CEH Training Prerequisites: What You Should Know Before You Start

Author : mahesh k | Published On : 10 Nov 2026

While the Certified Ethical Hacker (CEH) curriculum covers offensive security from the ground up, jumping in without foundational knowledge can create a steep learning curve. Ethical hacking is built on understanding how systems and networks operate normally before attempting to probe or break them.

Here is a breakdown of the official eligibility prerequisites and the core technical domains you should master before starting CEH training.

1. Official EC-Council Eligibility Requirements

EC-Council provides two pathways to sit for the CEH exam (ANSI 312-50):

• Pathway A (Official Training): Complete an accredited EC-Council training course (in-person, live online, or self-paced via iLearn). This path requires no formal prior work experience application.
  Scribd+ 1

• Pathway B (Direct Exam / Self-Study): Skip official training by submitting an application proving at least two years of documented work experience in the Information Security domain, along with a non-refundable application fee.

2. Fundamental Technical Knowledge Base

Whether you take official training or self-study, having practical familiarity in these four key areas is essential for getting the most out of CEH hands-on labs:

A. Networking Concepts (CompTIA Network+ Level)

Networking is the primary landscape of ethical hacking. You cannot scan or exploit what you do not understand.

• OSI & TCP/IP Models: Understanding how data travels across layers (Data Link vs. Network vs. Transport).

• Common Protocols & Ports: Familiarity with standard port assignments (e.g., SSH 22, DNS 53, HTTP/HTTPS 80/443, SMB 445).

• IP Addressing & Subnetting: Reading CIDR notation (e.g., /24), calculating subnet boundaries, and understanding NAT vs. public IP structures.

• Network Traffic Flow: Concepts of handshakes (TCP 3-way handshake), packet headers, ARP resolution, and DNS queries.

B. Operating System Administration

CEH labs heavily utilize Kali Linux as the attacking machine and various Windows/Linux distributions as targets.

• Linux Command Line: Comfort navigating directories, altering file permissions (chmod), managing services (systemctl), and parsing outputs (grep, awk, cat, pipes).

• Windows Administration: Understanding Active Directory basics, SMB shares, Windows Registry, User Account Control (UAC), and Event Logs.

C. Foundational Security Concepts (CompTIA Security+ Level)

A baseline understanding of core security principles accelerates learning during threat analysis and vulnerability assessment modules.

• The CIA Triad: Confidentiality, Integrity, and Availability.

• Authentication Mechanisms: Passwords, hashes (NTLM, SHA-256), multi-factor authentication (MFA), and tokens.

• Core Cryptography: Public/Private keys, symmetric vs. asymmetric encryption, and SSL/TLS handshakes.

• Perimeter Controls: Fundamental operation of firewalls, IDS/IPS devices, and reverse proxies.

D. Scripting & Programming Awareness

While extensive software engineering experience is not required for CEH, basic code literacy is a significant advantage:

• Reading Script Syntax: Ability to inspect and understand basic Python, Bash, or PowerShell scripts to alter exploit parameters.

• Web Basics: Understanding HTML, JavaScript parameters, and basic database query logic (SQL) to grasp web application vulnerabilities like XSS and SQL Injection.

Prerequisite Self-Check Matrix

Recommended Self-Preparation Roadmap

1. Week 1–2: Master Networking Basics — Review TCP/IP protocols, port lists, and packet routing.

2. Week 3: Build Linux Terminal Comfort — Install VirtualBox/VMware and run a Kali or Ubuntu VM to practice basic terminal commands.

3. Week 4: Learn Packet Capture Basics — Download Wireshark, run a local capture, and observe standard HTTP and DNS requests.