PrepForCerts
Get started
Menu

CEH / EXPERIENCE GUIDE Start with the right path.
Build the experience that counts.

Separate CEH exam eligibility from certification requirements, then plan your skills and work experience.

Find your starting pointTry free practice

Published by PrepForCerts · Editorial responsibility and sources · Updated

CAREER GUIDE

Can I Get CEH Without Experience? Yes — But There's an Important Catch

Thinking about CEH certification but worried about prerequisites? Here's the truth about EC-Council CEH experience requirements and alternative paths.

Official training OR 2 years information security experience. This guide covers official prerequisites, alternative paths for beginners, and strategies that help inexperienced candidates succeed.

Plan your next step

CEH eligibility has two paths: complete official EC-Council training, or apply with two years of information-security experience and the US$100 non-refundable eligibility application fee. A beginner can use official training; self-study alone does not remove the experience requirement. Confirm training and voucher terms before purchase.

Experience Required
Required
Difficulty Level
Intermediate
Beginner Success Rate
Not a prediction
Study Time (No Exp)
8-12 weeks

Provider reference: CEH uses an exam-form-specific passing standard. Check EC-Council’s current passing criteria; do not assume a fixed 70% target or a fixed number of mistakes allowed. Study schedules and practice percentages are planning examples, not official requirements or pass predictions. Confirm current fees and eligibility before purchase. Exam details · Maintenance policy

The Certified Ethical Hacker (CEH) certification has two paths: official training (no experience required) or self-study (2 years experience required). Here's everything you need to know about breaking into ethical hacking as a beginner.

Quick Answer

Yes, but with a condition. EC-Council offers two eligibility paths for CEH: (1) Take their official training course (check current training prices) — no experience required, or (2) Self-study with proof of 2 years of information security experience. For complete beginners, the official training path is the only option. Many professionals recommend getting Security+ first, then pursuing CEH as your second certification.

2-6 mo
Study Timeline
Varies by role
Total Cost (Training)
Pay varies by role and location
Pay depends on role
2 Paths
Training or Experience

Understanding CEH's Two Eligibility Paths

Unlike CompTIA certifications which have no prerequisites at all, EC-Council's CEH has a structured eligibility system. This is the most important thing beginners need to understand before investing time or money.

Path 1: Official Training (No Experience Required). Attend EC-Council's official CEH training course — available as a 5-day intensive bootcamp or self-paced online course. Official training meets the training eligibility route; confirm registration approval and whether your course includes an exam voucher. Cost varies with format, provider, and bundle; check the current offer. This is the path for beginners.

Path 2: Self-Study (2 Years Experience Required). If you want to skip the official training and self-study, you must submit an eligibility application to EC-Council proving at least two years of information security work experience. EC-Council reviews your application and charges a $100 non-refundable processing fee. Not suitable for career changers with no security background.

One route is to study Security+ foundations, gain at least two years of qualifying information-security work, and then apply for CEH through self-study. Compare current exam, application, and training costs with the official-training route. This also builds practical context before CEH study.

What CEH Actually Covers

CEH v13 covers 20 modules spanning the full spectrum of ethical hacking methodology: footprinting and reconnaissance, scanning networks, enumeration, vulnerability analysis, system hacking, malware threats, sniffing, social engineering, denial of service, session hijacking, evading IDS/firewalls, web server/application hacking, SQL injection, wireless hacking, mobile hacking, IoT hacking, cloud computing, and cryptography.

The CEH knowledge exam has 125 multiple-choice questions in four hours and an exam-form-specific passing standard. It tests concepts and tool familiarity, such as Nmap, Metasploit, Burp Suite, and Wireshark. CEH Practical is the separate hands-on assessment.

CEH is recognized by the U.S. Department of Defense for Directive 8570 (IAT Level II and III) and is one of the most requested certifications in government cybersecurity job postings. It also carries strong name recognition in the private sector, though some professionals debate whether OSCP or PenTest+ offer better practical value.

