- CND Eligibility Overview
- The Two Paths to Sit the 312-38 Exam
- Self-Study Route: Experience Documentation and Fees
- Official Training Route
- Full Cost Breakdown Before You Qualify
- What the Exam Itself Requires You to Know
- Preparing Against the CND Exam Blueprint
- Who Actually Meets These Requirements
- Staying Qualified After You Pass
- A Realistic Path From Application to Exam Day
- Frequently Asked Questions
- Self-study candidates need two years of documented information-security experience plus a $100 nonrefundable eligibility fee.
- The RPS exam voucher costs $550, bringing the self-study total to $650 before any prep materials.
- Official training builds the eligibility-application fee into its price, skipping the separate approval step.
- The 312-38 exam has 100 multiple-choice questions in four hours, with passing cut scores from 60% to 85%.
CND Eligibility Overview
Before you can sit the EC-Council Certified Network Defender exam (312-38), you have to clear an eligibility gate. Unlike certifications that let anyone register and pay, CND requires either proof of relevant work history or completion of an approved training path. This article breaks down exactly what those requirements look like in 2026, what they cost, and how to plan around them so you're not caught off guard mid-application.
If you're still deciding whether this credential fits your career goals, it helps to first understand what CND certification actually verifies and whether it's worth pursuing before you commit time to the eligibility process.
The Two Paths to Sit the 312-38 Exam
EC-Council offers two eligibility routes into the CND exam. Both end at the same 100-question, four-hour test delivered through the ECC Exam Center, but they differ significantly in cost, documentation, and time investment.
| Requirement | Self-Study Route | Official Training Route |
|---|---|---|
| Work experience needed | 2 years in information security (documented) | Not separately required |
| Eligibility-application fee | $100 nonrefundable | Built into training price |
| Exam voucher (RPS) | $550, valid one year | $550, valid one year |
| Total before exam prep | $650 | Training cost (includes eligibility) |
| Approval wait | Yes, application review required | No separate review |
Self-Study Route: Experience Documentation and Fees
If you plan to prepare independently - through courseware, practice questions, and hands-on labs you assemble yourself - you'll need to submit an eligibility application to EC-Council along with documentation of two years of information-security work experience. This is reviewed and approved before you're cleared to purchase an exam voucher.
The application carries a nonrefundable $100 fee, regardless of the outcome. Combined with the $550 Remote Proctoring Services voucher, self-study candidates pay $650 total before they've spent a dollar on study materials. For a full breakdown of every cost involved, including optional add-ons, see the CND Certification Cost breakdown.
Key Takeaway
Gather pay stubs, offer letters, or manager attestations documenting your security role before starting the application - incomplete documentation is the most common cause of delay in this route.
Official Training Route
The alternative is completing recognized official training, currently branded CND v3. Because the training price already incorporates the eligibility-application fee, candidates who go this route don't submit a separate application or documentation packet - completion of the course itself satisfies the eligibility requirement.
It's worth noting that standalone courseware (self-purchased study materials not tied to an official training enrollment) is treated differently from official training and does not include the exam voucher or eligibility bundling. If you're comparing options, our CND Training overview walks through what official training includes versus what standalone materials leave out.
Full Cost Breakdown Before You Qualify
Requirements aren't just about paperwork - they come with real costs that stack up before you ever see exam question one. Here's what to budget for the self-study path specifically:
- $100 - nonrefundable eligibility-application fee
- $550 - official RPS exam voucher, valid for one year from purchase
- $650 - total before any study guides, labs, or practice exams
Training-route candidates pay a single bundled training fee that folds in eligibility, so their upfront structure looks different. Either way, the exam itself is delivered through the ECC Exam Center or EC-Council Exam Portal, proctored either at an authorized testing center or remotely via RPS. For a granular look at every line item across both paths, read the dedicated CND Certification Cost 2026 guide.
What the Exam Itself Requires You to Know
Meeting eligibility only gets you to the starting line. The 312-38 exam is 100 multiple-choice questions with a four-hour time limit. Passing cut scores are form-specific and range from 60% to 85% depending on the exam form you receive - these are difficulty-adjusted thresholds, not fixed percentages or pass-rate statistics. For a precise explanation of how scoring works, see CND Passing Score 2026.
The exam is purely multiple choice - it does not include the hands-on lab components found in official training. That distinction matters: you can complete every lab exercise in the CND v3 course and still need dedicated multiple-choice exam prep, since the certification exam tests conceptual and applied knowledge in a written-answer format rather than live configuration tasks.
Key Takeaway
Treat lab practice and exam-question practice as two separate preparation tracks - proficiency in one doesn't automatically transfer to speed and accuracy on the 100-question multiple-choice format.
If you want a realistic sense of how challenging candidates find this format, How Hard Is the CND Exam? and CND Pass Rate 2026 both dig into what the data actually shows without relying on invented numbers.
