Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.
The CEH exam tests whether you know how attackers find and exploit weaknesses, which tools they use and how to counter them. Learn the nine blueprint domains, run the tools in a lab, then drill scenario questions under time.
Example scenario: You have only a company name and its public website. Which sources would you use to map its domains and exposed services without touching its network?
Example scenario: A scan shows an unpatched service on a Windows server. What are the next steps from access to privilege escalation, and which logs would show them?
Example scenario: Users on one subnet report certificate warnings on an internal site. Which attack could explain it, and how would you confirm it?
Example scenario: A login form returns a database error when you enter a single quote. What does that suggest, and how would you test it safely within scope?
CEH Exam Blueprint v5.0 · CEH v13, exam 312-50
Multiple choice. Choose the single best answer from the options shown; the exam has no labs.
During reconnaissance, an ethical hacker wants to list the services running on an authorised target host without completing a full connection. Which technique fits?
A. A SYN scan sends the first step of the handshake and reads the reply, so it finds open ports without finishing the connection. The other choices are different attack types.
Get eligibility through official training or an approved application, then buy a voucher. Vouchers are valid for 12 months. Book online sessions at least 3 days ahead; Pearson VUE test-centre bookings need your eligibility code.
Read the blueprint and rate yourself on each of the nine domains. Spend the most time where you have never used the tools.
Most candidates spend 60–120 hours. Plan for the low end if you work in security and already use scanning and exploitation tools; add time if web application, wireless or cloud attacks are new to you.
Choose one main course or book that follows CEH v13, and pair it with lab practice.
Best official courseCEH v13 on-demand training
Best live classEthical Hacking Boot Camp
Best bookCEH Certified Ethical Hacker v13 Study GuideKnow where each tool fits. For every tool, know which phase of an attack it belongs to, what output it gives and what it would tell you about the target.
Use a question bank written for CEH v13 and review the explanation for every answer. Avoid exam dumps; they break EC-Council's exam agreement and can cost you the certification.
See all 5 CEH practice tests →Have a government-issued photo ID that matches your EC-Council account and your valid voucher.
After you pass, your digital certificate arrives within 7 working days.
One recent passer (106/125) describes many scenario questions built around tools and their use cases, where two options can look correct. Another test-taker warns that you will have a lot to read.
The pass mark depends on the exam form. One candidate who had passed several other certifications scored 85 and failed; another needed 73% on their form.
