Courseiva
Free · No account needed · No credit card

EC-Council Certified Network Defender (CND, 312-38, Blueprint v4.0) (CND) Practice Test

311 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 240 min
Pass mark: 60–85% (cut score varies by exam form)

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Application And Data Protectioneasy
Full explanation →

An enterprise network administrator needs to enforce data loss prevention rules across corporate endpoints. They deploy McAfee Data Loss Prevention Endpoint. Which client component inspects and blocks data movement to USB mass storage devices locally on the workstation?

McAfee DLP Endpoint ClientCorrect
BMcAfee DLP Prevent
CMcAfee ePolicy Orchestrator (ePO) Relay Server
DMcAfee DLP Discover

The McAfee DLP Endpoint Client is the agent installed on each workstation that performs local inspection and enforcement, including blocking writes to USB mass storage devices. It enforces policy at the endpoint without requiring a round trip to a network appliance. This is the c…Read full explanation

Q2Application And Data Protectionmedium
Full explanation →

An application security team is performing static code analysis on a Java Spring Boot web application. The scanner flags a potential SQL injection vulnerability in a JDBC template query. Which remediation method should the developer implement to secure the database interaction?

AInvoke the java.net.URLEncoder.encode() method on all parameters
BWrap all input strings inside single quotes and strip out semicolon characters
Use parameterized queries and PreparedStatement objects with placeholder parametersCorrect
DSanitize all input characters using HTML entity encoding before passing them to the database driver

Parameterized queries using PreparedStatement with placeholder parameters (?) ensure that user input is treated strictly as data, never as executable SQL. The JDBC driver sends the query structure and parameters separately to the database, so injection payloads cannot alter the S…Read full explanation

Q3Application And Data Protectioneasy
Full explanation →

A security engineer is configuring a Symantec Data Loss Prevention (DLP) Network Monitor policy to intercept outgoing HTTP traffic containing credit card numbers. Which detection technology should be selected to match standard credit card formats using Luhn algorithm validation?

AExact Data Matching (EDM)
Described Content Matching (DCM) with a Data Identifier utilizing Luhn algorithm validationCorrect
CIndexed Document Matching (IDM)
DVector Machine Learning (VML)

Described Content Matching (DCM) uses data identifiers — regex patterns combined with validators like the Luhn algorithm — to detect structured data such as credit card numbers in motion. The Luhn checksum (mod-10) confirms the number is mathematically valid, dramatically reducin…Read full explanation

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All CND questionsCND exam guideStudy guidePractice by domain