If you’ve ever wondered how attackers break into networks and how you’d stop them, the Certified Ethical Hacker (CEH™) certification from EC-Council may be on your radar. It’s one of the most recognized names in offensive security, and it often appears in job postings for penetration testers, security analysts, and SOC roles. But the CEH isn’t a beginner’s first IT certification, and it has eligibility rules that many other security exams don’t.

In this guide, we’ll walk you through who the exam is for, how to qualify, how long to study, the careers and salaries it supports, how to keep it active, and what to consider next.

Who Should Take the CEH Exam?

The CEH is built for people who need to understand attacks from the attacker’s side. It’s a strong fit if you are:

  • A security analyst or SOC analyst who wants to recognize reconnaissance, exploitation, and evasion techniques when they show up in logs and alerts.
  • A network or systems administrator moving into security who wants a structured view of how the systems you manage get attacked.
  • An aspiring penetration tester or red team member looking for a broad foundation in tools and methodology before more hands-on certifications.
  • A vulnerability management or IT audit professional who needs to understand the risks behind scan findings and audit controls.
  • A student or career changer in a security program whose school or employer offers official EC-Council training.

Who Might Want to Wait?

If terms like TCP handshake, subnet, or DNS record are still new to you, build your networking and security fundamentals first. Many candidates start with an entry-level certification such as CompTIA Security+ before moving to the CEH. On the other end, if you already run penetration tests professionally, you may want to go straight to a more hands-on credential, or pair the CEH with the CEH Practical to show applied skills.

What Are the CEH Eligibility Requirements?

EC-Council offers two ways to become eligible for the 312-50 exam, according to its application process and eligibility page:

  • Official training path: Complete official EC-Council training through an Accredited Training Center, EC-Council’s online learning, or an approved academic institution. You’re then eligible to attempt the exam without a separate eligibility application.
  • Experience path: If you don’t attend official training, submit an eligibility application showing at least two years of work experience in information security. You’ll pay a $100 non-refundable application fee, and EC-Council will contact the references you list to verify your experience.

How Do You Apply and Register?

  1. Choose your path. Enroll in official training, or submit the eligibility application with the $100 fee.
  2. Wait for approval (experience path). EC-Council says approval usually takes 5 to 10 working days. Let your references know they’ll be contacted so they respond quickly.
  3. Buy your exam voucher. Approved applications are valid for 90 days, and EC-Council emails voucher purchase options once you’re approved. Check the application page for current voucher pricing.
  4. Schedule your exam. You have 12 months from voucher purchase to take the exam, either online through the ECC Exam Center with remote proctoring or at a Pearson VUE test center.
  5. Take the exam. You’ll answer 125 multiple-choice questions in 4 hours and see your result as soon as you submit.

If you don’t pass, EC-Council’s retake policy lets you retest right away after your first attempt. After that, you must wait 14 days between attempts, with a limit of five attempts in 12 months.

How Long Should You Study for the CEH Exam?

Your timeline depends on your background and whether you take a course. EC-Council’s official training is often delivered as a one-week bootcamp, but most candidates need more time to absorb the material afterward. These ranges are planning guidance, not official EC-Council figures.

  • Experienced security professionals: 3 to 5 weeks, focused on EC-Council terminology, tool names, and weaker domains like cryptography or OT.
  • IT professionals with networking experience: 6 to 8 weeks at 6 to 10 hours per week.
  • Newer to security: 10 to 12 weeks or more, with extra time on networking basics and hands-on lab practice.

Sample 8-Week CEH Study Plan

This plan follows the question counts in the CEH Exam Blueprint v5.0, giving the most time to Network and Perimeter Hacking (30 questions) and Reconnaissance Techniques (21 questions).

  • Week 1: Take a baseline quiz. Cover Domain 1: hacking phases, frameworks, security controls, and laws and standards.
  • Week 2: Domain 2: footprinting, Nmap scan types and flags, and enumeration of NetBIOS, SNMP, LDAP, SMTP, and DNS.
  • Week 3: Domain 3: vulnerability analysis, password attacks, privilege escalation, persistence, covering tracks, and malware types.
  • Week 4: Domain 4, part one: sniffing, social engineering, and DoS and DDoS attacks.
  • Week 5: Domain 4, part two: session hijacking and evading IDS, firewalls, and honeypots. Review all of Domain 4 with practice questions.
  • Week 6: Domain 5: web server attacks, web application attacks, and SQL injection.
  • Week 7: Domains 6 through 9: wireless, mobile, IoT and OT, cloud, and cryptography.
  • Week 8: Mixed review of your weakest topics, timed practice sets, and rest before exam day.

What Careers Can the CEH Support?

The CEH shows up in job postings across offensive and defensive security. Common roles include:

  • Penetration tester or ethical hacker
  • Security analyst or SOC analyst
  • Vulnerability analyst or vulnerability management specialist
  • Information security analyst or engineer
  • Security consultant or IT security auditor

These roles exist in consulting firms, managed security service providers, banks, healthcare systems, technology companies, and government agencies and contractors. Over time, many CEH holders move into senior penetration testing, red teaming, security architecture, or security leadership.

What Is the Salary for CEH Jobs?

The U.S. Bureau of Labor Statistics (BLS) doesn’t track pay by certification, but it does publish data for information security analysts, the occupation that includes many CEH-aligned roles. According to the BLS Occupational Outlook Handbook, information security analysts earned a median annual wage of $129,180 in May 2025.

The BLS projects employment of information security analysts to grow 21% from 2025 to 2035, much faster than the average for all occupations, with about 14,100 openings each year on average. BLS notes that the typical entry-level education for the role is a bachelor’s degree, usually along with some related work experience, so certifications like the CEH tend to work best alongside experience and education rather than in place of them.

How Do You Maintain the CEH Certification?

The CEH runs on a three-year cycle. Under EC-Council’s Continuing Education (ECE) policy, you need to:

  • Earn 120 ECE credits within your three-year cycle.
  • Pay the annual ECE fee, which EC-Council lists as $80 per year if you hold at least one ECE-policy certification.
  • Record your credits in EC-Council’s portal. Credits are earned by calendar year and must be posted by February 1 of the following year.

Qualifying activities include attending security conferences, seminars, and courses; earning other IT security certifications; writing articles or books; teaching; and volunteering. If you fall short at the end of a cycle, your certification is suspended, and you have 12 months to catch up before it’s revoked and you’d need to retest.

What Certifications Stack Well With the CEH?

The right next step depends on where you want to take your career:

  • CEH Practical (CEH Master): A six-hour, hands-on exam with 20 challenges in a cyber range. Pass it along with the knowledge exam, and you earn CEH Master, which shows you can apply what you know.
  • EC-Council Certified Penetration Testing Professional (CPENT): EC-Council’s next step for advanced, hands-on penetration testing.
  • Hands-on penetration testing certifications from other organizations, such as OffSec’s OSCP or CompTIA PenTest+, if you want more practical exploitation experience.
  • CompTIA CySA+ or GIAC defensive certifications: Good choices if you’re heading toward detection, threat hunting, or SOC leadership.
  • ISC2 CISSP: A later step if you’re moving toward security management or architecture and meet its experience requirements.

Start Preparing for the CEH Exam With Pocket Prep

Wherever you’re starting from, Pocket Prep’s EC-Council CEH practice questions can help you prepare with 1,600 exam-style questions and detailed explanations for every answer. Squeeze in practice with Quick 10 or the Question of the Day, and let study reminders keep your streak going. One question at a time!