CEH vs. Security+ vs. PenTest+ for Beginners

Security+ (check current exam price): Best first certification for any cybersecurity career path. Broadest coverage, lowest cost, no prerequisites. Start here.

PenTest+ (check current exam price): CompTIA's penetration testing cert. More hands-on than CEH, cheaper, no prerequisites. Good alternative to CEH for those focused on pen testing skills rather than name recognition.

CEH (check current training and exam prices): Strongest name recognition, especially in government/defense. Higher cost, requires training or experience. Best as a second or third certification after establishing a security foundation.

Ethical Hacking Jobs for CEH Holders

Penetration Tester

Pay varies by role, location, and experience.

Simulate cyberattacks against organizations to find vulnerabilities before malicious hackers do. High demand, highly technical, very rewarding.

Security Analyst

Pay varies by role, location, and experience.

Analyze security alerts, investigate incidents, and recommend security improvements. More accessible entry point than pen testing.

Vulnerability Analyst

Pay varies by role, location, and experience.

Run vulnerability scans, analyze results, prioritize remediation, and track patching efforts. Combines technical and analytical skills.

Security Consultant

Pay varies by role, location, and experience.

Advise organizations on security posture, conduct assessments, and recommend solutions. Client-facing role with travel potential.

Official EC-Council CEH Experience Requirements

Exam eligibility, certification approval, and job readiness are separate. Build relevant practical experience and keep records that support any experience application.

Why Experience Recommendations Exist

Real-world scenarios make concepts click faster, you can relate exam topics to actual work, and employers value the combination of certification and experience. However, these are guidelines, not gatekeepers for motivated self-learners.

What You Actually Need to Know

Even without professional IT experience, you may have relevant background from:

Knowledge Areas to Focus On: 1. Foundational concepts - Understand the "why" behind each topic 2. Hands-on labs - Create practical experience through simulations 3. Real-world scenarios - Study case studies and troubleshooting examples 4. Terminology mastery - Learn the language professionals use

While EC-Council CEH covers topics typically learned on the job, dedicated self-study with hands-on labs can effectively simulate this experience. Many successful candidates come from non-IT backgrounds.

Alternative Paths for Beginners

Building Experience Without a Job:

You do not need a formal IT position to gain relevant experience. Consider these alternatives:

Home Lab Setup - Build a practice environment using virtual machines, experiment with configurations and troubleshooting, and document your projects for interview discussions.

Online Platforms - Use cloud-based labs included with many certification courses, practice in sandboxed environments, and complete guided scenarios.

Volunteer Work - Help local nonprofits with IT needs, support friends and family with tech issues, and contribute to open-source projects.

Transferable Skills:

Preparation Strategy Without Experience

Without work experience to draw from, your study approach must be more intentional:

Phase 1: Foundation Building (Week 1-2) Focus on understanding concepts, not memorizing facts. Watch video explanations before reading technical documentation and create mental models for how systems interact.

Phase 2: Hands-On Practice (Week 3-6) Set up lab environments to practice concepts. Complete guided labs for every major topic. Test changes in a lab you own or are authorized to use, then practise recovery. This simulated experience compensates for lack of real-world exposure.

Phase 3: Exam Preparation (Weeks 7–12, example schedule) Take multiple practice exams under realistic conditions. Analyze every wrong answer to understand the underlying concept. Review official exam objectives and ensure no gaps remain.

Study Time Adjustment: Without experience, add 25-50% more study time than recommendations for experienced candidates. Plan for 8-12 weeks of dedicated preparation.

What Makes Beginners Successful

Mindset Factors:

Resource Selection:

Common Characteristics of Successful Beginners: 1. Consistent daily study schedule 2. Active learning through practice, not passive reading 3. Community engagement for support and motivation 4. Realistic timeline expectations 5. Multiple practice exam sources before scheduling

The provider does not publish a verified first-attempt pass rate here. Use your study results and practical skills to identify gaps.

More study tips

Build a home lab. Even a single computer running virtual machines can simulate enterprise environments. Document everything you build and break—this becomes portfolio material.

