CND (Certified Network Defender)
CND is EC-Council's network security certification, focused on protecting, detecting and responding to threats on the network. Its exam spans network defense management, perimeter protection with firewalls and IDS, endpoint, application and data protection, virtual, cloud and wireless networks, traffic and log monitoring, incident response, and risk and threat prediction. EC-Council names network administrators, network security engineers, network defense technicians, security analysts and security operators as the audience.
Updated
Exam Details
- Issuer
- EC-Council
- Level
- Intermediate
- Exam code
- 312-38
- Exam type
- Multiple choice
- Questions
- 100
- Duration
- 4 hours
- Passing score
- 60% to 85%, depending on the exam form
- Exam fee
- $550
- Validity
- 3 years
- Tracks
- Network Security, Security Operations
Proctored multiple-choice exam delivered at EC-Council test centers, with several exam forms drawn from different question banks.
EC-Council lists the CND exam voucher at $550. Candidates who qualify through experience instead of official training also pay a $100 non-refundable eligibility application fee.
Requirements and Renewal
Prerequisites
Official EC-Council training or at least two years of information security work experience with an approved eligibility application. EC-Council expects students in the training program to have fundamental knowledge of networking concepts.
Renewal
EC-Council Continuing Education (ECE): 120 credits per certification within each three-year cycle and an annual ECE fee of $80. Members who miss the requirements are suspended and have 12 months to comply before revocation.
Current Version
CND v3, exam blueprint v4.0.
Exam Domains
8 domains| Domain | Weight |
|---|---|
| Network Defense Management | 10% |
| Network Perimeter Protection | 10% |
| Endpoint Protection | 20% |
| Application and Data Protection | 10% |
| Enterprise Virtual, Cloud, and Wireless Network Protection | 15% |
| Incident Detection | 10% |
| Incident Response | 10% |
| Incident Prediction | 15% |
DoD 8140 Work Roles
9 work rolesThe DoD 8140 Qualification Matrix V2.1 lists CND as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does CND stand for?→
CND stands for Certified Network Defender, an EC-Council certification. The current training release is CND v3.
How much does the CND exam cost?→
EC-Council lists the CND exam voucher at $550. Candidates who qualify through experience instead of official training also pay a $100 eligibility application fee.
How many questions are on the CND exam?→
Exam 312-38 has 100 multiple-choice questions with a 4-hour limit. The cut score ranges from 60% to 85% depending on the exam form.
Does CND expire?→
CND is valid for three years. Holders need 120 continuing education credits in each three-year cycle and pay an $80 annual fee to stay certified.
Exam details are checked against official EC-Council pages. Fees, exam versions, and renewal rules change; confirm with EC-Council before registering. CND is a trademark of its owner. This site is not affiliated with or endorsed by EC-Council.