GIAC · Intermediate
GIAC GCIH study guide
Exam domains and weights, what to study first, and the jobs asking for GIAC GCIH right now.
Exam domains and weights
How to study for GIAC GCIH
- Start with Incident Handling and Response. It is about 20% of the exam.
- Then Exploitation and Post-Exploitation (20%).
- Then Reconnaissance and Scanning (15%).
- Take a practice exam, find your weakest domain, and study that next. Repeat until you score comfortably above the pass mark.
Jobs that ask for GIAC GCIH
Create a free account to see how well each one matches you.
Free GIAC GCIH practice exams
Timed practice exams, a readiness score and a study plan that targets your weakest domains.
Create a free accountFrequently asked questions
What is on the GIAC GCIH exam?
GIAC GCIH covers 6 domains: Incident Handling and Response (20%), Exploitation and Post-Exploitation (20%), Reconnaissance and Scanning (15%), Password and Access Attacks (15%), Network and Web Attacks (15%), Evasion and Persistence (15%).
Which GIAC GCIH domain should I study first?
Incident Handling and Response carries the most weight at about 20% of the exam, so it earns the most study time. Then work down the list by weight and spend extra time on any domain where your practice scores are low.
What level is GIAC GCIH?
GIAC GCIH is an intermediate-level certification from GIAC.
Are there jobs that ask for GIAC GCIH?
Yes. ReconHire currently lists postings that mention GIAC GCIH, such as Incident Response Engineer 2 at Sophos; Cyber Security Engineer (m/f/d) at TYTAN Technologies GmbH; Staff Security Engineer, Security Operations at Goodleap.
Can I practice for GIAC GCIH for free?
Yes. ReconHire has free GIAC GCIH practice exams on every plan, with a readiness score and a study plan that targets your weakest domains.