The CEH Guide
Everything you need to know before sitting for Certified Ethical Hacker (CEH)
Why CEH matters in 2026
Certified Ethical Hacker (CEH) is one of the most recognized credentials issued by EC-Council, and 2026 hiring data continues to show CEH on job postings as either required or strongly preferred for the roles it targets. The certification validates that you can apply real working knowledge, not just recall facts, across 9 distinct exam domains, with the largest weight on Network and Perimeter Hacking. For candidates competing in the EC-Council ecosystem, CEH is a clear signal to a hiring manager that you have invested in measurable, third-party-verified competence.
Who should take CEH
CEH is most useful for professionals working in or moving toward the EC-Council ecosystem. In short: EC-Council's ethical hacking certification: penetration testing, vulnerability assessment, and offensive security. If you are early in your career, CEH is one of the fastest credentials to add to a résumé that recruiters actively screen for. If you are mid-career, it formalizes the skills you already use day-to-day and unlocks roles that gate on it. If you are switching tracks, it gives you a structured curriculum that tells you exactly what to study, in what order, weighted by what the real exam tests.
Exam structure and difficulty
The Certified Ethical Hacker (CEH) exam is organized into 9 domains, each weighted by the official EC-Council exam guide. The heaviest weighting is Network and Perimeter Hacking at 22% of the exam, so that is where you should spend the most preparation time. The lightest is Cloud Computing at 4%, meaning you can dedicate roughly proportional review time without over-investing.
Format details: EC-Council CEH v13 (Blueprint v5.0) · 125 multiple-choice questions · 4 hours · Computer-based · ANSI/ISO 17024 accredited · DoD 8570/8140 approved · Companion CEH Practical (6-hour hands-on lab). Following the domain weights is the single biggest leverage point candidates miss, because many over-study lower-weighted material that feels comfortable.
How to prepare
A practical four-step plan for CEH:
- Read the official EC-Council exam guide for CEH and write down every sub-objective. This becomes your study checklist.
- Use the domain practice quizzes on this page in weight order (heaviest first). Aim for 80% on each domain before moving on.
- When you miss a question, read the explanation for every wrong answer, because that contrastive learning is where understanding compounds.
- Once every domain is at 80%+, take the Mix Quiz repeatedly to simulate real exam conditions across all topics.
Career outcomes and salary
Holders of CEH in the US currently see compensation in the range of $72k to $165k per year, with median around $105k. Certified Ethical Hacker: penetration tester / offensive security analyst Salary varies by region, employer size, and complementary skills, but the CEH credential consistently lifts the floor of what you can negotiate against. Source: ZipRecruiter, Payscale, 2026.
Common pitfalls
The three traps that kill CEH candidates: (1) over-memorizing acronyms instead of practicing the application of concepts in scenarios, when the exam is scenario-driven, not a vocab quiz. (2) Skipping the heaviest-weighted domain because it feels less interesting, which can fail the whole exam by neglecting Network and Perimeter Hacking. (3) Not timing practice sessions, when the exam has a real clock and pacing is its own skill. Build timing into your last two weeks of prep.
CEH questions, answered
How many questions are on the CEH exam?
125 multiple-choice questions in 4 hours.
What is the passing score for CEH?
EC-Council uses a variable cut score per exam form (typically in the 60% to 85% range) rather than one fixed percentage, since question difficulty is weighted and balanced across different exam versions.
How much does CEH cost?
CEH pricing varies significantly by package. An exam voucher alone typically runs around $1,199 to $1,999 through EC-Council or an authorized training partner, often bundled with official courseware. Check EC-Council's official site for current pricing.
Is CEH worth it without the practical exam?
The knowledge-based CEH (the one this practice test covers) is valuable on its own for DoD 8570/8140 compliance and as a resume credential, but many employers and the "CEH Master" designation specifically look for the companion CEH Practical, a 6-hour hands-on lab exam.
Is CEH harder than PenTest+?
CEH's knowledge exam leans more on breadth of tool and technique recall across a huge attack surface; CompTIA PenTest+ leans more on applied, scenario-based penetration testing methodology with performance-based questions. Many security professionals hold both.
How long is CEH certification valid?
CEH is valid for 3 years and renews through EC-Council's Continuing Education (ECE) credit program.
Is this CEH practice test free?
Yes. Every CEH practice question on QuizBuffet is free, with instant feedback and an explanation for each answer, no signup required.