A study guide frozen in time is a liability when the live exam keeps moving. Actual4Exams revises its 570 EC-COUNCIL Ethical Hacker Certified practice questions continuously, and every 2026 purchase includes 365 days of free updates so your material never drifts out of date.

EC-COUNCIL 312-50 Exam Overview:

Certification Vendor:	EC-Council
Exam Name:	Certified Ethical Hacker (CEH)
Exam Number:	312-50
Exam Format:	Multiple Choice
Related Certifications:	CEH ANSI CEH (Practical)
Certificate Validity Period:	3 years
Exam Price:	$1,199 USD
Passing Score:	60-70%
Real Exam Qty:	125
Exam Duration:	240 minutes
Available Languages:	English
Sample Questions:
Exam Way:	Pearson VUE Testing Center (In-Person)
Pre Condition:	At least 2 years of IT work experience recommended; completion of EC-Council official training or self-study accepted
Official Syllabus URL:	https://www.eccouncil.org/certifications/ethical-hacking-core/

EC-COUNCIL 312-50 Exam Syllabus Topics:

Section	Weight	Objectives
Scanning Networks	10%	- Network Scanning Concepts 1. TCP communication flags 2. UDP scanning 3. TCP scanning types - Scanning Methodology 1. Hping3 scanning 2. War dialing 3. Nmap scanning - IDS/Firewall Evasion Techniques
Cryptography	5%	- Cryptography Concepts 1. Hashing algorithms 2. Encryption algorithms 3. Digital signatures - Cryptography Tools 1. Hashing tools 2. Encryption tools - Cryptography Countermeasures - Public Key Infrastructure (PKI) 1. Digital certificates 2. PKI components
Information Gathering and Reconnaissance	10%	- Footprinting Concepts 1. DNS reconnaissance 2. Network reconnaissance 3. Social engineering reconnaissance - Footprinting Countermeasures - Footprinting Methodology 1. Social network footprinting 2. Email footprinting 3. Google hacking 4. Open-source footprinting 5. Website footprinting
Hacking Mobile Platforms	5%	- Mobile Device Management 1. Mobile anti-malware 2. Mobile security guidelines - Mobile Attacks 1. iOS attacks 2. Mobile malware 3. Android attacks - Mobile Platform Attack Vectors 1. Mobile vulnerabilities 2. Mobile attack surfaces
Vulnerability Analysis	5%	- Vulnerability Assessment Concepts 1. Vulnerability assessment tools 2. Vulnerability scoring systems - Vulnerability Analysis Methodology
Evading IDS, Firewalls, and Honeypots	5%	- Firewall Concepts 1. Firewall architectures 2. Firewall types - Countermeasures - Intrusion Detection System (IDS) Concepts 1. IDS types 2. IDS detection methods - Evasion Techniques 1. Honeypot evasion 2. IDS/Firewall evasion
Enumeration	5%	- Enumeration Techniques 1. SMB enumeration 2. NFS enumeration 3. User enumeration techniques - Enumeration Concepts 1. NetBIOS enumeration 2. SNMP enumeration 3. LDAP enumeration 4. NTP enumeration 5. SMTP enumeration
Cloud Computing	5%	- Cloud Security 1. Cloud security tools 2. Cloud security controls - Cloud Computing Attacks 1. Cloud cryptojacking 2. Cloud service hijacking 3. Insecure APIs - Cloud Computing Concepts 1. Cloud computing threats 2. Cloud deployment models 3. Cloud service models
Hacking Web Applications	10%	- Web Application Countermeasures - Web Application Concepts 1. Web application architecture 2. Web application vulnerabilities - Web Application Attacks 1. Injection attacks 2. Web API attacks 3. Authentication attacks 4. Authorization attacks - Web Application Security Tools
Hacking Web Servers	5%	- Web Server Attack Countermeasures - Web Server Attack Types 1. Web server password cracking 2. Web server misconfiguration 3. Website defacement - Web Server Concepts 1. Web server vulnerabilities 2. Web server architectures
Social Engineering	5%	- Social Engineering Techniques 1. Impersonation 2. Baiting 3. Phishing 4. Tailgating - Social Engineering Countermeasures - Social Engineering Concepts 1. Human-based attacks 2. Mobile-based attacks 3. Computer-based attacks
SQL Injection	5%	- SQL Injection Detection 1. Error-based SQL injection 2. Union-based SQL injection 3. Blind SQL injection - SQL Injection Countermeasures - SQL Injection Concepts 1. SQL injection types 2. SQL injection attack techniques
Session Hijacking	5%	- Session Hijacking Concepts 1. Session hijacking types 2. Session hijacking stages - Session Hijacking Countermeasures - Session Hijacking Techniques 1. Man-in-the-middle attacks 2. Cookie hijacking 3. Man-in-the-browser attacks 4. Session fixation
Malware Threats	5%	- Malware Analysis 1. Dynamic malware analysis 2. Static malware analysis - Malware Concepts 1. Types of malware 2. Virus and worm concepts 3. Trojan concepts - Malware Countermeasures
Denial-of-Service	5%	- DoS/DDoS Countermeasures - DoS/DDoS Attack Techniques 1. Amplification attacks 2. Ping of Death 3. SYN flood 4. Smurf attack - DoS/DDoS Concepts 1. DDoS attack types 2. DoS attack types 3. Botnets
Sniffing	5%	- Sniffing Countermeasures - Sniffing Techniques 1. Sniffing tools 2. Wiretap - Sniffing Concepts 1. MAC flooding 2. DHCP starvation 3. ARP spoofing
System Hacking	10%	- Password Cracking Techniques 1. Rainbow tables 2. Pass the Hash 3. Brute force attacks 4. Dictionary attacks - System Hacking Methodology 1. Gaining access 2. Covering tracks 3. Escalating privileges 4. Executing applications 5. Hiding files
Hacking Wireless Networks	5%	- Wireless Concepts 1. Wireless threats 2. Wireless encryption - Wireless Countermeasures - Wireless Attack Techniques 1. Wireless session hijacking 2. Wireless reconnaissance 3. WEP/WPA/WPA2 cracking 4. Wireless spoofing

The EC-COUNCIL 312-50 Exam, Question by Question

What is the purpose of the EC-COUNCIL Ethical Hacker Certified exam?

