Use this quick start guide to collect all the information about GIAC GCIH Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the GIAC Incident Handler (GCIH) exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual GIAC Certified Incident Handler (GCIH) certification exam.
The GIAC GCIH certification is mainly targeted to those candidates who want to build their career in Cyber Defense domain. The GIAC Certified Incident Handler (GCIH) exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of GIAC GCIH.
GIAC GCIH Exam Summary:
| Exam Name | GIAC Certified Incident Handler (GCIH) |
| Exam Code | GCIH |
| Exam Price | $999 (USD) |
| Duration | 240 mins |
| Number of Questions | 106 |
| Passing Score | 69% |
| Books / Training | SEC504: Hacker Tools, Techniques, and Incident Handling |
| Schedule Exam | PearsonVUE |
| Sample Questions | GIAC GCIH Sample Questions |
| Practice Exam | GIAC GCIH Certification Practice Exam |
GIAC GCIH Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Attacking Passwords | - The candidate will demonstrate a detailed understanding of how to conduct password attacks. |
| Detecting Evasive and Post-Exploitation Techniques | - The candidate will be able to identify and defend against an attacker already in an environment, discover methods used to establish persistence, hide their presence, and achieve actions on objectives. |
| Detecting Exploitation and Covert Communications Tools | - The candidate will demonstrate an understanding of how to identify and defend against the use of exploitation tools such as Metasploit and covert communications tools such as netcat. |
| Endpoint Attack and Pivoting | - The candidate will demonstrate an understanding of how to identify and defend against endpoint specific attacks and pivoting in an environment. |
| Exploiting Insecure Web Application References | - The candidate will demonstrate an understanding of common methods for exploiting insecure web application references. |
| Incident Response and Cyber Investigation | - The candidate will demonstrate an understanding of the PICERL and DAIR incident handling processes and incident response challenges. |
| Integrating LLMs with Offensive Operations | - The candidate will demonstrate an understanding of LLM prompt processing, risks, common attack methods, and defend against AI specific attacks in modern environments. |
| Malware and AI Assisted Investigations | - The candidate will demonstrate an understanding of the steps necessary to perform basic basic malware analysis and understand how AI can be used to augment investigative efforts. |
| Network and Log Investigations | - The candidate will demonstrate an understanding of the steps necessary to perform effective investigations of network and log data. |
| Scanning and Mapping | - The candidate will demonstrate an understanding of how to discover and map networks and hosts, reveal services and vulnerabilities, and identify and defend against scanning. |
| Securing Credentials and Data in the Cloud | - The candidate will demonstrate an understanding of how to identify, defend against, and mitigate password attacks and insecure storage in cloud-based environments. |
| SMB Security | - The candidate will demonstrate an understanding of SMB features, vulnerabilities, how to discover and access shares, and how to secure the service. |
| Understanding Passwords | - The candidate will be able to identify password hashes, understand password weaknesses, and secure passwords. |
| Web Application API Attacks | - The candidate will demonstrate the basics of interacting with and abusing access to web APIs. |
| Web Application Injection Attacks | - The candidate will demonstrate an understanding of common web application injection attacks. |
To ensure success in GIAC GCIH certification exam, we recommend authorized training course, practice test and hands-on experience to prepare for GIAC Incident Handler (GCIH) exam.
