EC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
EC-Council CASE Java Exam Certification Details:
| Books / Training | Master Class |
| Exam Code | 312-96 |
| Exam Price | $450 (USD) |
| Number of Questions | 50 |
| Sample Questions | EC-Council CASE Java Sample Questions |
| Passing Score | 70% |
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Duration | 120 mins |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
Long-term cooperation with customers
If you enjoy a comfortable and satisfying purchasing service of 312-96 test questions, we hope you can still choose us when you need other products. We pay important attention to honor and reputation, so it is our longtime duty to do better about our 312-96 test engine, and that is what we are proud of. After receiving feedback of former customers, they inspired us and made us do better. They also recommend 312-96 test questions to people around them. We earn this by accuracy of practice dumps, so do not need to worry about quality and trust us as friends who help you get over problems. We regard the pass of your test exam as our business, and send you intimate service. If you get a satisfying experience about 312-96 test dumps this time, expect your preference next time.
The features of three-type- products: PDF & Software & APP version
All these types of products are the newest version of authorized exam dumps materials for ECCouncil Application Security exam. You can tell according to updating version NO. on website. Here we want to introduce the 312-96 set especially to you---A desirable version supporting browse on the web included many questions. You can pay only dozens of money for it with some discount. As the main provider of 312-96 pass king materials, we recommend this kind of version to customers. When we updates questions, we shall instantly send you related details about 312-96 test questions to you Email box, give customers heartfelt service, or you can contact with customer service for them. Besides the full refund guarantee, we also promise send you the latest 312-96 test engine questions even you pass the test, so you can realize any tiny changes.
About our 312-96 test questions, it is one of authorized test materials for candidates who hold ambitious aims in the area. So we give you a brief introduction of 312-96 test engine as follows:
Some tips &Notice
During you practice with 312-96 test questions, you can mark the most important and difficult points, and exchange them with friends, which can speed up you process and build up confidence, before get down to business, look through the whole contents of 312-96 test engine quickly, which can help you be familiar with questions. Hope you can pass the ECCouncil Application Security test smoothly. After placing your order successfully, then you can download exam dumps or system will send you 312-96 test questions in a few hours. Once you received our products, you just need to spend one or two days to practice questions and repeat the answers of 312-96 pass king materials. (In case you do not receive any massage, please notice us at your available time, do not forget to check junk mailbox.)
After purchase, Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
