Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: Ethical Hacking Certified Associate (EHCA)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 50 questions: 60% scenarios / 40% conceptual
• Exam Duration: 75 minutes
• Passing Score: 70% (35 out of 50 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 15 days between attempts)
• Validity: 3 years · 15 CPD credits per year

Main Subjects

• Fundamentals, ethics and legal framework of ethical hacking (12%): Ethical hacking versus cybercrime; White, grey and black hats; black-box, grey-box and white-box testing; Phases of a penetration test; Written authorization, scope and rules of engagement; CIA triad, MITRE ATT&CK, OWASP and Cyber Kill Chain.
• Reconnaissance and information gathering (16%): Passive and active reconnaissance; Open source intelligence (OSINT); WHOIS, DNS and subdomains; Social engineering and exposed information; Traceable documentation of findings.
• Network scanning and vulnerability analysis (20%): TCP/IP model, ports and services; Host discovery and port scanning with Nmap; Operating systems and service versions; Vulnerability scanners and false positives; Prioritization with CVSS and business context.
• System and service enumeration (14%): Enumeration versus scanning; SMB, SNMP, LDAP, FTP and DNS; Exposed accounts, shares and banners; Mitigation: closing services, segmentation and hardening.
• Ethical exploitation, common attacks and defense (22%): Controlled exploitation within scope; Brute force, dictionary and credential stuffing; OWASP Top 10: SQL injection and XSS; Malware, spoofing and denial of service; Ethical post-exploitation and test clean-up.
• Reporting, remediation and professional ethics (16%): Executive summary, methodology, findings and recommendations; Risk classification with reproducible evidence; Prioritized remediation for technical and executive audiences; Confidentiality and responsible disclosure; CertJoin Code of Ethics.

Who is this certification for?

• Technology students and professionals: Who want to start out in offensive security with a solid, ethical foundation.
• System and network administrators: Who need to understand how an attacker thinks to better protect their infrastructure.
• Security analysts and IT support: Who want to extend their profile toward security testing.
• Developers: Who want to understand the most common web vulnerabilities to write more secure code.
• Professionals moving into cybersecurity: Who need a recognized entry-level certification.

Prerequisites

No mandatory prerequisites: no prior professional experience, specific academic training or other certification is required. Registration is direct with CertJoin or through an authorized partner, accepting the program terms and the Code of Ethics. Recommended (not mandatory): general networking, operating system and information security concepts. Next level: Ethical Hacking Certified Expert (EHCE).