GIAC logoGCIH

GIAC Certified Incident Handler (GCIH) practice exams

Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.

Exam code
GCIH
Cost
$999USD
Questions
106questions
Duration
240minutes
Passing score
69percent
Level
Mid level
Valid for
4years
Study guide
How to prepare
Format
1proctored exam

GCIH practice exams

No complete practice exam yet. A form is 106 questions apportioned to the official weightings, and a partial one would report a score that means nothing, so none is assembled until the questions are there.

Open now
Nothing is published for GCIH yet. The bank is being written from the official objectives.
Opens next
The first practice exam opens at 106 verified questions, spread across all 7 domains.

What the exam tests

Exam domains

GIAC publishes the GCIH objectives as an unweighted list of 15 outcome statements and does not publish percentages for them. The seven groupings above, and the percentages attached to them, are ours. We built them by clustering GIAC's published objective titles into related areas so the material can be studied in blocks. They are a study aid only, not an official GIAC weighting, and they should not be read as a prediction of how many exam items fall in each area.

The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.

7domains
  • Endpoint Attack and Post-Exploitation Detection21%
    0 verified
  • Passwords and Credential Security17%
    0 verified
  • Incident Response and Cyber Investigation16%
    0 verified
  • Network, Log, and Malware Investigation15%
    0 verified
  • Scanning, Mapping, and SMB Security13%
    0 verified
  • Web Application Attacks12%
    0 verified
  • Integrating LLMs with Offensive Operations6%
    0 verified

Open now. Nothing is published for GCIH yet. The bank is being written from the official objectives.

Opens next. The first practice exam opens at 106 verified questions, spread across all 7 domains.

Every question here is checked against the official page it cites before it serves, which is why the count grows slowly.

Where to focus: GIAC allows 4 hours for 106 questions, which averages a little over two minutes per item, so a fast index into your own notes matters more than rereading them. GIAC tags GCIH as a CyberLive certification and describes CyberLive as performance-based challenges in lab environments with real security tools, so practice running the tools rather than only reading about them.

What the exam actually asks you to do

A CyberLive exam. Some of the questions put you into a live machine with the real tools and score what you do there. GIAC does not publish how many of the 106 are hands-on, so neither do we.

Item formats

  • Multiple choice
  • Hands-on lab

The highlighted formats are the ones you cannot answer from memory alone. GIAC, GCIH certification details

GIAC’s free resources

Study from the source. Everything below is published by the vendor, free to read, and is what our own questions are written from:

Official GCIH exam page & objectives ↗

Keep reading

Every guide and cost breakdown, by vendor

Frequently asked questions

What does the GCIH exam cost?

GIAC's pricing page lists the GCIH certification attempt at $999. The same row lists an exam retake at $899, an attempt extension at $479, a certification renewal at $499, and a practice exam at $399. GIAC also notes that a missed proctored exam appointment incurs a $175 reseating fee.

Is the GCIH exam hands-on?

GIAC tags GCIH as a CyberLive certification. GIAC describes CyberLive as a hands-on exam format that replaces traditional multiple-choice testing with performance-based challenges in realistic lab environments, using virtual machines, real security tools, and authentic code. The exam format section lists 1 proctored exam, 106 questions, 4 hours, and a minimum passing score of 69%.

Are there prerequisites for GCIH?

GIAC's GCIH certification page does not list any prerequisite. Under How To Prepare it points to training in a variety of modalities including live training and OnDemand, practical work experience, and college level courses or self-paced study through other programs or materials.

How long is GCIH valid and how is it renewed?

GIAC's renewal pages state that you collect 36 credits over four years to keep your certification active, and that after renewing your certification is active for four more years. GIAC lists two renewal methods: collecting 36 CPEs, or retaking the exam. A renewal fee applies, listed at $499 for GCIH.