Check us
GCIHEvery source behind our GCIH questions
Each of these is a published page from GIAC or from the standards body behind the topic. A question was written from the published objectives, then checked against one of them, and the passage it rests on is quoted beside the answer when you get there.
- 90pages
- pages
- 219of 219 questions cited
- of 219 questions cited
- 12source sites
- source sites
- 7exam domains covered
- exam domains covered
The pages themselves
Ordered by how many questions rest on each. The date is when that page was last re-fetched and read, not when the question was written.
- nistpubs / SpecialPublications / NIST.SP.800 61r3nvlpubs.nist.gov20 questions · checked 2026-09-08
- nistpubs / Legacy / SP / nistspecialpublication800 86nvlpubs.nist.gov11 questions · checked 2026-09-08
- techniques / T1003 / 001attack.mitre.org6 questions · checked 2026-09-08
- techniques / T1021 / 002attack.mitre.org6 questions · checked 2026-09-08
- llmrisk / llm01 prompt injectiongenai.owasp.org6 questions · checked 2026-09-08
- nistpubs / SpecialPublications / NIST.SP.800 83r1nvlpubs.nist.gov6 questions · checked 2026-09-08
- techniques / T1053 / 005attack.mitre.org5 questions · checked 2026-09-08
- techniques / T1543 / 003attack.mitre.org5 questions · checked 2026-09-08
- techniques / T1547 / 001attack.mitre.org5 questions · checked 2026-09-08
- techniques / T1055attack.mitre.org4 questions · checked 2026-09-08
- techniques / T1059 / 001attack.mitre.org4 questions · checked 2026-09-08
- techniques / T1550 / 003attack.mitre.org4 questions · checked 2026-09-08
- cheatsheets / SQL Injection Prevention Cheat Sheetcheatsheetseries.owasp.org4 questions · checked 2026-09-08
- nistpubs / legacy / sp / nistspecialpublication800 86nvlpubs.nist.gov4 questions · checked 2026-09-08
- techniques / T1048attack.mitre.org3 questions · checked 2026-09-08
- techniques / T1218 / 011attack.mitre.org3 questions · checked 2026-09-08
- techniques / T1548 / 002attack.mitre.org3 questions · checked 2026-09-08
- techniques / T1557 / 001attack.mitre.org3 questions · checked 2026-09-08
- cheatsheets / Credential Stuffing Prevention Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-09-08
- cheatsheets / Cross Site Request Forgery Prevention Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-09-08
- cheatsheets / File Upload Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-09-08
- cheatsheets / OS Command Injection Defense Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-09-08
- cheatsheets / Password Storage Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-09-08
- cheatsheets / Server Side Request Forgery Prevention Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-09-08
- sysinternals / downloads / sysmonlearn.microsoft.com3 questions · checked 2026-09-08
- book / man host discoverynmap.org3 questions · checked 2026-09-08
- book / scan methods udp scannmap.org3 questions · checked 2026-09-08
- book / vscannmap.org3 questions · checked 2026-09-08
- nistpubs / Legacy / SP / nistspecialpublication800 92nvlpubs.nist.gov3 questions · checked 2026-09-08
- nistpubs / Legacy / SP / nistspecialpublication800 94nvlpubs.nist.gov3 questions · checked 2026-09-08
- 800 63 4 / sp800 63bpages.nist.gov3 questions · checked 2026-09-08
- techniques / T1018attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1071attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1071 / 004attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1090attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1110 / 003attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1135attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1218attack.mitre.org2 questions · checked 2026-09-08
- techniques / T1552 / 001attack.mitre.org2 questions · checked 2026-09-08
- cheatsheets / Cross Site Scripting Prevention Cheat Sheetcheatsheetseries.owasp.org2 questions · checked 2026-09-08
- cheatsheets / Deserialization Cheat Sheetcheatsheetseries.owasp.org2 questions · checked 2026-09-08
- cheatsheets / DOM based XSS Prevention Cheat Sheetcheatsheetseries.owasp.org2 questions · checked 2026-09-08
- cheatsheets / Multifactor Authentication Cheat Sheetcheatsheetseries.owasp.org2 questions · checked 2026-09-08
