EC-Council · Official Blueprint · Last reviewed May 2026
The official EC-Council CHFI exam covers 13 domains. The vendor does not publish percentage weights for these domains — treat each as an equal part of the exam blueprint.
Covers the topics, concepts, and applied skills examined under the Computer Forensics Investigation Process domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Computer Forensics Investigation Process questionsCovers the topics, concepts, and applied skills examined under the Computer Forensics Fundamentals and Process domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Computer Forensics Fundamentals and Process questionsCovers the topics, concepts, and applied skills examined under the Storage Forensics and File System Analysis domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Storage Forensics and File System Analysis questionsCovers the topics, concepts, and applied skills examined under the Incident Response and First Responder Skills domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Incident Response and First Responder Skills questionsCovers the topics, concepts, and applied skills examined under the Computer Forensics Lab domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Computer Forensics Lab questionsCovers the topics, concepts, and applied skills examined under the Evidence Acquisition and Duplication domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Evidence Acquisition and Duplication questionsCovers the topics, concepts, and applied skills examined under the OS and Network Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice OS and Network Forensics questionsCovers the topics, concepts, and applied skills examined under the OS and File System Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice OS and File System Forensics questionsCovers the topics, concepts, and applied skills examined under the Application, Email and Cloud Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Application, Email and Cloud Forensics questionsCovers the topics, concepts, and applied skills examined under the Mobile and Malware Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Mobile and Malware Forensics questionsCovers the topics, concepts, and applied skills examined under the Network and Cloud Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Network and Cloud Forensics questionsCovers the topics, concepts, and applied skills examined under the Database and Application Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Database and Application Forensics questionsCovers the topics, concepts, and applied skills examined under the Malware Forensics domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Malware Forensics questionsThe vendor does not currently publish percentage weights for these domains, so Courseiva does not rank them by weight.
Work through each domain systematically — cover fundamentals first, then applied and scenario-based topics.
Never skip a domain regardless of perceived importance. Full coverage is required to pass.
Use Courseiva domain analytics to track your accuracy per domain and route extra questions to your weak areas.
Courseiva tracks your accuracy per domain automatically and routes you toward your weakest areas — no manual configuration needed.