EC-Council CND v3 Study Roadmap

Domain 1: Network security fundamentals (Defense in depth, CIA triad, network components)

Domain 1: Security policies, compliance frameworks, risk assessment, segmentation

Domain 2: Network threats (DoS/DDoS, MITM, ARP spoofing, DNS poisoning)

Domain 2: Wireless attacks, social engineering, insider threats, zero-day vulnerabilities

Domain 3: Firewalls (Types, ACL configuration, rule management, best practices)

Domain 3: IDS/IPS (Deployment, tuning, signature vs anomaly detection)

Domain 3: VPN & encryption (IPsec, SSL/TLS VPN, WAF, proxy servers, NAC)

Domain 4: Security policies (Design, hardening baselines, CIS benchmarks)

Domain 4: Access control (Identity management, patch management, configuration auditing)

Domain 5: Monitoring (SIEM, log management, traffic analysis, anomaly detection)

Domain 5: Incident response (Procedures, vulnerability scanning, security auditing)

Full Review: Practice exams, Weak areas, Hands-on exercises, Exam logistics