CEH Passing Score: Understanding the Pearson VUE Scaled Score
What Is the CEH Passing Score?
The Certified Ethical Hacker (CEH) exam is a rigorous test of your cybersecurity skills. To pass, you need a score of 70% on a scaled scoring system. This is not a simple percentage of correct answers; it's a scaled score that accounts for varying difficulty levels across different exam forms. The exam is administered by Pearson VUE, and the final score is reported on a scale from 300 to 1000, with 700 being the passing mark.
How Scaled Scoring Works
Scaled scoring is a method used to ensure fairness across different exam versions. Each CEH exam form may have slightly different questions, some harder than others. To make scores comparable, Pearson VUE uses a statistical model to adjust raw scores (the number of questions you answered correctly) into a scaled score. This means that your scaled score reflects your performance relative to the difficulty of the questions you received. This topic pairs well with CISA Passing Score: ISACA Scaled Scoring for Auditors.
For example, if you get a more difficult set of questions, you might need fewer correct answers to achieve a scaled score of 700. Conversely, if your set is easier, you'll need more correct answers. This ensures that a score of 700 represents the same level of knowledge regardless of the exam form.
How Many Questions Can You Miss?
The CEH exam consists of 125 multiple-choice questions, and you have 4 hours to complete it. To pass, you need a scaled score of 700, which corresponds to roughly 70% of the questions correct. That means you can miss approximately 37-38 questions (if all questions are weighted equally). However, because of the scaling, the exact number can vary. In practice, it's wise to aim for at least 80% correct to be safe, as some questions may be experimental (unscored) and the scaling can affect the margin. Looking for more detail? See CompTIA Security+ Passing Score: The 750 Number Explained.
Worked Example
Let's say you take the exam and answer 87 questions correctly out of 125. That's a raw score of 69.6%, which might be just below the passing threshold. But if your exam form was particularly challenging, the scaling might adjust your score to a 710, giving you a pass. Conversely, if you answer 88 correctly (70.4%) but your form was easier, you might still get a 690 and fail. This illustrates why it's not just about counting correct answers.
Strategic Implications: Prioritize Domains to Bank Safe Marks
To maximize your chances of passing, you need to focus your study on the domains that carry the most weight and where you can reliably score points. The CEH exam covers 20 domains, but they are not all equal. According to EC-Council's blueprint, the top five weighted domains are:
| Domain | Weight |
|---|---|
| Information Security Threats and Attack Vectors | 17% |
| Information Security Technologies | 15% |
| Information Security Programs | 10% |
| Network and Perimeter Hacking | 10% |
| Web Application Hacking | 10% |
These five domains together account for 62% of the exam. By prioritizing these, you can secure a large portion of your score. For instance, if you master the top two domains (32% combined), you could potentially answer enough questions correctly to pass, even if you struggle with other areas. Want to go further? CISSP Passing Score: What a 700 on a 1000-Point Scale Really Means is a good next step.
Where to Focus Your Effort
- Information Security Threats and Attack Vectors: Focus on understanding malware, social engineering, and attack types. These are fundamental and often straightforward.
- Information Security Technologies: Learn about firewalls, IDS/IPS, VPNs, and encryption. These are technical but predictable.
- Network and Perimeter Hacking: Practice scanning, enumeration, and system hacking techniques. Hands-on labs help here.
- Web Application Hacking: Know OWASP Top 10 and common vulnerabilities like SQL injection and XSS.
- Information Security Programs: Understand policies, risk management, and compliance frameworks.
Don't Neglect the Remaining 38%
While the top domains are crucial, you can't ignore the rest. The other 15 domains cover topics like cloud security, IoT, and cryptography. Even if you don't aim for mastery, a basic understanding can earn you valuable points. Aim for at least 50% in these areas to supplement your strong performance in the top domains.
The free study plans and readiness checks hub helps you build a schedule around your available time and quickly identify which of those remaining topics needs the most work.
Practical Tips to Boost Your Score
- Take practice exams to get familiar with the question format and time pressure. Use them to identify weak areas.
- Focus on scenario-based questions: CEH questions often present real-world scenarios. Practice applying concepts to situations.
- Review the official CEH study guide and use the exam blueprint as a checklist.
- Join study groups to discuss tricky topics and gain insights from others.
- Manage your time: With 125 questions in 4 hours, you have about 1.9 minutes per question. Don't get stuck; flag and move on.
Final Thoughts
Understanding the CEH passing score is more than just knowing the number 700. It's about recognizing how scaled scoring works and using that knowledge to your advantage. By focusing your study on high-weight domains, you can bank safe marks and reduce the pressure on the rest of the exam. Remember, a strategic approach can make the difference between a pass and a fail.
The exam catalogue has your certification covered — find it and start practising.