Courseiva
← Back to Certified Ethical Hacker CEH questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Certified Ethical Hacker CEH practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
20
scenario questions
CEH
exam code
EC-Council
vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related CEH topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Footprinting, Reconnaissance and Scanning practice questions

Practise CEH questions linked to Footprinting, Reconnaissance and Scanning.

Enumeration and System Hacking practice questions

Practise CEH questions linked to Enumeration and System Hacking.

Malware, Social Engineering and Network Attacks practice questions

Practise CEH questions linked to Malware, Social Engineering and Network Attacks.

Web Application and Injection Attacks practice questions

Practise CEH questions linked to Web Application and Injection Attacks.

Introduction to Ethical Hacking practice questions

Practise CEH questions linked to Introduction to Ethical Hacking.

Scanning Networks and Enumeration practice questions

Practise CEH questions linked to Scanning Networks and Enumeration.

Vulnerability Analysis and System Hacking practice questions

Practise CEH questions linked to Vulnerability Analysis and System Hacking.

Advanced Topics: Wireless, Cloud, IoT, Cryptography practice questions

Practise CEH questions linked to Advanced Topics: Wireless, Cloud, IoT, Cryptography.

Footprinting and Reconnaissance practice questions

Practise CEH questions linked to Footprinting and Reconnaissance.

Network and Web Application Attacks practice questions

Practise CEH questions linked to Network and Web Application Attacks.

Wireless, IoT and Cloud Security practice questions

Practise CEH questions linked to Wireless, IoT and Cloud Security.

Cryptography and Malware Analysis practice questions

Practise CEH questions linked to Cryptography and Malware Analysis.

Practice set

Practice scenarios

Question 1mediummulti select
Full question →

A penetration tester is analyzing a captured TCP session that includes a successful SQL injection attack. Which TWO of the following indicators would most likely confirm that the attack was successful?

Question 2mediummulti select
Full question →

An organization is implementing a social engineering defense program. Which TWO measures are most effective in reducing the risk of phishing attacks? (Choose two.)

Question 3hardmulti select
Full question →

Which TWO of the following are effective physical security controls to prevent tailgating?

Question 4mediummulti select
Full question →

Which TWO of the following are examples of passive footprinting techniques? (Select exactly 2.)

Question 5hardmulti select
Read the full network assurance explanation →

Which TWO types of information can be obtained through SNMP enumeration on a target device if the community string is 'public'? (Choose two.)

Question 6easymulti select
Full question →

Which TWO of the following are characteristics of a Bluetooth Low Energy (BLE) IoT device that make it suitable for a battery-powered sensor?

Question 7easymulti select
Full question →

Which TWO vulnerabilities are associated with buffer overflow attacks?

Question 8easymulti select
Full question →

Which TWO of the following Nmap scan types are typically used to evade firewalls and IDS systems by sending fragmented packets?

Question 9hardmulti select
Read the full wireless explanation →

A penetration tester is assessing the security of a smart building's IoT infrastructure. The building uses Zigbee sensors for temperature and motion detection, and some devices communicate using MQTT over Wi-Fi. During the assessment, the tester captures traffic and notices that some Zigbee devices are sending unencrypted frames containing sensor IDs and values. Which TWO actions should the tester recommend to mitigate the identified vulnerabilities? (Choose two.)

Question 10mediummulti select
Full question →

Which THREE of the following are essential phases in the ethical hacking methodology as defined by EC-Council?

Question 11hardmulti select
Full question →

An organization is investigating a potential malware infection. The security analyst observes unusual outbound connections to a known malicious IP address and finds a suspicious process running under a user's session. The analyst decides to perform memory analysis using Volatility. Which TWO commands would be most useful to identify the malicious process and its network connections?

Question 12mediummulti select
Full question →

Which THREE of the following are common indicators of a buffer overflow vulnerability?

Question 13hardmulti select
Full question →

Which TWO of the following are valid techniques for password cracking?

Question 14hardmulti select
Read the full DNS explanation →

Which THREE of the following are effective countermeasures against DNS poisoning attacks? (Select exactly 3)

Question 15easymulti select
Full question →

Which TWO of the following are common web application vulnerabilities that allow an attacker to inject malicious code? (Select exactly 2)

Question 16mediummulti select
Full question →

Which THREE Nmap options are commonly used to evade firewall detection during a scan? (Choose three.)

Question 17hardmulti select
Full question →

Which THREE of the following are common security risks associated with cloud computing?

Question 18mediummulti select
Full question →

Which TWO of the following are effective methods to prevent dumpster diving attacks? (Choose two.)

Question 19easymulti select
Full question →

Which TWO of the following are characteristics of a polymorphic virus? (Choose two.)

Question 20hardmulti select
Full question →

Which THREE of the following are common indicators of a social engineering attack? (Choose three.)

These CEH practice questions are part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style CEH questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.