CEH v13 Exam Blueprint Overview
The CEH v13 exam blueprint outlines the official exam objectives and domain weights set by EC-Council. Understanding the blueprint is crucial for effective exam preparation. The exam covers 20 domains with updated content on AI-driven security, cloud hacking, and modern threat techniques.
Official Blueprint PDF
Having trouble viewing the PDF? Open it directly in your browser or download the file.
Exam Structure
125
Total Questions
4 Hours
Exam Duration
70%
Passing Score
Multiple Choice
Question Type
What's New in CEH v13 Blueprint
AI/ML Security
New coverage of AI-driven attacks and defenses
Enhanced Cloud
Expanded AWS, Azure, GCP security modules
Zero Trust
Zero trust architecture testing concepts
Modern Threats
50+ new attack techniques for 2024
CEH v13 Domain Weights & Objectives
1
Introduction to Ethical Hacking
6%
Information Security OverviewCyber Kill ChainHacking ConceptsEthical Hacking Scope
2
Footprinting and Reconnaissance
7%
Footprinting ConceptsSearch Engine FootprintingWeb FootprintingWHOIS Lookup
3
Scanning Networks
6%
Network ScanningHost DiscoveryPort ScanningOS Fingerprinting
4
Enumeration
6%
NetBIOS EnumerationSNMP EnumerationLDAP EnumerationDNS Enumeration
5
Vulnerability Analysis
5%
Vulnerability AssessmentVulnerability ScoringVulnerability DatabasesScanning Tools
6
System Hacking
7%
Password CrackingPrivilege EscalationMaintaining AccessClearing Logs
7
Malware Threats
6%
Malware TypesTrojansViruses & WormsFileless MalwareAI-Powered Malware
8
Sniffing
5%
Packet SniffingMAC AttacksDHCP AttacksARP Poisoning
9
Social Engineering
5%
Social Engineering ConceptsPhishingIdentity TheftAI-Enhanced Social Engineering
10
Denial-of-Service
4%
DoS/DDoS ConceptsVolumetric AttacksProtocol AttacksApplication Layer Attacks
11
Session Hijacking
4%
Session Hijacking ConceptsApplication-Level HijackingNetwork-Level HijackingCountermeasures
12
Evading IDS, Firewalls, and Honeypots
4%
IDS/IPS ConceptsFirewall EvasionHoneypot DetectionEvasion Techniques
13
Hacking Web Servers
5%
Web Server ConceptsWeb Server AttacksWeb Server SecurityPatch Management
14
Hacking Web Applications
8%
Web App ArchitectureOWASP Top 10SQL InjectionXSSAPI Security
15
SQL Injection
5%
SQL Injection TypesBlind SQL InjectionError-Based InjectionSQLi Countermeasures
16
Hacking Wireless Networks
5%
Wireless ConceptsWireless EncryptionWireless AttacksBluetooth Hacking
17
Hacking Mobile Platforms
5%
Mobile Attack VectorsAndroid HackingiOS HackingMobile Security
18
IoT and OT Hacking
4%
IoT ArchitectureIoT AttacksOT/SCADA HackingICS Security
19
Cloud Computing
5%
Cloud ConceptsAWS/Azure/GCP SecurityContainer SecurityServerless Attacks
20
Cryptography
4%
Encryption AlgorithmsPKIHash FunctionsCryptanalysis
Focus Areas (Highest Weight)
Prioritize these domains in your study plan as they carry the highest weight on the exam:
1
Hacking Web Applications8%~10 questions
2
System Hacking7%~9 questions
3
Footprinting and Reconnaissance7%~9 questions
4
Introduction to Ethical Hacking6%~8 questions
5
Scanning Networks6%~8 questions
Official Blueprint Resources
Related Questions
Master Every CEH v13 Domain
Our CEH v13 bundle covers all 20 domains with practice questions, study guides, and hands-on labs.
Get CEH v13 Bundle