NEWEST GIAC CERTIFIED INCIDENT
HANDLER (GCIH) EXAM | Q&A WITH
RATIONALES
1. What is the GIAC Certified Incident Handler
(GCIH) certification designed to validate?
A) Skills in network architecture design
B) The ability to detect, respond to, and resolve
computer security incidents using a wide range
of essential security skills
C) Advanced exploit development skills
D) IT governance and compliance knowledge
Correct answer: B
Rationale: The GCIH certification validates a
practitioner's ability to detect, respond to, and
resolve computer security incidents using a
wide range of essential security skills .
2. Which organization administers the GCIH
certification?
A) CompTIA
,B) EC-Council
C) SANS Institute / GIAC
D) ISACA
Correct answer: C
Rationale: The GCIH certification is
administered by the Global Information
Assurance Certification (GIAC), a division of the
SANS Institute .
3. What is the official training course associated
with the GCIH certification?
A) SEC560: Enterprise Penetration Testing
B) SEC504: Hacker Tools, Techniques, and
Exploits
C) FOR610: Reverse-Engineering Malware
D) SEC660: Advanced Penetration Testing
Correct answer: B
Rationale: The official training course for the
GCIH certification is SANS SEC504: Hacker
Tools, Techniques, Exploits, and Incident
Handling .
,4. How many questions are on the GCIH exam?
A) 82 questions
B) 106 questions
C) 150 questions
D) 60 questions
Correct answer: B
Rationale: The GCIH certification exam consists
of 106 questions .
5. What is the duration of the GCIH exam?
A) 2 hours
B) 3 hours
C) 4 hours
D) 6 hours
Correct answer: C
Rationale: The GCIH exam is 4 hours long .
, 6. What is the minimum passing score for the
GCIH exam?
A) 65%
B) 69%
C) 70%
D) 73%
Correct answer: B
Rationale: The minimum passing score for the
GCIH exam is 69% .
7. What is the format of the GCIH exam?
A) Performance-based tasks only
B) Multiple-choice questions only
C) Multiple-choice and performance-based
questions
D) Essay and oral
Correct answer: B
Rationale: The GCIH exam is a proctored exam
consisting of multiple-choice questions .
HANDLER (GCIH) EXAM | Q&A WITH
RATIONALES
1. What is the GIAC Certified Incident Handler
(GCIH) certification designed to validate?
A) Skills in network architecture design
B) The ability to detect, respond to, and resolve
computer security incidents using a wide range
of essential security skills
C) Advanced exploit development skills
D) IT governance and compliance knowledge
Correct answer: B
Rationale: The GCIH certification validates a
practitioner's ability to detect, respond to, and
resolve computer security incidents using a
wide range of essential security skills .
2. Which organization administers the GCIH
certification?
A) CompTIA
,B) EC-Council
C) SANS Institute / GIAC
D) ISACA
Correct answer: C
Rationale: The GCIH certification is
administered by the Global Information
Assurance Certification (GIAC), a division of the
SANS Institute .
3. What is the official training course associated
with the GCIH certification?
A) SEC560: Enterprise Penetration Testing
B) SEC504: Hacker Tools, Techniques, and
Exploits
C) FOR610: Reverse-Engineering Malware
D) SEC660: Advanced Penetration Testing
Correct answer: B
Rationale: The official training course for the
GCIH certification is SANS SEC504: Hacker
Tools, Techniques, Exploits, and Incident
Handling .
,4. How many questions are on the GCIH exam?
A) 82 questions
B) 106 questions
C) 150 questions
D) 60 questions
Correct answer: B
Rationale: The GCIH certification exam consists
of 106 questions .
5. What is the duration of the GCIH exam?
A) 2 hours
B) 3 hours
C) 4 hours
D) 6 hours
Correct answer: C
Rationale: The GCIH exam is 4 hours long .
, 6. What is the minimum passing score for the
GCIH exam?
A) 65%
B) 69%
C) 70%
D) 73%
Correct answer: B
Rationale: The minimum passing score for the
GCIH exam is 69% .
7. What is the format of the GCIH exam?
A) Performance-based tasks only
B) Multiple-choice questions only
C) Multiple-choice and performance-based
questions
D) Essay and oral
Correct answer: B
Rationale: The GCIH exam is a proctored exam
consisting of multiple-choice questions .