EC-COUNCIL Ethical Hacker Certified is an official exam run by EC-Council under exam code 312-50. Passing it awards the Certified Ethical Hacker certification, which sits at the Intermediate tier. It also counts toward related credentials such as CEH (Practical), CEH ANSI. Certified professionals remain in shorter supply than the market wants, which is precisely why this exam keeps showing up in conversations about better roles and better pay.

What is the question count and time allowance for the 312-50 exam?

The EC-COUNCIL Ethical Hacker Certified exam gives you 240 minutes to work through 125 questions. That is a tight ratio, and it punishes candidates who get emotionally attached to any single item. The fix is mechanical: answer what you know, flag what you do not, and keep moving. A few full-length timed runs in the Actual4Exams test engine, with its randomized question order, will calibrate your pace far better than untimed reading ever could.

How much is the 312-50 exam fee, and where is the passing line?

The official fee for EC-COUNCIL Ethical Hacker Certified is $1,199 USD, and 60-70% is what passing takes. The uncomfortable part: retakes cost the full $1,199 USD again, which makes preparation the cheapest line item in this whole project. Before booking, put yourself through repeated scored sessions with the Actual4Exams practice tests and compare results over time; a stable margin above the passing line, not a single lucky run, is when you are ready.

Who is eligible to sit the 312-50 exam?

At least 2 years of IT work experience recommended; completion of EC-Council official training or self-study accepted

Vendor rules do get revised, so treat this as your starting point and confirm the current eligibility details before booking via the official exam page.

Is a free trial of the 312-50 questions available?

It is. Actual4Exams publishes a free PDF demo of the EC-COUNCIL Ethical Hacker Certified material, so the product can prove itself before you pay. Your purchase then comes with 365 days of free updates, and once that period ends, extending the update service costs 50% of the regular price. The test engine software itself is verified malware-free and safe to install.

What if I fail the 312-50 exam, and how fast is delivery?

Actual4Exams stands behind the product with a 100% money-back guarantee under defined conditions. If you take the EC-COUNCIL Ethical Hacker Certified exam within 60 days of purchase and fail, you qualify for a full refund, provided the exam corresponds to your product. Sitting the exam within 3 days of purchase does not qualify, and neither do unused downloads, free materials, or expired orders; the candidate name must match the payer name. Submit a scanned enrollment slip and the official Score Report PDF within 2 days of the exam, and claims are resolved within 7 days. You may also choose an exchange instead of a refund: two other exam products of equal value, free, with the update service on your original purchase retained.

Delivery takes about a minute. Files unlock for instant download at payment and are emailed to you automatically; if 2 hours pass with nothing received, check spam and contact customer service. There is no installation limit, so the test engine can live on every device you own, phone included.

What topics are covered in the 312-50 exam?

EC-COUNCIL Ethical Hacker Certified breaks down into 18 official domains, led by Scanning Networks (10%), SQL Injection (5%), and Evading IDS, Firewalls, and Honeypots (5%). You will find the full topic-by-topic outline above on this page; use the weightings to budget your study hours where they pay back the most.

EC-COUNCIL Ethical Hacker Certified Sample Questions:

Question 1

what firewall evasion scanning technique make use of a zombie system that has low network activity as well as its fragment identification numbers?

A. Idle scanning
B. Decoy scanning
C. Packet fragmentation scanning
D. Spoof source address scanning

Question 2

What term describes the amount of risk that remains after the vulnerabilities are classified and the countermeasures have been deployed?

A. Deferred risk
B. Inherent risk
C. Residual risk
D. Impact risk

Question 3

You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/24 21 (msg: ""FTP on the network!"";)

A. A firewall IPTable
B. FTP Server rule
C. A Router IPTable
D. An Intrusion Detection System

Question 4

User A is writing a sensitive email message to user B outside the local network. User A has chosen to use PKI to secure his message and ensure only user B can read the sensitive email. At what layer of the OSI layer does the encryption and decryption of the message take place?

A. Transport
B. Application
C. Session
D. Presentation

Question 5

Which iOS jailbreaking technique patches the kernel during the device boot so that it becomes jailbroken after each successive reboot?

A. Untethered jailbreaking
B. Tethered jailbreaking
C. Semi-Untethered jailbreaking
D. Semi-tethered jailbreaking

Solutions:

Question 1
Answer: A

Question 2
Answer: C

Question 3
Answer: D

Question 4
Answer: D

Question 5
Answer: A

No help, Full refund!

Actual4Exams confidently stands behind all its offerings by giving Unconditional "No help, Full refund" Guarantee. Since the time our operations started we have never seen people report failure in the EC-COUNCIL 312-50 exam after using our products. With this feedback we can assure you of the benefits that you will get from our products and the high probability of clearing the 312-50 exam.

We still understand the effort, time, and money you will invest in preparing for your certification exam, which makes failure in the EC-COUNCIL 312-50 exam really painful and disappointing. Although we cannot reduce your pain and disappointment but we can certainly share with you the financial loss.

This means that if due to any reason you are not able to pass the 312-50 actual exam even after using our product, we will reimburse the full amount you spent on our products. you just need to mail us your score report along with your account information to address listed below within 7 days after your unqualified certificate came out.