Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Training Camp's 5-day EC-Council CND v3 boot camp covers network defense, security operations, and threat management with a The blue team counterpart to CEH. Exam voucher and free retake included.

EC-Council Partner of the Year

Get EC-Council CND Certified

Official EC-Council CND Boot Camp. Expert network defense training, mobile app, exam voucher, free retake, and hands-on labs included. Train like your career depends on it.

Verified for 2026 CND-v3 Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Free Retake

Exam Protection Included

Official EC-Council

Authorized Training

Proven by 50,000+. Backed by our Free Retake Guarantee

Start Monday. Test Friday. No Waiting. No Risk.

5 days designed for network and security professionals who need results fast. Walk out exam-ready with our free retake guarantee.

Program Abstract

REF: CND-v3 20
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 5

The CND is Hard. We Know How to Pass It.

This intensive 5-day boot camp program covers all domains of the CND certification, teaching you proven strategies to pass on your first attempt. Our expert instructors guide you through the material with hands-on exercises and real-world scenarios. By Friday, you’ll be ready to test.

Official EC-Council Training.

Third-party materials can’t keep up with exam changes. We use EC-Council’s authorized courseware, so you’re studying exactly what’s on the test—not outdated guesswork.

System Integrity Check
Content Source EC-Council Official
Curriculum Ver. 2026v2
Instructor Auth. Verified
Exam Alignment 100% MATCH

Exam Fee Included.

$550 exam voucher included with your enrollment. No surprise costs, no last-minute purchases—just focus on passing.

Mobile Learning

Start Right Away

Unlock iOS/Android app immediately upon enrollment.

Authorized Material

Course from the Source

Official courseware, matched to the current exam version.

All-Inclusive

Exam Fee Included

We cover your $550 exam fee. No hidden costs.

Sim Engine

Exam Deja Vu

Practice with CAT-style questions. No surprises.

Retake Policy

Exam Protection Included

Unlimited class returns if you need a second shot.

Flexible Schedule

Training Fits Your Life

Day, evening, online or in-person—your choice.

Test Center

Test While It's Fresh

Take your exam on-site within 7 days of class.

Expert Support

Never On Your Own

180 days of unlimited 1-on-1 coaching after class.

Test Friday. No Waiting.

Our private Pearson VUE testing center means you take your exam immediately after class. No scheduling delays, no waiting weeks to test while knowledge fades.

Friday 5PM
Bootcamp Concludes - You leave with a personalized attack plan.
Class Ends
Unlimited 1-on-1
AI Gap Analysis - We identify your weak domains using our simulation engine.
Gap Analysis
Exam Day
Exam Protection Active - If you don't pass, your next seat is free.
Certified
·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM CISSP: Certified Information Systems Security Professional. CISM: Certified Information Security Manager.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Certified Network Defender Award Winning Training

Partner of the Year

EC-Council CND training from an EC-Council Partner of the Year is backed by 25 years of certification boot camp experience at Training Camp.

Certified Network Defender CND Exams

Exams Delivered Onsite

Training Camp is the only company in the US and Canada allowed to deliver EC-Council exams onsite, so CND candidates test where they trained.

Certified Network Defender Free Exam Retake

Free Exam Retake

Don’t pass the CND exam on your first attempt? Exam assurance includes a free second exam voucher and a full course retake.

Hands On CND Certification Training

Practical Defense Expertise

CND v3 aligns with the NICE framework, with 20 modules spanning network defense, threat prediction and incident response. Instructors drill the defend-detect-respond-predict cycle.

Certified Network Defender Jobs In Demand

Blue Team in Demand

CND, the defensive counterpart to CEH, is on the DoD 8140 Approved Qualifications Matrix for cyber defense roles, taught by working blue team instructors.

Certified Network Defender Exam Support

Dedicated Support

After the CND boot camp ends, students keep instructor access and useful EC-Council resources for ongoing mentoring while applying new skills.

