Recommended Certification Path after Earning CEH

The next step after acquiring the CEH (ANSI) certification is the CEH (Practical). This is a rigorous, lab exam that tests one's technical skills in ethical hacking through a realistic corporate environment featuring live virtual machines, networks, and apps. So, if you want to become a fully-equipped ethical hacker, this should be part of your goals too.

Cryptography (6%):

• Cryptography: The candidates must develop their understanding of cryptography concepts, cryptanalysis, encryption algorithms, disk encryption, cryptography tools, email encryption, public key infrastructure, and counter-measures.

The topics that are covered in the 312-50 certification exam are enumerated below:

• Tools/Systems/Programs: 28.91%

  This is the largest topic out of all content that will evaluate your knowledge of information security tools, programs, and systems. This means that you should know about operating environments, web application firewall, cryptanalysis tool, network/host-based intrusion, programming & scripting languages, database structures, wireless & Bluetooth security tools, packet fragment generators, and so on.

• Ethics: 2.17%

  The last objective covers the details of information security ethics, including appropriateness of hacking and professional code of conduct.

• Procedures/Methodology: 8.77%

  To be able to deal with the questions from this module, the individuals will need to have knowledge of PKI, web server attack methodology & web application hacking methodology, information security incident, SQL injection evasion techniques, and service oriented architecture. Besides that, they have to know about mobile rooting & jailbreaking, mobile platforms, N-tier application design, and security testing methodology.

• Background: 21.79%

  In this domain, you will need to learn about information security technologies as well as network & communication technologies. This means that you should have knowledge of web, wireless, telecommunication, and systems technologies. This subsection also includes the details of cryptography, BYOD, information security elements & management, as well as encryption algorithms and wireless encryption. Besides that, you should know about information security threats & attack vectors.

• Security: 23.73%

  This section covers information security controls, information security attack detection, and information security attack prevention. Thus, you need to have knowledge of BYOD Security, threat modeling, honeypot detection, trusted networks, patch management, mobile platforms security, systems security controls, and other details.

• Regulation/Policy: 1.90%

  The next part is all about the information security policies, laws, and acts. Therefore, you need to have knowledge of the compliance regulations and security policies.

• Assessment/Analysis: 12.73%

  This area is all about footprinting, technical assessment methods, system hacking, enumeration, as well as data, malware, risk, and systems analysis. It also covers the details of vulnerability assessment & penetration testing and network sniffing.

Reference: https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/

CEH 312-50 and Its Corresponding Certification

CEH 312-50 is the sole requirement for earning the EC-Council Certified Ethical Hacker (CEH) accreditation. By obtaining this certificate, professionals prove their expertise in ethical hacking. This also signifies that they have met the standards set by the industry in terms of ethical hacking measures. So, if you want to get this kind of recognition, obtaining this certification is highly recommended.