EC-Council CBP exam-day guide
EC-Council CBP · Prepare for the day ahead.
Your checklist
Valid government-issued photo ID
Bring the original, unexpired ID whose name matches your registration exactly. If you use a different name form (middle name, maiden name, transliteration), resolve it with the provider before test day. Online-proctored and test-center deliveries may accept different ID sets, so confirm the accepted documents with the provider.
Exam appointment confirmation and candidate number
Have the confirmation email or booking reference available, plus login details for your candidate account. If you test online, you may need to authenticate in the proctoring platform before the session unlocks.
Know your exam blueprint and question count
Confirm the current number of questions, time limit, passing score, and whether the exam is linear or adaptive directly with EC-Council or your authorized training partner. Blueprints change; do not rely on forum posts. Write the timing math (seconds per question) on your scratch plan.
Confirm delivery mode and system requirements (online proctoring)
If testing remotely, run the provider's system check on the same machine and network you will use, test the webcam, microphone, and browser lockdown, and confirm the supported operating system. Requirements differ by proctoring vendor; confirm with the provider rather than assuming.
Test-center logistics plan
If testing in person, confirm the center address, arrival time, parking or transit, and what is allowed inside the testing room. Arrive earlier than the stated check-in time to absorb delays. Lockers and storage rules vary by center.
Clean, quiet, private test space (remote delivery)
Clear the desk of notes, phones, and second screens, remove wall clutter that could be mistaken for notes, and tell household members not to enter. Many proctors require a 360-degree room scan and a desk-surface scan; practice this once.
Review your weak-domain summary sheet
Bring one condensed page per major domain (for example, ethical hacking phases, reconnaissance, scanning, enumeration, exploitation concepts, web and wireless security, cryptography, and reporting). Use it for the final 24 hours only; do not learn new topics on test day.
Practice the exam interface and question types
Use the provider's official sample questions or interface demo to see how multiple-choice, multiple-response, and scenario items are presented and how to flag and revisit questions. Confirm whether review of flagged items is permitted before final submission.
Written time-management plan
Decide in advance how many minutes per question you can spend, when you will flag and move on, and how much buffer to reserve for final review. For scenario questions, plan to read the stem twice and identify the constraint (scope, authorization, evidence handling) before choosing.
Break and hydration plan
Confirm with the provider whether unscheduled or scheduled breaks are allowed, whether the clock stops, and what re-authentication is required after a break. Plan food, water, and medication around those rules; for remote delivery, leaving the camera view may end the session.
Authorization and scope mindset reminder
The exam is ethics-weighted. Before answering, check whether the action described is authorized in writing, within scope, minimally invasive, and documented. This habit resolves many scenario items faster than recall alone.
Backup plan for technical failure
Save the provider's support phone number and case email, know your booking reference, and confirm the policy for rescheduling or incident reporting if the platform fails. Do not troubleshoot alone mid-exam; contact the proctor or support first.
Plan the day
Confirm all logistics: appointment time, delivery mode, ID, system check, and test-center route. Re-read the official exam blueprint and map each objective to your notes. Take one full-length timed practice set under exam conditions and review every miss by domain, not by question. Build your one-page-per-domain summary sheets and a short list of the five concepts you most often confuse (for example, the difference between vulnerability scanning and exploitation, or between hashing and encryption). Stop adding new resources.
Do a light review of your summary sheets and the ethics/authorization and reporting concepts, which are heavily represented in scenario items. Re-run the system check if testing remotely and charge devices. Prepare ID, confirmation, water, and snacks according to the provider's rules. Confirm the start time in your local time zone and set two alarms. Sleep a full night; avoid cramming new material, and avoid heavy practice tests that could erode confidence.
Eat a normal meal, hydrate moderately, and arrive or log in early per the provider's check-in window. Do a final 15-minute pass over your summary sheets only. Close all other applications, silence phones, and clear the desk. During check-in, follow proctor instructions exactly and keep your ID visible. Take a few slow breaths and start with a planned pace rather than rushing the first questions.
Do a first pass at a steady pace, answering what you know and flagging anything that needs more than your budgeted time. Read scenario stems twice and identify the role you are playing (attacker, defender, auditor, consultant), the authorization status, and the constraint. Eliminate clearly wrong options, prefer the least invasive and best-documented action when ethics is at stake, and watch for absolutes like 'always' and 'never'. Answer every question; there is normally no penalty for guessing. Use remaining time to review flagged items and confirm no question is blank before submission.
Follow the provider's instructions for the score report and any next steps. Note which domains felt weakest while memory is fresh, in case a retake is needed, and confirm the retake policy and waiting period with the provider before scheduling anything.
Rules to check
Identification: present the original, valid, government-issued photo ID whose name matches your registration. Acceptable documents and name-matching rules vary by delivery mode and proctoring vendor, so confirm the exact requirements with the provider before test day.
Authorized testing only: no notes, books, phones, smart watches, second monitors, or unauthorized software in the testing environment. Remote sessions may require a room scan and desk scan; follow proctor directions and keep your face and hands visible.
No communication or recording: do not talk to others, screen-share, copy questions, or capture the exam in any form. Most providers treat sharing exam content as a conduct violation that can void your result.
Breaks: confirm with the provider whether breaks are permitted, whether the timer continues, and what re-authentication is required. Assume the clock does not pause unless the provider states otherwise.
Scoring: confirm the passing score, score scale, and whether the exam is linear or adaptive with the provider. Answer every question, since unanswered items are scored as incorrect and there is generally no penalty for guessing.
Technical incidents: if the platform fails, stop and contact the proctor or provider support immediately, and record the time and details. Do not attempt workarounds that could be read as a conduct violation; confirm the incident and reschedule policy with the provider.
Retake and result policy: confirm the retake eligibility window, fees, and waiting period with the provider. Do not rely on third-party claims about pass rates or score thresholds.
Integrity and confidentiality: keep exam content confidential, and treat any request to share questions as a violation. If you are unsure whether an action is allowed, ask the proctor before doing it.