Difficulty
CEHHow hard is CEH?
EC-Council classifies CEH at the intermediate level. It is multiple choice, delivered online via the ECC exam portal, sat in 240 minutes. No invented pass rates anywhere on this page.
The short answer
Certified Ethical Hacker (CEH) is a mid-level exam. It assumes working familiarity with the field it covers.
With a year or two of hands-on exposure to the subject area, preparation is mostly review plus practice under the clock, with real gaps to close where an adjacent role never touched the material. Coming in cold, plan for more study time and use the objectives list to find what you have never touched.
What actually makes it hard
Recognition is not understanding.
The format is multiple choice, delivered online via the ECC exam portal. The wrong options are written to look right to someone who learned the terms without the concept behind them.
Breadth across domains.
The blueprint spans 9 domains and the exam samples all of them. The heaviest, Network and Perimeter Hacking, is 24 percent of the exam; the lightest, Cryptography, 5 percent.
The clock.
125 questions in 240 minutes is about 1.9 minutes each, including the time to read the stem and the options. Reading about the exam does not rehearse that pace; a full-length sitting against the clock does.
Where the weight sits
Difficulty is not spread evenly. EC-Council publishes the domain weightings, and they tell you where your study time buys the most points:
- Network and Perimeter Hacking24%
- Reconnaissance Techniques17%
- System Hacking Phases and Attack Techniques15%
- Web Application Hacking14%
- Mobile Platform, IoT, and OT Hacking10%
- Information Security and Ethical Hacking Overview6%
- Wireless Network Hacking5%
- Cloud Computing5%
- Cryptography5%
Weightings from the official objectives. EC-Council exam page ↗
Where candidates struggle: Network and Perimeter Hacking is 24 percent of the blueprint, almost a quarter of the exam and nearly the weight of Reconnaissance and Web Application Hacking combined, so sniffing, social engineering, denial-of-service, session hijacking and evading IDS and firewalls are where preparation pays back fastest. EC-Council allows 4 hours for 125 questions, which is close to two minutes each, and it weights questions by difficulty rather than publishing one cut score, so there is no fixed number of items you can afford to lose.
How to find out where you stand
The fastest honest read on difficulty is not an opinion page, ours included. Answer real CEH questions and see which domains push back. Five questions from across every practice exam, with the full explanation on each.
Keep reading
- CEH practice questions
Free sample questions with the full explanation on every answer.
- Free CEH practice test
10 original questions, playable now. No account, no card.
- CEH exam objectives
The full official blueprint, with practice pages on covered objectives.
- CEH exam format
How many questions, how long, what the items look like, and how long it stays valid.
- CEH passing score
The exact cut score, what kind of number it is, and the retake terms.
Practice CEH for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free CEH questions