Which certification should you actually sit?

CEH vs OSCP

Both are offensive-security credentials, and they are asked about together more than any other pair. They are not alternatives, and choosing by prestige is how people waste a year.

They test different things, so the honest answer depends on what you need next. CEH is a knowledge exam that covers breadth across the attack lifecycle and is the one hiring filters and HR systems in this region recognise most often. OSCP is a practical exam where you compromise machines and write the report, so it evidences that you can actually do the work. If you are entering the field or need a credential a recruiter will screen for, CEH first. If you already have hands-on ability and need to prove it, OSCP. If you have neither the breadth nor the hands-on time yet, neither: start on the roadmap.

What the exam actually asks of you

One is answered at a desk and one is answered on a target. That single difference drives everything else, including how you should prepare and how long it takes.

How employers read them

CEH is more widely recognised by non-technical screeners and appears in more job descriptions. OSCP carries more weight with the engineers who will interview you. Neither replaces a portfolio.

Order, if you want both

CEH then OSCP is the usual order, because the breadth makes the practical exam less punishing. Going the other way works too if you already have the hands-on background.

CCNA vs CCNP

These are levels of the same Cisco track rather than competing options, which is exactly why picking the wrong one wastes the most time.

CCNA is the associate level and the correct starting point unless you are already working in networks daily. CCNP is professional level and assumes CCNA-depth knowledge as a baseline, and it is two exams rather than one. Sitting CCNP without that grounding is the most common way people fail an expensive exam. If you are unsure which describes you, you want CCNA.

One exam versus two

CCNP requires a core exam plus a concentration exam, so it is a materially larger commitment in both study time and fees than the single CCNA exam.

Cisco does not require CCNA first

There is no formal prerequisite, which is why people attempt CCNP early. The absence of a rule is not an endorsement.

What the jump actually costs

The step is depth, not breadth: the same domains examined far harder. Budget for that rather than assuming it is one more module.

CEH v12 vs CEH v13 with AI

Two editions of the same EC-Council credential, and the older one is still widely sold and studied, so it is worth being direct about which to sit.

Sit v13 unless you have a specific reason not to. It is the current edition and adds AI-assisted technique across the phases, and a credential is worth most while it is the version being examined. v12 remains legitimate and is not withdrawn from anyone who already holds it, so there is no need to re-sit if you passed it. The one real case for v12 is an employer or sponsor whose scheme names that edition explicitly.

The credential is the same family

Both are Certified Ethical Hacker. The edition number describes the blueprint you were examined against, not a different qualification.

What v13 adds

AI-assisted technique is integrated across the phases rather than bolted on as one module, which is the substantive change between the editions.

If you already hold v12

Nothing is invalidated. Spend the money on the next credential in your track instead of re-sitting a newer edition of one you have.