8140.study
← All certifications

Certified Network Defender (CND)

EC-Council

EC-Council's network defense certification covering protect-detect-respond-predict skills for securing enterprise networks, endpoints, cloud, and IoT.

We have a course for this

Built from this exam's published objectives. The first module is free.

EC-Council CND

Intermediate · 24 hrs

Baseline certification levels

This certification satisfies these DoD baseline levels — the IAT / IAM / IASAE / CSSP requirement many contracts still state. It's a separate question from the 8140 work roles above, and there is no official mapping between the two.

IAT Level IIAT Level IIIAM Level ICSSP Infrastructure Support

What this qualifies you for

Listed specifically for 9 work roles — up to Intermediate proficiency. Because options cascade downward, a cert listed at Advanced also satisfies Intermediate and Basic for that role.

411Technical Support SpecialistProvides technical support to customers who need assistance utilizing client level hardware and software in accordance with established or approved organizational process components. (i.e., Master Incident Management Plan, when applicable).Intermediate441Network Operations (NETOPS) SpecialistPlans, implements, and operates network services/systems, to include hardware and virtual environments.Basic451System Administrator (SYSADMIN)Installs, configures, troubleshoots, and maintains hardware, software, and administers system accounts.Basic521Cyber Defense Infrastructure Support SpecialistTests, implements, deploys, maintains, and administers the infrastructure hardware and software.Basic631Information Systems Security DeveloperDesigns, develops, tests, and evaluates information system security throughout the systems development lifecycle.Basic632Systems DeveloperDesigns, develops, tests, and evaluates information systems throughout the systems development lifecycle.Basic641Systems Requirements PlannerConsults with customers to evaluate functional requirements and translate functional requirements into technical solutions.Basic651Enterprise ArchitectDevelops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures.Basic671System Testing and Evaluation (T&E) SpecialistPlans, prepares, and executes tests of systems to evaluate results against specifications and requirements as well as analyze/report test results.Basic
Also listed for 14 Cyberspace Enablers roles — but so is every other certification

The Enablers matrix isn’t role-differentiated: the same certification options are listed for all 14 roles at every proficiency level. We verified that across all 14. So this is true, and it carries no information about this credential specifically — which is why it isn’t in the count above.

211 Forensics Analyst221 Cyber Crime Investigator711 Cyber Instructional Curriculum Developer712 Cyber Instructor731 Cyber Legal Advisor732 Privacy Compliance Manager751 Cyber Workforce Developer and Manager752 Cyber Policy and Strategy Planner801 Program Manager802 IT Project Manager803 Product Support Manager804 IT Investment/Portfolio Manager805 IT Program Auditor901 Executive Cyber Leader

Renewal

3year cycle120ECE credit per cycle

USD $80 annual EC-Council Continuing Education (CE) membership fee (approx. $240 over the 3-year cycle), in addition to submitting 120 ECE credits

This is the issuer’s clock. 8140 runs a second one — 20 hours of CPD a year, at every proficiency level, which applies even if you hold no certification at all. How that works

EC-Council publishes the 20 modules/objective areas without percentage weights on the official course page; all domains are therefore recorded as weight 0 (unweighted). Passing score is not a fixed percentage; EC-Council uses multiple exam forms with a per-form cut score, stated as 60%-85%. Some third-party sources cite a fixed '70/100' but this is not confirmed on the official page. Version 'v3' is per EC-Council/EDUSUM syllabus references; the official course page did not display an explicit version label at time of capture. The 20 modules include 4 self-study appendices (networking fundamentals, physical security, VPN, MAC systems).

Source: EC-Council - Certified Network Defender (CND) · dated 2026-07-17 · checked 2026-07-17

Verifying it

EC-Council publishes a lookup a third party can use without your involvement.

Candidate Name and Certification Number

Issuer lookupTrack this credential

EC-Council publishes the 20 modules/objective areas without percentage weights on the official course page; all domains are therefore recorded as weight 0 (unweighted). Passing score is not a fixed percentage; EC-Council uses multiple exam forms with a per-form cut score, stated as 60%-85%. Some third-party sources cite a fixed '70/100' but this is not confirmed on the official page. Version 'v3' is per EC-Council/EDUSUM syllabus references; the official course page did not display an explicit version label at time of capture. The 20 modules include 4 self-study appendices (networking fundamentals, physical security, VPN, MAC systems).

Source: EC-Council - Certified Network Defender (CND) · dated 2026-07-17 · checked 2026-07-17

Exam blueprint

Verified against EC-Council’s published outline.

312-38 · v3

Current

100 questions · 4 hours · passing score varies 60%-85% (cut score set per exam form)

Network Attacks and Defense Strategies
Administrative Network Security
Technical Network Security
Network Perimeter Security
Endpoint Security - Windows Systems
Endpoint Security - Linux Systems
Endpoint Security - Mobile Devices
Endpoint Security - IoT Devices
Administrative Application Security
Data Security
Enterprise Virtual Network Security
Enterprise Cloud Security
Enterprise Wireless Network Security
Network Traffic Monitoring and Analysis
Network Logs Monitoring and Analysis
Incident Response and Forensics Investigation
Business Continuity and Disaster Recovery
Risk Anticipation with Risk Management
Threat Assessment with Attack Surface Analysis
Threat Prediction with Cyber Threat Intelligence

EC-Council publishes objective areas without percentage weightings, so none are shown.

EC-Council publishes the 20 modules/objective areas without percentage weights on the official course page; all domains are therefore recorded as weight 0 (unweighted). Passing score is not a fixed percentage; EC-Council uses multiple exam forms with a per-form cut score, stated as 60%-85%. Some third-party sources cite a fixed '70/100' but this is not confirmed on the official page. Version 'v3' is per EC-Council/EDUSUM syllabus references; the official course page did not display an explicit version label at time of capture. The 20 modules include 4 self-study appendices (networking fundamentals, physical security, VPN, MAC systems).

Source: EC-Council - Certified Network Defender (CND) · dated 2026-07-17 · checked 2026-07-17