GIAC GCIH

Once your order is placed, your GCIH practice questions reach your inbox within a minute — no shipping, no waiting around. Dumpkiller designed the whole GIAC Certified Incident Handler preparation experience around getting you studying today, with 330 questions ready on any device.

GIAC GCIH Exam Overview:

GIAC GCIH Exam Syllabus Topics:

Your GCIH Exam Questions, Answered

What is the GCIH exam all about?

The GIAC Certified Incident Handler exam (code: GCIH) is the official GIAC exam that leads to the GIAC Information Security certification. It sits at the Professional level of the GIAC certification track. It is also connected with related credentials such as SEC504: Hacker Tools, Techniques, and Incident Handling. Passing it proves to employers that your skills have been validated by GIAC itself, which is why the GCIH credential keeps showing up in job postings.

How many questions are in the GCIH exam, and how long does it take?

The GIAC Certified Incident Handler exam gives you 240 minutes to work through 106. Pacing matters more than most candidates expect, so before exam day, run at least one full timed session in the Dumpkiller test engine to learn how long you can afford per question. If an item stalls you, flag it and move on — coming back later beats burning five minutes on a single question.

What score do I need to pass the GCIH exam, and how much does it cost?

The passing score for the GIAC Certified Incident Handler exam is 69%, and the official registration fee is USD $999. Remember that a failed attempt means paying that fee in full again, so a timed self-assessment with Dumpkiller practice questions about a week before your exam date is a cheap way to confirm you are scoring comfortably above 69%.

Are there any prerequisites for the GCIH exam?

According to GIAC, the following applies: No formal prerequisite required, but knowledge of networking, operating systems, and security fundamentals is recommended.. Certification policies do change from time to time, so confirm the latest requirements on the official exam page at https://www.giac.org/certifications/certified-incident-handler-gcih before you register.

Can I try the GCIH practice questions before buying?

Yes. Dumpkiller offers a free GCIH PDF demo so you can review the question style, difficulty, and explanations before committing to anything. After purchase, your GIAC Certified Incident Handler material includes 365 days of free updates, and if your product expires after that, you can extend the update service at a 50% discount from your member zone.

What happens if I do not pass the GCIH exam, and how is my order delivered?

If you take the corresponding GCIH exam within 60 days of your purchase and do not pass, you can apply for a full refund under our 100% Money Back Guarantee, subject to a few conditions: the failed exam must be the one matching your purchase; sitting the exam within 3 days of purchase does not qualify, since that leaves too little preparation time; downloading the material without actually taking the exam does not qualify; free materials and expired orders are excluded; and the candidate name must match the payer name. To apply, send a scanned copy of your enrollment slip together with your official Score Report (PDF) within 2 days after the exam, and claims are processed within 7 days. If you would rather not take a refund, you can exchange your purchase for two free products of equal value while keeping the update service on the product you originally bought. As for delivery, everything is an instant download: your products are sent to your email within one minute of payment — contact customer service if nothing arrives within 2 hours — and there is no limit on the number of computers you can install the software on.

What topics are covered in the GCIH exam?

The official GIAC Certified Incident Handler syllabus is organized into 8 main domains. The first three are Attacking Passwords, Incident Handling and Computer Crime Investigation, and Endpoint Attack and Pivoting. For the full domain-by-domain breakdown, see the complete Exam Topics outline above.

GIAC Certified Incident Handler Sample Questions:

Question #1
John works as a C programmer. He develops the following C program:
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
int buffer(char *str) {
char buffer1[10];
strcpy(buffer1, str);
return 1;
}
int main(int argc, char *argv[]) {
buffer (argv[1]);
printf("Executed\n");
return 1;
}
His program is vulnerable to a __________ attack.

A. SQL injection
B. Denial-of-Service
C. Buffer overflow
D. Cross site scripting

Question #2
Which of the following is the method of hiding data within another media type such as graphic or document?

A. Spoofing
B. Cryptanalysis
C. Packet sniffing
D. Steganography

Question #3
Which of the following Nmap commands is used to perform a UDP port scan?

A. nmap -sN
B. nmap -sY
C. nmap -sU
D. nmap -sS

Question #4
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

A. Absinthe
B. ADMutate
C. Fragroute
D. Stick

Question #5
Adam, a novice computer user, works primarily from home as a medical professional. He just bought a brand new Dual Core Pentium computer with over 3 GB of RAM. After about two months of working on his new computer, he notices that it is not running nearly as fast as it used to. Adam uses antivirus software, anti- spyware software, and keeps the computer up-to-date with Microsoft patches. After another month of working on the computer, Adam finds that his computer is even more noticeably slow. He also notices a window or two pop-up on his screen, but they quickly disappear. He has seen these windows show up, even when he has not been on the Internet. Adam notices that his computer only has about 10 GB of free space available. Since his hard drive is a 200 GB hard drive, Adam thinks this is very odd.
Which of the following is the mostly likely the cause of the problem?

A. Computer is infected with the stealth kernel level rootkit.
B. Computer is infected with stealth virus.
C. Computer is infected with the Stealth Trojan Virus.
D. Computer is infected with the Self-Replication Worm.

Solutions: