The Certified Lead Ethical Hacker training course enables you to develop the necessary expertise to perform information system penetration tests by applying recognized principles, procedures and penetration testing techniques, in order to identify potential threats on a computer network. During this training course, you will gain the knowledge and skills to manage a penetration testing project or team, as well as plan and perform internal and external pentests, in accordance with various standards such as the Penetration Testing Execution Standard (PTES) and the Open Source Security Testing Methodology Manual (OSSTMM). Moreover, you will also gain a thorough understanding on how to draft reports and countermeasure proposals. Additionally, through practical exercises, you will be able to master penetration testing techniques and acquire the skills needed to manage a pentest team, as well as customer communication and conflict resolution.
The Certified Lead Ethical Hacking training course provides a technical vision of information security through ethical hacking, using common techniques such as information gathering and vulnerability detection, both inside and outside of a business network.
The training is also compatible with the NICE (The National Initiative for Cybersecurity Education) Protect and Defend framework.
After mastering the necessary knowledge and skills in ethical hacking, you can take the exam and apply for the Certified Lead Ethical Hacker credential. By holding a Lead Ethical Hacker certificate, you will be able to demonstrate that you have acquired the practical skills for performing and managing penetration tests according to best practices.
A fundamental knowledge of Information Security, and advanced skills in operating systems (e.g., Microsoft, Linux, etc.) is required. Furthermore, it is desirable for the candidate to have knowledge on computer networks, the use of operating systems and the notions of programming.
Day 1: Overview of cybersecurity, ethical hacking and contemporary architecture
Day 2: Active recognition
Day 3: System operation
Day 4: Exploitation and post-exploitation, and report drafting
Day 5: Certification Exam
The Certified Lead Ethical Hacke exam meets all the requirements of the Examination and Certification Program (ECP). The exam covers the following competency domains:
Domain 1: Fundamental principles and concepts of ethical hacking
Domain 2: Attack mechanisms
Domain 3: Principles and reference frameworks on penetration tests
Domain 4: Planning and performing penetration tests using various tools and techniques
Domain 5: Drafting penetration testing reports
The examination consists of two parts. The first part is a paper-based exam, which consists of essay-type questions. The second part is rather technical, where the candidate will be required to conduct penetration testing exercises on a computer and draft a report of the analysis.
Participants are authorized to use their personal notes during both the paper-based exam as well as the practical part of the exam.
For more information about exam details, please visit Examination Rules and Policies.
After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about Ethical Hacking certifications and the certification process, please refer to the Certification Rules and Policies.
To be considered valid, activities related to ethical hacking and penetration testing should follow best practices and include the following activities: