The Certified Ethical Hacker (CEH v13) certification guide

The Certified Ethical Hacker (CEH) certification is a globally recognized entry-level certification that validates your ethical hacking skills and knowledge, now enhanced with AI-driven methodologies to combat modern cyber threats.

  • Learn how to apply the five phases of ethical hacking, now with AI integration 
  • Master over 500 attack techniques and AI-driven cybersecurity methods
  • Practice real-world ethical hacking exercises in hands-on labs
Get Certified

Key facts

Start your journey to becoming a CEH-certified professional with Infosec.

CEH exam overview

Certified Ethical Hacker (CEH v13) certification is a globally recognized entry-level certification and one of the most popular qualifications in the cybersecurity industry. CEH v13 provides in-depth training by integrating AI into all five phases of ethical hacking, from reconnaissance and scanning to gaining access, maintaining access and covering tracks. A CEH certification shows that you can comprehend and counter the strategies and attack methods of malicious actors, giving you the knowledge to protect a wide range of information systems and networks. Offered by the EC-Council, this certification meets compliance requirements for several Department of Defense 8570/8140 positions.

CEH v13 training prepares you for the latest ethical hacking methodologies and threats, now with a focus on AI-driven techniques. The CEH v13 exam covers key knowledge areas and domains from the exam blueprint. 

Information security and ethical hacking overview (6%)
  • Information security overview 
  • Hacking methodologies and frameworks 
  • Hacking concepts 
  • Ethical hacking concepts 
  • Information security controls 
  • Information security laws and standards 
Reconnaissance techniques (17%)
  • Footprinting and reconnaissance 
  • Scanning networks 
  • Enumeration 
System hacking phases and attack techniques (15%)
  • Vulnerability analysis
  • System hacking
  • Malware threats
Network and perimeter hacking (24%)
  • Sniffing
  • Social engineering
  • Denial-of-service
  • Session hijacking
  • Evading IDS, firewalls and honeypots
Web application hacking (14%)
  • Hacking web servers
  • Hacking web applications
  • SQL injection
Wireless network hacking (5%)
  • Wireless concepts 
  • Wireless encryption 
  • Wireless threats 
  • Wireless hacking methodology 
  • Wireless hacking tools 
  • Bluetooth hacking    
  • Wireless attack countermeasures 
  • Wireless security tools    
Mobile platform, IoT, and OT hacking (10%)
  • Mobile platform attack vectors 
  • Hacking Android OS and iOS 
  • Mobile device management 
  • Mobile security guidelines and tools 
  • IoT concepts and attacks 
  • IoT hacking methodology 
  • IoT countermeasures 
  • OT concepts and attacks 
  • OT hacking methodology 
  • OT countermeasures 
Cloud computing (5%)
  • Cloud computing concepts 
  • Container technology 
  • Serverless computing 
  • Cloud computing threats 
  • Cloud hacking and security   
Cryptography (5%)
  • Cryptography concepts 
  • Encryption algorithms 
  • Cryptography tools 
  • Public key infrastructure (PKI) 
  • Email encryption 
  • Disk encryption 
  • Cryptanalysis 
  • Cryptography attack countermeasures 

CEH exam details

The ECC CEH 312-50 exam covers key areas such as reconnaissance techniques, attack techniques, cryptography, system hacking phases, cloud computing, and hacking for mobile, networks, web applications and perimeters. The updated CEH v13 integrates AI into all five phases of ethical hacking.

Exam code: 312-50 CEH exam cost $950 from EC-C; $1199 from Pearson VUE; $100 non-refundable application fee
Launch date: 2003 Last update: September 2024 (v13)
Number of questions: 125 Type of questions: Multiple choice
Duration of test: 4 hours Validity duration:  3 years
Recommended experience: 2 years working experience Languages: English, German, Japanese

CEH exam additional resources

 

Free hacking with AI course and lab 

During this free one-hour course, you will use AI to hack a system, learn how to cover your tracks and then attempt to find proof of the intrusion — even if you have zero hacking experience. 
 
You will actively participate every step of the way and leave with some of the essential skills students learn in our 5-day Ethical Hacking Boot Camp — all in less than an hour.  
 
Get instant access to the free hacking course. 

