EC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
EC-Council CASE Java Exam Certification Details:
| Books / Training | Master Class |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
| Number of Questions | 50 |
| Duration | 120 mins |
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Passing Score | 70% |
| Exam Price | $450 (USD) |
| Sample Questions | EC-Council CASE Java Sample Questions |
| Exam Code | 312-96 |
The service of TestBraindump
Update Our Company checks the update every day. If you've bought 312-96 test braindump from us, once there is the latest 312-96 - Certified Application Security Engineer (CASE) JAVA exam version, our system will send it to your e-mail automatically and immediately. And you can free update the ECCouncil 312-96 braindump study materials one-year if you purchase.
Refund We promise to you full refund if you failed the exam with 312-96 test braindump. Within 7 days after exam transcripts come out, then scanning the transcripts, add it to the emails as attachments and sent to us. After confirmation, we will refund immediately.
Discount We will offer you different discount for you if you became a member of us.
Payment Our payment is by Credit Card. But it can be bound with the credit card, so the credit card is also available.
After purchase, Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
How can you stand out from thousands of candidates? How can you make your employer think highly of you? How can you qualify for the promotion? Passing 312-96 test exam will make these dreams come true. As an important test of ECCouncil, 312-96 test exam become popular among people. The considerable salary and decent work and different kind benefits, the chance of training, all these stuff attract to you. Passing 312-96 braindump actual test is a new start for you. But it is a tough task. You have to sacrifice your rest time to practice the 312-96 test questions and learn 312-96 braindump study materials. And the worst result is that you maybe fail the exam, it will be a great loss of time and money for you. In case this terrible thing happens, TestBraindump will be your best partner to help you pass 312-96 test exam.
Different versions according to your study habits
The version of Pdf is suitable to most common people because it can be print out and is easy to read. And you can share with other people about 312-96 test braindump anytime.
The version of test engine is a simulation of the 312-96 braindump actual test, you can feel the atmosphere of ECCouncil 312-96 test exam and get used to the condition of the real test in advance. It only can support the Windows operating system. In the course of 312-96 test exam, you will know your shortcoming and strength well.
The version of online test engine just same like test engine. But it can download 312-96 test braindump study materials in any electronic equipment, such as: Windows/Mac/Android/iOS operating systems. The online version is only service you can enjoy from our TestBraindump. The most advantage of online version is that you can practice 312-96 test questions anytime and anywhere even if you are unable to access to the internet. So you can do 312-96 real braindump in the bus or waiting someone. You can learn anywhere.
The latest ECCouncil 312-96 test braindump guarantee a high score
TestBraindump provide you with 312-96 braindump latest and 312-96 test questions, which are created by our extraordinary teammates who study the 312-96 braindump actual test for a long time. And we always check the update of the 312-96 test braindump, the system will send you the latest version of ECCouncil 312-96 real braindump once there is latest version released. So you can trust us about the profession and accuracy of our 312-96 test braindump. If you still doubt our ability, you can download the free trial of 312-96 braindump Certified Application Security Engineer (CASE) JAVA study materials before you buy. If you decide to join us, you just need to send one or two days to practice 312-96 test questions and remember the key knowledge of the test. I think if you practice our 312-96 test braindump skillfully, you will pass the test easily.
Arlene 
Cora 
Hamiltion 
Hale 
Cornelius 
Norton 
Adair 
Nora 
Alva 
Horace 
Humphrey 
Murphy 
Page 
Channing 
Elliot 
Eleanore 
Oscar 
Clare 
Blanche 
Tammy 
Hamiltion 
Abner 
