Just passed my CEH =)

ChaseBenfieldChaseBenfield Member Posts: 13 ■□□□□□□□□□
in CEH
Hey all,

I just passed my CEH exam a few days ago at Pearson VUE and thought I might be able to save others studying a ton of time.

What I studied:
  • Official CEH books (Volume 1, Volume 2, Lab Manuals, and Aspen pdf versions)
  • Matt Walker AIO exam guide
  • Sybex
  • Boson
I also took an official "bootcamp" through New Horizons. This included a virtual lab environment to complete a small set of labs on Windows Server 2008, Windows Server 2012, Windows 7, and Backtrack systems without internet access.... This proved to be utterly useless (although other online hacking bootcamps have a better rep).

I took the initiative to set up a hack lab on Windows 7 Ultimate with Kali Linux, Windows 8, Windows Server 2008, and Windows Server 2012 Virtual Box VM's. With these I went through all labs provided in paper version and aspen pdf version lab manuals (more in pdf and the pdf books actually have pages of text to accompany slides in paper back version). I also played with all the tools provided not covered in the lab manuals.

What WAS NOT on the Exam:
  • ANYTHING FROM MATT WALKER AIO EXAM
  • ANYTHING FROM SYBEX Other than information you may need if you don't know basic networking and the like.
  • ANYTHING FROM BOSON I learned a ton of information since I studied all rights wrong answers and scored 100% just didn't help for the exam.
What was on the exam:
  • TOOLS, TOOLS, TOOLS from lab manuals. Many with specific questions on the operation of tools, and syntax of command based tools.
  • QUESTIONS ON RECENT EXPLOITS WITHIN THE LAST FEW YEARS FUNNY CONSIDERING OFFICIAL MATERIAL WAS COPYRIGHTED IN 2011
  • SCENARIO QUESTIONS BASED OFF CONCEPTS FROM OFFICIAL MATERIALS Basically know how attacks work along with respective ports, protocols, architecture, victims/attacker relationships, and OSI layers. If you know this and can visually recall the processes in the slides you are good.
I post this because I was honestly ready for the exam months ago, but read online to study the Matt Walker, Sybex, and Boson. I always over prepare and knew the information from each like the back of my hand. When I realized all of that was for not I knew I had to post. Also, my voucher was for the CEH v8 but I have a sneaking suspicion my exam was CEH v9. Pearson VUE simply told me it was CEH 312-50. Luckily I keep up with security threats and want to know the inter-workings of them as they come out so I read a ton of white papers. Questions on the exam cover material outside the scope of the CEH v8 official course material, but it doesn't deviate into the AIO, Sybex, or Boson. The only information that was relevant from AIO, Sybex, or Boson IS ALREADY IN THE OFFICIAL COURSE WARE. It is faster to go through the course ware than to get familiar with all the information from outside sources.

Honestly the whole experience was really fun for me. I can't wait to dive deeper. I am studying for the CHFI now and will schedule that within the month. Not as hyped up for CHFI because the course material isn't very technical. I would prefer to move onto the Penetration Testing with Kali certification, but unfortunately I am under a scholarship atm and don't have the cash on hand to invest in that.
· Share on FacebookShare on Twitter

Comments

  • wayne_wonderwayne_wonder Member Posts: 215 ■■■□□□□□□□
    So you purchased the official courseware? isn't that like $850 or something like that?
    · Share on FacebookShare on Twitter
  • ChaseBenfieldChaseBenfield Member Posts: 13 ■□□□□□□□□□
    Honestly I am not sure. I used my Post 911 GI Bill which covered the "boot camp" and courseware. But I did have an argument with my friend the other day over some of the information and was able to easily search for the lab manuals and courseware free online through slideshare.
    · Share on FacebookShare on Twitter
  • OctalDumpOctalDump Member Posts: 1,722
    That's pretty awesome. My favourite:
    I also took an official "bootcamp" through New Horizons. This included a virtual lab environment to complete a small set of labs on Windows Server 2008, Windows Server 2012, Windows 7, and Backtrack systems without internet access.... This proved to be utterly useless.

    I did the 'v8' (I think, it was close to the change over), and found that there was stuff in the Boson that wasn't in the AIO that was tested, so I'm not sure that the AIO was ever completely complete.
    2017 Goals - Something Cisco, Something Linux, Agile PM
    · Share on FacebookShare on Twitter
  • psheehan5psheehan5 Member Posts: 80 ■■■□□□□□□□
    Chase, thank you for the in depth post. I took the boot camp in August and am very interested in getting certified and pursuing this as a career path. However, I've kind of been put off by all the negativity surrounding the test content. It's nice to see folks succeed. Congrats again!
    PS
    · Share on FacebookShare on Twitter
  • danny069danny069 Member Posts: 1,025 ■■■■□□□□□□
    Congrats!
    I am a Jack of all trades, Master of None
    · Share on FacebookShare on Twitter
  • TechGuru80TechGuru80 Member Posts: 1,539 ■■■■■■□□□□
    Don't start up the version nonsense again. You bought a voucher to take whatever version is released at the time of sitting...not the version out when you purchase the voucher.

