C|CT

EC-Council · Exam 212-82

Certified Cybersecurity

Technician

Master 20 domains of cybersecurity — from network fundamentals and cryptography to incident response, cloud security, AI security, and penetration testing fundamentals. The launchpad for every EC-Council certification path.

Network Security Cryptography IAM Cloud Security IoT Forensics Incident Response AI Security Web Security SOC Wireless Security DevSecOps

Enroll Now

C|CT Program

Certified Cybersecurity Technician · 20 Modules

Information Security Threats and Vulnerabilities

Module 01

Information Security Attacks

Module 02

Network Security Fundamentals

Module 03

Identification, Authentication & Authorization

Module 04

Administrative Security Controls

Module 05

Physical Security Controls

Module 06

+ 14 more modules: Technical Controls, Web, Cloud, IoT, AI & more

Modules

Full 212-82 syllabus

Questions

Multiple choice exam

3 Hours

Duration

Timed exam

24/7

Support

Expert guidance

Why C|CT

Your Gateway to a Cybersecurity Career

The C|CT certification gives you a structured, practical foundation across 20 cybersecurity domains — from network fundamentals to AI security and penetration testing. No experience required.

No Prerequisites Required

Open to all — students, IT professionals, and career changers can start without any prior cybersecurity background.

20 Comprehensive Domains

Covers the broadest cybersecurity syllabus at the foundational level — network security, cryptography, cloud, AI, IoT, forensics, and more.

EC-Council Accredited

C|CT is ANSI-accredited and globally recognised — issued by EC-Council, the world's largest cybersecurity certification body.

Career Launchpad

The official entry point for the EC-Council certification path — C|EH, C|PENT, C|TIA, and beyond.

Skills You'll Gain

The Complete C|CT Skill Set

From threat fundamentals to advanced topics like AI security, cloud, IoT, and pen testing — every skill area from the 212-82 exam syllabus.

Threats & Vulnerabilities

Cyber threats, malware, attack vectors, APTs, insider threats, CVE/CVSS, and zero-day threat identification.

Information Security Attacks

Phishing, social engineering, MITM, XSS, SQLi, DoS/DDoS, ransomware, and supply chain attacks.

Network Security

OSI model, TCP/IP, DNS, HTTP/S, firewalls, IDS/IPS, packet analysis, and network topologies.

IAM & Zero Trust

MFA, SSO, OAuth 2.0, SAML, RBAC, ABAC, PAM, directory services, and Zero Trust IAM.

Technical Controls

Firewalls, WAF, SIEM, endpoint security, DLP, VPN, NAC, patch management, and hardening.

Web Application Security

OWASP Top 10, XSS, SQLi, CSRF, IDOR, security headers, Burp Suite basics, and web app firewalls.

Cryptography

AES, RSA, ECC, hashing, PKI, digital signatures, TLS/SSL, and certificate management.

Cloud Security

IaaS/PaaS/SaaS, shared responsibility, CASB, CSPM, container security, and serverless security.

IoT & OT Security

MQTT/CoAP, OWASP IoT Top 10, device hardening, firmware vulnerabilities, and industrial IoT/SCADA.

AI Security

Adversarial ML, AI model poisoning, deepfakes, AI governance, ethical AI, and AI in cyber tools.

Incident Response

IR lifecycle, NIST SP 800-61, triage, containment, eradication, recovery, and IR playbooks.

Penetration Testing

PTES phases, rules of engagement, reconnaissance, vulnerability assessment, and tools overview.

Who Should Enroll

C|CT Is for Everyone Starting in Cybersecurity

Whether you are entering cybersecurity fresh or moving from IT, C|CT gives you the broad foundation every employer and every advanced EC-Council certification demands.

👨‍🎓

Students & Graduates

Ideal starting certification for aspiring cybersecurity professionals — no experience required.

💼

IT Professionals

Network admins, sysadmins, and helpdesk staff moving into a cybersecurity role.

🔄

Career Changers

Non-IT professionals transitioning into cybersecurity — the broadest foundational credential available.

🛡️

Security Enthusiasts

Self-taught learners seeking an official, globally recognised EC-Council credential.

Your EC-Council Certification Roadmap

C|CT Certified Cybersecurity Technician Start Here

Start here — Exam 212-82

C|EH Certified Ethical Hacker

World's #1 ethical hacking cert — Exam 312-50

C|PENT Certified Penetration Testing Professional

Advanced pen testing — Exam 312-64

C|EH Master CEH Master

6-hour practical exam — the elite credential

Curriculum

C|CT — 20 Course Modules

Every 212-82 exam objective covered — from information security threats and network fundamentals to AI security, digital forensics, and penetration testing.

