312-96 Exam Information and Outline
Certified Application Security Engineer (C|ASE Java) Certification
Syllabus Update Checked on: November 12, 2026
312-96 Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official 312-96 exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
EC-Council.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- 50 multiple-choice questions; 2 hours; passing score 70%
- Understanding Application Security, Threats and Attacks
- OWASP Top 10 and common application attacks
- Security Requirements Gathering
- Abuse cases, threat modelling and security requirements
- Secure Application Design and Architecture
- Secure design principles and architecture review
- Secure Coding Practices for Input Validation
- Validation, encoding and injection prevention in Java
- Secure Coding Practices for Authentication and Authorization
- Java EE security, Spring Security and access control
- Secure Coding Practices for Cryptography
- Java Cryptography Architecture, keys and certificates
- Secure Coding Practices for Session Management
- Session handling, cookies and CSRF protection
- Secure Coding Practices for Error Handling
- Exception handling and secure logging
- Static and Dynamic Application Security Testing
- SAST, code review and DAST tools
- Secure Deployment and Maintenance
- Hardening application servers and patch management