Use this quick start guide to collect all the information about EC-Council DFE (112-53) Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the 112-53 EC-Council Digital Forensics Essentials exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual EC-Council DFE certification exam.
The EC-Council DFE certification is mainly targeted to those candidates who want to build their career in Essentials Series domain. The EC-Council Digital Forensics Essentials (DFE) exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of EC-Council DFE.
EC-Council DFE Exam Summary:
| Exam Name | EC-Council Digital Forensics Essentials (DFE) |
| Exam Code | 112-53 |
| Exam Price | $299 (USD) |
| Duration | 120 mins |
| Number of Questions | 75 |
| Passing Score | 70% |
| Books / Training | Courseware |
| Schedule Exam | ECC Exam Center |
| Sample Questions | EC-Council DFE Sample Questions |
| Practice Exam | EC-Council 112-53 Certification Practice Exam |
EC-Council 112-53 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Computer Forensics Fundamentals |
- Fundamentals of Computer Forensics - Digital Evidence - Forensic Readiness - Roles and Responsibilities of a Forensic Investigator - Legal Compliance in Computer Forensics |
| Computer Forensics Investigation Process |
- Forensic Investigation Process and its Importance - Forensic Investigation Process – Pre-Investigation Phase - Forensic Investigation Process – Investigation Phase - Forensic Investigation Process - Post investigation Phase |
| Understanding Hard Disks and File Systems |
- Different Types of Disk Drives and their Characteristics - Logical Structure of a Disk - Booting Process of Windows, Linux, and Mac Operating Systems - File Systems of Windows, Linux, and Mac Operating Systems - File System Examination |
| Data Acquisition and Duplication |
- Data Acquisition Fundamentals - Types of Data Acquisition - Data Acquisition Format - Data Acquisition Methodology |
| Defeating Anti-forensics Techniques |
- Anti-Forensics and its Techniques - Anti-Forensics Countermeasures |
| Windows Forensics |
- Volatile and Non-Volatile Information - Windows Memory and Registry Analysis - Cache, Cookie, and History Recorded in Web Browsers - Windows Files and Metadata |
| Linux and Mac Forensics |
- Volatile and Non-Volatile Data in Linux - Analyze Filesystem Images Using The Sleuth Kit - Memory Forensics - Mac Forensics |
| Network Forensics |
- Network Forensics Fundamentals - Event Correlation Concepts and Types - Identify Indicators of Compromise (IoCs) from Network Logs - Investigate Network Traffic |
| Investigating Web Attacks |
- Web Application Forensics - IIS and Apache Web Server Logs - Investigating Web Attacks on Windows-based Servers - Detect and Investigate Attacks on Web Applications |
| Dark Web Forensics |
- Dark Web - Dark Web Forensics - Tor Browser Forensics |
| Investigating Email Crimes |
- Email Basics - Email Crime Investigation and its Steps |
| Malware Forensics |
- Malware, its Components and Distribution Methods - Malware Forensics Fundamentals and Recognize Types of Malware Analysis - Static Malware Analysis - Analyze Suspicious Word Documents - Dynamic Malware Analysis - System Behavior Analysis - Network Behavior Analysis |
To ensure success in EC-Council DFE certification exam, we recommend authorized training course, practice test and hands-on experience to prepare for EC-Council Digital Forensics Essentials (112-53) exam.