EC-Council CND v3 Study Roadmap

Domain 1: Network security fundamentals — Defense in depth, CIA triad, network components

Domain 1: Security policies, compliance frameworks, risk assessment, segmentation

Domain 2: Network threats — DoS/DDoS, MITM, ARP spoofing, DNS poisoning

Domain 2: Wireless attacks, social engineering, insider threats, zero-day vulnerabilities

Domain 3: Firewalls — Types, ACL configuration, rule management, best practices

Domain 3: IDS/IPS — Deployment, tuning, signature vs anomaly detection

Domain 3: VPN & encryption — IPsec, SSL/TLS VPN, WAF, proxy servers, NAC

Domain 4: Security policies — Design, hardening baselines, CIS benchmarks

Domain 4: Access control — Identity management, patch management, configuration auditing

Domain 5: Monitoring — SIEM, log management, traffic analysis, anomaly detection

Domain 5: Incident response — Procedures, vulnerability scanning, security auditing

Full Review: Practice exams, Weak areas, Hands-on exercises, Exam logistics