CEH Readiness: The Ethical Hacking Credential, at Knowledge Level
Signature Course No. 514 — A Signature AI Socratic Coaching Course.
No experience needed — your coach starts where you are.
A New Kind of Learning
Socratic coaching, delivered by an agentic AI coach.
Not a course you watch. An AI coach you work with.
The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.
The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.
A coach that teaches by asking — not by lecturing
The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's CEH Readiness: The Ethical Hacking Credential, at Knowledge Level course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.
The distinctions decide. Most candidates do not fail because they have never heard the terms. They fail because, under a question's pressure, similar terms blur: reconnaissance blurs into scanning, a scanning result blurs into a vulnerability, one kind of deception blurs into another, and a defence that sounds strong is chosen for an attack it does not actually stop. This course un-blurs those distinctions, one at a time — then mixes them again deliberately, because the exam, and the day job, always present them mixed.
It starts with the lens itself. Concept 1 — The Defender's Lens — establishes what the credential actually examines: recognition, classification, and countermeasure choice, tested in writing. The remaining seventeen concepts give you the substance that lens works on — the attacker's sequence, the surfaces, and the defender's own disciplines.
It works in two movements. First, Module 1 — The Attacker's Sequence, Read as a Defender — work through Concepts 1–9, finishing with The Method-and-Countermeasure Audit; then, Module 2 — Surfaces in Depth, and the Defender's Choice — work through Concepts 10–18, finishing with The Readiness and Defence Plan.
Both capstones produce real artifacts — a method-and-countermeasure audit of a peak week at Sennova, the running case: the incident file placed in stage order with its evidence, stage-matched countermeasures chosen with their tempting alternatives rejected, the work sequenced against real capacity and verified; and a readiness and defence plan that turns a whole course of study into two honest documents — an evidence-based readiness judgment with a timetable and a fallback, and a workplace defence programme with owners and dates past the exam.
The fence is part of the course. Readiness here is knowledge level only: no intrusion lab work, no step-by-step exploitation, nothing that helps anyone attack a system. The course never guarantees a pass, reproduces no exam items, and fences version-specific claims — blueprints, weightings, formats — to the course book's Appendix, labelled as changeable. And one rule governs every page: you work on systems you own or systems you have explicit, written permission to assess, inside the scope that permission sets — and nowhere else.
The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.
CEH Readiness: The Ethical Hacking Credential, at Knowledge Level is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning delivers.
Course Facts
One full concept, coached end to end — free: verify your email and we’ll send you a link to start.
Already enrolled? Enter the course →
Diagnose → Learn & Practice → Prove → Capstone
Every learner moves through the same discipline a Cognosco instructor would insist on in the room.
Diagnose
The Coach starts where the course starts: with what you actually do first when an incident or an alert reaches you — name it, escalate it, or start fixing — and which of this concept's three moves your habit skips. Which control at your workplace could you not justify if asked which method, at which stage, it interrupts? And where exactly does the boundary sit between studying a method and using it — in the target, the permission, or the intent? Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.
Learn & Practice
Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.
Prove
Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.
Capstone
Finish with two capstones — The Method-and-Countermeasure Audit for Module 1 and The Readiness and Defence Plan for Module 2 — that pull the whole course together, and earn the certificate.
What You'll Learn
Recognise, classify, choose. Every description in this course — a log line, a report, a request, a symptom — is worked the same way: name the method family from its signs, place it by stage and surface against its near neighbours, and choose the countermeasure that actually answers it, saying why the tempting alternative does not.
Module 1 walks the sequence. The defender's lens itself; reconnaissance built from public material; scanning and enumeration — what answers, and what it volunteers; vulnerability analysis in context; system-level concepts, malware and sniffing, social engineering, denial of service and session concepts; and a survey of the web, wireless, and mobile surfaces. Every method is taught to the same depth: its name, its signs, its stage, and the defence that answers it.
Module 2 deepens the surfaces. Web application attacks; wireless, mobile, and connected devices; cryptography and its housekeeping; cloud and containers — then the defender's own disciplines: reading logs and indicators as evidence, selecting countermeasures in depth and in proportion, the law and ethics of authorisation, the craft of reading knowledge-exam questions themselves, and an honest readiness plan that converts study into a defence improvement at your own workplace.
