EC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
Learn anytime, anywhere
312-96 practice prep broke the limitations of devices and networks. You can learn anytime, anywhere. As long as you are convenient, you can choose to use a computer to learn, you can also choose to use mobile phone learning. No matter where you are, you can choose your favorite equipment to study our 312-96 learning materials. With regard to the Internet, if you use our study materials in a network environment, then you can use our products in a non-network environment. 312-96 study guide guarantee that you can make full use of all your free time to learn, if you like. The reason why we emphasize this is that we know you have a lot of other things to do. Many users stated that they can only use fragmented time to learn. Experts at 312-96 practice prep also fully considered this point.
EC-Council CASE Java Exam Certification Details:
| Passing Score | 70% |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
| Books / Training | Master Class |
| Exam Code | 312-96 |
| Duration | 120 mins |
| Sample Questions | EC-Council CASE Java Sample Questions |
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Number of Questions | 50 |
| Exam Price | $450 (USD) |
Perfect service system
If you are very tangled in choosing a version of 312-96 practice prep, or if you have any difficulty in using it, you can get our help. We provide you with two kinds of consulting channels. You can contact our online staff or you can choose to email us. No matter which method you choose, 312-96 learning materials guarantee that we will reply to you as quickly as possible. We hope you can feel that we sincerely hope to help you. We hope that after choosing our study materials, you will be able to concentrate on learning our 312-96 study guide without worry. It is our greatest honor that you can feel satisfied. Of course, we will value every user. We will never neglect any user. Our study materials will provide perfect service for everyone.
Free trial version
In the current market, there are too many products of the same type. It is actually very difficult to select the 312-96 practice prep that you love the most with only product introduction. Our trial version of our study materials can be a good solution to this problem. If you are not sure whether our product is suitable for you, you can request to use our trial version. Of course, 312-96 learning materials produced several versions of the product to meet the requirements of different users. You can also ask to try more than one version and choose the one that suits you best. Prior to this, please inform us of your email address on the 312-96 study guide so that we can send you a free demo of our study materials. We hope that the study materials you purchased are the best for you.
If you are sure that you want to be better, then you must start taking some measures. Selecting 312-96 practice prep may be your key step. If you are determined to pass the exam, our study materials can provide you with everything you need. You can have the learning materials, study plans and necessary supervision you need. You will have no reason to stop halfway. With 312-96 learning materials, you can definitely stick to your goals. You can imagine how fascinating you will be! So, take a look at the advantages of our study materials! Trust me, you will love our 312-96 study guide.
