CEH Passing Score: Why It Varies 60–85%

01 The short answer

Your target depends on the form you draw. Aim past 85% and the variation stops mattering. Everything else in this guide — how the cut score is built, which areas to study, and what practice score tells you that you are ready — flows from that one rule: prepare for the hardest cut you could be handed, not the friendliest.

02 How the per-form cut score actually works

Most certifications publish one number — 70%, 700/1000, and so on. The CEH deliberately does not, and understanding why is the whole story of this exam.

1. EC-Council delivers the CEH in multiple forms

The CEH is not one fixed paper. EC-Council maintains several exam forms, each drawn from a different bank of questions. Two candidates sitting the same certification on the same day can face genuinely different sets. To keep the bar fair across those forms, each one is beta-tested and every question is assigned a difficulty rating. Those ratings are rolled up into a cut score that is specific to that form.

2. Harder forms get a lower cut score

This is the part candidates misread. A form packed with tougher questions is given a lower cut score — closer to 60% — because fewer people would clear a high bar on a hard paper. An easier form is given a higher cut score — up to about 85% — because the questions are more forgiving. The mechanism is called equating: it holds every candidate to the same underlying standard of competence, regardless of which form they happened to receive. In other words, the difficulty of your questions and the height of your bar move together, so an “easy” exam is not actually easier to pass — the bar just rises to match.

This is why comparing raw percentages with another candidate tells you nothing. Someone who scored 78% on a brutal form may have comfortably passed, while you scored 82% on a gentle form and fell short. Neither number means anything without the cut score that sat behind it, and that cut score was set long before either of you booked.

3. You cannot know your form's cut score in advance

Here is the practical trap. You will not be told which form you are sitting, and you will not see its cut score until the exam ends — both your form's cut score and your achieved score appear on your transcript immediately afterwards. So planning to scrape a pass at, say, 70% is gambling on which form you draw. If you land an easier form, the cut could be 80%+ and 70% fails. The only number you fully control is your own preparation, so the rational move is to beat the top of the range, not the bottom.

Put bluntly: there is no version of “just enough” that is safe on the CEH. On a fixed-pass-mark exam you can study to a known line and stop. Here the line is hidden until it is too late to change anything, so the planning target has to be the worst case — the highest cut score you could plausibly be handed — with a margin on top of it.

03 What the exam actually covers

The CEH knowledge exam spreads its 125 questions across the full ethical-hacking lifecycle, mapped to EC-Council's domains. EC-Council does not publish a fixed per-question weighting that stays constant across forms, so treat the figures below as approximate emphasis rather than guaranteed counts — the exact split shifts with the form you draw.

With 125 questions across four hours, you have a little under two minutes per question on average — comfortable, but not so generous that you can afford to second-guess every item. The real time risk is the long, scenario-style questions that describe a tool's output or an attack chain and ask what comes next; bank time on the quick recall items so you have room to think on those.

There is also a separate, optional CEH Practical — a six-hour hands-on exam where you exploit live targets in a lab rather than answer multiple-choice questions. It is scored on the challenges you actually complete and is not what people mean by “the CEH passing score.” This guide is about the multiple-choice knowledge exam, which is the one almost everyone sits first and the one the 60–85% cut score applies to.

04 What practice score means you are ready

Because the real cut score floats, the only readiness signal worth trusting is a repeatable score on fresh, full-length, timed practice exams — and you have to read it against the top of the cut-score range, not the bottom. Use this scale.

Two words in that scale are doing the heavy lifting: repeatable and fresh. A single 88% means little if your next sitting is 74% — the spread tells you that you are pattern-matching memorised questions rather than reasoning from knowledge, and the real exam will punish that. Sit several full-length papers on questions you have never seen, and look at the floor of your scores, not the ceiling. The lowest score you can produce on a fresh paper is roughly the score you should expect on exam day, because you do not get to choose your form.

05 If you fail: the retake policy

Missing the cut score on your form is recoverable, and EC-Council is relatively generous on the first retake — but the limits tighten fast after that, so it is worth being ready before you book. Always confirm the current policy with EC-Council before relying on these figures.