Certification provider
EC-Council practice exams
Offensive security is EC-Council's home turf: ethical hacking, penetration testing and digital forensics, capped by an executive-tier CISO credential. Practice questions for the flagship exams are below, each with the answer key and a plain-language explanation of every option.
What is EC-Council certification?
CEH (Certified Ethical Hacker) is the flagship, with CEH Master adding the practical exam. Specialist tracks cover network defense (CND), incident handling (ECIH), SOC analysis (CSA), threat intelligence (CTIA), cloud security (CCSE), DevSecOps (ECDE) and application security (CASE). CPENT is the advanced penetration-testing credential, CHFI covers digital forensics, and CCISO caps the program for security executives. A newer AI-security line — offensive AI security and responsible AI governance — extends the roadmap into 2026.
Most popular EC-Council certifications
| Exam | Level | Difficulty | Why candidates pick it |
|---|---|---|---|
| CEH (312-50) | Core | Intermediate | The flagship ethical-hacking credential; training or two years' experience required to sit |
| CSA | Specialist | Entry | SOC analyst entry point with strong junior-hiring demand |
| CHFI | Specialist | Intermediate | The default digital-forensics credential for investigation roles |
| CPENT | Advanced | Expert | Performance-based penetration testing at scale, 24 hours of practical scenarios |
| CCISO | Executive | Expert | CISO-track credential requiring five years of security management experience |