EC-Council Certified Incident Handler (ECIH)

EC-Council Certified Incident Handler (ECIH)

The EC-Council Certified Incident Handler (ECIH) certification is designed to enable the qualifying candidate to effectively use a well-structured incident handling process by demonstrating practical application and knowledge of critical incident handling in a network environment.

Focus

The EC-Council Certified Incident Handler (ECIH) certification focuses on Incident Response

Exam Duration

The EC-Council Certified Incident Handler (ECIH) exam duration is 90 minutes

Num of Question

The exam contains a total of 40 questions

Exam Fee

The exam fee is $250 USD.

Exam Validity

The CCRN-Pediatric certification is valid for 3 years.

Prior Certification

• EC-Council Certified Network Security Administrator (ECNFS)

Exam Format

The EC-Council Certified Incident Handler (ECIH) exam is a Multiple Choice, Fill in the Blank, and Hands-on Exercises

Passing Conditions

To pass EC-Council Certified Incident Handler (ECIH) exam, applicants must achieve a minimum score of Score of 70% in the exam

Who Should Take

A security professional who wants to demonstrate his knowledge in incident handling

• Incident Handler
• Security Analyst
• Network Administrator

Prerequisites

N/A

Or can substitute with certifications:

• EC-Council Certified Network Defender (ECND)
• EC-Council Certified Security Analyst (ECSA)

Certification Process

• Step 1: Meet the prerequisites
• Step 2: Register for the course and exam through the EC-Council website
• Step 3: Prepare for the exam
• Step 4: Take the exam
• Step 5: Achieve a passing score and get certified

Domains with Weights

• Domain 1: Incident Handling Process (24%): Understanding the incident handling process, incident identification, containment, eradication, recovery, and lessons learned.
• Domain 2: Incident Response and Management (21%): Understanding incident response policies and procedures, incident response planning, implementation, and testing.
• Domain 3: Threat Analysis and Risk Mitigation (20%): Understanding threat analysis, critical infrastructures, and risk assessment and mitigation techniques.
• Domain 4: Technical Security and Advanced Threat Defense (18%): Understanding advanced threat defense techniques, including threat hunting, endpoint security, and network traffic reconnaissance.
• Domain 5: Cloud Identity and Security (17%): Understanding cloud computing, cloud security, and cloud identity and access management.