EC-Council CND Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    EC-Council CND Certification
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3

    MODULE_ID: CND-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Network Security Fundamentals and Defense Strategies

    Module 1: Network Attacks and Defense Strategies
    L.01.1
    Protect, Detect, Respond, Predict Adaptive Defense Approach
    L.01.2
    Reconnaissance, Access, Malware, and Application Layer Attacks
    L.01.3
    Module 2: Administrative Network Security
    L.01.4
    Security Policies, Standards, Procedures, and Awareness Programs
    L.01.5
    Regulatory Frameworks: PCI DSS, HIPAA, GDPR, ISO 27001, NIST
    L.01.6
    Lab: Mapping Attack Techniques to Defensive Controls
    L.01.7
    Lab: Drafting Acceptable Use and Password Policies
    L.01.8
    Module 3: Technical Network Security
    L.01.9
    Access Control Models, IAM, Zero Trust, and Multi-Factor Authentication
    L.01.10
    Cryptography, PKI, Hashing, and Network Segmentation Fundamentals
    L.01.11
    Module 4: Network Perimeter Security
    L.01.12
    Firewall Types, Topologies, Rule Design, and Next-Generation Firewalls
    L.01.13
    IDS/IPS Deployment, Signature Versus Anomaly Detection, Proxies, VPNs
    L.01.14
    Lab: Configuring pfSense Firewall Rules and NAT
    L.01.15
    Lab: Deploying Snort IDS and Tuning Signatures
    L.01.16

    MODULE_ID: CND-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    Endpoint Security Across Platforms

    Module 5: Endpoint Security for Windows Systems
    L.02.1
    Windows Security Baselines, Group Policy, BitLocker, and Windows Defender
    L.02.2
    Patch Management, Account Lockout, and User Access Control
    L.02.3
    Module 6: Endpoint Security for Linux Systems
    L.02.4
    Linux Hardening: SELinux, AppArmor, iptables, Secure SSH, Auditd
    L.02.5
    Lab: Applying CIS Benchmarks With Group Policy
    L.02.6
    Lab: Hardening Linux With Lynis, Firewalld, and SELinux
    L.02.7
    Module 7: Endpoint Security for Mobile Devices
    L.02.8
    BYOD, COPE, and CYOD Policies and Mobile Device Management
    L.02.9
    Android and iOS Security Controls and Enterprise App Management
    L.02.10
    Module 8: Endpoint Security for IoT Devices
    L.02.11
    IoT Architecture, Communication Protocols, and Attack Surface
    L.02.12
    IoT Security Frameworks, Device Hardening, and Network Isolation
    L.02.13
    Lab: Enforcing Mobile Device Policies With Microsoft Intune
    L.02.14
    Lab: Discovering and Segmenting IoT Devices on the Network
    L.02.15

    MODULE_ID: CND-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Enterprise Network Security & Data Protection

    Module 9: Administrative Application Security
    L.03.1
    Application Whitelisting, Blacklisting, Sandboxing, and Patch Management
    L.03.2
    Web Application Firewalls and Secure Deployment Practices
    L.03.3
    Module 10: Data Security and Protection Controls
    L.03.4
    Data Classification, Access Controls, and Data Loss Prevention
    L.03.5
    Encryption at Rest and in Transit, Data Masking, and Backups
    L.03.6
    Lab: Configuring AppLocker Application Control Policies
    L.03.7
    Lab: Implementing File Encryption and DLP Rules
    L.03.8
    Module 11: Enterprise Virtual Network Security
    L.03.9
    Hypervisor, Container, Docker, and Kubernetes Security Controls
    L.03.10
    SDN and NFV Security and Virtual Network Segmentation
    L.03.11
    Module 12: Enterprise Cloud Security
    L.03.12
    Shared Responsibility Model Across IaaS, PaaS, and SaaS
    L.03.13
    AWS, Azure, and Google Cloud Security Services and Best Practices
    L.03.14
    Lab: Securing Docker Containers and Kubernetes Pods
    L.03.15
    Lab: Configuring AWS IAM Policies and Security Groups
    L.03.16

