718 practice questions for EC-Council Certified Network Defender v3 (CND), exam 312-38, with full explanations.
Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.
- 718 questions mapped to the CND v3 exam blueprint
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
A 312-38 attempt costs US$550. This pack is US$39, paid once.
Try 10 questions free before you buy.
Last updated September 2026 · 718 questions
What makes the CND hard
CND is the blue-team counterpart to CEH, and the v3 blueprint is built around a protect, detect, respond, predict model: eight domains, 100 questions, four hours, and a passing score set per exam form between 60% and 85%.
It is broad rather than deep, and the breadth is the difficulty, because the same exam asks about Kubernetes hardening, Windows Active Directory, wireless encryption and business continuity standards.
Network Perimeter Protection is the biggest domain at 16%: access control models, IAM, cryptography, segmentation, firewall types and deployment, IDS and IPS, and Zero Trust with software-defined perimeter. Endpoint Protection at 15% covers Windows security components, AD best practice, Linux hardening and enterprise mobile and IoT security. Incident Detection at 14% covers traffic baselining and log monitoring, and Application and Data Protection at 13% covers whitelisting, sandboxing, WAF and DLP. The remaining domains cover virtual, cloud and wireless protection, network defence management, incident response and incident prediction.
About the exam
312-38 (Certified Network Defender v3) earns the EC-Council CND certification. It covers network defense management, perimeter protection, endpoint protection, application and data protection, virtual, cloud and wireless network protection, incident detection, incident response and incident prediction. There are no prerequisites with official training; self-study candidates need two years of information security experience and an eligibility application.
Exam domains
- Network Defense Management: 10%
- Network Perimeter Protection: 16%
- Endpoint Protection: 15%
- Application and Data Protection: 13%
- Enterprise Virtual, Cloud, and Wireless Network Protection: 12%
- Incident Detection: 14%
- Incident Response: 10%
- Incident Prediction: 10%
100 multiple choice questions, 240 minutes, passing score 60% to 85% depending on the exam form, US$550 per attempt, ECC Exam Center, Pearson VUE or remote proctoring, certification valid for three years with EC-Council continuing education.
Reviews
There are no reviews yet.