Credential type: certification examination · verified on the issuer's site September 20, 2026 issuer page
Exam Domains
1 Penetration Testing Methodologies, Scoping, and Engagement
13%
2 Information Gathering and Attack Surface Mapping
13%
3 Web Application and API Penetration Testing
14%
4 Perimeter Defense Evasion Techniques
12%
5 Endpoint Exploitation, Privilege Escalation, and Lateral Movement
13%
6 Reverse Engineering and Binary Exploitation
11%
7 IoT Penetration Testing
11%
8 Reporting and Post Testing Actions
13%
Exam Details
Question TypesMultiple Choice
FormatLinear
Online ProctoringAvailable
ID RequirementsOne valid, government-issued photo ID with full name and photo. ID must match the name used during registration.
RenewalRequired -- Earn 120 ECE (EC-Council Continuing Education) credits over 3-year cycle. ECE credits earned through courses, conferences, publications, or EC-Council activities.
PrerequisitesCEH certification or equivalent penetration testing knowledge (recommended)
Retake PolicyNo official waiting period specified between retakes. Full exam fee required for each retake.
LanguagesEnglish