EC Council Certified Network Defender (v3)

Overview

Certified Network Defender (CND) v3 is the world's first network security program with a continual / adaptive security strategy. It is a network security course designed to help organizations create and deploy the most comprehensive network security system. CND is mapped to the below job roles based on common job role frameworks recognised by organisations worldwide. C|ND is a network security course designed to help organizations create and deploy the most comprehensive network defense system. Your labs, courseware, and exam voucher is included in this course.

Target audience:

• Network Administrators
• Network Security Administrators
• Network Engineer
• Network Security
• Analyst Network
• Security Engineer
• Security Analyst
• Cybersecurity Engineer

CND is accredited by the ANSI National Accreditation Board under ANSI ISO/IEC 17024. Approved by the US DoD under Directive 8570/8140. 100+ hands-on labs. CND covers modern and advanced network security requirements. Mapped with NICE Framework under the following category, specialty areas, and work roles. Learn tactical defense of cloud services (AWS, Azure, and GCP). Learning beyond technical aspects, building perimeter defense skills with job-ready practical skills in live ranges. Learn the latest technologies and concepts to match modern network security requirements with hands-on skills with 100+ labs simulating real-time environment with in-depth attack surface analysis.

+

Prerequisites

There are no prerequisites for this course, but having a basic understanding of networking principles will help.

+

Learning Outcomes

You will learn how to undertake the following tasks;

• Planning and administering network security for organisations
• Recognizing security risks, threats, and vulnerabilities
• Ensuring compliance with regulatory standards
• Designing and implementing network security policies
• Applying security principles in distributed and mobile computing environments
• Implementing Identity and Access Management, encryption, and network segmentation
• Managing Windows and Linux Security Administration
• Addressing security risks in mobile devices and IoT
• Implementing strong data security techniques
• Managing security in virtualization technologies and cloud platforms
• Implementing wireless network security
• Conducting risk and vulnerability assessments
• Providing first response to security incidents
• Identifying Indicators of Compromise and Attack
• Integrating threat intelligence for proactive defense
• Conducting Attack Surface Analysis
• Assisting in Business Continuity and Disaster Recovery planning
• Monitoring network traffic and performing log management
• Managing proxy, content filtering, and troubleshooting network issues
• Hardening the security of endpoints and selecting firewall solutions
• Configuring IDS/IPS for enhanced security
• Maintaining an inventory of network devices
• Providing security awareness guidance and training
• Managing AAA for network devices
• Reviewing audit logs and analysing security anomalies
• Maintaining and configuring security platforms
• Evaluating security products and operations procedures
• Identifying and classifying organizational assets
• Implementing system integrity monitoring tools
• Understanding EDR/XDR and UEBA solutions
• Conducting PIA processes for privacy assessment
• Collaborating on threat hunting and incident response
• Understanding SOAR platforms in cybersecurity operations
• Integrating Zero Trust principles into security architectures
• Staying updated on emerging cyber threats
• Understanding the role of AI/ML in cyber defense.

+

Course Outline

Module 1 - Network Defense Management

Network Attacks and Defense Strategies

• Explain essential terminologies related to network security attacks
• Describe the various examples of network-level attack techniques
• Describe the various examples of host-level attack techniques
• Describe the various examples of application-level attack techniques
• Describe the various examples of social engineering attack techniques
• Describe the various examples of email attack techniques
• Describe the various examples of mobile device-specific attack techniques
• Describe the various examples of cloud-specific attack techniques
• Describe the various examples of wireless network-specific attack techniques
• Describe Attacker;s Hacking Methodologies and Frameworks
• Understand fundamental goal, benefits, and challenges in network defense
• Explain Continual/Adaptive security strategy
• Explain defense-in-depth security strategy

Administrative Network Security

• Obtain compliance with regulatory frameworks
• Discuss various Regulatory Frameworks, Laws, and Acts
• Learn to design and develop security policies
• Conduct security awareness training
• Discuss other administrative security measures

Module 2 Network Perimeter Security

Technical Network Security

• Discuss access control principles, terminologies, and models
• Redefine Access Control security in Today;s Distributed and Mobile Computing World
• Discuss Identity and Access Management (IAM) concepts
• Discuss cryptographic security techniques
• Discuss various cryptographic algorithms
• Discuss security benefits of network segmentation techniques
• Discuss various essential network security solutions
• Discuss various essential network security protocols

