How I Prepared for My CEH Certification

Why CEH?

When I started my networking journey, I realized that understanding networks isn't enough — you also need to understand how they can be attacked. That's what led me to pursue the Certified Ethical Hacker (CEH) certification at Corvit Systems in 2025.

I wasn't trying to become a full-time pentester. I wanted to understand the attacker's mindset so I could build more secure networks as a network engineer. That's the mindset I'd recommend to anyone starting in cybersecurity.

What the Course Covers

The CEH program at Corvit Systems covered a wide range of topics over several months:

• Ethical hacking fundamentals and legal considerations
• Footprinting and reconnaissance techniques
• Network scanning with Nmap
• Enumeration and vulnerability assessment
• System hacking and password attacks
• Malware analysis and sniffing
• Web application security testing
• Firewalls, IDS/IPS, and evasion techniques

Each module included both theory and hands-on labs. The hands-on part was where I learned the most.

The Tools That Changed How I Think

Nmap

Before CEH, I thought Nmap was just a port scanner. After the course, I understood it as a complete network reconnaissance tool. Learning about different scan types (-sS, -sT, -sV), OS detection, and scripting engine (NSE) scripts completely changed how I approach network troubleshooting.

The first time I ran an Nmap scan on my own home network and found open ports I didn't know existed, I understood why security matters.

Wireshark

Wireshark taught me to see packets. Before using it, networking was abstract. After using it, I could literally watch TCP handshakes happen, see DNS queries in real-time, and identify exactly where a connection was failing. It's the most valuable tool for both networking and security.

Burp Suite

Web application security testing was new territory for me. Burp Suite showed me how vulnerable many web applications are — from SQL injection to cross-site scripting. It gave me a completely different perspective on the applications I use daily.

Kali Linux

Working in Kali Linux was my introduction to the Linux command line beyond basic administration. Having all security tools pre-installed in one OS was convenient, but the real learning was understanding how to use each tool properly and interpret the results.

How I Studied

My approach to studying for CEH was practical:

• Lab first, theory second. I'd set up the lab environment, try the attack, then read about why it works.
• Document everything. Every lab had notes — what I did, what happened, what I learned.
• Build a home lab. I used VirtualBox with vulnerable VMs (Metasploitable, DVWA) to practice safely.
• Focus on understanding, not memorizing. The exam tests comprehension, not just recall.

What the Exam Actually Tests

The CEH exam is a mix of conceptual and scenario-based questions. It tests whether you understand:

• Why certain attacks work (not just how to execute them)
• How to identify vulnerabilities in a network
• Which tools to use for specific tasks
• Basic countermeasures and defensive strategies

If you understand the "why" behind each attack, you'll be fine. If you just memorized commands, it'll be harder.

How CEH Complements Networking

Now that I have both networking and cybersecurity knowledge, I can see how they overlap. Understanding OSPF helps me understand network-based attacks. Knowing VLANs helps me understand segmentation for security. Understanding TCP/IP helps me analyze packet captures in Wireshark.

My goal is to combine these skills into a role where I can both build and secure networks. That's why I'm targeting IT support and junior network engineer positions — they give me the foundation to grow into security engineering later.