Network Defense Essentials (NDE) inkl. Examen

EC-Council Network Defense Essentials (NDE) ist eine Foundation-Cert in der EC-Council Essentials Series — Einstiegs-Cert vor C|ND Certified Network Defender. Themen: 1. Network Security Fundamentals — Network-Architekturen, OSI/TCP-IP-Modelle, Common Protocols (HTTP/HTTPS, FTP, SMTP, DNS, SNMP, NTP, SSH). Network Defense-Konzepte (Defense-in-Depth, Zero Trust, Least Privilege). 2. Identification, Authentication, and Authorization — Authentication Factors (Something you know/have/are), MFA, Single Sign-On (SSO mit SAML, OAuth, OIDC), Federation, Privileged Access Management (PAM). 3. Network Security Controls Administrative — Policies, Standards, Procedures, Guidelines. Security Awareness und Training Programs. 4. Network Security Controls Physical — Physical Security (Locks, Biometrics, Mantraps, CCTV, Guards), Environmental Controls (HVAC, Fire Suppression). 5. Network Security Controls Technical — Firewalls (Stateful Packet Inspection, NGFW, WAF, Cloud Firewalls), IDS/IPS (Network-based, Host-based, Snort als Open-Source-IDS, Suricata, Cisco Secure IPS), VPN (Site-to-Site mit IPsec, Remote Access mit SSL/TLS, WireGuard als modern). Network Segmentation mit VLANs, Microsegmentation. 6. Virtualization und Cloud Computing — Hypervisor-Security (Type 1 ESXi/Hyper-V/Xen, Type 2 VMware Workstation/VirtualBox), Container-Security-Basics. Cloud Security (Shared Responsibility Model, Cloud Provider Security Controls). 7. Wireless Network Security — 802.11-Standards, Wi-Fi-Security (WPA2/WPA3 mit Personal/Enterprise/SAE), Wireless Threats (Rogue AP, Evil Twin, Deauth-Attacks), Wireless IPS WIPS. 8. Mobile Device Security — Mobile Threats, MDM Mobile Device Management, BYOD/COPE/CYOD-Policies, Containerization von Corporate Data. 9. IoT Device Security — IoT-Risiken (Default Credentials, Outdated Firmware, Unverschlüsselte Communication), IoT-Security-Best-Practices (Network Segmentation für IoT in dediziertem VLAN, Firmware-Updates, Strong Authentication). 10. Cryptography und Public Key Infrastructure PKI — Symmetric vs. Asymmetric Cryptography, Hashing (SHA-256), PKI mit Certificate Authorities, Cert-Lifecycle. 11. Data Security — DLP Data Loss Prevention, Encryption at Rest (BitLocker, FileVault) und in Transit (TLS), Data Classification. 12. Network Traffic Monitoring — Network Monitoring Tools (Wireshark, tcpdump, NetFlow), SIEM (Splunk, ELK Stack, Microsoft Sentinel) für Log-Aggregation und Correlation. NDE Examen: 75 Multiple-Choice, 2h, 70% Pass.