EC-COUNCIL

EC-Council Certified Incident Handler

ECIH

The EC-Council Certified Incident Handler (ECIH) certification validates your ability to prepare for, detect, and respond to cybersecurity incidents using a structured, method-driven approach. Designed for incident responders, SOC analysts, and security professionals, the program covers the full incident handling and response lifecycle—from preparation and triage to containment, eradication, and recovery. Earning ECIH demonstrates that you can protect your organization from evolving threats and minimize the impact of security breaches.

Practice Free Questions

5Domains

10Objectives

99Practice pages

473Free questions

ECIH free practice questions

Choose any objective and open any question page — no sign-in required.

Introduction to Incident Handling and Response

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Incident Handling and Response Process

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

First Response

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Handling and Responding to Malware Incidents

57 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–57

Handling and Responding to Email Security Incidents

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Handling and Responding to Network Security Incidents

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

Handling and Responding to Web Application Security Incidents

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Handling and Responding to Cloud Security Incidents

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Handling and Responding to Insider Threats

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

Handling and Responding to Endpoint Security Incidents

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (10 objectives · 99 pages).

EC-Council Certified Incident Handler

ECIH free practice questions

Domain 1 · Incident Handling Fundamentals18% of practice bank · 2 objectives · 87 questions18%

Domain 2 · First Response and Malware Incidents22% of practice bank · 2 objectives · 104 questions22%

Domain 3 · Email and Network Security Incidents21% of practice bank · 2 objectives · 99 questions21%

Domain 4 · Web Application and Cloud Incidents18% of practice bank · 2 objectives · 87 questions18%

Domain 5 · Insider Threats and Endpoint Incidents20% of practice bank · 2 objectives · 96 questions20%