EC Council Certified Ethical Hacker
EC Council Certified Ethical Hacker
CERTIFICATION
WHO ISSUES THE CERTIFICATION?
WHAT IS THE CAREER LEVEL OF THE CERTIFICATION AND WHO IS IT GEARED TO?
The CEH is mid-level and is geared to information security professionals looking to expand their knowledge.
WHAT ARE THE EDUCATION AND/OR EXPERIENCE PREREQUISITES FOR THE CERTIFICATION?
There are two pathways to become eligible to sit for the CEH exam. The first pathway requires the individual
to complete an education or training program with EC-Council directly, or with an EC-Council partner using
official content authored and developed by EC-Council. The second pathway allows individuals to sit for the
exam without an EC-Council education or training program, but the candidate must formally apply for exam
eligibility, including paying a $100 application fee, submitting a formal exam eligibility application with proof of
at least two years of work experience in the information security field, and providing three references.
The CEH has a knowledge-based exam that consists of 125 multiple-choice questions, which must be
completed within four hours. The exam, which is now at version 4.0, covers the following domains: information
security and ethical hacking overview; reconnaissance techniques; system hacking phases and attack
techniques; network and perimeter hacking; web application hacking; wireless network hacking; mobile
platform, internet of things (IoT), and operational technology (OT) hacking; cloud computing; and cryptography.
Individuals who have taken an authorized education or training program receive the exam voucher as low as
$300 when testing onsite, while those interested in remote proctoring will receive the exam voucher at $400.
Individuals who apply for exam eligibility, not having taken an authorized CEH education or training course, are
offered the exam voucher at $1,050 (which includes the exam eligibility application fee).
Yes, EC-Council meets the ANSI National Accreditation Board (ANAB) accreditation program requirements and
those set forth in ISO/IEC 17024:2012 Conformity assessment — General requirements for bodies operating
certification of persons for the CEH program.
HOW LONG IS THE CERTIFICATION VALID?
To renew the CEH certification, an individual must earn 120 continuing education credits within a period of
three years, with a minimum of 30 continuing education credits earned per year, and pay an $80 annual
member fee.
Yes, the certification can be revoked for a violation of EC-Council’s code of ethics as well as failing to meet the
certification maintenance (recertification) requirements.
No.
HOW DOES THE CERTIFICATION RELATE TO OTHER EC-COUNCIL CERTIFICATIONS OR THOSE OF OTHER
CERTIFICATION BODIES?
A candidate can receive a CEH Master designation by earning both the CEH certification and the CEH Practical
credential. In addition, EC-Council identified several career and credential pathways that include the CEH,
including forensics, vulnerability assessment and penetration testing, and incident handling and response.
WHAT ARE SOME ORGANIZATIONS OR INDUSTRIES THAT RECOGNIZE OR USE THE CERTIFICATION?
AT&T, Cisco, Citibank, eBay, Ford, HP, IBM, Microsoft, Principal, PwC, Verizon, and Xerox.
ARE THERE ANY COMPANIES, CORPORATIONS, OR OTHER ORGANIZATIONS THAT HAVE PUBLICLY
DECLARED THEY PREFER OR REQUIRE THE CERTIFICATION?
According to a job search on Indeed for information technology positions, companies such as Accenture, Aegon,
Ernst & Young, General Dynamics Information Technology, SAIC, and The Estée Lauder Companies prefer or
offer bonus points for candidates who have earned the CEH. In addition, the CEH fulfills the DoD Directive
8570/8140 for such cybersecurity service professional roles as analyst, infrastructure support, incident responder,
and auditor, as well as meets the requirements of the respective CNSS 4011-4016 Federal Security Certification
Training Standards of the National Security Agency. The American Council on Education also provides college
credit recommendations for prior learning to those who have earned the CEH.
Computer forensic analyst, computer network defense, cyber defense analyst, information assurance security
officer, information security analyst/administrator, information systems security engineer/manager, information
security auditor, information security manager/specialist, risk/threat/vulnerability analyst, systems administrator,
network administrator and engineer, and more.
DOES EC-COUNCIL OFFER TRAINING MATERIALS TO HELP INDIVIDUALS PREPARE FOR THE
CERTIFICATION EXAM?
EC-Council offers a variety of training and exam preparation materials that range from instructor-led training
and textbooks to streaming videos, and supplemental instructor resources. Ancillary resources such as a
subscription-based learning platform, a cyber range and penetration testing platform, and multiple hacking
challenges are also included.