AWS/ Azure certification programs enrolment started for November Whatsapp ›

CEH vs CEH Practical vs CEH Master: which one do you actually need?

Manu Francis, Certified EC-Council Instructor, on the CEH v13 course
  • 125 QsCEH knowledge exam, 4 hours
  • 20 tasksCEH Practical, 6 hours
  • Both= CEH Master
  • 60–85%pass mark, by exam paper

Once students decide on CEH, the next question is always the same: do I also need the Practical? What is CEH Master? Is the expensive package worth it? Here's how the three credentials differ, what each package includes, and what we recommend depending on where you are in your career.

The three credentials, side by side

CEHCEH PracticalCEH Master
What it isKnowledge examHands-on examBoth exams passed
Format125 multiple-choice questions20 real-world challenges in a cyber rangeEarned, not a separate exam
Time4 hours6 hours4 + 6 hours
Required?Yes, to be certifiedOptionalOptional
Best forFreshers and most job seekers in IndiaProving hands-on skill to a specific employerThose who want the highest CEH level

Don't let "multiple choice" fool you. The CEH questions are theory, but most are built around practical scenarios: you need to understand how the tools and attacks actually work to answer them.

CEH Lite vs CEH Elite: the two packages

Training centres usually sell CEH in two forms. EC-Council's own names for its kits differ, so always ask what's inside rather than going by the name.

Best for freshers

CEH Lite (standard CEH)

  • Training on the full CEH v13 syllabus
  • The CEH knowledge exam (125 questions)
  • Makes you a Certified Ethical Hacker
  • The cost-effective choice
  • Practical exam not included

CEH Elite

  • Everything in the standard CEH
  • Adds the 6-hour CEH Practical exam
  • Pass both to earn CEH Master
  • Costs noticeably more
  • More than most freshers need

What the CEH Practical is like

The Practical is a genuine challenge. For six hours you work through 20 tasks in EC-Council's iLabs cyber range, finding and exploiting real vulnerabilities rather than choosing answers. There's no hiding behind memorised facts: you either know how to do it or you don't. Students who do well are the ones who practised hands-on throughout their training, not just before the exam.

Do Indian employers ask for the Practical or Master?

Rarely. Indian job posts ask for CEH, and the standard certification meets that requirement. That's why we tell most freshers to take the standard CEH first: it's the cost-effective choice, and you can always add the Practical later if an employer specifically asks for it.

Where Security+, OSCP and eJPT fit in

  • CompTIA Security+ is a basic-level certification, popular if you're aiming for a job in the US or Canada. But CEH is also accredited by ANSI, the American National Standards Institute, and it's a US Department of Defense baseline certification, so it's fully recognised in the US as well.
  • OSCP and eJPT are practical, hands-on certifications. They're valuable, but without real work experience they're tough, and they make for a hard start. We recommend them only after about a year in a security job.

The order we recommend

  1. FundamentalsNetworking, Linux, web apps
  2. CEHThe standard knowledge exam
  3. 1 year of workReal experience first
  4. OSCP or eJPTOr the CEH Practical

Why take CEH at an accredited centre

Many institutes write their own short syllabus, call it CEH, and get students through the exam with "tips and tricks". You might pass, but you won't have the skills the certificate is supposed to prove, and interviews will show it.

At Edwhere, an EC-Council Accredited Training Centre (EATC86135), we follow EC-Council's official CEH v13 curriculum exactly, in its original form. Our training includes hands-on practical labs throughout, so you learn the practical side whichever exam you take. The CEH Practical exam voucher isn't part of our standard CEH package, but you can add it, or ask us about packages that include it. Batches are small, 5 to 10 students, and run once every three months.

See what CEH v13 costs in India, or read how to become an ethical hacker in Kerala for where CEH fits in the bigger picture.

CEH v13 training · Aluva, Kochi and online

Not sure which package you need?

Tell us where you are now and what you're aiming for, and we'll tell you honestly whether the standard CEH is enough, with the current fee and the next batch date.

Ask about CEH CEH v13 course details ›

Keep reading

Frequently asked questions

What is the difference between CEH and CEH Practical?

CEH is the knowledge exam: 125 multiple-choice questions in 4 hours. The CEH Practical is an optional hands-on exam: 20 challenges in 6 hours in EC-Council's cyber range.

What is CEH Master?

CEH Master is the title you earn by passing both the CEH knowledge exam and the CEH Practical exam.

Is the CEH Practical required?

No. Passing the knowledge exam makes you a Certified Ethical Hacker. The Practical is optional, for those who want to prove hands-on skill or earn CEH Master.

Should a fresher take CEH or OSCP?

CEH. OSCP and eJPT are practical certifications that are hard without real work experience. Take CEH first, work for about a year, then consider OSCP or eJPT.

Is CEH valid in the US?

Yes. CEH is accredited by ANSI, the American National Standards Institute, and it's a US Department of Defense baseline certification.

Does Edwhere's CEH package include the Practical exam?

Not the standard package, but the training includes hands-on practical labs throughout. You can add the Practical exam voucher, or ask us about packages that include it.

Learn with Edwhere.

Hands-on courses in cybersecurity, IoT and programming, taught in Malayalam.