Chapter 4 of 8 · EC-Council 312-38
Application and Data Protection
Allowlisting, sandboxing, WAF, data integrity, encryption, backup and DLP, worth 10 percent.
- 4topics
- 18 minfast track
- 10%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Application Control, Sandboxing, Patching and WAFControl which applications run with whitelisting and blacklisting, isolate them in sandboxes, patch on schedule and filter web…4 min
- 2Data Security, Integrity, Access Control and Encryption at RestLearn why data security matters, how hashes and signatures keep integrity, how DAC, MAC and RBAC control access, and how to…4 min
- 3Encryption in Transit for Web, Database and EmailProtect data in transit with TLS between browser and web server, web server and database server, and in email delivery with…5 min
- 4Data Masking, Backup, Destruction and DLPLearn data masking and tokenization, backup types and the 3-2-1 rule, retention, secure data destruction per NIST SP 800-88, and…5 min
About this chapter
What this chapter covers
Application and Data Protection is 10% of the EC-Council CND 312-38 exam. It covers controlling and isolating applications, patching them, filtering web traffic with a web application firewall, and protecting data through its life: integrity, access control, encryption at rest and in transit, masking, backup, destruction and data loss prevention.
Questions are single-answer multiple choice. They are often "Which of the following" items or short named scenarios, asking you to choose the control that fits a described risk.
It has 16 outline topics, grouped into four pages.
How the topics fit together
The chapter protects the programs first and then the data they handle.
- The application page covers what may run, where it runs and how it is kept current and filtered.
- The data security pages cover integrity, access, and encryption of stored and moving data.
- The life cycle page covers masking, backup, destruction and leak prevention.
Match the control to the data state. At rest points to disk or database encryption, in transit to TLS, and in use to access control and DLP.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Try to name the best control for each short scenario before reading the answer. The exam often describes a risk and asks which control or setting fits.
Ready for more practice?
The full EC-Council 312-38 question bank has 800 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by EC-Council. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.