GIAC Certification
Practice Tests
Free practice tests for GIAC GSEC, GCIH, GCIA, GPEN, and GICSP — all backed by SANS Institute training. Every test mirrors the real open-book exam pace with timed sessions. No sign-up required.
Choose Your GIAC Exam
All GIAC exams are open-book, proctored, and include CyberLive hands-on components. Select your certification and begin practicing with timed tests aligned to the official exam format.
GIAC Certifications Compared
All GIAC exams share the same open-book, proctored format with CyberLive hands-on components. Here is how the five certifications compare.
| Cert | Focus | SANS Course | Questions | Duration | Pass Score | Fee (USD) | Valid |
|---|---|---|---|---|---|---|---|
| GSEC | Security Essentials | SEC401 | 106–180 | 4 hrs | 73% | $949 | 4 yrs |
| GCIH | Incident Handling | SEC504 | 106 | 4 hrs | 69% | $949 | 4 yrs |
| GCIA | Intrusion Analysis | SEC503 | 106 | 4 hrs | 67% | $979 | 4 yrs |
| GPEN | Penetration Testing | SEC560 | 82 | 3 hrs | 73% | $949 | 4 yrs |
| GICSP | ICS/OT Security | ICS410 | 82–115 | 3 hrs | 71% | $999 | 4 yrs |
About GIAC Certifications
GIAC is the certification body of the SANS Institute — the world's largest provider of cybersecurity training.
What Makes GIAC Exams Different?
GIAC certifications are hands-on and practitioner-focused. Every exam includes CyberLive questions — tasks performed in a live virtual environment using real tools such as Wireshark, Nmap, Metasploit, Volatility, Snort, and Zeek. This means passing a GIAC exam validates that you can actually do the work, not just describe it.
All GIAC exams are open-book and open-note. You may bring printed materials and a personal index into the testing environment. Building a well-organized index before exam day is one of the most important preparation steps for any GIAC certification.
Which GIAC Certification Should You Take?
GSEC — Best starting point for IT professionals entering security. Broad coverage, DoD 8140 approved, strong employer recognition.
GCIH — Best for SOC analysts, incident responders, and anyone who needs to understand how attackers operate and how to respond effectively.
GCIA — Best for network security analysts and intrusion detection specialists who need deep packet-level and IDS expertise.
GPEN — Best for penetration testers and ethical hackers wanting a SANS-backed credential across the full engagement lifecycle.
GICSP — Best for engineers and security professionals working in industrial control systems, SCADA, or critical infrastructure environments.
Frequently Asked Questions
Common questions about GIAC certifications and these free practice tests.
