The CEH exam — Certified Ethical Hacker — is EC-Council's flagship cybersecurity certification test. It validates your knowledge of hacking techniques, attack methodologies, and defensive countermeasures. The idea is simple: to defend systems, you need to think like an attacker. The CEH exam proves you can.
It's one of the most recognized cybersecurity credentials in the industry. Government agencies, defense contractors, and Fortune 500 security teams list CEH in job postings. It's not entry-level — it's designed for professionals with hands-on security experience who want a vendor-neutral credential that covers the full attack lifecycle.
If you're deciding whether to pursue the CEH or wondering how to prepare — this guide covers everything: format, domains, costs, eligibility, and study strategy.
The CEH exam comes in two versions, and which one you take depends on your preparation path:
Most candidates start with the ANSI exam (312-50v13). The CEH Practical is optional — but completing both earns you the CEH Master designation. For a first-time CEH candidate, focus on the 312-50v13.
EC-Council requires one of two pathways to sit for the CEH exam:
The experience pathway works — many experienced security professionals go this route. Just don't expect same-day approval; the review process takes time, so apply well before your intended exam date.
Costs vary significantly depending on your pathway:
You can also find authorized training through the National Initiative for Cybersecurity Education (NICE) program, which may offer discounts for U.S. government employees and veterans.
The CEH uses a variable passing score system — it changes with each exam administration based on difficulty. Generally, you need approximately 70% (around 87-88/125 questions correct) to pass, but the cutoff can range from 60% to 85% depending on the specific exam version.
This fluctuating threshold surprises some candidates. EC-Council doesn't publish the exact passing score for each administration. The takeaway: don't aim for "just enough to pass." Target 80%+ on practice exams to build a comfortable buffer.
The CEH covers a broad range of topics — 20 official modules in EC-Council's curriculum. That breadth requires a strategic study approach, not just grinding through a single resource.
The official EC-Council courseware is the gold standard for exam alignment. It's expensive if you're buying it separately, but EC-Council's iLabs environment provides hands-on practice that's directly aligned with CEH Practical and reinforces conceptual knowledge for the ANSI exam.
If official materials are out of budget, the CEH Certified Ethical Hacker All-in-One Exam Guide by Matt Walker (McGraw-Hill) is the most widely used third-party book and is well-regarded for covering exam-relevant content without the high price tag.
You can't pass CEH by reading alone. Set up a lab environment using VMs (Kali Linux, Metasploitable, DVWA) and practice the techniques the exam tests. Running a port scan with Nmap, exploiting a vulnerability in a controlled environment, and analyzing a packet capture with Wireshark — these experiences make exam questions click in ways that books alone won't.
Platforms like TryHackMe and Hack The Box both have CEH-aligned learning paths that provide guided hands-on practice without requiring you to set up your own infrastructure from scratch.
CEH questions frequently test which tool is appropriate for a given task. Metasploit, Nmap, Wireshark, Nikto, Burp Suite, Aircrack-ng, John the Ripper, Hashcat — know what each does, when you'd use it, and what output to expect. The exam doesn't just test conceptual knowledge; it tests tool-level familiarity.
Not all domains are equal. The highest question-count domains — system hacking, scanning/enumeration, web server/app hacking, and reconnaissance — should get the most study time. Don't neglect the smaller domains, but front-load your preparation on the high-impact areas.
CEH often gets compared to CompTIA Security+, OSCP, and CISSP. Here's the quick version:
If your goal is pure penetration testing credibility, OSCP is often the preferred credential. If you're targeting DoD roles, government contracts, or compliance-heavy environments — CEH's DoD Directive 8570 approval makes it practically mandatory. For a full overview of the CEH credential, see the CEH certification overview and CEH career and salary guide.
The CEH requires renewal every 3 years. You can renew by:
ECE credits come from attending security conferences (DEF CON, Black Hat, etc.), completing EC-Council courses, writing security research, holding complementary certifications, and other qualifying activities. Active security professionals typically accumulate credits without much extra effort.
If you let the credential lapse, you'll need to retake the exam from scratch. Don't let it expire — maintaining it is significantly easier than re-earning it.
For practice questions covering the key CEH knowledge areas, check the CEH complete study guide and work through the CEH practice tests to assess your readiness before booking your exam date.