After this course you can secure a company network methodically, monitor traffic and logs, and respond to an incident in a structured way. You will know the defence cycle of protect, detect, respond and predict and can apply it to endpoints, cloud and containers. The course suits you if you run networks or want to move into a blue team. You should bring networking basics, but deep security experience is not yet needed.
What you’ll take away.
- Secure networks with access controls, firewalls and IDS/IPS
- Harden Windows and Linux endpoints as well as mobile and IoT devices
- Monitor network traffic and logs for anomalies
- Provide first response to incidents and prepare for recovery
Your training in detail
- Who is it for?
- Network administrators, network engineers and security analysts who want to move into or go deeper in network defence.
- Prerequisites
- Basic networking knowledge such as TCP/IP, plus some administration experience. EC-Council sets the exact eligibility conditions.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Network attacks and defence strategies
Access control, cryptography and perimeter security
Securing endpoints, applications, data and wireless
Virtualisation, containers and cloud
Traffic and log monitoring
Incident response and continuity planning
Risk management and threat intelligence
In a lab you harden a small company network, analyse its traffic and respond to a simulated attack.
Exams, licences & credentials
This course prepares you for the EC-Council 312-38 exam. The exam and its fees are included only if your offer confirms them. The certificate is issued by EC-Council, not NextNowa. This is not an official EC-Council course. EC-Council sets the exam eligibility rules, so check your route with EC-Council before you book.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
What is the 312-38 exam like?
EC-Council lists 100 multiple-choice questions in four hours, taken through its own exam portal.
Will I also learn attack techniques?
Only as far as you need them for detection and defence. The focus stays on defending networks.
Does Certified Network Defender (CND): defending networks include a certificate?
This course prepares you for the EC-Council 312-38 exam. The exam and its fees are included only if your offer confirms them. The certificate is issued by EC-Council, not NextNowa. This is not an official EC-Council course. EC-Council sets the exam eligibility rules, so check your route with EC-Council before you book.