412-79 Exam Information and Guideline
EC-Council Certified Security Analyst (ECSA V9)
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
Security Analysis and Penetration Testing Methodologies
TCP IP Packet Analysis
Pre-penetration Testing Steps
Information Gathering Methodology
Vulnerability Analysis
External Network Penetration Testing Methodology
Internal Network Penetration Testing Methodology
Firewall Penetration Testing Methodology
IDS Penetration Testing Methodology
Web Application Penetration Testing Methodology
SQL Penetration Testing Methodology
Database Penetration Testing Methodology
To earn the prestigious EC-Council LPT (Master) Credential, you must successfully pass our most challenging practical exam available. The LPT (Master) practical exam is the capstone to EC-Council’s entire information security track; from the Certified Ethical Hacker Program (CEH) to theEC-Council Certified Security Analyst (ECSA) Program. It all culminates with the ultimate test of your career as a penetration tester – the Licensed Penetration Tester practical exam.
You will need to demonstrate a mastery of the skills required to conduct a full black box penetration test of a network provided to you by EC-Council on our cyber range, iLabs. You will follow the entire process taught to you through Ethical Hacking and Security Assessment, taking you from reconnaissance, scanning, enumeration, gaining access, maintaining access, then exploiting vulnerabilities that you will have to seek out in a network that only a true professional will be able to break. EC-Council will provide the entire cyber-range through its cloud based cyber range, iLabs. All tool-sets are provided to you – you bring the skill.
EC-Council, Certification, CEH, ECSA, IT Security Track, Security Assessment, Exploiting Vulnerabilities “Many have described report writing as one of least preferred, yet arguably one of the most critical parts of any penetration testing engagement.” To successfully pass the LPT (Master) practical, you must fully document your penetration test in a complete, professional penetration test report. This report will follow formats learned in the ECSA program, following industry acceptable, penetration testing and reporting procedures used by only the top professionals in the industry.
A. Eligibility Criteria
To be eligible to apply to sit for the LPT (Master) Exam, candidate must either.
Be an ECSA member in good standing (Your USD$100 application fee will be waived); or
Have a minimum of 2 years working experience in pentesting (You will need to pay USD$100 as a non-refundable application fee); or
Have any other approved industry certifications such as OSCP or GPEN cert (You will need to pay USD$100 as a non-refundable application fee).
B. Application Process
Applicants must apply directly to EC-Council via the online web form here: https://cert.eccouncil.org/lpt-application-form.html and provide the following:
A copy of police verification from applicant’s local law enforcement agency or EC-Council Declaration of No Criminal Conviction Form ;
EC-Council Code of Conduct (COC) Form ;
Updated Resume documenting penetration testing experience or skill;
Approved applicants must purchase the Licensed Penetration Tester (Master) Exam Kit via EC-Council online store within 3 months of receiving the approval email (the approval will expire post the 3 months and applicants will have to reapply and remit the $USD100 non-refundable application fee again).
Upon confirmation of the payment of USD$899, the LPT (Master) Exam Kit will be released to the applicant, which consists of:
iLabs Cyber Range Access Code (applicants are given a 5 day block access from activation date / code is valid for 3 months from the date of release)
Aspen LPT (Master) Dashboard Access Code (applicants have a 30 day window to submit their reports from activation date/code is valid for 3 months from the date)
A 2 year LPT (Master) License is included in the LPT (Master) Exam Kit valid for 2 year license / subject to ECE and renewal requirements)
C. How Is The Exam Conducted?
Candidates will receive instructions on how to activate their exams via EC-Council’s ASPEN portal via their registered email.
Candidates will activate their exam through ASPEN, using their unique Aspen LPT (Master) Dashboard Access Code will be provided.
Candidates are given 5 days (calculated from the activation of their Aspen LPT (Master) Dashboard) to complete the required blackbox penetration test of EC-Council’s cyber range.
Candidates are given 30 days (calculated from the activation of their Aspen LPT (Master) Dashboard) to submit their completed penetration test report through their ASPEN account.
Candidates will receive their exam results through official email notifications from EC-Council (lpt@eccouncil.org) within 14 days from the submission of the penetration testing report.
If a candidate requires extension to the iLabs Cyber Range access, a further 5-day block can be purchased at USD$200 per block (through EC-Council online store).
If a candidate submits a wrong or incomplete report, they will have to purchase a new Aspen LPT (Master) Dashboard Access Code at US$100 (through EC-Council online store). This option is only available before the expiry of the 30 days requirement (calculated from the activation of their Aspen LPT (Master) Dashboard).
If a candidate fails to complete the exam in the 30 days’ time period allotted for the exam, they will have to purchase a new exam.
D. LPT (Master) Credential
Successful candidates will receive the LPT (Master) Welcome Kit consisting of:
Membership card
Printed Certificate
LPT (Master) Plaque
Welcome Letter
Lapel Pin
EC-Council LPT (Master) T-shirt
The LPT(Master) license is valid for 2 years. After the initial 2 years, members will have to renew their LPT (Master) license by remitting the annual USD250 renewal fee.
Members are required to fulfil their ECE requirements to remain in good standing.