And it holds its fence throughout. Nothing in this course asks you to perform an attack. The performance it demands is written professional judgment, produced under fresh conditions — eighteen times in the concepts and twice more, at length, in the capstones.
What you will learn
- Recognise the main families of attacker methods and name the stage of an attack a given sign belongs to
- Distinguish reconnaissance from scanning, scanning from vulnerability analysis, and a vulnerability from an exploit — and state what each stage reveals and what defends against it
- Classify social engineering, malware, denial-of-service, and session attacks from short descriptions, and choose the human and technical controls that answer each
- Classify web, wireless, mobile, connected-device, cloud, and cryptography attacks at knowledge level and match each to its countermeasure
- Read logs, alerts, and indicator lists as evidence: triage what matters first, and say why
- Choose countermeasures proportionately — defence in depth, not one product — and justify the choice in plain language a manager can act on
- State the authorisation rule exactly, apply it to requests that cross your desk, and refuse or re-route work that falls outside it
- Read knowledge-exam questions as a craft: find the deciding phrase, eliminate distractors for stated reasons, and judge your readiness without flattering yourself
Everything in the course
- All 18 concepts of CEH Readiness: The Ethical Hacking Credential, at Knowledge Level, in 2 modules
- A starting-point check first — the Coach finds where you actually stand before teaching
- Learn, Practice, Prove for every concept — no passive video watching
- A test-out on every concept: prove you know it and move on
- The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
- A personal Learner Record of your work across the course
- Two capstone exercises: The Method-and-Countermeasure Audit and The Readiness and Defence Plan
- A printable session summary whenever you pause
- The Lighthouse Coach completion certificate (Signature Series)
- Your progress is saved as you go — stop anytime, resume where you left off
Built for defenders preparing for the credential
Security analysts, administrators, and IT staff preparing for the credential — who want readiness built on classification judgment, not on memorised lists they cannot apply to a question they have not seen; and defenders without an offensive background — the majority of good defenders — who need attacker methods explained from the defender's side of the desk, with no lab work assumed or required.
Managers and team leads sponsoring a candidate — who want to know what the credential does and does not certify: it certifies knowledge-level judgment about methods and countermeasures; it does not, by itself, certify that a person can or should conduct intrusive testing.
Candidates who have failed or stalled before — on the breadth of the syllabus, and who need the near-neighbour distinctions — the pairs of terms the questions exploit — taught explicitly and tested repeatedly. Not a hands-on intrusion course — supervised practical work belongs in authorised practical settings outside this credential's knowledge claim, and Concept 16 shows you exactly where the line sits.
Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.
Start with The Defender's Lens
$195 — introductory price. One payment. No subscription, no password to manage.
Here is exactly what happens when you enroll:
- Pay securely with Stripe — you are taken straight into the course
- Create your learner profile and begin the Module 1 starting-point check
- Save the access key you are given — it restores your enrollment on any device
- Learn at your pace; your progress is stored in your browser on your device
For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.
Before you enroll
What is a Socratic coaching session?
A conversation, not a video. Your coach asks a question; you answer — out loud by voice, or by typing — and the coach responds to what you said: naming the misconception it hears, affirming what you got right, and asking the next question. You advance only when you have mastered each concept, so a finished course means the learning held.
How long does it take — and how long do I have?
About 30 minutes per concept. Learn in sittings of any length; your progress is saved as you go. You have a full year from purchase to finish, and you can revisit and retake within that year.
What does the certificate verify?
That you completed every concept and both capstones of this course. Anyone can confirm a Cognosco certificate online — enter its certificate ID on our verification page.
What if it isn't for me — what are the refunds?
If you have not started, cancel for a full refund within seven days of purchase. Once you have started, there is no cash refund — stop before finishing and we credit the full amount you paid toward any other course in the library (credit valid one year from your original purchase). Once you complete the course, no refund or credit applies.
More Signature Courses are coming
CEH Readiness: The Ethical Hacking Credential, at Knowledge Level is Signature Course No. 514. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.