thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

EC-Council · Cybersecurity · Associate

EC-Council Certified Network Defender (C|ND) exam guide

Exam 312-38

The Certified Network Defender (CND) validates blue-team network defense: protecting, detecting, responding to and predicting threats across perimeter, endpoint, cloud, wireless and virtual environments. EC-Council maps it to DoD 8140 cyber defense work roles.

Questions100
Time limit240 minutes
Passing score60-85% depending on exam form
Exam feeSee official page
Valid for3 years
DeliveryEC-Council exam portal (remote proctored) or Pearson VUE test center

Format: Multiple choice. Fee note: EC-Council sells the exam mainly bundled with training (packages from about $1,699 on demand); standalone voucher pricing varies by region and is not published on the certification page.

Who it's for

Network administrators and junior security staff with networking fundamentals who are moving into network defense.

What the exam covers

Network Attacks and Defense Strategies—
Administrative and Technical Network Security—
Perimeter Security (Firewalls, IDS/IPS)—
Endpoint Security (Windows, Linux, Mobile, IoT)—
Application and Data Security—
Virtual, Cloud and Wireless Network Security—
Traffic and Log Monitoring—
Incident Response, Forensics, BC/DR—
Risk, Attack Surface and Threat Intelligence—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: Attend official EC-Council training, or apply for eligibility with relevant experience and the application fee.

Recommended: Fundamental networking knowledge and an IT or cybersecurity background.

Keeping it active

Valid 3 years. Maintain through the EC-Council Continuing Education (ECE) program: earn 120 ECE credits in the 3-year cycle and pay the annual ECE fee.

Skills & careers

Skills it validates

  • Network security controls and policies
  • Configuring firewalls, IDS/IPS and VPNs
  • Endpoint and IoT security
  • Cloud, virtual and wireless network security
  • Traffic and log monitoring
  • Incident response and BC/DR
  • Threat intelligence and attack surface analysis

Job roles

Network Security AdministratorNetwork Defense TechnicianCyber Defense AnalystSOC AnalystNetwork Engineer

DoD 8140

EC-Council maps CND to DoD 8140 work roles 511 (Cyber Defense Analyst), 521 (Cyber Defense Infrastructure Support Specialist) and 531 (Cyber Defense Incident Responder). Open the DoD Workforce Navigator

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Network attacks, defense strategies and administrative security.
  2. Week 2: Perimeter security: firewalls, IDS/IPS, VPN and router/switch hardening.
  3. Week 3: Endpoint, application, data, virtual, cloud and wireless security.
  4. Week 4: Traffic and log monitoring, incident response, BC/DR, risk and threat intelligence.
  5. Week 5: Lab practice and timed practice exams.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Know firewall and IDS deployment types and their placement.
  • Expect Wireshark filter and log interpretation questions.
  • Learn the protect-detect-respond-predict model EC-Council uses.
  • Aim above 85% in practice since cut scores vary by form.
  • 4 hours for 100 questions is generous; review flagged items.

Key terms for this exam

All 36 terms Study with thinQcards™

Frequently asked questions

How much does CND cost?

EC-Council sells CND mainly with training from about $1,699 on demand; exam-only pricing varies by region.

Is CND DoD 8140 approved?

Yes. EC-Council maps it to work roles 511, 521 and 531 and states it is approved under DoD 8140/8570.

CND vs CEH?

CND is defensive (blue team); CEH is offensive. Many take CND first.

How many questions are on CND?

100 multiple choice questions in 4 hours.

How do I renew CND?

Earn 120 ECE credits over 3 years and pay the annual ECE fee.

Official page: www.eccouncil.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.