CNDA Study Guide 2026

Everything you need to pass the CNDA exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.

CNDA exam key facts

  • The CNDA certification processing fee is USD 200. Source
  • The CNDA certification is valid for the same duration as the holder's CEH certification. Source
Start the Timed CNDA Mock Exam →

📋 CNDA Exam Format at a Glance

100
Questions
240 min
Time Limit
70.00%
Passing Score

📚 CNDA Topics to Study (19)

✍️ Sample CNDA Questions & Answers

1. A network defender detects an access point broadcasting the corporate SSID but with a different BSSID and stronger signal. This is most likely which type of attack?
✓ Evil twin attack

An evil twin is a rogue AP mimicking a legitimate SSID/BSSID to lure clients into connecting so the attacker can intercept traffic.

2. A SOC analyst receives an alert about an impossible travel event — a user logged in from New York and Tokyo within 30 minutes. What should be the FIRST response step?
✓ Disable the account temporarily and contact the user to verify legitimacy

The first step is to disable access to prevent potential ongoing compromise while verifying whether the activity was legitimate, such as VPN use.

3. Which vulnerability management metric tracks the average time from a patch being available to it being deployed?
✓ Mean Time to Patch (MTTP) or patch cadence

Mean Time to Patch measures the speed of an organization's patching program, with shorter times reducing the exposure window for known vulnerabilities.

4. In a third-party risk management program, what document formally defines the security obligations of a vendor?
✓ BAA (Business Associate Agreement) or security addendum

A BAA (required under HIPAA) or security addendum to a contract formally obligates vendors to meet specific security and data protection requirements.

5. Under HIPAA, what category of information must healthcare organizations protect?
✓ Protected Health Information (PHI) that identifies individuals

HIPAA protects PHI — any individually identifiable health information held or transmitted by a covered entity or its business associates.

6. Which vulnerability management practice involves grouping systems by criticality and applying different patching SLAs to each group?
✓ Risk-based patch prioritization

Risk-based patch prioritization assigns shorter remediation windows to critical systems and high-CVSS vulnerabilities while allowing more time for lower-risk assets.

🎯 Free CNDA Practice Tests

📖 CNDA Guides & Articles

Your CNDA Study Path
1. Learn with Flashcards → 2. Drill Practice Tests → 3. Take the Full Exam Simulation

What Practice Test Geeks adds beyond an AI chat for CNDA

An AI chatbot can quiz you, but it can't reproduce the exam conditions or keep your record. Here you get:

  • A timed, full-length CNDA mock exam — 100 questions in 240 minutes with a 70% pass mark, modeled on the official exam's question count and time limit, followed by a score report broken down by exam domain.
  • A fixed CNDA question bank: the same test every attempt, so your score is comparable from one try to the next instead of changing with every regenerated quiz.
  • Progress saved on your device: completed tests, scores and missed questions stay in My Progress, so you can retake only what you got wrong.
  • A printable CNDA cheat sheet you can print or save as a PDF.
  • CNDA flashcards built from the same question bank.
  • Free CNDA practice tests with the correct answer shown after each question.
Start the Timed CNDA Mock Exam →
Was this helpful?

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. cert.eccouncil.org — Test delivery, eligibility, fees, renewal, score validity · verified Oct 2026