CRA Exam - CEH

mperese

Has anyone heard of the Candidate Retesting Audit - Exam a.k.a CRA Exam. The infamous exams usually forced upon candidates who secure more 95% in their CEH v8 Exam.

Anyone with Highlights into this, please shed some light!

Example :-
Types of Questions
Focus Areas : Scanning, SQL Injection etc
Any Sample Questions

cyberguypr

Have you been summoned to take this? I am only providing an educated guess but I can't imagine the test being astronomically different in format and subject from the regular one.

JDMurray

The CRA policy is described on page 27 of the CEH Candidate Handbook v1.7., but nothing on the contents of the retesting exam itself.

Here's someone complaining about the CRA.


I really can't see the ECC asking a CEH candidate to retake the exam simply because they got a very high score. There must be other indicators of cheating, such as selecting the same incorrect answers as on a known ****, or multiple people in a testing center all selecting the same (in)correct answers on the same day. Maybe the poor grammar and phrasing the CEH exams have become famous for is a deliberate ****-detection mechanism, or maybe an attempt to preserve a bell curve by making it extra difficult to get a very high score. That would not surprise me at all.

SephStorm

e) Candidate Retesting at Request of EC-Council
In the case of any suspicious patterns or trends on either the side of the candidate or the testing center EC-Council reserves the right to demand the candidate(s) to re-sit for the exam and/or assessment test.
Candidate is to agree to the retest, failing which EC-Council will not award the certification to the candidate.
Candidate will be given one chance to take the Candidate Retesting Audit (CRA) exam. Should candidate fails to pass the CRA exam, candidate will be given one chance to take the full exam again. Should candidate fails to pass the full exam, candidate will be temporarily barred from taking the exam.
The new retest exam location will be decided by EC-Council and at a time that is collectively convenient to the candidate and EC-Council.

Why do I see money grabs everywhere with EC-Council? I think i'm correct in an assumption that most bodies would simply strip you of the cert if you failed the re-cert. On the other hand, if a person had a 200 question ****, they may still pass the re-cert just on luck having the same questions. A better way would be for ECC to make the person sit another CRA or even better, face a board that actually quizzed the candidate on topics from the CEH material, not from the exam.*

*i'm claiming copyright on this idea...

JDMurray

I'm not sure where the "money grabs" are in this. The CRA situations are probably fairly rare and not designed to be a revenue stream for the ECC. All cert vendors have a mandatory "cooling off period" after failing one or more of their exams before a retake is allowed. Also, having a board of multilingual people quiz the exam candidate--as academic institutions have done for thousands of years--is a very expensive solution to (what is hopefully) a minor problem with an entry-level IT certification.