Scribd Logo
Upload

Welcome to Scribd!

  • 346 views

    ECIH Exam Blueprint v2

    Uploaded by

    Chida
    This document outlines the exam blueprint for the EC-Council Certified Incident Handler certification. It divides the exam content into 9 domains related to incident response and handling processes. Each domain is further divided into relevant subdomains and allocated a percentage weight to indicate its importance on the exam. The domains cover topics such as incident response fundamentals, first response activities, malware incidents, email security incidents, and more.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    ECIH Exam Blueprint v2

    Uploaded by

    Chida
    346 views3 pages
    This document outlines the exam blueprint for the EC-Council Certified Incident Handler certification. It divides the exam content into 9 domains related to incident response and handling processes. Each domain is further divided into relevant subdomains and allocated a percentage weight to indicate its importance on the exam. The domains cover topics such as incident response fundamentals, first response activities, malware incidents, email security incidents, and more.

    Original Title

    ECIH-Exam-Blueprint-v2

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document outlines the exam blueprint for the EC-Council Certified Incident Handler certification. It divides the exam content into 9 domains related to incident response and handling processes. Each domain is further divided into relevant subdomains and allocated a percentage weight to indicate its importance on the exam. The domains cover topics such as incident response fundamentals, first response activities, malware incidents, email security incidents, and more.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    346 views3 pages

    ECIH Exam Blueprint v2

    Uploaded by

    Chida
    This document outlines the exam blueprint for the EC-Council Certified Incident Handler certification. It divides the exam content into 9 domains related to incident response and handling processes. Each domain is further divided into relevant subdomains and allocated a percentage weight to indicate its importance on the exam. The domains cover topics such as incident response fundamentals, first response activities, malware incidents, email security incidents, and more.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 3

    EC-Council Certified Incident Handler

    Exam Blueprint v2

    S. No. Domain Sub Domains Weightage

    1 Incident Response 1.1 Information Security Incidents 11%


    and Handling
    Process 1.2 Incident Management

    1.3 Incident Response Automation and Orchestration

    1.4 Incident Handling Standards and Frameworks

    1.5 Incident Handling Laws and Acts

    1.6 Incident Response and Handling Process

    a) Preparation

    b) Incident Recording and Assignment

    c) Incident Triage

    d) Notification

    e) Containment

    f) Evidence Gathering and Forensics Analysis

    g) Eradication

    h) Recovery

    i) Post-Incident Activities

    2 First Response 2.1 First Responder 11%

    2.2 Securing and Documenting the Crime Scene

    2.3 Collecting Evidence at the Crime Scene

    2.4 Preserving, Packaging, and Transporting the Evidence

    3 Malware Incidents 3.1 Malware Incidents Handling Preparation 11%

    3.2 Malware Incidents Detection

    3.3 Malware Incidents Containment and Eradication

    Page | 1 EC-Council Certified Incident Handler Copyright © by EC-Council


    All Rights Reserved. Reproduction is Strictly Prohibited.
    EC-Council Certified Incident Handler
    Exam Blueprint v2

    3.4 Recovery after Malware Incidents

    3.5 Guidelines for Preventing Malware Incidents

    4 Email Security 4.1 Types of Email Security Incidents 12%


    Incidents
    4.2 Preparation for Handling Email Security Incidents

    4.3 Detection and Containment of Email Security Incidents

    4.4 Eradication of Email Security Incidents

    4.5 Recovery after Email Security Incidents

    4.6 Best Practices against Email Security Incidents

    5 Network Level 5.1 Preparation for Handling Network Security Incidents 12%
    Incidents
    5.2 Network Security Incidents Detection and Validation

    5.3 Handling Unauthorized Access Incidents

    5.4 Handling Inappropriate Usage Incidents

    5.5 Handling Denial-of-Service Incidents

    5.6 Handling Wireless Network Security Incidents

    6 Application Level 6.1 Preparation for Handling Web Application Security 11%
    Incidents Incidents

    6.2 Web Application Security Incidents Detection and


    Analysis

    6.3 Containment and Eradication of Web Application Security


    Incidents

    6.4 Recovery from Web Application Security Incidents

    6.5 Best Practices for Securing Web Applications

    7 Cloud Security 7.1 Challenges in Cloud Incident Handling and Response 10%
    Incidents

    Page | 2 EC-Council Certified Incident Handler Copyright © by EC-Council


    All Rights Reserved. Reproduction is Strictly Prohibited.
    EC-Council Certified Incident Handler
    Exam Blueprint v2

    7.2 Handling Cloud Security Incidents

    7.3 Handling Azure Security Incidents

    7.4 Handling AWS Security Incidents

    7.5 Handling Google Cloud Security Incidents

    7.6 Best Practices Against Cloud Security Incidents

    8 Insider Threats 8.1 Types of Insider Threats 11%

    8.2 Preparation Steps for Handling Insider Threats

    8.3 Detection, Containment, and Eradication of Insider


    Threats

    8.4 Recovery After Insider Attacks

    8.5 Best Practices against Insider Threats

    9 Endpoint Security 9.1 Need for Endpoint Security Incident Handling and 11%
    Incidents Response

    9.2 Preparation for Handling Endpoint Security Incidents

    9.3 Detection and Validation of Endpoint Security Incidents

    9.4 Handling Mobile-based Security Incidents

    9.5 Handling IoT-based Security Incidents

    9.6 Handling OT-based Security Incidents

    Page | 3 EC-Council Certified Incident Handler Copyright © by EC-Council


    All Rights Reserved. Reproduction is Strictly Prohibited.

    You might also like