HikeLetter | PMP Training & Certification Online Course | Project Management Learning

Overview

Course Description

Certification: EC-Council Certified Network Defender (CND) v3
Provider: EC-Council
Exam code: 312-38
Exam duration: 4 hours
Question count: 100 multiple-choice questions
Passing score: Varies by exam form; published range is 60%–85%
Exam fee (USD): $550 for the official remote-proctored voucher shown in EC-Council’s store; pricing and
delivery options may vary

Course Questions

10 Questions

An organization wants to reduce the chance that one failed security control exposes the entire network. Which approach is MOST appropriate?

A. Rely on a single perimeter firewall B. Use defense in depth with layered controls C. Disable centralized logging D. Allow all internal traffic by default

A security analyst observes repeated SYN packets without completion of the TCP handshake, causing connection-table exhaustion. Which attack is indicated?

A. ARP poisoning B. SYN flood C. DNS cache poisoning D. Pass-the-hash

Which policy best reduces risk from excessive employee privileges?

A. Shared administrator accounts B. Least privilege and periodic access reviews C. Permanent access for all staff D. Disable account auditing

A company needs to allow inbound HTTPS while blocking unsolicited inbound connections. Which control is the best starting point?

A. A stateful firewall rule allowing TCP 443 to the published service B. A rule allowing every inbound port C. Disabling firewall inspection D. A switch port mirror alone

A Windows endpoint is suspected of malware infection. What should the responder do first when containment is urgent?

A. Delete all logs B. Isolate the endpoint from the network using approved response procedures C. Disable EDR D. Reimage every workstation immediately

Which action is the strongest routine approach for reducing risk from unpatched Linux services?

A. Apply tested security updates through change management B. Run every service as root C. Disable package verification D. Expose SSH to all source addresses

Which configuration most effectively protects an enterprise Wi-Fi network from unauthorized access?

A. Open SSID with hidden name B. WPA2/WPA3-Enterprise with strong authentication and certificate validation C. Shared password posted publicly D. WEP encryption

Which source is most useful for determining whether a host is communicating with a known command-and-control address?

A. NetFlow or packet metadata correlated with threat intelligence B. A printer inventory only C. A screen-resolution report D. A list of office furniture

A time-sensitive investigation finds that firewall, endpoint, and identity logs have inconsistent timestamps. What improvement is most important?

A. Disable time stamps B. Synchronize systems to trusted time sources C. Keep logs only locally D. Reduce log retention to one hour

An alert indicates active data exfiltration from a compromised server. What should the incident team prioritize?

A. Contain the activity, preserve evidence, and follow the response plan B. Immediately erase the server without documentation C. Publish the suspected user's details D. Turn off all monitoring permanently

₹2999.00 ₹999.00

Enroll Now

Certified Network Defender (CND) v3