CEH study guides and practice questions 

Study guides, books and practice questions are a great way to help prepare for the CEH exam. You can find them at your local library, bookstore or online stores like Amazon. 
 
Infosec is an EC-Council partner and includes approved materials with your CEH training. In the video from our Cyber Work Hacks series, Infosec instructor Akyl Phillips shares a few sample CEH exam questions and guides you through how to answer them.  
 
See more CEH and hacking videos from Infosec.  

 

CEH jobs and careers

The CEH is a widely recognized entry-level certification and one of the most requested certifications in security job postings. It is also one of the certifications included in the DoD Directive 8570/8140. CEH certification can open doors to a variety of cybersecurity roles.

 

Common roles for CEH holders

Some of the more commonly held positions for people who have a CEH certification are:

Learn more about the job outlook for CEHs.

CEH live boot camps and self-paced training

How long you need to study for the CEH exam depends on your existing knowledge and experience and your method of training. Paid training is a great option for those looking to get certified quickly or those who want expert assistance mastering the concepts covered on the exam. 

Live CEH Boot Camp

Live online, in-person or team onsite boot camps offer an in-depth CEH training experience. As an EC-Council accredited partner, Infosec’s Ethical Hacking Boot Camp prepares you for your CEH in five days. 

Advantages of enrolling in a boot camp include:    

  • Live instruction: Boot camps provide the opportunity to interact with expert instructors and peers. 
  • Complete certification package: Infosec’s live training includes everything you need to build your hacking skills and ace your CEH exam. 
  • Higher pass rates: Infosec Boot Camps have a 93% pass rate, and we back our training with an Exam Pass Guarantee. 

Learn more about the live Ethical Hacking Boot Camp. 

Self-paced CEH training

Infosec also offers a self-paced CEH training option for those who can’t dedicate a week to training or prefer to train over several months. This instructor-guided course is available on-demand to fit around your busy schedule.  

Advantages of enrolling in self-paced training include: 

  • Train at your own pace: Study when it’s convenient for you, whether that’s during short breaks or for longer periods on weekends. 
  • Exam voucher: CEH exam voucher is included for when you’re ready for the exam. 
  • Instructor support: Get high-quality training materials and asynchronous instructor support to help ensure your success. 

Learn more about the self-paced CEH training. 

CEH comparisons and alternatives

The CEH is designed to prepare you to be an ethical hacker or pentester, but it is not the only option available. Here is how Certified Ethical Hacking certification stacks up to other related certifications.

CEH vs. CompTIA PenTest+

The PenTest+ certification from CompTIA and CEH from EC-Council both strongly focus on penetration testing. Both are accredited by ANSI and are included in the DoD Directive 8570. 

There are some differences, though. CEH is generally considered an entry-level certification, while PenTest+ is more for intermediate practitioners. Similarly, PenTest+ certification may be more appropriate for professionals seeking wider, manager-level network protection skills, while CEH is geared more towards ethical hacking. There is a stricter continuing education credit requirement for CEH certification renewal than for PenTest+. 

CEH vs. OSCP

The Offensive Security Certified Professional (OSCP) certification is a more advanced penetration testing certification than the CEH. 

OSCP takes a more hands-on approach than the CEH's knowledge-focused test and includes a nearly day-long practical pentesting portion of the exam. Because of this, it’s safe to say that OSCP focuses more on penetration testing than ethical hacking and is considered one of the most difficult cybersecurity certification exams.

CEH vs. CHFI

The Computer Hacking Forensics Investigator (CHFI) certification is similar to CEH in teaching professionals to defend organizations against hacking threats. The skills learned in both can be invaluable while auditing systems and networks to identify weak spots.

However, as its name implies, CHFI focuses more on the investigative side of hacking prevention than CEH. Both certifications are like two sides of the same coin; while CEH teaches professionals skills to perform ethical hacks, CHFI provides skills to collect evidence of hacking and properly report it.

Other alternatives to the CEH

 Which is better for your career? Is the CEH the best certification for you? That all depends on you and your career goals. Check out these articles to learn more:

Explore Infosec certifications to find the best fit for your career goals.

Most recent CEH articles

Stay up on the latest trends and insights with Infosec's blog.