    Congrats on the pass.
    Security Certification Roadmap
    · Share on FacebookShare on Twitter
  • grungeisevilgrungeisevil Member Posts: 39 ■■□□□□□□□□
    Hello there Chase (hope I got your name correct),

    I'm studying for CEH too at the moment. A little overwhelmed with all the tools to be honest. Without violating the NDA, would you mind sharing what's the breakdown percentage in terms of tools and their syntax, exploits, and theories?

    I read that this version had like Risk Management, ALE/SLE, HIPAA, Threat Modeling, Incident Management, etc. Did you see those on the exam?

    Thanks again Chase, and congratulations on the pass. Awesome job!
    · Share on FacebookShare on Twitter
  • ablindseyablindsey Member Posts: 20 ■□□□□□□□□□
    I just passed the CHFI yesterday, it will be cakewalk compared to the CEH
    · Share on FacebookShare on Twitter
  • tmurphy3100tmurphy3100 Member Posts: 154 ■■■□□□□□□□
    I am far from starting to study for this, but I wonder how useful the Pluralsight videos are...they are still adding more to the course.
    2020 Goals: CCNA R&S, Cysa+, AZ103, Linux+, Pentest+
    · Share on FacebookShare on Twitter
  • mstd0nmstd0n Member Posts: 63 ■■□□□□□□□□
    icon_thumright.gif Well done!
    · Share on FacebookShare on Twitter
  • DAVIS NGUYENDAVIS NGUYEN Member Posts: 1,472 ■■■□□□□□□□
    Congrats!
    · Share on FacebookShare on Twitter
  • ccnpninjaccnpninja Member Posts: 1,010 ■■■□□□□□□□
    Congrats!
    my blog:https://keyboardbanger.com
    · Share on FacebookShare on Twitter
  • DollarhydeDollarhyde Member Posts: 111
    Congrats
    ___________________________________________________________________________________________________________
    · Share on FacebookShare on Twitter
  • hermit84hermit84 Member Posts: 19 ■□□□□□□□□□
    I passed the exam today
    · Share on FacebookShare on Twitter
  • hermit84hermit84 Member Posts: 19 ■□□□□□□□□□
    hermit84 wrote: »
    I passed the exam today

    Please forget v8. It is v9 already. No matter what voucher you have. AIO book is too simple for the exam.
    What you should expect.
    1. Review the exam outline,
    Certified Ethical Hacker Exam Information

    Tools/systems/programs are 32% (40 Questions)
    2. Review the course outline,
    http://www.eccouncil.org/Certification/professional-series/ceh-course-outline
    Find and understand what are the possible tools and threat of each topic
    · Share on FacebookShare on Twitter
  • grungeisevilgrungeisevil Member Posts: 39 ■■□□□□□□□□
    Congratulations hermit84,

    Could you share if you saw questions like Risk Management, Threat Modelling, HIPAA/SOX/ISO, ALE/SLE calculations and the works?
    How about scenario based questions? Would they revolve around theory or how the exploitation would work?

    Thanks!
    · Share on FacebookShare on Twitter
  • gncsmithgncsmith Member Posts: 459 ■■■□□□□□□□
    Congrats!
    Connect With Me || My Blog Site || Follow Me
    · Share on FacebookShare on Twitter
  • hermit84hermit84 Member Posts: 19 ■□□□□□□□□□
    grungeisevil wrote: »
    Congratulations hermit84,

    Could you share if you saw questions like Risk Management, Threat Modelling, HIPAA/SOX/ISO, ALE/SLE calculations and the works?
    How about scenario based questions? Would they revolve around theory or how the exploitation would work?

    Thanks!

