PDF Version DemoEC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
EC-Council CASE Java Exam Certification Details:
| Passing Score | 70% |
| Sample Questions | EC-Council CASE Java Sample Questions |
| Number of Questions | 50 |
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
| Books / Training | Master Class |
| Exam Code | 312-96 |
| Exam Price | $450 (USD) |
| Duration | 120 mins |
Fast, easy and secure payments
In order to ensure the safety of payment when you purchase our 312-96 actual lab questions, we have strict information system which can protect your secret. On the other hands, we support multi-channel payment platform with credit card. You can choose the most convenient for you. Or if you have another issues whiling purchasing our 312-96 certification training files we are pleased to handle with you soon. You can email us or contact via 24/7 online service support. We not only provide high pass-ratio 312-96 torrent PDF but also spear no effort to protect your purchase process from any danger and concern.
Download the 312-96 free trial before buying
Our 312-96 actual lab questions have been praised as the best study materials in the IT field in many countries, but if you still have any hesitation, you are welcomed to download the 312-96 free trial to get a general knowledge of our products in our website before you make a decision. I am sure that you will be very satisfied with our 312-96 certification training files. Do not wait and hesitate any more, just take action and have a try of 312-96 training demo, and all you need to do is just click into our website and find the “Download for free” item, and there are three kinds of versions for you to choose from namely, PDF Version Demo, PC Test Engine and Online Test Engine, you can choose to download any one of the 312-96 practice demo as you like.
Enjoy the fast delivery of 312-96 exam materials
There is no doubt that everyone would like to receive his or her goods as soon as possible after payment for something, especially for those who are preparing for the ECCouncil 312-96 exam, and we all know that nothing is more precious than time. Since our 312-96 actual lab questions are electronic products, we can ensure you the fast delivery. Our operation system will send the 312-96 certification training files to you in 5-10 minutes after your payment by e-mail automatically, and we can promise you this is absolutely the fastest delivery in this field. Do not waste your time any more, just buy it now, and you can get the most useful 312-96 study materials files only 5-10 minutes later.
Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
It is acknowledged that ECCouncil certificate exams are difficult to pass for workers in the industry, but you need not to worry about that at all because our company is determined to solve this problem, and after 10 years development, we have made great progress in compiling the 312-96 actual lab questions. Our company have employed many top IT experts in different countries to compile this 312-96 certification training for IT exam during the 10 years, and we are so proud that our 312-96 pass ratio have become the leader in the IT field and we have a lot of regular customers for a long-term cooperation now. We are look forward to become your learning partner in the near future.
