EC-Council 312-96 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Secure Coding Practices for Input Validation | - Understand the need of input validation -Explain data validation techniques -Explain data validation in strut framework -Explain data validation in Spring framework -Demonstrate the knowledge of common input validation errors -Demonstrate the knowledge of common secure coding practices for input validation | 8% |
| Secure Deployment andMaintenance | - Understand the importance of secure deployment -Explain security practices at host level -Explain security practices at network level -Explain security practices at application level -Explain security practices at web container level (Tomcat) -Explain security practices at Oracle database level -Demonstrate the knowledge of security maintenance and monitoring activities | 10% |
| Secure Coding Practices for Session Management | - Explain session management in Java -Demonstrate the knowledge of session management in Spring framework -Demonstrate the knowledge of session vulnerabilities and their mitigation techniques -Demonstrate the knowledge of best practices and guidelines for secure session management | 10% |
| Secure Application Design and Architecture | - Understand the importance of secure application design -Explain various secure design principles -Demonstrate the understanding of threat modeling -Explain threat modeling process -Explain STRIDE and DREAD Model -Demonstrate the understanding of Secure Application Architecture Design | 12% |
| Security Requirements Gathering | -Understand the importance of gathering security requirements -Explain Security Requirement Engineering (SRE) and its phases -Demonstrate the understanding of Abuse Cases and Abuse Case Modeling - Demonstrate the understanding of Security Use Cases and Security Use Case Modeling -Demonstrate the understanding of Abuser and Security Stories -Explain Security Quality Requirements Engineering (SQUARE) Model -Explain Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Model | 8% |
| Static and Dynamic Application Security 'resting (SAST & DAST) | - Understand Static Application Security Testing (SAST) -Demonstrate the knowledge of manual secure code review techniques for most common vulnerabilities -Explain Dynamic Application Security Testing -Demonstrate the knowledge of Automated Application Vulnerability Scanning Toolsfor DAST -Demonstrate the knowledge of Proxy-based Security Testing Tools for DAST | 8% |
| Secure Coding Practices for Error Handling | - Explain Exception and Error Handling in Java -Explain erroneous exceptional behaviors -Demonstrate the knowledge of do's and don'ts in error handling -Explain Spring MVC error handing -Explain Exception Handling in Struts2 -Demonstrate the knowledge of best practices for error handling -Explain to Logging in Java -Demonstrate the knowledge of Log4j for logging -Demonstrate the knowledge of coding techniques for secure logging -Demonstrate the knowledge of best practices for logging | 16% |
| Understanding Application Security, Threats, and Attacks | -Understand the need and benefits of application security -Demonstrate the understanding of common application-level attacks -Explain the causes of application-level vulnerabilities -Explain various components of comprehensive application security -Explain the need and advantages of integrating security in Software Development Life Cycle (SDLQ) -Differentiate functional vs security activities in SDLC -Explain Microsoft Security Development Lifecycle (SDU) -Demonstrate the understanding of various software security reference standards, models, and frameworks | 18% |
| Secure Coding Practices for Cryptography | - Understand fundamental concepts and need of cryptography In Java -Explain encryption and secret keys -Demonstrate the knowledge of cipher class Implementation -Demonstrate the knowledge of digital signature and Its Implementation -Demonstrate the knowledge of Secure Socket Layer ISSUand Its Implementation -Explain Secure Key Management -Demonstrate the knowledgeofdigital certificate and its implementation - Demonstrate the knowledge of Hash implementation -Explain Java Card Cryptography -Explain Crypto Module in Spring Security -Demonstrate the understanding of Do's and Don'ts in Java Cryptography | 6% |
| Secure Coding Practices for Authentication and Authorization | - Understand authentication concepts -Explain authentication implementation in Java -Demonstrate the knowledge of authentication weaknesses and prevention -Understand authorization concepts -Explain Access Control Model -Explain EJB authorization -Explain Java Authentication and Authorization (JAAS) -Demonstrate the knowledge of authorization common mistakes and countermeasures -Explain Java EE security -Demonstrate the knowledge of authentication and authorization in Spring Security Framework -Demonstrate the knowledge of defensive coding practices against broken authentication and authorization | 4% |
Three versions available
One of the biggest highlights of the Certified Application Security Engineer (CASE) JAVA prep torrent is the availability of three versions: PDF, app/online, and software/pc, each with its own advantages: The PDF version of 312-96 exam torrent has a free demo available for download. You can print exam materials out and read it just like you read a paper. The online version of 312-96 test guide is based on web browser usage design and can be used by any browser device. At the same time, the first time it is opened on the Internet, it can be used offline next time. You can practice anytime, anywhere. The Certified Application Security Engineer (CASE) JAVA software supports the MS operating system and can simulate the real test environment. The contents of the three versions are the same. Each of them neither limits the number of devices used or the number of users at the same time. You can choose according to your needs.
When some candidates trying to overcome an exam, they will all first think of choosing a good study material to prepare for their exam. The Certified Application Security Engineer (CASE) JAVA prep torrent has a variety of self-learning and self-assessment functions to test learning outcome, which will help you increase confidence to pass exam. Last but not least, our website platform has no viruses and you can download 312-96 test guide at ease. If you encounter difficulties in installation or use of 312-96 exam torrent, we will provide you with remote assistance from a dedicated expert to help you and provide 365 days of free updates that you do not have to worry about what you missed.
EC-Council CASE Java Exam Certification Details:
| Schedule Exam | Pearson VUE OREC-Council Store,ECC Exam Center |
| Number of Questions | 50 |
| Exam Code | 312-96 |
| Books / Training | Master Class |
| Exam Name | EC-Council Certified Application Security Engineer (CASE) - Java |
| Sample Questions | EC-Council CASE Java Sample Questions |
| Exam Price | $450 (USD) |
| Duration | 120 mins |
| Passing Score | 70% |
Guaranteed agreement
In addition to the free download of sample questions, we are also confident that candidates who use 312-96 test guide will pass the exam at one go. Certified Application Security Engineer (CASE) JAVA prep torrent is revised and updated according to the latest changes in the syllabus and the latest developments in theory and practice. Regardless of your weak foundation or rich experience, 312-96 exam torrent can bring you unexpected results. In the past, our passing rate has remained at 99%-100%. This is the most important reason why most candidates choose 312-96 test guide. Failure to pass the exam will result in a full refund. But as long as you want to continue to take the Certified Application Security Engineer (CASE) JAVA exam, we will not stop helping you until you win and pass the certification.
Customer privacy protection
In this age of the Internet, do you worry about receiving harassment of spam messages after you purchase a product, or discover that your product purchases or personal information are illegally used by other businesses? Please do not worry; we will always put the interests of customers in the first place, so 312-96 test guide ensure that your information will not be leaked to any third party. After you pass the exam, if you want to cancel your account, contact us by email and we will delete all your relevant information. Second, the purchase process of Certified Application Security Engineer (CASE) JAVA prep torrent is very safe and transactions are conducted through the most reliable guarantee platform.
Levi 
Tracy 
Helen 
Darlene 
Beverly 
Hogan 
Lyndon 
Dominic 
Jane 
Michell 
Elaine 
Harlan 
Merle 
Yale 
Mark 
Heather 
Phoenix 
Andre 