Cyber threats, malware types, and attack vectors
Advanced Persistent Threats (APTs)
Insider threats and human factors
Vulnerability classifications and assessment
CVE and CVSS scoring frameworks
Zero-day threats and exploit lifecycles

Phishing and social engineering techniques
Man-in-the-Middle (MITM) attacks
Cross-Site Scripting (XSS) and SQL Injection (SQLi)
DoS and DDoS attack methodologies
Ransomware and malware attack chains
Supply chain attacks
Physical attacks and tailgating
Hands-on Lab

OSI model and TCP/IP stack
DNS, HTTP/S, DHCP protocols
Firewalls, IDS/IPS, and NAT
Load balancers and network topologies
Packet analysis fundamentals

IAM concepts and principles
Multi-Factor Authentication (MFA)
Single Sign-On (SSO), OAuth 2.0, and SAML
Role-Based Access Control (RBAC) and ABAC
Privileged Access Management (PAM)
Directory services
Zero Trust IAM principles

Security policies and procedures
Risk management frameworks
NIST Cybersecurity Framework (CSF)
ISO 27001 and compliance frameworks
Business Continuity Planning (BCP) and Disaster Recovery
Security awareness training programs

Physical access controls and barriers
CCTV and surveillance systems
Biometric authentication systems
Clean desk and clear screen policies
Environmental controls and data centre security
Visitor management procedures

Firewalls and Web Application Firewalls (WAF)
SIEM implementation and configuration
Endpoint security and antimalware
Data Loss Prevention (DLP)
Encryption and VPN technologies
Network Access Control (NAC)
Patch management and system hardening

Diagnostic tools and methodologies
Wireshark packet analysis
Ping, traceroute, and network utilities
Network performance issue identification
Cable testing and physical layer diagnostics
Log analysis for troubleshooting

OWASP Top 10 vulnerabilities
Cross-Site Scripting (XSS) and SQL Injection
CSRF and IDOR vulnerabilities
Insecure deserialization
Security headers implementation
Burp Suite basics
Web application firewalls

Secure SDLC phases and integration
Static and Dynamic Application Security Testing (SAST/DAST)
Threat modelling techniques
Secure code review practices
Dependency and third-party scanning
DevSecOps integration
CI/CD pipeline security

Symmetric and asymmetric encryption
AES, RSA, and ECC algorithms
Hashing algorithms and integrity verification
Public Key Infrastructure (PKI)
Digital signatures
TLS/SSL protocols
Certificate management

802.11 standards and wireless protocols
WPA3 and wireless security evolution
Rogue access points and evil twin attacks
Wireless Intrusion Detection Systems
Captive portals
Bluetooth and BLE security
Aircrack-ng and wireless security tools

IoT architecture and components
MQTT and CoAP protocols
OWASP IoT Top 10
IoT device hardening
Firmware vulnerabilities and analysis
Industrial IoT (IIoT) security
OT/SCADA security considerations

Data classification frameworks
Data Loss Prevention (DLP) strategies
Encryption at rest and in transit
GDPR and data protection regulations
Data masking and anonymisation
Backup strategies and integrity
Secure data disposal
Database security best practices

Cloud service models: IaaS, PaaS, SaaS
Shared responsibility model
Cloud Access Security Broker (CASB)
Cloud Security Posture Management (CSPM)
Container security principles
Serverless security considerations

AI and ML security risks
Adversarial machine learning
AI model poisoning attacks
Deepfakes and synthetic media threats
AI governance frameworks
Ethical AI principles
AI tools in cybersecurity operations

Threat intelligence lifecycle
Indicators of Compromise (IOCs)
MITRE ATT&CK framework
Threat feeds and subscriptions
OSINT techniques and tools
Threat intelligence platforms
APT tracking and profiling

Incident response lifecycle
NIST SP 800-61 guidelines
Triage and initial assessment
Containment strategies
Eradication and recovery
Post-incident review
IR playbooks and automation

Forensic process and methodology
Evidence acquisition techniques
Chain of custody principles
Memory forensics
Disk imaging with forensic tools
Autopsy and Volatility usage
Log analysis for forensic investigations

Penetration testing phases
Penetration Testing Execution Standard (PTES)
Rules of engagement
Reconnaissance and footprinting
Vulnerability assessment techniques
Penetration test reporting
Tools overview: Nmap, Metasploit, Burp Suite

Have Questions?

Chat with our EC-Council certified trainers instantly.

WhatsApp Us Call Us