OpenExamsFREE PRACTICE — ANY EXAM

Computer Hacking Forensic Investigator — Requirements & Free Practice

US · License preparation

100 free questions · Answer explanations · No signup required

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Loading selected examination banks…

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

Computer Hacking Forensic Investigator

Licensing authority: EC-Council · Application information

Initial by examination
Computer Hacking Forensic Investigator
Agreements
Candidates must read, understand and accept the Non-Disclosure Agreement and Candidate Certification Agreement before attempting the examination.
Application And Scheduling
Application approval lasts three months, during which the voucher must be purchased directly from EC-Council. Register and schedule using the issued voucher; complete testing within one year of voucher release. Incomplete applications without the requested response for 90 days are rejected. Experience is checked with nominated verifiers. Voucher details must match the approved eligibility application. For VUE delivery, an EC-Council eligibility number is required to schedule, pay and sit; appointments may be made in advance or on the intended test day, subject to availability.
Eligibility
Complete official CHFI training through an accredited training center, online live/iClass, or approved academic learning; alternatively, obtain EC-Council approval based on at least two years of Information Security work experience, a completed eligibility application, verifiable experience and a non-refundable USD100 application fee. Mere purchase of e-courseware is not training eligibility. The handbook also identifies previous-version credential holders as eligible; that existing-holder option is recorded as context and is outside this initial-qualification investigation.
Minors
A minor needs written parent/legal-guardian consent or indemnity and a supporting letter from a nationally accredited institution of learning; legal minority is determined by country of residence/origin.
Scope
One proctored multiple-choice CHFI knowledge examination under the currently adopted v4 blueprint; course labs do not create a separate practical-examination leaf. No renewal route is investigated.

Computer Hacking Forensic Investigator

Provider
VUE and EC-Council Test Centers
Format
Proctored multiple choice
Exam questions
Total questions: 150.
Time limit
4 hours
Passing score
60% to 85%, set separately for each examination form
Examination outline
  • Forensic Science (15%)
    • Cybercrime types and forensic investigation challenges
    • Computer forensics fundamentals and investigator roles and responsibilities
    • Data acquisition concepts and rules
    • Database, cloud, email, IoT, malware and dark web fundamentals
  • Regulations, Policies and Ethics (10%)
    • Rules and regulations for search, seizure and examination of evidence
    • Laws and legal issues affecting forensic investigations
    • Computer forensics standards and best practices
  • Digital Evidence (18%)
    • Characteristics and types of digital evidence
    • Desktop and mobile operating systems
    • Log types and importance to forensic investigations
    • Encoding standards and file types
    • WAF and MySQL database fundamentals
  • Procedures and Methodology (17%)
    • Forensic investigation process
    • Data acquisition methodology
    • eDiscovery process
    • Image and evidence examination and event correlation
    • Dark web and malware forensics methodology
  • Digital Forensics (29%)
    • Anti-forensic techniques and countermeasures
    • Windows, Linux and Android file analysis
    • Network logs and network attack investigations
    • Web application logs and attack investigations
    • Database, dark web, email, cloud and IoT forensics
    • Static and dynamic malware analysis in a sandbox
    • Malware behavior, persistence and fileless malware analysis
    • Digital forensics using Python
  • Tools/Systems/Programs (11%)
    • Tools for Windows, Linux, Mac, Android and iOS investigations
    • Tools for MSSQL, MySQL, Azure, AWS, email and IoT investigations
    • Tools for network, web application, cloud, social media and insider threat forensics
Examination sources