Covered Skills

The exam is divided into nine domains. The learning process should be built strategically as each section has different weight and is further divided into multiple sub-domains.

• Network and Perimeter Hacking [14%] – 18 questions

  This domain is all about sniffing, social engineering, service denial, session hijacking, and ways to evade IVS and firewalls along with honeypots. The subtopics include diverse sniffing tools and techniques, how to identify theft, the concepts and techniques for social engineering, impersonalization, and DDoS. Also, make sure to learn more about session hijacking on the network and application levels, common tools, and more.

• Wireless Network Hacking [6%] – 8 Questions

  This part of the syllabus requires applicants to be familiar with wireless concepts, most common wireless threats, hacking methodologies as well as tools, and wireless security tools. Moreover, the concepts such as encryption and countermeasures should be covered as well.

• Cryptography [6%] – 7 questions

  Encryption algorithms, cryptography tools and concepts, and email and disk encryption are some of the topics covered in this section. In addition, one has to demonstrate knowledge of Public Key Infrastructure (PKI), countermeasures, and cryptanalysis to excel in the exam.

• System Hacking Phases and Attack Techniques [17%] – 21 questions

  This module assesses one’s understanding of the nitty-gritty of ethical hacking essentials like system hacking, malware threats, and analysis of vulnerability. Before this section ends, it imparts a great cognizance about concepts like the types of vulnerabilities, assessment solutions, system hacking, access maintenance, passwords cracking, and escalating privilege. Familiarity with anti-malware software along with knowledge of APT and Trojans is needed, among the rest.

• Cloud Computing [6%] – 7 questions

  For this domain, the candidates should know what the key cloud computing concepts are, what are the details of cloud computing and security, and serverless computing. Then, pay attention to the concepts like container technology and threats of cloud computing.

• Review of Ethical Hacking and Information Security [6%] – 8 questions

  This part of the exam content covers the basics of ethical hacking, including the key topics such as Information security overview, general hacking as well as ethical hacking concepts, information security controls, and standards and laws.

• Techniques for Reconnaissance [21%] – 26 questions

  Scanning networks, and enumeration are the sub-topics of this domain. Leaners should gain expertise over concepts like footprinting through search engines and web services. In addition to this, knowledge of footprinting in relation to websites, email, DNS, and networking is also required for succeeding in this section.

  As the domain proceeds, it throws lights on tools for scanning, host and OS discovery, and scanning beyond IDS and Firewall. NetBIOS, SNMP, and LDAP Enumeration as well as various other related topics are covered extensively.

• Mobile Platform, IoT, and OT Hacking [8%] – 10 questions

  The key information regarding this section relates to the hacking expertise needed to hack mobile platforms, IoT, and OT. One should know the vectors for attacks that target mobile platforms, specifics of the iOS and Android hacking, and the guidelines of mobile security, among the rest. For the second subtopic, learn more about hacking tools and methods for OT and IoT.

• Web Application Hacking [16%] – 20 questions

  To answer the questions under this section, the candidates have to know what all it takes to hack web servers and web applications. SQL Injection is another focused skill. Speaking in detail, one needs to understand the concepts of web server, available security tools, attack methodology, and more. In addition, get understanding of the attack access controls, app threats, attacks targeting authorization and authentication, and types of SQL Injection along with its methods and tools.

EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam

EC Council Certified Ethical Hacker v10 Exam 312-50v10 Exam is related to Certified Ethical Hacker Version 10 (CEH) certification This 312-50v10 Exam covers wide-ranging countermeasures to combat Cloud Computing attacks. This exam also deals with the ability to provide a detailed to pen testing methodology for Cloud Systems to identify threats in advance and established and govern minimum standards for credentialing expert information Security specialists in ethical hacking measures. This exam verifies that candidates have skills to understands and knows how to look for weaknesses, vulnerabilities in target systems and uses the same knowledge and tools as a malicious hacker. Security officers, Auditors, and Security Professionals usually hold or pursue this certification and you can expect the same job role after completion of this certification.

Module 12: Avoiding IDS, Honeypots & Firewalls

To tackle the questions from this module, the individuals need to be aware of IDS, honeypot & firewall concepts as well as solutions; various methods to bypass IDS; various methods to bypass firewalls; Firewall/IDS evading tools; various methods to identify honeypots; Firewall/IDS evasion countermeasures; Firewall/IDS penetration testing.