- cheatsheets / Session Management Cheat Sheetcheatsheetseries.owasp.org2 questions · checked 2026-09-08
- llmrisk / llm062025 excessive agencygenai.owasp.org2 questions · checked 2026-09-08
- book / man os detectionnmap.org2 questions · checked 2026-09-08
- community / attacks / Path Traversalowasp.org2 questions · checked 2026-09-08
- sites / default / files / 2024 08 / Federal Government Cybersecurity Incident and Vulnerability Response Playbooks 508Ccisa.gov2 questions · checked 2026-09-08
- tlpfirst.org2 questions · checked 2026-09-08
- rfc / rfc9110rfc-editor.org2 questions · checked 2026-09-08
- techniques / T1003attack.mitre.org1 question · checked 2026-09-08
- techniques / T1003 / 002attack.mitre.org1 question · checked 2026-09-08
- techniques / T1003 / 003attack.mitre.org1 question · checked 2026-09-08
- techniques / T1041attack.mitre.org1 question · checked 2026-09-08
- techniques / T1046attack.mitre.org1 question · checked 2026-09-08
- techniques / T1055 / 001attack.mitre.org1 question · checked 2026-09-08
- techniques / T1105attack.mitre.org1 question · checked 2026-09-08
- techniques / T1110attack.mitre.org1 question · checked 2026-09-08
- techniques / T1110 / 001attack.mitre.org1 question · checked 2026-09-08
- techniques / T1110 / 004attack.mitre.org1 question · checked 2026-09-08
- techniques / T1528attack.mitre.org1 question · checked 2026-09-08
- techniques / T1550attack.mitre.org1 question · checked 2026-09-08
- techniques / T1550 / 002attack.mitre.org1 question · checked 2026-09-08
- techniques / T1552attack.mitre.org1 question · checked 2026-09-08
- techniques / T1552 / 004attack.mitre.org1 question · checked 2026-09-08
- techniques / T1552 / 005attack.mitre.org1 question · checked 2026-09-08
- techniques / T1558attack.mitre.org1 question · checked 2026-09-08
- techniques / T1558 / 003attack.mitre.org1 question · checked 2026-09-08
- techniques / T1568attack.mitre.org1 question · checked 2026-09-08
- techniques / T1571attack.mitre.org1 question · checked 2026-09-08
- cheatsheets / Authentication Cheat Sheetcheatsheetseries.owasp.org1 question · checked 2026-09-08
- cheatsheets / LLM Prompt Injection Prevention Cheat Sheetcheatsheetseries.owasp.org1 question · checked 2026-09-08
- cheatsheets / Logging Cheat Sheetcheatsheetseries.owasp.org1 question · checked 2026-09-08
- IAM / latest / UserGuide / id credentials access keysdocs.aws.amazon.com1 question · checked 2026-09-08
- llmrisk / llm022025 sensitive information disclosuregenai.owasp.org1 question · checked 2026-09-08
- llmrisk / llm052025 improper output handlinggenai.owasp.org1 question · checked 2026-09-08
- llmrisk / llm072025 system prompt leakagegenai.owasp.org1 question · checked 2026-09-08
- previous versions / windows / it pro / windows 10 / security / threat protection / auditing / event 4688learn.microsoft.com1 question · checked 2026-09-08
- troubleshoot / windows server / networking / inter process communication share null sessionlearn.microsoft.com1 question · checked 2026-09-08
- troubleshoot / windows server / networking / overview server message block signinglearn.microsoft.com1 question · checked 2026-09-08
- windows server / security / credentials protection and management / configuring additional lsa protectionlearn.microsoft.com1 question · checked 2026-09-08
- windows server / security / kerberos / kerberos authentication overviewlearn.microsoft.com1 question · checked 2026-09-08
- windows server / storage / file server / troubleshoot / detect enable and disable smbv1 v2 v3learn.microsoft.com1 question · checked 2026-09-08
- book / idlescannmap.org1 question · checked 2026-09-08
- book / man port scanning basicsnmap.org1 question · checked 2026-09-08
- book / osdetect usagenmap.org1 question · checked 2026-09-08
- book / scan methods connect scannmap.org1 question · checked 2026-09-08
- book / synscannmap.org1 question · checked 2026-09-08
- nistpubs / ai / NIST.AI.100 2e2025nvlpubs.nist.gov1 question · checked 2026-09-08
- rfc / rfc1035rfc-editor.org1 question · checked 2026-09-08
Practice GCIH for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free GCIH questions