20+ practice questions focused on Network Defense Management — one of the most tested topics on the EC-Council Certified Network Defender (CND, 312-38, Blueprint v4.0) (CND) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Network Defense Management PracticeAn enterprise is aligning its network defense governance model with ISO/IEC 27001. During the implementation of Clause 6 (Planning), the security team must identify information security risks. Which specific ISO/IEC 27001:2013 standard provides the catalog of controls that must be mapped to these identified risks?
Explanation: ISO/IEC 27002 is the code of practice that provides the catalog of information security controls (the 114 controls in Annex A of ISO/IEC 27001:2013) which organizations map to risks identified during Clause 6 planning. Clause 6.1.3 requires organizations to determine controls by referencing Annex A, and 27002 explains how to implement each control. Therefore 27002 is the correct standard that supplies the control catalog for risk treatment.
An organization is drafting a password policy. To balance security with user usability, which requirement represents modern industry best practices aligned with NIST SP 800-63B guidelines?
Explanation: NIST SP 800-63B recommends a minimum password length of 8 characters (with 15 recommended for memorized secrets), encourages the use of password managers, and explicitly discourages composition rules and arbitrary expiration. Allowing password managers supports longer, unique passwords without burdening users with memorization. This option is the only one aligned with those guidelines.
An organization is conducting a security audit of its wireless network infrastructure. The auditor verifies that WPA3-Enterprise is deployed with Protected Extensible Authentication Protocol (PEAP). Which governance objective is primarily achieved by this configuration?
Explanation: WPA3-Enterprise with PEAP provides strong mutual authentication (server certificate validated by client, user credentials validated by server via MSCHAPv2 inside a TLS tunnel) and cryptographic protection of the wireless session using AES-CCMP or GCMP under 802.11w/SAE-derived keys. This directly satisfies the governance objective of ensuring confidentiality and authenticity of wireless user traffic. The configuration is a technical control that maps to access control and data protection objectives in security governance frameworks.
A network defense manager is preparing for a SOC 2 Type II audit. Which THREE operational practices must the organization demonstrate to prove ongoing compliance with Security Trust Services criteria? (Choose three)
Explanation: Option B is correct because SOC 2 Security criteria require access control monitoring, including periodic user access reviews and timely deprovisioning of terminated employees to prevent unauthorized access. Option D is correct because formal change management with tracked tickets and documented approvals demonstrates that changes to systems are authorized, tested, and auditable under the CC8 change management criteria. Option E is correct because continuous vulnerability scanning and a documented patch management lifecycle show proactive identification and remediation of security weaknesses, supporting the CC7 system operations criteria. Option A is incorrect because exposing internal router passwords publicly is a severe security violation that would fail confidentiality and access control requirements. Option C is incorrect because disabling auditing and log generation eliminates the audit trail needed for SOC 2 monitoring, incident detection, and evidence collection.
A security compliance engineer is configuring an enterprise vulnerability management program using CVSS v3.1. When calculating the Environmental Metric Group to contextualize vulnerability severity for specific organizational assets, which THREE metrics must be evaluated? (Choose three)
Explanation: CVSS v3.1 Environmental metrics include Modified Base Metrics, Collateral Damage Potential (CDP), and Requirements for Confidentiality, Integrity, and Availability (CR, IR, AR).
+15 more Network Defense Management questions available
Practice all Network Defense Management questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Network Defense Management. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Network Defense Management questions on the CND frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Network Defense Management is tested as part of the EC-Council Certified Network Defender (CND, 312-38, Blueprint v4.0) (CND) blueprint. Practicing with targeted Network Defense Management questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free CND practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Network Defense Management is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Network Defense Management practice session with instant scoring and detailed explanations.
Start Network Defense Management Practice →