CertPath
IntermediateEC-CouncilCEH v13

CEH in Johannesburg

South Africa · Africa

Avg salary uplift: +$15,000/yrExam: $1199 USDRenews every 3 years
Find courses →

What is CEH?

The Certified Ethical Hacker (CEH) v13 from EC-Council is one of the most recognized offensive security certifications in the world, and it carries serious weight in Johannesburg's rapidly expanding cybersecurity sector. As South African enterprises — from financial institutions in Sandton to government agencies and mining conglomerates — invest heavily in cyber defense, the demand for certified ethical hackers has surged. CEH v13 covers penetration testing, network scanning, malware threats, cryptography, and AI-driven attack techniques, validating your ability to think like an attacker. For IT professionals in Johannesburg looking to move from generalist roles into specialized security positions, this certification is a credible and employer-recognized entry point.

Exam details

Exam cost
$1199 USD
Duration
240 min
Passing score
70
Renewal
Every 3 yrs

Prerequisites: 2 years IT security experience or EC-Council official training

Is CEH worth it in Johannesburg?

With an average IT salary of around $32,000 per year in Johannesburg, the CEH v13 certification's $1,199 exam fee pays for itself quickly. Certified professionals report an average salary uplift of $15,000 annually — nearly a 47% increase — pushing total compensation closer to $47,000. Johannesburg hosts the headquarters of major banks, telecoms, and multinational firms, all of which are actively hiring for roles like penetration tester, security analyst, and ethical hacker. The certification renews every three years, keeping your credential current as the threat landscape evolves. Given the relatively low barrier to entry — two years of IT security experience or EC-Council training — the ROI case for Johannesburg-based professionals is compelling.

12-week study plan

Weeks 1–4

Foundations and Reconnaissance

  • Study CEH v13 modules 1–5: ethical hacking fundamentals, footprinting, scanning networks, and enumeration
  • Set up a home lab using VirtualBox or VMware with Kali Linux and vulnerable targets like Metasploitable
  • Complete 50+ practice questions daily focused on reconnaissance techniques and OSI model concepts

Weeks 5–8

Attack Techniques and Exploitation

  • Work through CEH v13 modules 6–14: system hacking, malware, sniffing, social engineering, and DoS attacks
  • Practice hands-on exploitation using tools covered in the exam: Nmap, Metasploit, Wireshark, and Burp Suite
  • Take a full-length timed mock exam to identify weak domains and adjust your study focus accordingly

Weeks 9–12

Advanced Domains, Review, and Exam Readiness

  • Cover remaining modules: web application hacking, SQL injection, cryptography, cloud security, and AI threats introduced in v13
  • Run two to three full practice exams under real conditions — 125 questions, four-hour time limit
  • Review flagged questions, revisit EC-Council's official courseware for any failing domains, and confirm your Pearson VUE test center booking in Johannesburg

Recommended courses

coursera

CEH Professional Certificate

Professional certificates & degrees

View on Coursera

pluralsight

CEH Learning Path

Tech skills platform — monthly subscription

View on Pluralsight

udemy

CEH Complete Course

by Top-rated instructor

4.7
(12,400)

One-time purchase, lifetime access

View on Udemy

Exam tips

  • 1.Know your tools cold — CEH v13 questions frequently ask which specific tool performs a given function. Memorize the primary use case for Nmap, Netcat, Metasploit, John the Ripper, Hashcat, Aircrack-ng, and Burp Suite rather than just knowing they exist.
  • 2.Prioritize the EC-Council methodology over real-world habits. The exam expects you to follow EC-Council's defined phases of ethical hacking in order — footprinting, scanning, enumeration, vulnerability analysis, exploitation. Answer questions from within that framework.
  • 3.Study the AI and machine learning attack content added in v13 specifically. This is new territory that older study guides don't cover, and EC-Council has confirmed these domains appear on the updated exam.
  • 4.Practice reading packet captures and interpreting Wireshark output. Several scenario-based questions present network traffic data and ask you to identify the attack type or protocol in use — pure memorization won't help here.
  • 5.Time management is critical across 125 questions in four hours. Flag and skip questions you're uncertain about on your first pass, then return to them. Spending too long on a single question is the fastest way to run out of time before reaching domains you know well.

Frequently asked questions

Other certifications in Johannesburg