    Risk Management, Threat Modelling, HIPAA/SOX/ISO, ALE/SLE calculations (Yes)

    Scenario based questions (Both)
    · Share on FacebookShare on Twitter
  • Tr1x5TaTr1x5Ta Member Posts: 8 ■■■□□□□□□□
    Congratulations!!
    · Share on FacebookShare on Twitter
  • fuz1onfuz1on Member Posts: 961 ■■■■□□□□□□
    congrats!
    timku.com(puter) | ProHacker.Co(nsultant) | ITaaS.Co(nstultant) | ThePenTester.net | @fuz1on
    Transmosis | http://transmosis.com | LinkedIn | https://linkedin.com/in/t1mku
    If evil be spoken of you and it be true, correct yourself, if it be a lie, laugh at it. - Epictetus
    The only real failure in life is not to be true to the best one knows. - Buddha
    If you are not willing to learn, no one can help you. If you are determined to learn, no one can stop you. - Unknown
    · Share on FacebookShare on Twitter
  • ChaseBenfieldChaseBenfield Member Posts: 13 ■□□□□□□□□□
    grungeisevil wrote: »
    Hello there Chase (hope I got your name correct),

    I'm studying for CEH too at the moment. A little overwhelmed with all the tools to be honest. Without violating the NDA, would you mind sharing what's the breakdown percentage in terms of tools and their syntax, exploits, and theories?

    I read that this version had like Risk Management, ALE/SLE, HIPAA, Threat Modeling, Incident Management, etc. Did you see those on the exam?

    Thanks again Chase, and congratulations on the pass. Awesome job!

    Hey,
    Honestly I am not 100% sure of the specifics for Risk Management, ALE/SLE, HIPAA, Threat Modeling, Incident Management, but that rings a bell. I am very familiar with all of that information from a combination of experience, my undergraduate/graduate degrees, and studying for my PMP. I generally just thank my lucky stars for those questions and move on to the next one without much thought. I can say that nothing from those knowledge areas was deep in the weeds, but that could be due to my previous exposure.

    Considering tools, my only advice is to get hands on in a lab and keep logs analyzing you're approach and results. There was a wide range on the exam.
    · Share on FacebookShare on Twitter
  • BillV_BillV_ Member Posts: 114 ■□□□□□□□□□
    grungeisevil wrote: »
    I'm studying for CEH too at the moment. A little overwhelmed with all the tools to be honest. Without violating the NDA, would you mind sharing what's the breakdown percentage in terms of tools and their syntax, exploits, and theories?

    I read that this version had like Risk Management, ALE/SLE, HIPAA, Threat Modeling, Incident Management, etc. Did you see those on the exam?

    https://cert.eccouncil.org/images/doc/CEH-Exam-Blueprint-v2.0.pdf
    · Share on FacebookShare on Twitter
  • grungeisevilgrungeisevil Member Posts: 39 ■■□□□□□□□□
    BillV_ : Thanks for the link!
    · Share on FacebookShare on Twitter
  • BillV_BillV_ Member Posts: 114 ■□□□□□□□□□
    No problem. The pieces you were asking about would fall in II. Analysis/Assessment (16 questions, 13%). Good luck with your studies.
    · Share on FacebookShare on Twitter
  • slyweexslyweex Member Posts: 6 ■□□□□□□□□□
    Hi there everyone,

    Just passed my CEH today. Took me 45 minutes to pass with 80+ percent score. In fact it wasn't that bad as many people here whined. I do have some experience in the field of security (thouh I'm not a pen-tester) and that surely helped.
    Most of the questions I've seen already on different testing sites (skillset, sample CEH tests around the Internet) in slightly different wordings. Either way the questions are pretty simple if you understand the topic and not trying to memorize the exam ****.
    I believe the question set was of an updated version, as i've seen several questions on year 2014's exploits.
    yes, there were couple of questions related to the ALE, HIPAA and other weird looking acronyms, but guys, seriously, it is not a rocket science and if you are able to multiply couple of numbers and understand what the word 'annual' means - these won't surprise you.
    The exam definitely needs prior knowledge. Just remember, that it is an exam to test your security expertise, which, for the notice, is very valuable in the world. Don't expect an easy ride as you have to know how systems work beforehand and memorizing everything just won't work.
    What i've used in my study was Matt Walkers second edition book and ECCouncil's study outline. What I'd done - read both, googled everything, that was unknown or unclear for me and wrote down for my further reference. Also I've played around with the mentioned tools. The same applied to the newly added material - mobile threats, cloud computing and so on.

    On the other hand there were several errors in wording, mistypings and unclear questions. I believe it is what had cut my score by 14 percent.
    So as the final word - don't be afraid and dig deep to find your answers and good luck on the exam.
    · Share on FacebookShare on Twitter
  • impelseimpelse Member Posts: 1,237 ■■■■□□□□□□
    Congrats guys
    Stop RDP Brute Force Attack with our RDP Firewall : http://www.thehost1.com
    It is your personal IPS to stop the attack.

    · Share on FacebookShare on Twitter
Sign In or Register to comment.