GIAC (SANS)

GIAC Enterprise Incident Responder

GEIR

The GIAC Enterprise Incident Response (GEIR) certification validates your command of enterprise-class incident response and threat hunting tools and techniques. It is designed for incident response team leads, threat hunters, and forensic analysts who must understand attacker movement across Windows, Linux, macOS, containers, and cloud environments. Earning GEIR proves you can coordinate large-scale investigations and respond effectively to modern attacks.

Practice Free Questions

5Domains

11Objectives

105Practice pages

503Free questions

GEIR free practice questions

Choose any objective and open any question page — no sign-in required.

Enterprise Incident Response Management

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Enterprise Visibility and Incident Scoping

57 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–57

Rapid Response Triage at Scale

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Foundational Cloud Concepts

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

Cloud Response and Analysis

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

Container DFIR Fundamentals

47 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–47

Detecting Modern Attacks

52 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–52

Linux Essentials

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Linux DFIR Fundamentals

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

macOS Essentials

33 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–33

macOS DFIR Fundamentals

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (11 objectives · 105 pages).

GIAC Enterprise Incident Responder

GEIR free practice questions

Domain 1 · Incident Response Foundations30% of practice bank · 3 objectives · 151 questions30%

Domain 2 · Cloud and Container Forensics29% of practice bank · 3 objectives · 146 questions29%

Domain 3 · Modern Attack Detection10% of practice bank · 1 objectives · 52 questions10%

Domain 4 · Linux Forensics16% of practice bank · 2 objectives · 82 questions16%

Domain 5 · macOS Forensics14% of practice bank · 2 objectives · 72 questions14%