PASSED CEHv6
DoesNotCompute
Registered Users Posts: 7 ■□□□□□□□□□
in CEH
Finally quit dragging my feet on sitting for the CEH and passed yesterday with an 86%. I had taken the prep course with Global Knowledge back in November and I read the following books as well:
http://www.amazon.com/s/ref=nb_sb_noss?url=search-alias=aps&field-keywords=CEH
http://www.amazon.com/CEH-Prep-Guide-Comprehensive-Certified/dp/0470135921/ref=sr_1_3?ie=UTF8&qid=1311548740&sr=8-3
http://www.amazon.com/Hacking-Exposed-Network-Security-Solutions/dp/0071613749/ref=sr_1_7?s=books&ie=UTF8&qid=1311548877&sr=1-7
http://www.amazon.com/Certified-Ethical-Hacker-Exam-Prep/dp/0789735318/ref=sr_1_1?ie=UTF8&qid=1311548799&sr=8-1 (Skimmed and used test engine religiously)
http://www.amazon.com/Nmap-Network-Scanning-Official-Discovery/dp/0979958717/ref=sr_1_1?s=books&ie=UTF8&qid=1311548852&sr=1-1 (referenced basic scans, not full read)
I had read this material at my leisure since last November and then went into overload for a week prior to the test date. During this week I put in about 65+ hours of reviewing my areas of weakness, skimming the already mentioned texts, watching youtube tutorials, and running through any test engine I could find. I also went through a case of Coke zero, 6 five hour energy’s, and tons of coffee . . .
Most of the following points have already been mentioned but if it helps out anyone else then great:
- The test did not throw all the tools in the world at you, think logically, identify the top ten or so most common tools you think a pen tester would use every day and study those in depth. Don’t know just the syntax of the tool, but understand what it is actually doing.
- If you are lacking on networking knowledge study up on topics such as protocol types, port #s, connection processes, and what information you may grab from the network would “look like” if you were using various popular tools to analyze it.
-Actually setup virtual or physical machines and practice using scanners, sniffers, IDS, etc.
-I would suggest making a list of the MOST COMMON tools you think would be on the test and watch multiple tutorials on youtube about them (use good judgment on whether or not you think the video is of good substance and therefore worth your time)
-Try the EC Council assessment questions: https://www.eccouncil.org/training/assessments.aspx
-Know some type of programming language or the core concepts (loops, method calls, passing variables, etc.)
- The actual test engine did alert me when I had selected more than the correct number of multiple choice questions, thus allowing you to infer how many answers you needed to select (there seemed to be only about a dozen or so multiple answer questions though)
Also: I think I had one of the craziest testing experiences ever as well. During the test there were several distractions including the receptionist watching online videos with the volume set loud, another test taker had to get help about 5 times because his test would just randomly close, at one point my test gave a fatal error saying it could not save and all data would be lost (didn’t lose my place at question 120 of 150 thankfully), and to top it all off when I was almost done another test taker went to leave the room and the doorknob had broken so they ended up having to call the fire department to break the door down to let us out . . .
http://www.amazon.com/s/ref=nb_sb_noss?url=search-alias=aps&field-keywords=CEH
http://www.amazon.com/CEH-Prep-Guide-Comprehensive-Certified/dp/0470135921/ref=sr_1_3?ie=UTF8&qid=1311548740&sr=8-3
http://www.amazon.com/Hacking-Exposed-Network-Security-Solutions/dp/0071613749/ref=sr_1_7?s=books&ie=UTF8&qid=1311548877&sr=1-7
http://www.amazon.com/Certified-Ethical-Hacker-Exam-Prep/dp/0789735318/ref=sr_1_1?ie=UTF8&qid=1311548799&sr=8-1 (Skimmed and used test engine religiously)
http://www.amazon.com/Nmap-Network-Scanning-Official-Discovery/dp/0979958717/ref=sr_1_1?s=books&ie=UTF8&qid=1311548852&sr=1-1 (referenced basic scans, not full read)
I had read this material at my leisure since last November and then went into overload for a week prior to the test date. During this week I put in about 65+ hours of reviewing my areas of weakness, skimming the already mentioned texts, watching youtube tutorials, and running through any test engine I could find. I also went through a case of Coke zero, 6 five hour energy’s, and tons of coffee . . .
Most of the following points have already been mentioned but if it helps out anyone else then great:
- The test did not throw all the tools in the world at you, think logically, identify the top ten or so most common tools you think a pen tester would use every day and study those in depth. Don’t know just the syntax of the tool, but understand what it is actually doing.
- If you are lacking on networking knowledge study up on topics such as protocol types, port #s, connection processes, and what information you may grab from the network would “look like” if you were using various popular tools to analyze it.
-Actually setup virtual or physical machines and practice using scanners, sniffers, IDS, etc.
-I would suggest making a list of the MOST COMMON tools you think would be on the test and watch multiple tutorials on youtube about them (use good judgment on whether or not you think the video is of good substance and therefore worth your time)
-Try the EC Council assessment questions: https://www.eccouncil.org/training/assessments.aspx
-Know some type of programming language or the core concepts (loops, method calls, passing variables, etc.)
- The actual test engine did alert me when I had selected more than the correct number of multiple choice questions, thus allowing you to infer how many answers you needed to select (there seemed to be only about a dozen or so multiple answer questions though)
Also: I think I had one of the craziest testing experiences ever as well. During the test there were several distractions including the receptionist watching online videos with the volume set loud, another test taker had to get help about 5 times because his test would just randomly close, at one point my test gave a fatal error saying it could not save and all data would be lost (didn’t lose my place at question 120 of 150 thankfully), and to top it all off when I was almost done another test taker went to leave the room and the doorknob had broken so they ended up having to call the fire department to break the door down to let us out . . .
Comments
-
Dakinggamer87
Member Posts: 4,016 ■■■■■■■■□□
Congrats!!
*Associate's of Applied Sciences degree in Information Technology-Network Systems Administration
*Bachelor's of Science: Information Technology - Security, Master's of Science: Information Technology - Management
Matthew 6:33 - "Seek the Kingdom of God above all else, and live righteously, and he will give you everything you need."
Certs/Business Licenses In Progress: AWS Solutions Architect, Series 6, Series 63 -
impelse
Member Posts: 1,237 ■■■■□□□□□□
Congrats, with all that kind of distraction, YEA, YOU CAN WORK UNDER A LOT OF PRESSURE, congrats again.Stop RDP Brute Force Attack with our RDP Firewall : http://www.thehost1.com
It is your personal IPS to stop the attack. -
DoesNotCompute
Registered Users Posts: 7 ■□□□□□□□□□
Thanks Everyone! Can't wait until CISSP training in about one week!