    MODULE_ID: CND-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Wireless Security, Network Monitoring, and Incident Response

    Module 13: Enterprise Wireless Network Security
    L.04.1
    WPA3, 802.1X, RADIUS, and Rogue Access Point Detection
    L.04.2
    Wireless Attack Countermeasures and Enterprise WLAN Design
    L.04.3
    Module 14: Network Traffic Monitoring and Analysis
    L.04.4
    Baselining Normal Traffic and Detecting Attack Signatures
    L.04.5
    Lab: Auditing Wireless Networks and Enforcing WPA3 Enterprise
    L.04.6
    Lab: Analyzing Suspicious Traffic in Wireshark and Zeek
    L.04.7
    Module 15: Network Logs Monitoring and Analysis
    L.04.8
    Windows, Linux, Firewall, and Router Log Analysis Techniques
    L.04.9
    Centralized Logging and SIEM Correlation With Splunk
    L.04.10
    Module 16: Incident Response and Forensic Investigation
    L.04.11
    Incident Handling Process, First Responder Duties, and Evidence Preservation
    L.04.12
    Forensic Investigation Methodology and Chain of Custody
    L.04.13
    Lab: Correlating Events in Splunk to Detect a Breach
    L.04.14
    Lab: Handling an Incident From Triage to Containment
    L.04.15

    MODULE_ID: CND-05

    Live Training QS: ~7
    DAY 5
    Critical Path

    Risk Management, Threat Prediction, and Business Continuity

    Module 17: Business Continuity and Disaster Recovery
    L.05.1
    BIA, RTO, RPO, Backup Strategies, and DR Site Options
    L.05.2
    Module 18: Risk Anticipation With Risk Management
    L.05.3
    Risk Identification, Assessment, Treatment, and Risk Registers
    L.05.4
    NIST RMF, ISO 31000, and Enterprise Risk Frameworks
    L.05.5
    Lab: Building a Business Impact Analysis and DR Plan
    L.05.6
    Lab: Scoring Risks and Selecting Treatments in a Risk Register
    L.05.7
    Module 19: Threat Assessment With Attack Surface Analysis
    L.05.8
    Attack Surface Visualization, Reduction, and Vulnerability Scanning With Nessus
    L.05.9
    Module 20: Threat Prediction With Cyber Threat Intelligence
    L.05.10
    Threat Intelligence Types, Sources, Feeds, and Platforms
    L.05.11
    Lab: Mapping the Attack Surface and Consuming Threat Feeds
    L.05.12
    Eight-Domain Blueprint Review and Scenario-Question Strategy
    L.05.13
    Full-Length Practice Exam and Review
    L.05.14
    Exam: 312-38
    L.05.15

    MODULE_ID: POST

    Live Training QS: ~8
    AFTER CLASS
    Critical Path

    After Class

    COURSE PROGRESS Day 0 of 5
    FREQUENTLY ASKED QUESTIONS

    EC-Council CND Certification
    FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    Network administrators, security analysts, and IT professionals looking to enhance their skills in network security and defense.

    Basic networking and IT security knowledge is recommended but not required.

    Yes! Participants will engage in real-world labs on threat detection, forensics, and network monitoring.

    CND certification is highly valued in network security roles, including SOC analyst, network security engineer, and IT security specialist.

    Participants will gain hands-on experience with SIEM tools, packet analyzers, IDS/IPS systems, and security monitoring platforms.

    CND focuses on network security, threat intelligence, and defense, while CEH (Certified Ethical Hacker) emphasizes offensive penetration testing techniques.

    Get the Free
    CND Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    CND Study Tools
    & Resources

    Expert insights to guide your certification journey.
    Real strategies from professionals who passed.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Continue Your Journey

    CND Related Courses

    Advance your career with these recommended certifications

    Featured on