ECCOUNCIL-ECIH: EC-Council Certified Incident Handler (E|CIH)
Incident handling and response certification — the IH&R lifecycle across malware, email, network, web-app, cloud, insider, and endpoint incidents
$79 practice exams are gatekeeping. Mine are $9 because it should be. Written by someone who works in cloud and AI at Microsoft NZ — for people like us.
I just passed with a 777 (Yes, Seriously). This video helped me tremendously.
@yourdream8 · YouTube
Browse all exams
↓ Try the actual questions below — no sign-up needed.
Official Exam Details
| Duration | 180 minutes |
| Questions | 100 |
| Passing Score | 70% (form-dependent) |
| Exam Cost | $450 USD |
| Testing Provider | ECC Exam Portal (EC-Council) |
| Validity | 3 years (ECE required) |
| Prerequisites | No mandatory prerequisite with official EC-Council ECIH v3 training (voucher typically included); without training, an eligibility application with 1+ year of information-security experience and a $100 application fee. |
| Question Types | Multiple choice |
Domain Breakdown
| Domain | Questions |
|---|---|
| Introduction to Incident Handling and Response | 24 |
| Handling and Responding to Endpoint Security Incidents | 24 |
| Incident Handling and Response Process | 28 |
| Forensic Readiness and First Response | 24 |
| Handling and Responding to Malware Incidents | 28 |
| Handling and Responding to Email Security Incidents | 24 |
| Handling and Responding to Network Security Incidents | 26 |
| Handling and Responding to Web Application Security Incidents | 24 |
| Handling and Responding to Cloud Security Incidents | 24 |
| Handling and Responding to Insider Threats | 24 |
Frequently Asked Questions
What is the passing score for the EC-Council Certified Incident Handler (E|CIH) exam?
The passing score for EC-Council Certified Incident Handler (E|CIH) (ECCOUNCIL-ECIH) is 70% (form-dependent). Our practice exams use an 80% threshold to help you build confidence before the real test.
How long is the EC-Council Certified Incident Handler (E|CIH) exam?
The official EC-Council Certified Incident Handler (E|CIH) exam is 180 minutes long. You can simulate this time pressure using our Exam Mode, which includes a countdown timer and auto-submit.
How much does the EC-Council Certified Incident Handler (E|CIH) exam cost?
The EC-Council Certified Incident Handler (E|CIH) certification exam costs $450 USD. You can prepare with our 250-question practice exam for just $9 (1 year access) — a fraction of the real exam fee.
How many questions are on the EC-Council Certified Incident Handler (E|CIH) exam?
The official EC-Council Certified Incident Handler (E|CIH) exam has 100 questions. Our practice bank includes 250 exam-style questions with detailed explanations covering all 10 domains.
What are the prerequisites for EC-Council Certified Incident Handler (E|CIH)?
Prerequisites for EC-Council Certified Incident Handler (E|CIH): No mandatory prerequisite with official EC-Council ECIH v3 training (voucher typically included); without training, an eligibility application with 1+ year of information-security experience and a $100 application fee.. Our study materials are designed for all levels, with detailed explanations that build understanding from scratch.
How long is the EC-Council Certified Incident Handler (E|CIH) certification valid?
The EC-Council Certified Incident Handler (E|CIH) certification is valid for: 3 years (ECE required). Plan your recertification early and use our practice exams to stay sharp.
Is the EC-Council Certified Incident Handler (E|CIH) practice exam worth it?
Yes — our 250-question practice exam includes three study modes (Study, Exam Simulation, and Flashcards with spaced repetition), detailed explanations for every answer, adaptive question selection, and progress tracking across all 10 domains. 20 practice questions are free with no account needed. Full access is $9 for 1 year.
How do I prepare for the EC-Council Certified Incident Handler (E|CIH) certification?
Start with Study Mode for instant feedback and concept learning. Switch to Exam Mode for timed practice under real conditions (180 minutes, 70% (form-dependent) to pass). Use Flashcards with spaced repetition to retain key facts long-term. Track your readiness score across all domains.