gcih-exam-do Exam Domains & Topics

The exam is scenario-driven. Your score often depends on choosing the best architecture under constraints (cost vs performance vs reliability vs security).

• Design secure architectures: IAM, encryption, least privilege.
• Design resilient architectures: HA, DR, fault tolerance.
• Design high-performing architectures: caching, scaling, right service choice.
• Design cost-optimized architectures: storage classes, pricing tradeoffs.

• Incident handling process
• Network and host investigations
• Web application attacks and defenses
• Malware and exploit behavior basics
• Containment, eradication, recovery