Free study resource
A free domain-by-domain map of the EC-Council Certified Incident Handler (E|CIH v3) exam, with each domain's weighting and what to focus on. Use it to plan your study and spot gaps fast.
Built to mirror the real exam
The domains and percentages below follow the ECIH exam's own breakdown, so the practice you do here is weighted the way the exam is weighted — you spend your time where the marks actually are, instead of studying every topic equally.
CyberCertPrep is an independent study resource and is not affiliated with or endorsed by any certification body.
Core concepts, terminology, and the high-yield ideas behind Incident Handling & Response Fundamentals. This domain carries roughly 11% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Incident Handling & Response Process. This domain carries roughly 14% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind First Response & Evidence Handling. This domain carries roughly 11% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Malware Incidents. This domain carries roughly 11% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Email Security Incidents. This domain carries roughly 9% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Network Security Incidents. This domain carries roughly 11% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Web Application Incidents. This domain carries roughly 9% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Cloud Security Incidents. This domain carries roughly 7% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Insider Threats. This domain carries roughly 7% of the ECIH exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Handling Endpoint Security Incidents. This domain carries roughly 10% of the ECIH exam, so weight your study accordingly.
Drop your email and we'll send the complete per-domain summary pack and a suggested study plan for ECIH, free.
No spam. Unsubscribe anytime.