How I passed GCIH

Introduction

I am a cybersecurity professional who is continually learning new tools and improving my skills to stay ahead in the field. My aspiration is to become one of the leading experts in cybersecurity, aiming to accomplish great things. Eventually, I envision establishing my own cybersecurity firm to assist individuals and companies globally in bolstering their security measures while advocating for increased awareness of cyber attack risks among everyday people. Currently, I work as a Cloud/Web Application Security Penetration Tester and have chosen to pursue several GIAC certifications to enhance both my skills and as well as with my career.

Preparing for the Exam

Note: I did OnDemand version of the course.

I’ve heard so many great things about GIAC exams, particularly preparatory materials such as books and labs that you use to prepare yourself for the exam and real world scenarios.

Materials Provided:

6 Physical Books
2 Physical Workbooks
~24 hours video course: SEC504: Hacker Tools, Techniques, and Incident Handling
2 Free Practice Tests
1 CTF challenge (Optional)

The GCIH exam includes 6 books covering essential topics for the exam and a final book focused on the Capture the Flag (CTF) challenge, which I found extremely enjoyable. Additionally, there are 2 Workbooks that cover exam-specific labs. Upon completion of the course, two crucial optional tasks remain: 2 Free Practice Tests (resembling the actual exam) and an optional CTF challenge. It is highly recommended to take the practice tests as they simulate the exam structure, highlighting areas of strength and improvement. CTF challenge will help you to really understand the concepts covered throughout the book, as well as for CyberLive questions that come in the Exam.

Indexing

Indexing plays a vital role in exam preparation, significantly aiding on the exam day. I have detailed my indexing methodology in my blog post titled: Indexing Your Books for GIAC Exam Preparation.

Video course

The SEC504 video course, taught by Joshua Wright, essentially mirrors the book content, offering comprehensive explanations in a video format.

Scheduling

Upon completing the course, candidates can register for the exam either in person or online, allowing the use of printed notes and books (electronic devices and the internet are prohibited).

The Challenges

Every journey has its obstacles. The challenges I faced on this exam was taking good notes, and trying to study everyday, which was not always easy with a full-time job, but with dedication, it is definitely doable.

Studying

I spent at least 2 hours a day trying to cover 1 chapter/section every-single day, and spend as much time as needed for that day’s lab.

The Exam Day

On the exam day, I prioritized getting a good 8 hours of sleep, and a good breakfast since those are very important, and should be taken seriously.

Exam Format & Passing Point

1 proctored exam
106 questions
4 hours
Minimum passing score of 70%

Your GCIH exam has 95 multiple-choice questions, 11 CyberLive virtual machine questions, and a time limit of 240 minutes.
You must score at least 69.63% to pass your GIAC Certified Incident Handler exam.

Additionally, achieving a score of 90% or higher qualifies individuals to join the GIAC Advisory Board.

Tips and Tricks

My biggest advices would be 4 things:

Take good notes (with Indexing)
Do all the labs until you feel very comfortable with them
Do the CTF challenge
Do the Practice tests before taking the exam and know your weaknesses & strengths

Conclusion

In conclusion, the GCIH exam was both enjoyable and educational. Taking this certification significantly expanded my knowledge base in cybersecurity.