EC Council Certified Network Defender V2 (CND) e-Learning

There are no prerequisites for this course, but having a basic understanding of networking principles will help.

You will learn how to undertake the following tasks;

• Planning and administering network security for organisations

• Recognizing security risks, threats, and vulnerabilities

• Ensuring compliance with regulatory standards

• Designing and implementing network security policies

• Applying security principles in distributed and mobile computing environments

• Implementing Identity and Access Management, encryption, and network segmentation

• Managing Windows and Linux Security Administration

• Addressing security risks in mobile devices and IoT

• Implementing strong data security techniques

• Managing security in virtualization technologies and cloud platforms

• Implementing wireless network security

• Conducting risk and vulnerability assessments

• Providing first response to security incidents

• Identifying Indicators of Compromise and Attack

• Integrating threat intelligence for proactive defense

• Conducting Attack Surface Analysis

• Assisting in Business Continuity and Disaster Recovery planning

• Monitoring network traffic and performing log management

• Managing proxy, content filtering, and troubleshooting network issues

• Hardening the security of endpoints and selecting firewall solutions

• Configuring IDS/IPS for enhanced security

• Maintaining an inventory of network devices

• Providing security awareness guidance and training

• Managing AAA for network devices

• Reviewing audit logs and analysing security anomalies

• Maintaining and configuring security platforms

• Evaluating security products and operations procedures

• Identifying and classifying organizational assets

• Implementing system integrity monitoring tools

• Understanding EDR/XDR and UEBA solutions

• Conducting PIA processes for privacy assessment

• Collaborating on threat hunting and incident response

• Understanding SOAR platforms in cybersecurity operations

• Integrating Zero Trust principles into security architectures

• Staying updated on emerging cyber threats

• Understanding the role of AI/ML in cyber defense.

Module 1 - Network Defense Management

Network Attacks and Defense Strategies

• Explain essential terminologies related to network security attacks

• Describe the various examples of network-level attack techniques

• Describe the various examples of host-level attack techniques

• Describe the various examples of application-level attack techniques

• Describe the various examples of social engineering attack techniques

• Describe the various examples of email attack techniques

• Describe the various examples of mobile device-specific attack techniques

• Describe the various examples of cloud-specific attack techniques

• Describe the various examples of wireless network-specific attack techniques

• Describe Attacker’s Hacking Methodologies and Frameworks

• Understand fundamental goal, benefits, and challenges in network defense

• Explain Continual/Adaptive security strategy

• Explain defense-in-depth security strategy

Administrative Network Security

• Obtain compliance with regulatory frameworks

• Discuss various Regulatory Frameworks, Laws, and Acts

• Learn to design and develop security policies

• Conduct security awareness training

• Discuss other administrative security measures

Module 2 Network Perimeter Security

Technical Network Security

• Discuss access control principles, terminologies, and models

• Redefine Access Control security in Today’s Distributed and Mobile Computing World

• Discuss Identity and Access Management (IAM) concepts

• Discuss cryptographic security techniques

• Discuss various cryptographic algorithms

• Discuss security benefits of network segmentation techniques

• Discuss various essential network security solutions

• Discuss various essential network security protocols

Network Perimeter Security

• Understand firewall security concerns, capabilities, and limitations

• Understand different types of firewall technologies and their usage

• Understand firewall topologies and their usage • Distinguish between hardware, software, host, network, internal, and external firewalls

• Select firewalls based on its deep traffic inspection capability

• Discuss firewall implementation and deployment process

• Discuss recommendations and best practices for secure firewall Implementation and deployment

• Discuss firewall administration activities • Understand role, capabilities, limitations, and concerns in IDS deployment

• Discuss IDS/IPS classification • Discuss various components of IDS • Discuss effective deployment of network and host-based IDS

• Learn to how to deal with false positive and false negative IDS alerts

• Discuss the selection of appropriate IDS solutions

• Discuss various NIDS and HIDS Solutions with their intrusion detection capabilities

• Discuss router and switch security measures, recommendations, and best practices

• Leverage Zero Trust Model Security using Software-Defined Perimeter (SDP)

Module 3 Endpoint Protection

Endpoint Security - Windows Systems

• Understand Window OS and Security Concerns

• Discuss Windows Security Components

• Discuss Various Windows Security Features

• Discuss Windows security baseline configurations

• Discuss Windows User Account and Password Management

• Discuss Windows Patch Management

• Discuss User Access Management

• Discuss Windows OS Security Hardening Techniques

• Discuss Windows Active Directory Security Best Practices

• Discuss Windows Network Services and Protocol Security

Endpoint Security - Linux Systems

• Understand Linux OS and Security Concerns

• Discuss Linux Installation and Patching

• Discuss Linux OS Hardening Techniques

• Discuss Linux User Access and Password Management

• Discuss Linux Network and Remote Access Security

• Discuss Various Linux Security Tools and Frameworks

Endpoint Security - Mobile Devices

• Discuss Common Mobile Usage Policies in Enterprises

• Discuss the Security Risk and challenges associated with Enterprises mobile usage policies

