EC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
EC-Council CASE Java Exam Certification Details:
| Sample Questions | EC-Council CASE Java Sample Questions |
| Books / Training | Master Class |
| Number of Questions | 50 |
| Passing Score | 70% |
| Exam Price | $450 (USD) |
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Duration | 120 mins |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
| Exam Code | 312-96 |
Three versions of Certified Application Security Engineer (CASE) JAVA exam study materials
When a product can meet different kinds of demands of customers, it must be a successful product. Our 312-96 study guide: Certified Application Security Engineer (CASE) JAVA totally have such great advantages. Our specialists have triumphantly developed the three versions of the 312-96 learning materials. They are the app version, software and the pdf version. Each version is aimed at satisfying different customers' demand. At the same time, the three versions can be combined together, which will bring the greatest learning results. The three versions of our 312-96 exam preparatory files have respective advantage. For example, the app version can be installed on your mobile phone, which is easy for you to learn when you go out. The windows software can give you the real experience of the ECCouncil 312-96 exam. The pdf version is convenient for you to make notes. All in all, the three versions can help you pass the ECCouncil 312-96 exam and gain the certificate.
The advantages of passing the ECCouncil Certified Application Security Engineer (CASE) JAVA exam
Passing the ECCouncil 312-96 exam is very important for you to choose a good job. Once you have passed the exam, you will have many choices. First of all, many large corporations urgently need such talent, which means you will have a better chance to be employed among many other candidates (312-96 learning materials). Secondly, passing the exam means you have grasped a very useful skill and learn much knowledge. You are easily to be thought highly by your boss, which means you will easily get promotion than your colleagues. In a word, there are many other benefits if you pass the exam. Come and choose our 312-96 study guide: Certified Application Security Engineer (CASE) JAVA.
Instant Download 312-96 Exam Braindumps: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
Life is always full of ups and downs. No one will always live a peaceful life. Maybe you have been at the bottom of your life; but it's difficult for you to cheer up. I am glad to tell you that our 312-96 study guide: Certified Application Security Engineer (CASE) JAVA will give you a chance to start again. As old saying goes, failure is mother to success as it can strengthen one's will. If you are determined to succeed, our 312-96 learning materials will be sure to give you a hand. After you have tried our 312-96 test dumps materials, you must be satisfied with our products.
Free demo before you decide to buy our Certified Application Security Engineer (CASE) JAVA exam study materials
Maybe you are the first time to buy our test questions and you feel uncertain about our ECCouncil 312-96 exam preparatory. It doesn't matter, we offer you free demo to have a try before you decide to buy our 312-96 exam questions: Certified Application Security Engineer (CASE) JAVA. The free demo supports to download online. If you want to check the ability of our test questions, please download the free demo on our website. After you have experienced our free demo of 312-96 exam questions, you will fully trust us. What you need to pay attention to is that the free demo does not include the whole knowledge of the 312-96 certification training: Certified Application Security Engineer (CASE) JAVA. If you are satisfied with our free demo, please buy our 312-96 practice test materials. Our company has always provided the best products to our customers.
Ansel 
Tab 
Quintina 
Afra 
Sandra 
Tyrone 
Harry 
Moses 
Naomi 
Jenny 
Henry 
Harry 
Devin 
Afra 
Kerr 
Jocelyn 
Nathaniel 
Kama 
Laurel 
Belinda 
Francis 