Preparing Against the CND Exam Blueprint
The certification page links directly to the CND Exam Blueprint v4.0, and that blueprint - not the 20 training modules, and not the Protect/Detect/Respond/Predict framework used in course marketing - is what actually defines the eight domains you're tested on. Knowing this distinction matters when you're deciding how to allocate study time, since training modules and exam domains don't map one-to-one.
Domain 3: Endpoint Protection (20%)
The largest single domain on the exam. Candidates should be comfortable with endpoint hardening concepts, security controls at the device level, and the reasoning behind layered endpoint defenses.
- Highest-weighted domain - prioritize accordingly in review time
Domains 5 & 8: Enterprise Virtual/Cloud/Wireless Protection and Incident Prediction (15% each)
These two domains tie for second-highest weight. One covers protecting virtualized, cloud, and wireless enterprise environments; the other covers proactive threat and risk anticipation before incidents occur.
- Together they represent nearly a third of the exam - don't treat either as secondary
Remaining Domains: Management, Perimeter, Application/Data, Detection, Response (10% each)
Network Defense Management, Network Perimeter Protection, Application and Data Protection, Incident Detection, and Incident Response each carry equal weight. Even distribution means none can be skipped, but none demands disproportionate time either.
- Balance review time evenly across these five rather than over-indexing on any single one
For the complete domain-by-domain breakdown with all eight areas explained in depth, see the CND Exam Domains 2026 guide. Pairing that resource with a structured CND Study Guide plan is the most efficient way to turn blueprint knowledge into exam-day readiness.
A Domain-Aware Weekly Structure
Generic study techniques only help when they're mapped to blueprint weighting. A simple approach: dedicate early weeks to the heaviest domains while retention is freshest, then use spaced review in later weeks to revisit lighter domains before exam day.
Endpoint Protection (20%)
- Deep-dive the highest-weighted domain first while energy and focus are highest
Enterprise Virtual, Cloud, and Wireless Protection + Incident Prediction (15% each)
- Cover both 15% domains together since they round out over a third of total exam weight
Remaining 10% Domains
- Work through Management, Perimeter, Application/Data, Detection, and Response systematically
Full-Length Practice and Review
- Run timed 100-question practice sets to build stamina for the four-hour window
Who Actually Meets These Requirements
CND is positioned for defenders - professionals responsible for hardening, monitoring, and responding to threats against network infrastructure, rather than offensive security roles. The two-year information-security experience requirement for self-study candidates naturally filters toward network administrators, SOC analysts, system administrators with security duties, and IT professionals moving into dedicated defense roles.
Employers hiring for network defense, SOC, and infrastructure security positions often list credentials like this alongside experience requirements. If you're curious how this eligibility investment translates into job market outcomes, CND Jobs and the CND Salary Guide 2026 cover what roles and compensation trends look like for certified professionals.
Staying Qualified After You Pass
Meeting eligibility requirements doesn't end once you pass the exam. The certification initially carries one-year validity, extended through annual fee payment and continuing-education compliance. Over a full three-year cycle, EC-Council requires 120 continuing-education credits along with an $80 annual continuing-education fee - $240 total per cycle.
A Realistic Path From Application to Exam Day
Putting the pieces together, a self-study candidate's timeline typically looks like this: submit the eligibility application with experience documentation, wait for approval, pay the $100 fee, purchase the $550 RPS voucher (valid for one year), schedule at an authorized testing center or remotely, then sit the 100-question exam within its four-hour limit. Training-route candidates compress this by completing CND v3 coursework, which folds eligibility into the enrollment itself.
Whichever path you take, scheduling matters - voucher validity windows and testing center availability both affect how much runway you have. See CND Exam Dates 2026 for guidance on testing windows and deadlines, and keep a condensed reference like the CND Cheat Sheet on hand during your final review week.
Once you've mapped your eligibility route and blueprint priorities, reinforcing recall with realistic practice questions on our CND practice test platform is one of the most direct ways to close the gap between "eligible to test" and "ready to pass." Many candidates also use timed practice sessions to simulate the four-hour format before exam day.
Frequently Asked Questions
No. The two-year information-security experience documentation applies specifically to the self-study route. Candidates who complete official training satisfy eligibility through course completion instead, since the training price already incorporates the eligibility-application fee.
Self-study candidates pay a $100 nonrefundable eligibility-application fee plus a $550 RPS exam voucher, for a combined $650 before purchasing any study materials or courseware.
No. Standalone courseware is separate from official training and the exam voucher. Only recognized official training bundles the eligibility-application fee and satisfies the training-based eligibility route.
The certification requires 120 continuing-education credits per three-year cycle plus an $80 annual fee ($240 per cycle total). The credential's validity is extended annually through fee payment and continuing-education compliance, so falling behind on either puts active status at risk.
Not directly. The certification exam is 100 multiple-choice questions covering the eight domains in the CND Exam Blueprint v4.0, separate from the hands-on labs included in official training. Strong lab performance doesn't automatically translate to exam readiness for the written format.