← All Certifications
EC-Council

EC-Council CND v3 Certification

CND · 14 modules

Last updated: March 31, 2026

Exam Syllabus & Domains

The EC-Council CND v3 certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 20%

Network Security Fundamentals

  • 1.1 Understand network security concepts and defense-in-depth strategy
  • 1.2 Identify network components and their security implications
  • 1.3 Apply the OSI model and TCP/IP stack to security analysis
  • 1.4 Understand network security policies and compliance frameworks
Defense in DepthCIA TriadOSI Model SecurityTCP/IP SecurityNetwork TopologiesSecurity PoliciesCompliance FrameworksRisk AssessmentNetwork SegmentationLeast Privilege
Domain 2 20%

Network Security Threats & Vulnerabilities

  • 2.1 Identify common network attacks and threat vectors
  • 2.2 Understand vulnerability types in network infrastructure
  • 2.3 Analyze wireless network threats and attack techniques
  • 2.4 Recognize social engineering and insider threat indicators
DoS/DDoS AttacksMan-in-the-MiddleARP SpoofingDNS PoisoningPort ScanningPacket SniffingWireless AttacksRogue Access PointsInsider ThreatsZero-Day Vulnerabilities
Domain 3 25%

Network Security Controls/Protocols/Devices

  • 3.1 Configure and manage firewall technologies and ACLs
  • 3.2 Deploy and manage IDS/IPS systems effectively
  • 3.3 Implement VPN and encryption protocols for secure communications
  • 3.4 Configure network security devices including WAF and proxy servers
Firewall TypesACL ConfigurationIDS/IPS DeploymentVPN TechnologiesIPsec/SSL VPNWAF ConfigurationProxy ServersNAC Solutions802.1X AuthenticationNetwork Encryption
Domain 4 20%

Network Security Policy Design & Implementation

  • 4.1 Design comprehensive network security policies and procedures
  • 4.2 Implement network hardening and secure configuration baselines
  • 4.3 Apply access control mechanisms and identity management
  • 4.4 Manage patch and configuration management processes
Security Policy DesignHardening BaselinesCIS BenchmarksAccess Control ModelsIdentity ManagementPatch ManagementChange ManagementConfiguration AuditingBYOD PoliciesCloud Security Policies
Domain 5 15%

Network Security Monitoring & Incident Response

  • 5.1 Implement network monitoring using SIEM and log management
  • 5.2 Perform network traffic analysis and anomaly detection
  • 5.3 Execute incident response procedures for network security events
  • 5.4 Conduct vulnerability assessments and security audits
SIEM ConfigurationLog ManagementTraffic AnalysisAnomaly DetectionIncident ResponseVulnerability ScanningSecurity AuditingThreat IntelligenceNetwork ForensicsBusiness Continuity

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Network Security Fundamentals
20%
D2 Network Security Threats & Vulnerabilities
20%
D3 Network Security Controls/Protocols/Devices
25%
D4 Network Security Policy Design & Implementation
20%
D5 Network Security Monitoring & Incident Response
15%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the EC-Council CND v3 Practice Quiz

Get the EC-Council CND v3 Study Planner

Fillable PDF with 12-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your EC-Council CND v3 certification training:

Frequently Asked Questions

What is the EC-Council CND v3 certification?

The EC-Council CND v3 (CND) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the EC-Council CND v3 certification syllabus cover?

The EC-Council CND v3 exam syllabus covers 14 modules. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for EC-Council CND v3?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for EC-Council CND v3?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.