PracticeVideosBlogFlashcards
All Practice Exams

Free Practice Questions for CNDA

Exam-style questions and explanations by OpenExamPrep.

✓ No registration✓ No credit card
100+ Questions
100% Free

Loading practice questions...

Same family resources

Explore More EC-Council Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

CEH

Practice Questions212 questionsStudy Guide51 topicsCheat Sheet120 factsFlashcards50 cardsGames20 termsVideos1 videoBlogs1 blogFree CE

EC-Council ECIH Certified Incident Handler

Practice Questions174 questionsStudy Guide38 topicsFree CE

EC-Council Certified SOC Analyst (CSA 312-39)

Practice Questions104 questionsStudy Guide39 topicsFree CE

EC-Council Computer Hacking Forensic Investigator (CHFI 312-49)

Practice Questions100 questionsStudy Guide66 topicsFree CE

CND

Practice Questions200 questionsFree CE

EC-Council CEH Practical (312-50 Practical, 6-hr Cyber Range)

Practice Questions100 questionsFree CE

More From This Family

Videos and articles for deeper review.

VideoCEH v13 Study Plan 2026: A Blueprint-Based 12-Week SystemArticleCEH v13 Study Plan 2026: A Blueprint-Based 12-Week System15 min read
Exam Review

Key Facts: CNDA Exam

Not stated

Exam Questions

EC-Council CNDA 312-99 blueprint

Not stated

Exam Duration

EC-Council ECC Exam Center

Not stated

Passing Score

EC-Council CNDA page (checked 2026-10-22)

Not published

Exam Voucher

EC-Council CNDA page (checked 2026-10-22)

11

Content Domains

CEH-mirrored CNDA blueprint

Not stated

Eligibility

EC-Council CNDA page (checked 2026-10-22)

The EC-Council CNDA (312-99) is the government-track version of CEH; its exam format is not stated on the EC-Council CNDA page (checked 2026-10-22). CNDA mirrors the CEH content (footprinting, scanning, system hacking, web/wireless attacks, evasion, cryptography, and penetration testing) but emphasizes federal context such as the DoD 8140 framework, NIST RMF, FedRAMP, and CMMC for DoD contractors.

Sample CNDA Practice Questions

Try these sample questions to review concepts for the CNDA exam. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which accreditation standard does EC-Council cite for its certification programs?
A.ISO/IEC 17024
B.ISO 9001
C.ISO/IEC 27001
D.NIST SP 800-53
Explanation: The EC-Council program FAQ (checked 2026-10-22) says EC-Council is an ISO/IEC 17024-accredited organization whose certification programs are recognized by accreditation bodies such as ANSI. The CNDA eligibility rules are not stated on that page.
2In DoD's 8140 Qualification Matrix (V2.1), which group of work roles most often lists CEH?
A.Acquisition Professional (AP)
B.The Cybersecurity element
C.General IT Support Tier 1
D.Physical Security Officer
Explanation: DoD's 8140 Qualification Matrix (V2.1) lists CEH for 7 work roles; 4 are in the Cybersecurity element (Cyber Defense Analyst, Cyber Defense Infrastructure Support Specialist, Cyber Defense Incident Responder, Vulnerability Assessment Analyst). The matrix has no CNDA entry.
3A federal contractor performs an authorized penetration test against a customer agency network. Which U.S. statute most directly governs unauthorized access if the engagement letter is exceeded?
A.Sarbanes-Oxley Act (SOX)
B.Gramm-Leach-Bliley Act (GLBA)
C.Computer Fraud and Abuse Act (18 U.S.C. 1030)
D.Health Insurance Portability and Accountability Act (HIPAA)
Explanation: The Computer Fraud and Abuse Act (CFAA, 18 U.S.C. 1030) is the primary U.S. federal statute criminalizing unauthorized access or access exceeding authorization to protected computers, including federal systems. Even an authorized pentester can incur CFAA liability if they exceed the rules of engagement.
4Which federal law primarily governs interception of electronic communications in transit (such as a sniffing wiretap) in the United States?
A.Stored Communications Act (SCA)
B.Wiretap Act / Electronic Communications Privacy Act Title I
C.Federal Information Security Modernization Act (FISMA)
D.Privacy Act of 1974
Explanation: Title I of the Electronic Communications Privacy Act (ECPA) — commonly called the Wiretap Act, codified at 18 U.S.C. 2510-2523 — governs the interception of electronic communications in transit. Title II is the Stored Communications Act (SCA), which covers data at rest with a service provider.
5Under FISMA, which NIST Special Publication describes the Risk Management Framework (RMF) used to authorize federal information systems?
A.NIST SP 800-30
B.NIST SP 800-37
C.NIST SP 800-53
D.NIST SP 800-115
Explanation: NIST SP 800-37 (Revision 2) defines the seven-step Risk Management Framework: Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor. RMF is how federal systems achieve an Authority to Operate (ATO) under FISMA.
6A federal agency selects security controls for a moderate-impact system. Which NIST publication is the authoritative control catalog?
A.NIST SP 800-171
B.NIST SP 800-53
C.NIST SP 800-61
D.NIST SP 800-82
Explanation: NIST SP 800-53 (currently Revision 5) is the catalog of security and privacy controls organized in 20 control families (AC, AU, CM, IR, SC, etc.). Federal systems pick a tailored baseline from 800-53B based on the FIPS 199 categorization of low/moderate/high impact.
7FedRAMP defines three impact levels for cloud services authorized for federal use. Which is the LOWEST authorization tier in current use?
A.FedRAMP Tailored
B.FedRAMP Low
C.FedRAMP Moderate
D.FedRAMP High
Explanation: FedRAMP authorizations align to FIPS 199 impact levels: Low, Moderate, and High. (FedRAMP Tailored / Li-SaaS was a special profile for low-impact SaaS.) Most federal CSPs target Moderate; High is reserved for systems holding sensitive data with potentially severe impact.
8Under DoDM 8140.03, what replaced the IAT, IAM and IASAE categories of DoD 8570.01-M?
A.Work roles from the DoD Cyber Workforce Framework (DCWF), qualified by proficiency level
B.Strategic policy authorship for the Office of the Secretary of Defense
C.Acquisition contract negotiation
D.Physical guard force operations
Explanation: DoDM 8140.03 cancelled DoD 8570.01-M in 2023. Personnel are qualified by DCWF work role and proficiency level (Basic, Intermediate, Advanced), which replaced the IAT, IAM and IASAE categories.
9A government red team is profiling adversary TTPs. APT28 (Fancy Bear) is most commonly attributed to which nation-state sponsor?
A.People's Republic of China
B.Russian Federation (GRU Unit 26165)
C.Islamic Republic of Iran
D.Democratic People's Republic of Korea
Explanation: APT28 (also tracked as Fancy Bear, Sofacy, STRONTIUM) is publicly attributed by U.S. and allied governments to Russian military intelligence (GRU) Unit 26165. APT29 (Cozy Bear) is attributed to Russia's SVR. Knowing common APT attributions is a CEH/CNDA threat-landscape staple.
10Which of the CIA triad properties is most directly violated when a government website is overwhelmed by a DDoS attack?
A.Confidentiality
B.Integrity
C.Availability
D.Non-repudiation
Explanation: The CIA triad is Confidentiality, Integrity, and Availability. A DDoS attack saturates resources so legitimate users cannot access the service, which is a direct violation of Availability. Confidentiality concerns disclosure; Integrity concerns unauthorized modification.

