The Certified Ethical Hacker (CEH) credential is one of the most recognized entry-to-mid-level penetration testing certifications in the industry. A common question among candidates preparing for it is not just what is on the exam, but who actually conducts it. The answer involves two distinct entities: the exam developer and the exam delivery provider. Understanding how these organizations interact helps candidates navigate scheduling, proctoring, and the overall test-taking logistics with fewer surprises.
EC-Council: The Exam Developer and Governing Body
The EC-Council (International Council of E-Commerce Consultants) is the organization that creates, maintains, and owns the CEH exam. As the certifying body, EC-Council is responsible for defining the exam objectives, writing and reviewing questions, setting the passing score, and determining the exam format. The current version, CEH v13, consists of a 4-hour multiple-choice exam with 125 questions [4]. EC-Council also administers the CEH Practical exam, a separate 6-hour hands-on assessment where candidates must solve 20 real-life challenges in a simulated environment [4][5].
EC-Council does not directly proctor or administer the multiple-choice exam at its own facilities. Instead, it focuses on content development and certification policy. This includes deciding eligibility requirements, such as the need for two years of work experience in information security or completion of official EC-Council training. The council also manages the application process for candidates who need to have their experience verified before they are approved to sit for the exam. Once a candidate is eligible, EC-Council authorizes them to schedule through its delivery partner.
Pearson VUE: The Exam Delivery Partner
While EC-Council writes the exam, Pearson VUE is the company responsible for delivering it. Pearson VUE is a global testing administrator that operates a network of authorized test centers in countries around the world. When a candidate registers for the CEH multiple-choice exam, they do so through the Pearson VUE platform, either online or by phone. The candidate selects a test center location, a date, and a time slot that works for their schedule.
In addition to in-person test centers, Pearson VUE provides online proctored delivery for the CEH exam, branded as OnVUE. This allows candidates to take the exam from their own location under remote proctor supervision, provided they meet the technical and environmental requirements, such as a stable internet connection, a webcam, a quiet room, and a workspace that meets proctoring standards. The proctor, whether in-person at a test center or remote via OnVUE, enforces EC-Council’s exam policies: they verify the candidate’s identity, ensure no unauthorized materials are present, and monitor the session for any irregularities.
It is important to note that Pearson VUE does not determine exam content, scoring, or passing criteria. Its role is strictly operational: secure delivery, identity verification, and reporting results back to EC-Council. Candidates who encounter scheduling issues, need to reschedule, or require special accommodations must work through Pearson VUE’s customer service system, while content-related inquiries or score disputes go through EC-Council.
CEH Practical Exam: A Different Delivery Model
The CEH Practical exam follows a separate delivery model from the multiple-choice exam. Rather than being administered through Pearson VUE, the practical exam is conducted in EC-Council’s own cyber range environment. Candidates who hold a valid CEH certification (the multiple-choice credential) are eligible to register for the practical through the EC-Council portal directly [4][5].
The practical exam lasts 6 hours and presents candidates with 20 challenges that require hands-on skills in areas such as reconnaissance, scanning, exploitation, and post-exploitation within a controlled lab setting [4]. Because this is a performance-based assessment, the proctoring and environment management are handled by EC-Council rather than a third-party testing center. Candidates who pass both the multiple-choice and the practical exams earn the CEH Master designation [4]. This distinction matters for candidates planning their certification path: they need to interact with two different systems and two different sets of logistics depending on which exam they are taking.
Step-by-Step: From Eligibility to Exam Day
- Verify eligibility with EC-Council: Confirm you meet the two-year experience requirement or have completed official EC-Council training. Submit an eligibility application on the EC-Council website if required.
- Receive exam authorization: EC-Council reviews and approves your application, then issues an authorization code or eligibility ID that is valid for a set period (typically three to six months).
- Create a Pearson VUE account: If you do not already have one, register on the Pearson VUE platform using your legal name as it appears on your identification.
- Schedule the exam: Log into Pearson VUE, select EC-Council as the testing program, enter your authorization details, and choose either a test center or the OnVUE remote proctoring option.
- Pay the exam fee: Payment is processed through Pearson VUE at the time of scheduling. Fees vary by region and currency.
