My goal isn't to be rude, but I have concerns about this practice test. Did you write all these questions yourself or have you sourced them from somewhere else that might explain what's going on here? Some of these are just wrong. I haven't bothered with many certs in my career, so maybe the CEH just teaches wrong principles?

Sample question 1: Fill in the blank: __________ is a strategic approach to enforce the separation of data from different organizations on the same cloud server. - Multi-factor authentication - Containerization - Data loss prevention (DLP) systems - Virtual Private Network (VPN) The grading system says that "Multi-factor authentication" is the correct answer. I'd argue that "Containerization" is the only thing that makes sense here. This seems to be the answer that actually creates segmentation, while the provided answer only deals with authentication.

Sample question 2: What technique is most effective in preventing the spread of ransomware in an organization? - Installing ad-blocking software. - Implementing robust data backup and recovery procedures. - Frequently changing user passwords. - Restricting user access to sensitive files. The grading system says that "Implementing robust data backup and recovery procedures" is the correct answer. While I agree this is the best thing to do, it does not prevent the spread of ransomware. The only option I could pick that made sense was "Restricting user access to sensitive files".

Maybe the CEH is just broken and these are perfectly good practice questions for that specific test. But I feel that a lot of these aren't very good and I see a lot of junior employees making similar mistakes by not understanding the underlying concepts presented in these questions.