice Exam20 min · Advanced
- Terraform Associate Practice Exam20 min · Advanced
- Microsoft 365 Administrator (MS-102) Practice Test20 min · Advanced
- GDPR Certification15 min · Intermediate
- Privacy Operations & DSAR Certification15 min · Intermediate
- ISO 27001 Certification Training15 min · Intermediate
- ISO 27001 Lead Auditor Practice Exam15 min · Intermediate
- SOC 2 Compliance Certification15 min · Intermediate
- GRC Certification (Governance, Risk & Compliance)20 min · Advanced
- Business Continuity Management Certification (ISO 22301)15 min · Intermediate
- Disaster Recovery Planning Certification15 min · Intermediate
- Penetration Testing Certification25 min · Advanced
- Digital Forensics Certification20 min · Intermediate
- Zero Trust Security Certification20 min · Intermediate
- Serverless Computing Test20 min · Intermediate
- CKS Certification Test (Kubernetes Security)25 min · Advanced
- AZ-900 Practice Test15 min · Beginner
- AWS Cloud Practitioner Practice Exam15 min · Beginner
- ITIL 4 Foundation Practice Exam15 min · Beginner
- CEH Practice TestYou're here
- Active Directory Test20 min · Intermediate
- Windows Server Quiz20 min · Intermediate
- Splunk Certification Test20 min · Intermediate
- PowerShell Quiz20 min · Intermediate
- SC-900 Practice Test15 min · Beginner
- AZ-204 Practice Test25 min · Advanced
- AZ-305 Practice Test25 min · Advanced
- AWS Developer Associate Practice Exam20 min · Intermediate
- Google Associate Cloud Engineer Practice Exam20 min · Intermediate
- CompTIA CySA+ Practice Test25 min · Advanced
- CompTIA PenTest+ Practice Test25 min · Advanced
- CompTIA Tech+ Practice Test15 min · Beginner
- Jenkins Test20 min · Intermediate
- Ansible Test20 min · Intermediate
- Windows 11 Quiz15 min · Beginner
- macOS Quiz15 min · Beginner
- Intune Quiz20 min · Intermediate
- VMware Quiz20 min · Intermediate
- Nginx Quiz20 min · Intermediate
- Wireshark Quiz20 min · Intermediate
- Cryptography Quiz25 min · Advanced
- CompTIA Cloud+ Practice Test20 min · Intermediate
- CIPT Practice Exam25 min · Advanced
- AWS Advanced Networking Certification Test25 min · Advanced
- Azure Networking Certification Test25 min · Advanced
- Google Cloud Network Engineer Certification Test25 min · Advanced
- Exchange Server Quiz20 min · Intermediate
- DigitalOcean Certification Test20 min · Intermediate
- Google Workspace Administrator Certification Test20 min · Intermediate
Foundation
AI & Generative AI
- AI UX Design Certification30 min · Advanced
- Prompt Engineering Certification30 min · Intermediate
- AI Product Manager Certification30 min · Advanced
Software Engineering & Web Development
- HTML and CSS Fundamentals Certification10 min · Beginner
- JavaScript Fundamentals Certification10 min · Beginner
- TypeScript Fundamentals Certification15 min · Intermediate
Data Analytics & Business Intelligence
- Product Analytics Certification30 min · Advanced
- Data Literacy Certification10 min · Beginner
- Microsoft Excel Fundamentals Certification10 min · Beginner
Digital Marketing, SEO, AEO & Growth
- Conversion Rate Optimization (CRO) Certification30 min · Advanced
- App Store Optimization (ASO) Certification30 min · Intermediate
- Growth Marketing Certification30 min · Intermediate
UX/UI, Design, Research & Creative
- UX Design Certification30 min · Intermediate
- UI Design Certification30 min · Intermediate
- Product Design Certification30 min · Intermediate
Product, Project Management & Business Analysis
- Product Manager Certification30 min · Intermediate
- Design Leadership Certification30 min · Advanced
- Agile Product Owner Certification30 min · Intermediate
Sales, Customer Success & Support
- Sales Fundamentals Certification10 min · Beginner
- Consultative Selling Certification15 min · Intermediate
- B2B Sales Development Representative Certification10 min · Beginner
Human Resources & People Management
- Human Resources Fundamentals Certification10 min · Beginner
- Talent Acquisition and Recruitment Certification10 min · Beginner
- Technical Recruitment Certification15 min · Intermediate
Finance, Accounting, Operations & Entrepreneurship
- Financial Literacy for Professionals Certification10 min · Beginner
- Accounting Fundamentals Certification10 min · Beginner
- Bookkeeping Fundamentals Certification10 min · Beginner
Communication, Leadership & Transferable Skills
- Critical Thinking Test10 min · Beginner
- Attention to Detail Test10 min · Beginner
- Cognitive Bias Test10 min · Beginner
Languages
- English Level Test30 min · Beginner
- American Sign Language (ASL) Foundations Test25 min · Intermediate
- App & Software Localization Test25 min · Intermediate
Healthcare, Education, Legal Operations & Sustainability
- Healthcare Administration Fundamentals Certification10 min · Beginner
- Medical Office Administration Certification10 min · Beginner
- Healthcare Data Privacy Awareness Certification10 min · Beginner
Test Prep, Academics & Aptitude
- SAT Math Practice Test20 min · Advanced
- SAT Reading and Writing Practice Test20 min · Advanced
- ACT Practice Test (English, Math, Reading & Science)20 min · Advanced
Language Exam Prep
- IELTS Academic Practice Test with Band Score20 min · Advanced
- IELTS General Training Practice Test20 min · Advanced
- TOEFL iBT Practice Test20 min · Advanced
Office & Productivity Software
- Microsoft Word Skills Certification15 min · Intermediate
- Microsoft PowerPoint Skills Certification15 min · Intermediate
- Microsoft Outlook Skills Certification10 min · Beginner
Engineering, Architecture, Construction & Safety
- Mechanical Engineering Practice Test (FE-Style)20 min · Advanced
- Electrical Engineering Practice Test (FE-Style)20 min · Advanced
- Civil Engineering Practice Test (FE-Style)20 min · Advanced
Hospitality, Travel & Retail
- Hospitality Management Certification10 min · Beginner
- Food Safety Certification10 min · Beginner
- Hotel Revenue Management Certification15 min · Intermediate
Cognitive Ability & Pre-Employment Tests
- IQ Test20 min · Intermediate
- Numerical Reasoning Test20 min · Intermediate
- Verbal Reasoning Test20 min · Intermediate
Read before you test
- Career guidesHow to become an ethical hacker or penetration tester in 2027: scope and authorisation, reconnaissance, web and network testing, exploitation basics and writing reportsHow to become an ethical hacker in 2027: authorisation and scope, reconnaissance, web and network testing, exploitation basics, reporting and pentester pay.
- Career guidesHow to become a SOC analyst in 2027: alert triage, SIEM and EDR, log analysis, MITRE ATT&CK, escalation, playbooks, shift work and moving up from tier 1How to become a SOC analyst in 2027: alert triage, SIEM and EDR, log analysis, MITRE ATT&CK, escalation, playbooks, shift work and SOC analyst pay in India.
- Career guidesHow to start a cybersecurity career in 2027: the CIA triad, threats and controls, networks, identity, vulnerabilities, incident basics and the entry-level roles that hireHow to start a cybersecurity career in 2027: CIA triad, threats and controls, networks, identity, vulnerabilities, incidents, entry roles and pay in India.
- Career guidesVulnerability management skills employers want in 2027: asset inventory, scanning, CVSS and exploitability, CISA KEV, risk-based prioritisation, patching SLAs and reportingVulnerability management skills employers want in 2027: asset inventory, scanning, CVSS, exploitability, CISA KEV, risk-based prioritisation and patch SLAs.
- Career guidesHow to get a data engineer job in 2027: pipelines, modelling and the system-design round that decides itHow to get a data engineer job in 2027: the SQL, Python and pipeline-design skills employers test, the interview loop, India and global pay, and a 12-week plan.
- Career guidesHow to get a cloud security job in 2027: the shared responsibility model, cloud IAM, misconfiguration, encryption and keys, logging, network controls and posture managementHow to get a cloud security job in 2027: shared responsibility, cloud IAM, misconfigurations, encryption and keys, logging, network controls and pay in India.
Get the ideas, not the noise.
Sign up with Google and we’ll send you short UX psychology tips by email — why people tap, stall and leave, and what to do about it. Unsubscribe anytime. Prefer something to keep? Get the free Laws of UX guide as a PDF.
Founder, Science of Apps