- Complete pre-exam check-in: On exam day, arrive at the test center with two forms of valid ID, or log into OnVUE and complete the remote check-in process, including a workspace scan and face verification.
- Take the exam: Complete 125 multiple-choice questions within the 4-hour time limit under proctor supervision.
- Receive results: Pearson VUE provides a preliminary result. EC-Council then processes the official certification status through its candidate portal.
Key Logistics Candidates Should Know
Beyond knowing which organization does what, candidates benefit from understanding specific logistical details that can affect their exam experience. The following table summarizes the most important operational facts about the CEH multiple-choice exam delivery:
| Detail | Information |
|---|---|
| Exam developer | EC-Council |
| Exam delivery provider | Pearson VUE |
| Delivery methods | Test center (in-person) and OnVUE (remote proctored) |
| Number of questions | 125 multiple-choice [4] |
| Time limit | 4 hours [4] |
| Identification required | Two forms of valid, government-issued ID |
| Reschedule and cancellation | Handled through Pearson VUE; policies depend on timing relative to the exam date |
| Special accommodations | Requested through Pearson VUE with supporting documentation |
| Result reporting | Preliminary result from Pearson VUE; official status from EC-Council |
Candidates should pay close attention to the ID requirements. Pearson VUE enforces strict name matching between the registration and the identification presented at check-in. Discrepancies, even minor ones, can result in being turned away from the exam. For remote proctoring, candidates must also ensure their testing environment complies with OnVUE policies: no dual monitors, no unauthorized software running, and no other people in the room. Failure to comply with any of these rules can lead to the exam being terminated and the fee forfeited.
Practical Implications for Security Managers
Security managers evaluating the CEH certification for team members or as a hiring benchmark should understand the delivery structure for two reasons. First, the split between EC-Council as the content owner and Pearson VUE as the delivery agent means that exam security and integrity are handled at two layers. Pearson VUE brings standardized proctoring infrastructure used across many high-stakes certifications, while EC-Council controls what is actually being assessed. This separation is standard in the certification industry and does not inherently weaken or strengthen the credential, but it is worth knowing when comparing CEH against certifications that use alternative delivery models, such as those administered entirely in-house by the certifying body.
Second, the existence of the separate CEH Practical exam changes the assessment picture. The multiple-choice exam, delivered by Pearson VUE, tests knowledge recall and conceptual understanding. The practical exam, delivered by EC-Council in its own environment, tests applied skills. For roles that require hands-on penetration testing capability rather than just theoretical knowledge, managers should look for the CEH Master designation, which requires passing both [4][5]. Understanding who conducts each exam helps explain why the two assessments feel fundamentally different in format, environment, and what they validate.
FAQ
Does EC-Council directly proctor the CEH multiple-choice exam?
No. EC-Council develops the exam content and sets the policies, but the actual proctoring and test delivery are handled by Pearson VUE, either at a physical test center or through the OnVUE remote proctoring platform.
Can I take the CEH exam online from home?
Yes. Pearson VUE offers the OnVUE remote proctoring option for the CEH multiple-choice exam, allowing you to take it from a suitable location. You must meet technical requirements and comply with environmental rules, such as having a quiet room and a clean desk.
Who conducts the CEH Practical exam?
The CEH Practical exam is conducted by EC-Council directly in its own cyber range environment, not through Pearson VUE. Candidates register for it on the EC-Council portal after earning the standard CEH certification.
What happens if I have a scheduling issue with my CEH exam?
Scheduling, rescheduling, and cancellations for the multiple-choice exam are managed entirely through Pearson VUE’s system. EC-Council does not handle test center logistics. Contact Pearson VUE customer support for any changes to your appointment.
Does the CEH Practical exam also use Pearson VUE?
No. The practical exam uses EC-Council’s infrastructure. Only the multiple-choice exam is delivered through Pearson VUE.
Sources
[4] Certified Ethical Hacker (CEH) | #1 Ethical Hacking Certification — EC-Council (official)
[5] CEH Certification in 2026: Is the Certified Ethical Hacker Course Still the Gold Standard? — Eye on Annapolis (supporting context)