Recommended Revision Books

Now, let's focus on the must-have revision books that Amazon kindly proffers:

• Practice Questions & Answers EC Council Certified Incident Handler (ECIH V2): ECCouncil 212-89

  This is the ultimate solution if you are looking for valid and updated ECIH exam dumps and practice test questions for the actual 212-89 evaluation. Phil Scott has done an impressive job in putting together the latest question bank for the ECIH 212-89 exam using this book, with the help of which you will not only memorize the test details but also understand the crucial information you need to master regarding the latest updates. Get your copy from Amazon at only $14 and improve your knowledge as you prepare for the final test.

• EC Council Certified Incident Handler Complete Guide - 2020 Edition

  This is the definitive guide to the ECIH 212-89 exam covering all the concepts necessary. It costs about $90 from Amazon. Throughout this book, important questions are asked and detailed answers are given. For instance, what should you know to complete a successful operation? How should you perform a response exercise? Does your company have an official computer incident response plan? And most importantly, how do you protect your organization’s systems from security incidents and maintain high-quality services every time? The author, Gerardus Blokdyk, uses his years of experience to craft a series of informative questions covering all aspects of the ECIH designation. There’s no doubt any candidate will find this tool helpful in his/her certification prep journey, taking into consideration the detailed account it gives to all the topic areas. All in all, every purchase comes with the following tools:

  • A valid current edition of this book in PDF format;
  • An Excel dashboard for self-assessment;
  • Detailed ECIH checklists;
  • Highly informative project management checklists.
• EC Council Certified Incident Handler A Complete Guide - 2021 Edition

  Now, let's talk about this 2021 material by the Art of Service - EC Council Certified Incident Handler Publishing. Unlike many revision books that you will want to purchase to study for 212-89, this guide takes your training a notch higher by emphasizing the skills you should know in practical environments. Particularly, it provides the skills you need to define, design, create and implement a process that solves challenging security incidents. By studying using this revision material, you will understand how to diagnose and manage bothersome security incidents, implement the best practices & policies that are geared towards the organization’s overall objectives, and integrate the latest concepts and processes into actual practice in line with the stipulated guidelines. Be ready to spend at least $100 to validate your skills using this material.

Eligibility Process

As with other EC-Council certifications, ECIH can be earned in two ways: with or without attending the official training.

• The second option includes meeting the certification eligibility criteria. This comes with at least one year of working experience in the Information Security domain. In addition, the applicants are required to submit the Exam Eligibility Application Form and pay a non-refundable fee of $100.
• The first option entails completing the official course at any of the EC-Council Authorized Training Centers or attending the EC-Council live online training via iWeek. It also involves joining the self-study program through iLearn or attending the EC-Council live online training via iWeek. If you choose this path, you won’t have to pay a registration fee for the exam, as this cost will be included in your training fees.

Reference: https://www.eccouncil.org/programs/ec-council-certified-incident-handler-ecih/

Exam Overview

EC-Council 212-89 is a 3-hour test consisting of 100 questions. The potential candidates must understand the details of different topics covered in the exam before attempting it. The highlights of the scope of the domains that should be studied during your preparation are enumerated below:

• Incident Handling & Response: This topic focuses on information security, threat intelligence, computer security, security policies, incident handling, and risk management. It makes up 16% of the exam content;
• Network & Mobile Incidents: This module focuses on 16% of the exam content and covers the skill areas related to network attacks, eradication of mobile incidents and recovery, denial-of-service, mobile platform risks & vulnerabilities, wireless network, inappropriate usage, and unauthorized access;
• Malware Incidents: This subject area makes up 8% of the exam questions and focuses on malicious code, malware incident triage, and malware;
• Insider Threats: Here, you need to have the skills in insider threats, employee monitoring tools, detecting & preventing insider threats, and eradication. It covers 7% of the entire content;
• Email Security Incidents: The next domain covers one’s skills in different areas, including phishing email, email incidents, deceptive & suspicious email, and email security. It comes with 10% of the exam questions;
• Incident Occurred within the Cloud Environment: This objective also covers 8% of the whole content and focuses on the students’ skills in Cloud computing threats, recovery in Cloud, eradication, and security within Cloud computing.
• Process Handling: This area covers 14% of the exam questions and focuses on incident handling & response, security auditing, incident readiness, eradication & recovery, forensic investigation, and security incidents;
• First Response & Forensic Readiness: This section focuses on 13% of the exam content and covers the areas, such as computer forensic, volatile evidence, anti-forensics, static evidence, digital evidence, preservation of electronic evidence, and forensic readiness;
• Application Level Incidents: This part covers 8% of the whole content and measures the skills of the individuals in web application vulnerabilities & threats, eradication of web apps, and web attack;