🛡️

Certified Ethical Hacker

EC-CouncilCEHProfessional

⏱ Duration

4 hours

❓ Questions

125 MCQ

✅ Pass Score

60–85% (varies by exam form)

💰 Cost

$950 USD + required training

📅 Valid

3 years

📋 Exam Domains & Weightage

Footprinting & Reconnaissance

OSINT, Shodan, Google dorking, DNS enumeration, WHOIS

~8%

Scanning Networks

Nmap, vulnerability scanners, ping sweeps, banner grabbing

~8%

Enumeration & Exploitation

Metasploit, Netcat, exploitation frameworks, post-exploitation

~18%

Web Application Hacking

SQLi, XSS, CSRF, SSRF, authentication bypass, OWASP Top 10

~12%

Cryptography

Symmetric vs Asymmetric, PKI, disk encryption, SSL/TLS

~10%

Malware, IDS/IPS, Cloud, IoT

Malware analysis, evading defenses, cloud attack vectors, IoT threats

~44%

🔑Requires official EC-Council training (no way around it)

🔑Memorize tool names and what each does — exam is tool-heavy

🔑OSCP is more respected for actual pentesters — CEH is better for compliance roles

🎯

After this certification

OSCP (Offensive Security Certified Professional) for practical penetration testing