About the CNDA Exam

The Certified Network Defense Architect (CNDA, exam 312-99) is the EC-Council government-track restatement of CEH. The exam content mirrors CEH — ethics and legality, footprinting, scanning and enumeration, system hacking and malware, sniffing and session hijacking, DoS and social engineering, web server and web application hacking, wireless and mobile hacking, IDS/firewall/honeypot evasion, cryptography, and penetration testing. CNDA has no entry in DoD's 8140 Qualification Matrix (V2.1); the matrix lists CEH for 7 work roles.

Exam sponsor: EC-Council / ECC Exam Center. The requirements and fees below concern the certification or admission exam, separate from our free practice resources.

Assessment

Not stated on the EC-Council CNDA page (checked 2026-10-22)

Time Limit

Not stated on the EC-Council CNDA page (checked 2026-10-22)

Passing Score

Not stated on the EC-Council CNDA page (checked 2026-10-22)

Exam / Certification Fees

Not published on the EC-Council CNDA page (checked 2026-10-22)

Exam sponsor website

Reported exam pass rate: Not stated. Not stated on the EC-Council CNDA page (checked 2026-10-22) Exam sponsor website

Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.

Our practice resources: topics covered

We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.

10%

InfoSec & Ethical Hacking Fundamentals

CIA triad, ethics and legality (CFAA, Wiretap Act, SCA), FISMA, FedRAMP authorization tiers, NIST 800-37 RMF, NIST 800-53 controls, DoDM 8140.03 cyber workforce framework, threat actors (APT28/29/40)

10%

Reconnaissance & Footprinting

OSINT with theHarvester, Maltego, Recon-ng, Shodan, Censys, FOCA; Google dorks; Whois; DNS enumeration with dnsrecon, fierce, dig and AXFR; banner grabbing

10%

Scanning & Enumeration

Nmap (SYN, connect, UDP, version, OS detection, NSE), Masscan, SMB/SNMP/LDAP/NTP/Kerberos enumeration with smbclient, snmpwalk, enum4linux, ldapsearch, kerbrute

12%

System Hacking & Malware

Windows/Linux privilege escalation, hashcat and John, Mimikatz LSASS dumping, DCSync, malware types, kernel and user-mode rootkits, steganography (steghide, exiftool, binwalk), Sysmon, Metasploit modules, SAM hive, fileless malware

