EC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
For most office workers, it is really a tough work to getting Certified Application Security Engineer (CASE) JAVA certification in their spare time because preparing Certified Application Security Engineer (CASE) JAVA actual exam dumps needs plenty time and energy. As the one of certification of ECCouncil, Certified Application Security Engineer (CASE) JAVA enjoys a high popularity for its profession and difficulty. With Certified Application Security Engineer (CASE) JAVA certification you will stand out from other people and work with extraordinary people in international companies. The matter now is how to pass the Certified Application Security Engineer (CASE) JAVA actual test quickly. Maybe you can get help from ActualCollection. You just need to spend your spare time to practice the 312-96 actual questions and Certified Application Security Engineer (CASE) JAVA actual collection, and you will find passing test is easy for you.
ActualCollection is a website engaged in the providing customer Certified Application Security Engineer (CASE) JAVA actual exam dumps and makes sure every candidates passing Certified Application Security Engineer (CASE) JAVA actual test easily and quickly. We have a team of IT workers who have rich experience in the study of Certified Application Security Engineer (CASE) JAVA actual collection and they check the updating of Certified Application Security Engineer (CASE) JAVA actual questions everyday to ensure the accuracy of 312-96 - Certified Application Security Engineer (CASE) JAVA exam collection. You can free download the trial of Certified Application Security Engineer (CASE) JAVA actual collection before you buy. Besides, you have access to free update the Certified Application Security Engineer (CASE) JAVA actual exam dumps one-year after you become a member of ActualCollection.
EC-Council CASE Java Exam Certification Details:
| Number of Questions | 50 |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
| Exam Price | $450 (USD) |
| Passing Score | 70% |
| Books / Training | Master Class |
| Exam Code | 312-96 |
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Sample Questions | EC-Council CASE Java Sample Questions |
| Duration | 120 mins |
Online test engine bring you new experience
When you download and install online test engine in your computer, it allows you to take practice Certified Application Security Engineer (CASE) JAVA actual questions by fully simulating interactive exam environment. You can install in your Smartphone because online version supports any electronic equipment. When you do Certified Application Security Engineer (CASE) JAVA actual collection, you can set your time and know well your shortcoming. Besides, you can review your 312-96 - Certified Application Security Engineer (CASE) JAVA actual exam dumps anywhere and anytime. According to the comments from our candidates, such simulation format has been proven to the best way to learn, since our study materials contain valid Certified Application Security Engineer (CASE) JAVA actual questions.
The aim of ActualCollection is help every candidates getting certification easily and quickly. Comparing to attending expensive training institution, ActualCollection is more suitable for people who are eager to passing Certified Application Security Engineer (CASE) JAVA actual test but no time and energy. If you decide to join us, you will receive valid Certified Application Security Engineer (CASE) JAVA actual exam dumps with real questions and detailed explanations. We promise you if you failed the exam with our 312-96 - Certified Application Security Engineer (CASE) JAVA actual collection, we will full refund or you can free replace to other dumps. If you have any questions, please feel free to contact us and we offer 24/7 customer assisting to support you.
Hedy 
Jonas 
Burke 
Debby 
Matthew 
Teresa 
Martina 
Wordsworth 
Chapman 
Heather 
Frederic 
Xaviera 
