Certified Ethical Hacker v13

Exam format

EC-Council logo

Certified Ethical Hacker v13 Exam Format

CEH

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. Certified Ethical Hacker (CEH) v13 represents the evolution of ethical hacking, integrating Artificial Intelligence into the core methodology. This version moves beyond traditional penetration testing by addressing the rise of AI-driven threats and the necessity of using AI to defend modern infrastructures. Candidates learn to think like a hacker to anticipate, detect, and counteract sophisticated cyber-attacks. The curriculum covers a massive spectrum of digital landscapes, including cloud environments, IoT ecosystems, and mobile platforms, ensuring that professionals are equipped to secure the entire modern enterprise perimeter. By mastering both manual techniques and AI-assisted automation, testers can provide more comprehensive security assessments in an increasingly complex threat landscape.

125 questions
240 min
9 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions125
Time limit240 minutes (115s per question)
Passing scoreNot published by the vendor — 60% to 85% (cut score varies by exam form; no fixed percentage published)
Domains9
LevelAssociate
Question bank here125 questions
Published format125 multiple-choice questions, 4 hours
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Cryptography4%
  • Encryption standards
  • PKI
  • Cryptographic attacks
  • +1 more
5
Cloud Hacking6%
  • Cloud infrastructure attacks
  • Container security
  • Serverless vulnerabilities
8
System Hacking14%
  • Privilege escalation
  • Malware analysis
  • Stealth techniques
  • +1 more
18
Network & Perimeter24%
  • Social Engineering
  • DoS/DDoS attacks
  • Session Hijacking
  • +1 more
30
AI & Machine Learning10%
  • AI-driven attacks
  • Adversarial Machine Learning
  • Automating exploitation with AI
12
Scanning & Enumeration12%
  • Nmap
  • Port scanning
  • Vulnerability scanning
  • +1 more
15
Web Application Hacking10%
  • Injection
  • Cross-Site Scripting (XSS)
  • Broken Authentication
  • +1 more
12
Reconnaissance & Footprinting12%
  • OSINT
  • Footprinting techniques
  • Google Dorking
  • +1 more
15
Wireless, Mobile & IoT Hacking8%
  • Wi-Fi cracking
  • Mobile OS vulnerabilities
  • IoT device exploitation
10

The heaviest domain is Cryptography at 4%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Branding is CEH v13 / CEH AI. Self-study candidates need eligibility approval first (USD 100 non-refundable application fee); official course kits include an exam voucher. Optional CEH (Practical): 20 hands-on challenges, 6 hours, USD 550. Voucher prices are US-store USD and vary by country/reseller. Official exam page

More about the Certified Ethical Hacker v13 exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Certified Ethical Hacker v13 exam.