Learn mode
Learn as you go
Choose an answer, reveal the marked key, and move through the bank at your own pace.
647 questions open free
Start guided practiceComputer Hacking Forensic Investigator (CHFI)
Digital forensics end to end: the investigation process and legal considerations, acquiring and analysing disk, memory, network and cloud evidence, and producing defensible reports.
Computer Hacking Forensic Investigator (CHFI) is EC-Council's professional-level cybersecurity certification, sat as exam 312-49. The exam runs for 4 hours and presents up to 150 questions, with a pass mark of varies by exam form (typically 60–85%). It costs US$1,199 at the standard rate.
The published exam guide lists 9 sections but does not assign public weightings, so plan to cover each in similar depth rather than betting on one being dominant.
Confirm these details on the official EC-Council page before booking — vendors adjust format and pricing without notice.
Some forms include unscored trial questions
Standard rate, before local taxes
The published exam guide for 312-49, in the vendor's own order.
01Computer Forensics in Today’s World
02Investigation Process
03Hard Disks and File Systems
04Data Acquisition and Duplication
05Anti-Forensics Techniques
06Windows, Linux and Mac Forensics
07Network and Web Forensics
08Cloud and Mobile Forensics
09Malware Forensics and Reporting
Official training or two years of documented information security experience.
Professional level — Advanced credentials covering design, scale and trade-off decisions.
Start with 647 complete questions in the 312-49 bank. Free progress and bookmarks stay in this browser.
Choose an answer, reveal the marked key, and move through the bank at your own pace.
647 questions open free
Start guided practiceKeep answers hidden on the clock and review every miss after you finish the public set.
Free timed practice
Open timed mockAll questions and practice tests are free.
No sign-up, payment or access expiry. Your progress stays in this browser.
Questions, answered
Clear answers about the exam, the study experience, and what to expect before you begin.
EC-Council lists up to 150 questions, to be completed in 4 hours. Question counts can vary slightly between exam forms, and unscored trial questions are sometimes included.
Varies by exam form (typically 60–85%). Confirm the current figure on the official exam page before booking, as vendors adjust cut scores when an exam form is refreshed.
The standard price is US$1,199. Local pricing, taxes and any retake policy vary by region, so check the official page for the figure that applies to you.
Official training or two years of documented information security experience.
The exam guide covers Computer Forensics in Today’s World, Investigation Process, Hard Disks and File Systems, Data Acquisition and Duplication and Anti-Forensics Techniques, plus 4 further domains. The full weighted breakdown is listed above.
Yes — this exam has 647 practice questions available here, each with the correct answer marked.