What Are Domains Covered by ECIH Test?

Overall, this certification exam has nine domains that have a specific weightage in the official validation. The candidates who take this exam need to master the following topics:

• First response and forensic readiness 13%.
• Application-level incidents 8%;
• Mobile & network incidents 16%;
• Process handling 14%;
• Cloud environment incidents 8%;
• Malware incidents 8%;
• Email security incidents 10%;
• Insider threats 7%;
• Incident handling and response 16%;

The content of the exam for the EC-Council Certified Incident Handler certification revolves around nine domains. They all have different weights in the content. The specific knowledge and skills as well as percentage share of questions related to each subject area of EC-Council 212-89 are outlined below:

• Incidents Occurred in a Cloud Environment (8%). The last topic focuses on Cloud computing threats; eradication; security in Cloud computing; recovery in Cloud.
• Malware Incidents (8%). In the framework of this area, the students are required to be aware of malware, malware incident triage, as well as malicious code.
• Insider Threats (7%). To deal with the questions from this domain, the learners should be conversant with insider threats; eradication; employee monitoring tools; detecting and preventing insider threats.
• Forensic Readiness and First Response (13%). This subject area encompasses an understanding of digital evidence; forensic readiness; computer forensics; volatile evidence; preservation of electronic evidence anti-forensics; static evidence.
• Network and Mobile Incidents (16%). This section comes with the individuals’ knowledge of inappropriate usage; network attacks; Denial-of-Service; unauthorized access; wireless network; eradication of mobile incidents and recovery; mobile platform vulnerabilities and risks.
• Application Level Incidents (8%). The objective entails your knowledge of web application threats and vulnerabilities; web attacks; eradication of web applications.
• Process Handling (14%). Within this domain, the applicants need to demonstrate competency in security auditing; incident handling and response; incident readiness; forensic investigation; security incidents; eradication and recovery.
• Email Security Incidents (10%). Here the examinees need to show good comprehension of email security as well as familiarity with deceptive and suspicious email; email incident; phishing email.
• Incident Response and Handling (16%). This topic requires a solid understanding of information security; threat intelligence; computer security; risk management; incident handling; security policies.

Reference: https://www.eccouncil.org/programs/ec-council-certified-incident-handler-ecih/

Becoming Certified Incident Handler

If you opt to become a Certified Incident Handler, your job scope will fall under one of Incident Management Team (IMT) or Incident Response Team (IRT). The ECIH certificate is meant to equip you with the skills you need to deal with and manage computer security issues within a certain information system. In the modern IT environments, a Certified Incident Handler is expected to become a knowledgeable professional who can manage different kinds of incidents and understand the methodologies of risk assessment, including the common policies associated with incident handling. In many organizations, an incident handler will be responsible for creating incident handling policies & dealing with different forms of incidents for security comprising insider attack threats and incidents for malicious code. Therefore, getting certified will earn you recognition as the designated and highly respected incident handler in your company.

Employment Opportunities

After completing the EC-Council 212-89 exam and obtaining the ECIH certification, you will become a skilled specialist who is capable of implementing risk evaluation methodologies as well as applying various policies and laws connected with incident handling. An Incident Handler can tackle various kinds of computer security incidents, including malicious code incidents, network security incidents, or insider attack threats. Whether you want to launch a career in the cybersecurity field or simply improve your performance in your current position, EC-Council ECIH will equip you with the sufficient knowledge and skills to detect, analyze, and remedy security hazards to prevent reappearance in the future. The certified professionals eligible to apply for the following positions:

• Cyber Forensic Investigator
• IT Professionals and Manager
• Penetration Tester
• Network Administrator
• Incident Handler
• Vulnerability Assessment Auditor
• Risk Assessment Professional
• System Administrator
• Security Tester
• Firewall Administrator

With the increasing global demand for the qualified cybersecurity professionals, obtaining the ECIH certification becomes incredibly attractive in financial terms. Thus, the role of a Network Administrator can bring you an average of $59,980 per annum, while the position of a Systems Administrator is associated with $62,793.