• Discuss security guidelines to mitigate risk associated with enterprise mobile usage policies

• Discuss and implement various enterprise-level mobile security management Solutions

• Discuss and implement general security guidelines and best practices on Mobile platforms

• Discuss Security guidelines and tools for Android devices

• Discuss Security guidelines and tools for iOS devices

Endpoint Security-IoT Devices

• Understand IoT Devices, their need, and Application Areas

• Understand IoT Ecosystem and Communication models

• Understand Security Challenges and risks associated with IoT-enabled environments

• Discuss the security in IoT-enabled Environments

• Discuss Security Measures for IoT-enabled Environments

• Discuss IoT Security Tools and Best Practices

• Discuss and refer various standards, Initiatives and Efforts for IoT Security

Module 4 - Application and Data Protection

Administrative Application Security

• Discuss and implement Application Whitelisting and Blacklisting

• Discuss and implement application Sandboxing

• Discuss and implement Application Patch Management

• Discuss and implement Web Application Firewall (WAF)

Data Security

• Understand Data Security and its Importance

• Discuss the implementation of data access controls

• Discuss the implementation of encryption of “Data at rest”

• Discuss the implementation of Encryption of “Data at transit”

• Discuss the implementation of Encryption of “Data at transit” between browser and web server

• Discuss the implementation of Encryption of “Data at transit” between database server and web server

• Discuss the implementation of Encryption of “Data at transit” in Email Delivery

• Discuss Data Masking Concepts

• Discuss data backup and retention

• Discuss Data Destruction Concepts

• Data Loss Prevention (DLP) Concepts

Module 5 - Enterprise Virtual, Cloud, and Wireless Network Protection

Enterprise Virtual Network Security

• Understand Virtualization Essential Concepts

• Discus Network Virtualization (NV) Security

• Discuss Software-Defined Network (SDN) Security

• Discuss Network Function Virtualization (NFV) Security

• Discus OS Virtualization Security

• Discuss Security Guidelines, recommendations and best practices for Containers

• Discuss Security Guidelines, recommendations and best practices for Dockers

• Discuss Security Guidelines, recommendations and best practices for Kubernetes

Enterprise Cloud Network Security

• Understand Cloud Computing Fundamentals

• Understand the Insights of Cloud Security

• Evaluate CSP for Security before Consuming Cloud Service

• Discuss security in Amazon Cloud (AWS)

• Discuss security in Microsoft Azure Cloud

• Discuss Security in Google Cloud Platform (GCP)

• Discuss general security best practices and tools for cloud security

Enterprise Wireless Network Security

• Understand wireless network fundamentals

• Understand wireless network encryption mechanisms

• Understand wireless network authentication methods

• Discuss and implement wireless network security measures

Module 6 - Incident Detection

Network Traffic Monitoring and Analysis

• Understand the need and advantages of network traffic monitoring

• Setting up the environment for network monitoring

• Determine baseline traffic signatures for normal and suspicious network traffic

• Perform network monitoring and analysis for suspicious traffic using Wireshark

• Discuss network performance and bandwidth monitoring concepts

Network Logs Monitoring and Analysis

• Understand logging concepts

• Discuss log monitoring and analysis on Windows systems

• Discuss log monitoring and analysis on Linux

• Discuss log monitoring and analysis on Mac

• Discuss log monitoring and analysis on Firewall

• Discuss log monitoring and analysis on Routers

• Discuss log monitoring and analysis on Web Servers

• Discuss centralized log monitoring and analysis

Module 7 - Incident Response

Incident Response and Forensic Investigation

• Understand incident response concept

• Understand the role of first responder in incident response

• Discuss Do’s and Don’t in first response

• Describe incident handling and response process

• Describe forensics investigation process

Business Continuity and Disaster Recovery

• Introduction to Business Continuity (BC) and Disaster Recovery (DR)

• Discuss BC/DR Activities

• Explain Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP)

• Discuss various BC/DR Standards

Module 8 - Incident Prediction

Risk Anticipation with Risk Management

• Understand risk management concepts

• Learn to manage risk though risk management program

• Learn different Risk Management Frameworks (RMF)

• Learn to manage vulnerabilities through vulnerability management program

• Learn vulnerability assessment and scanning

Threat Assessment with Attack Surface Analysis

• Understand the attack surface analysis

• Understand and visualize your attack surface

• Learn to identify Indicators of Exposures (IoE)

• Learn to conduct attack simulation

• Learn to reduce the attack surface

Threat Prediction With Cyber Threat Intelligence

• Understand the role of cyber threat intelligence in network defense

• Understand different types of threat Intelligence

• Understand the Indicators of Threat Intelligence: Indicators of Compromise (IoCs) and Indicators of Attack (IoA)

• Understand the layers of Threat Intelligence

• Learn to leverage/consume threat intelligence for proactive defense