Network Perimeter Security

• Understand firewall security concerns, capabilities, and limitations
• Understand different types of firewall technologies and their usage
• Understand firewall topologies and their usage • Distinguish between hardware, software, host, network, internal, and external firewalls
• Select firewalls based on its deep traffic inspection capability
• Discuss firewall implementation and deployment process
• Discuss recommendations and best practices for secure firewall Implementation and deployment
• Discuss firewall administration activities • Understand role, capabilities, limitations, and concerns in IDS deployment
• Discuss IDS/IPS classification • Discuss various components of IDS • Discuss effective deployment of network and host-based IDS
• Learn to how to deal with false positive and false negative IDS alerts
• Discuss the selection of appropriate IDS solutions
• Discuss various NIDS and HIDS Solutions with their intrusion detection capabilities
• Discuss router and switch security measures, recommendations, and best practices
• Leverage Zero Trust Model Security using Software-Defined Perimeter (SDP)

Module 3 Endpoint Protection

Endpoint Security - Windows Systems

• Understand Window OS and Security Concerns
• Discuss Windows Security Components
• Discuss Various Windows Security Features
• Discuss Windows security baseline configurations
• Discuss Windows User Account and Password Management
• Discuss Windows Patch Management
• Discuss User Access Management
• Discuss Windows OS Security Hardening Techniques
• Discuss Windows Active Directory Security Best Practices
• Discuss Windows Network Services and Protocol Security

Endpoint Security - Linux Systems

• Understand Linux OS and Security Concerns
• Discuss Linux Installation and Patching
• Discuss Linux OS Hardening Techniques
• Discuss Linux User Access and Password Management
• Discuss Linux Network and Remote Access Security
• Discuss Various Linux Security Tools and Frameworks

Endpoint Security - Mobile Devices

• Discuss Common Mobile Usage Policies in Enterprises
• Discuss the Security Risk and challenges associated with Enterprises mobile usage policies
• Discuss security guidelines to mitigate risk associated with enterprise mobile usage policies
• Discuss and implement various enterprise-level mobile security management Solutions
• Discuss and implement general security guidelines and best practices on Mobile platforms
• Discuss Security guidelines and tools for Android devices
• Discuss Security guidelines and tools for iOS devices

Endpoint Security-IoT Devices

• Understand IoT Devices, their need, and Application Areas
• Understand IoT Ecosystem and Communication models
• Understand Security Challenges and risks associated with IoT-enabled environments
• Discuss the security in IoT-enabled Environments
• Discuss Security Measures for IoT-enabled Environments
• Discuss IoT Security Tools and Best Practices
• Discuss and refer various standards, Initiatives and Efforts for IoT Security

Module 4 - Application and Data Protection

Administrative Application Security

• Discuss and implement Application Whitelisting and Blacklisting
• Discuss and implement application Sandboxing
• Discuss and implement Application Patch Management
• Discuss and implement Web Application Firewall (WAF)

Data Security

• Understand Data Security and its Importance
• Discuss the implementation of data access controls
• Discuss the implementation of encryption of "Data at rest"
• Discuss the implementation of Encryption of "Data at transit"
• Discuss the implementation of Encryption of "Data at transit" between browser and web server
• Discuss the implementation of Encryption of "Data at transit" between database server and web server
• Discuss the implementation of Encryption of "Data at transit" in Email Delivery
• Discuss Data Masking Concepts
• Discuss data backup and retention
• Discuss Data Destruction Concepts
• Data Loss Prevention (DLP) Concepts

Module 5 - Enterprise Virtual, Cloud, and Wireless Network Protection

Enterprise Virtual Network Security

• Understand Virtualization Essential Concepts
• Discus Network Virtualization (NV) Security
• Discuss Software-Defined Network (SDN) Security
• Discuss Network Function Virtualization (NFV) Security
• Discus OS Virtualization Security
• Discuss Security Guidelines, recommendations and best practices for Containers
• Discuss Security Guidelines, recommendations and best practices for Dockers
• Discuss Security Guidelines, recommendations and best practices for Kubernetes

Enterprise Cloud Network Security

• Understand Cloud Computing Fundamentals
• Understand the Insights of Cloud Security
• Evaluate CSP for Security before Consuming Cloud Service
• Discuss security in Amazon Cloud (AWS)
• Discuss security in Microsoft Azure Cloud
• Discuss Security in Google Cloud Platform (GCP)
• Discuss general security best practices and tools for cloud security

Enterprise Wireless Network Security<