8%

Network Sniffing & Session Hijacking

Monitor/promiscuous mode, ARP poisoning, MAC flooding, DHCP starvation, MITM (Ettercap, Bettercap, MITM6), Responder LLMNR poisoning, TCP sequence prediction, Wireshark display filters

8%

DoS & Social Engineering

Slowloris, SYN floods, hping3, LOIC/HOIC, amplification (DNS, NTP, memcached), Smurf, SYN cookies, phishing (whaling, smishing, vishing), pretexting, BEC, DMARC/SPF/DKIM

12%

Web Server & Web App Hacking

Apache/Nginx/IIS hardening, web shells and IIS modules, OWASP Top 10, sqlmap, XSS variants, CSRF, SSRF and cloud metadata, file upload, Burp Suite Repeater/Intruder

8%

Wireless & Mobile Hacking

Aircrack-ng, KRACK, WPA3 Dragonblood, monitor mode capture, Bluetooth attacks (bluesnarfing, BlueBorne, KNOB), Android Drozer/Frida/MobSF, iOS jailbreak

8%

Evading IDS / Firewalls / Honeypots

Snort/Suricata bypass, Nmap fragmentation, payload encoding, ICMP and DNS tunneling, stateless vs stateful firewalls, honeypot interaction levels and Nmap NSE detection

6%

Cryptography

AES (FIPS 197), RSA per NIST SP 800-131A, hash properties, MD5/SHA-1 deprecation, AES-GCM AEAD, TLS 1.3, PKI roles (CA/RA/VA), TLS_FALLBACK_SCSV

8%

Penetration Testing

OSSTMM, PTES, NIST SP 800-115, Rules of Engagement, NIST SP 800-30 qualitative risk vs FAIR, NIST SP 800-61 IR, CMMC, RMF Authorize (ATO), federal pentest reporting

Preparing for the CNDA Exam

What You Need to Know

  • Passing score: Not stated on the EC-Council CNDA page (checked 2026-10-22)
  • Assessment: Not stated on the EC-Council CNDA page (checked 2026-10-22)
  • Time limit: Not stated on the EC-Council CNDA page (checked 2026-10-22)
  • Exam / certification fees: Not published on the EC-Council CNDA page (checked 2026-10-22) Official sources

Using Our Practice Resources

  • Work through all 100 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

CNDA: Suggested Study Strategy

1Memorize the NIST publication numbers cold: SP 800-30 (risk assessment), SP 800-37 (RMF), SP 800-53 (controls), SP 800-61 (IR), SP 800-115 (testing), SP 800-171 (CUI), SP 800-131A (key sizes)
2Learn the seven RMF steps in order: Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor — and remember the AO issues the ATO at Authorize
3Map common Nmap flags by purpose: -sS SYN, -sT connect, -sU UDP, -sV version, -O OS, -A aggressive, -Pn skip ping, -f fragment for evasion
4For DoD 8140 questions, check the work role and proficiency level in the DoD 8140 Qualification Matrix rather than assuming a credential qualifies
5Practice identifying ethics/legal scenarios: CFAA covers unauthorized access; ECPA Title I (Wiretap Act) covers in-transit interception; ECPA Title II (SCA) covers stored communications
6Drill OWASP Top 10 2021 categories by number — A01 Access Control, A02 Crypto, A03 Injection, A04 Insecure Design, A05 Misconfig, A06 Vulnerable Components, A07 Auth, A08 Integrity, A09 Logging, A10 SSRF

Frequently Asked Questions

What is the EC-Council CNDA exam?

CNDA (312-99) is the government-track restatement of CEH. The exam content mirrors CEH (footprinting, scanning, system hacking, web/wireless attacks, evasion, cryptography, and penetration testing). CNDA has no entry in DoD's 8140 Qualification Matrix (V2.1); the matrix lists CEH for 7 work roles.

How is CNDA different from CEH?

The exam objectives and difficulty are essentially the same as CEH. Eligibility rules are not stated on the EC-Council CNDA page (checked 2026-10-22).

Who is eligible for the CNDA?

The EC-Council CNDA page (checked 2026-10-22) does not state CNDA eligibility requirements. Check the EC-Council CNDA page for current requirements.

How many questions are on the CNDA exam?

The EC-Council CNDA page (checked 2026-10-22) does not state the CNDA question count, time limit or cut score. Check the EC-Council CNDA page for current details.

How much does the CNDA exam cost?

The EC-Council CNDA page (checked 2026-10-22) does not publish the CNDA voucher price or training package prices. Check the EC-Council CNDA page for current pricing.

How long is the CNDA certification valid?

Not published on the EC-Council CNDA page (checked 2026-10-22).

How should I prepare for the CNDA exam?

The EC-Council CNDA page (checked 2026-10-22) does not publish a study-time estimate. Plan study time against the current CEH and CNDA materials.