Join study communities. Reddit, Discord, and certification forums provide answers to questions you did not know to ask. Other beginners share struggles and solutions.

Use multiple practice exam sources. Each provider emphasizes different topics. Review results across sources and explain the reasoning behind each answer; no practice score guarantees exam readiness.

Do not hide your beginner status. Employers value certified candidates who demonstrate learning ability, even without experience.

Mistakes to check

Rushing to the exam. Beginners often underestimate preparation time. Without experience context, concepts take longer to internalize. Add buffer time.

Relying solely on video courses. Passive watching does not build skills. Supplement with hands-on labs and practice tests for active learning.

Memorizing without understanding. Exam questions present scenarios requiring application of knowledge. Understand the "why" behind every concept.

Comparing to experienced candidates. Their timeline is not yours. Focus on your progress, not others' speed.

Ready to Start Your EC-Council CEH Journey?

Experience or not, you can achieve EC-Council CEH certification with the right preparation. Start practicing with realistic exam questions today.

Start Practicing Now

More questions

Can I really get EC-Council CEH with no IT experience?

CEH eligibility has two paths: complete official EC-Council training, or apply with two years of information-security experience and the US$100 non-refundable eligibility application fee. A beginner can use official training; self-study alone does not remove the experience requirement. Confirm training and voucher terms before purchase.

How long should I study for EC-Council CEH without experience?

Without prior experience, plan for 8-12 weeks of dedicated study. Adjust the schedule to your starting knowledge and available time. This example schedule allows you to build foundational knowledge and hands-on skills through labs and practice.

Is EC-Council CEH too hard for beginners?

EC-Council CEH is challenging but achievable for beginners. The provider does not publish a verified first-attempt pass rate here. Use your study results and practical skills to identify gaps.

What background do I need for EC-Council CEH?

Security fundamentals and interest in ethical hacking. Even without this background, you can build equivalent knowledge through structured study, home labs, and practice environments. Many successful candidates started with no relevant background.

Will employers hire me with EC-Council CEH but no experience?

Yes, many employers specifically seek certified candidates for entry-level roles. The certification demonstrates knowledge and commitment. Combine your certification with home lab projects to show practical skills during interviews.

Should I get experience first or certification first?

Both paths work. Certification first shows initiative and may help you land entry-level positions. However, some experience may make the material more intuitive. Consider your specific situation and career goals.

What alternative paths can substitute for experience?

Security+ certification, CTF competitions, Ethical hacking courses, Bug bounty participation. These alternatives build practical knowledge that translates to exam success and job readiness, even without formal work experience.

Frequently Asked Questions

Does CEH require work experience?

It depends on your path. If you take EC-Council's official training (check current training prices), no experience is required. If you self-study, EC-Council requires two years of information security experience and an application fee of $100 to verify eligibility.

How long does it take to prepare for CEH?

With the official training route: 5-day bootcamp plus 2-4 weeks of practice testing. Self-study with experience: 3-4 months of preparation. Complete beginners without official training: not eligible unless they take the training course first.

Is CEH worth it for beginners?

CEH is valuable for its name recognition, especially in government and defense sectors. However, for most beginners, Security+ is a better (and cheaper) first certification. Consider CEH after Security+ or alongside PenTest+ for maximum impact.

How much does CEH cost in total?

Compare the current official-training bundle price, exam voucher coverage, and any separate exam charge before purchase. The self-study route requires approved experience and the US$100 non-refundable application fee, plus the current exam and study-material costs. Do not assume a voucher is included or add it twice.

What jobs can I get with CEH?

Penetration Tester, Security Analyst, Vulnerability Analyst, Security Consultant, and SOC Analyst. CEH is often listed as preferred for government and defense contractor positions. Pay and job requirements vary by role, location, and experience.

Start Practicing for CEH Today

Build your ethical hacking knowledge with adaptive practice questions.

Start Free Practice Test →

Related Resources

CEH Practice Test OSCP vs CEH Security+ vs CEH

Related CEH resources

Practice and exam format

Study and requirements

Renewal and next steps