BeginnerSecurity+
The benchmark certification for starting a cybersecurity career, recognised by employers in Morocco and worldwide.
5 days · 35 h✓ Voucher included
From10,900 MAD
CND v3 Training in Morocco
Certified Network Defender v3 (CND)
Protect, detect, respond, predict: the certification that turns a network administrator into a real defender.
- Vendor
- EC-Council
- Exam code
- 312-38
- Duration
- 5 days · 40 hours
- Level
- Intermediate
Overview
EC-Council's Certified Network Defender (CND) is a defence-focused certification built around four stages: protect, detect, respond and predict. Version 3 covers perimeter and endpoint hardening (Windows, Linux, mobile, IoT), security for virtualised, cloud and wireless environments, traffic and log monitoring, incident response, business continuity, plus attack surface analysis and cyber threat intelligence (CTI).
It is a particularly good fit for the Moroccan market, where many security teams come from systems and network administration. Telecom operators, banks, public administrations and the offshore service centres of Casablanca, Rabat and Technopolis hire people who can harden infrastructure and feed a SOC. Law 05-20 on cybersecurity and the DGSSI framework also raise the bar for protecting and monitoring information systems.
The course lasts 5 days (40 hours) with a strong lab component: configuring firewalls and IDS/IPS, hardening servers, analysing packet captures and correlating logs. It can be taken in a classroom or online, and the 312-38 exam voucher is included in the price. CND is also an excellent foundation before moving on to CEH or CHFI.
Who is it for?
- Network and system administrators running production infrastructure
- NOC technicians and engineers moving into a SOC
- Tier 1 SOC analysts who want stronger defensive foundations
- IT managers in SMEs and public administrations
- Career changers heading into defensive cybersecurity
Prerequisites
- Basic networking knowledge (OSI model, TCP/IP, routing, VLANs)
- Windows or Linux administration experience
- Some prior IT operations experience is recommended
What you will be able to do
- Define and enforce administrative and technical security policies
- Configure and monitor firewalls, IDS/IPS, VPNs and perimeter security controls
- Harden Windows, Linux, mobile and IoT endpoints as well as cloud and Wi-Fi environments
- Analyse network traffic and logs to spot suspicious behaviour
- Lead incident response and contribute to continuity and recovery plans
- Use attack surface analysis and threat intelligence to anticipate threats
Course outline
- 01Network Attacks and Defense Strategies
- 02Administrative Network Security
- 03Technical Network Security
- 04Network Perimeter Security
- 05Endpoint Security – Windows Systems
- 06Endpoint Security – Linux Systems
- 07Endpoint Security – Mobile Devices
- 08Endpoint Security – IoT Devices
- 09Administrative Application Security
- 10Data Security
- 11Enterprise Virtual Network Security
- 12Enterprise Cloud Network Security
- 13Enterprise Wireless Network Security
- 14Network Traffic Monitoring and Analysis
- 15Network Logs Monitoring and Analysis
- 16Incident Response and Forensic Investigation
- 17Business Continuity and Disaster Recovery
- 18Risk Anticipation with Risk Management
- 19Threat Assessment with Attack Surface Analysis
- 20Threat Prediction with Cyber Threat Intelligence
The exam
| Exam code | 312-38 |
|---|---|
| Format | 100 multiple-choice questions (exam 312-38) |
| Duration | 4 hours |
| Passing score | 60%–85% depending on the exam form |
| Validity | 3 years, renewable with 120 ECE credits and the EC-Council annual membership fee |
Career opportunities in Morocco
- SOC analyst (tier 1 and 2)
- Network security administrator
- Infrastructure security engineer
- Incident response analyst
- Cybersecurity technician in telecom or banking
Frequently asked questions
How much does CND v3 training cost in Morocco?
Prices start at MAD 15,900. This covers 5 days of training (40 hours), the official EC-Council labs, the courseware and the 312-38 exam voucher.
What are the payment options?
We accept bank transfer and card payment. Instalments can be arranged on request, and we issue a company invoice if your employer is paying.
Where are CND sessions held?
Sessions run in a classroom in Casablanca or Rabat, or as a live virtual class you can join from anywhere in Morocco. The programme and labs are identical in both cases.
How do I take the CND 312-38 exam?
The exam has 100 multiple-choice questions over 4 hours. It is taken online with remote proctoring through the EC-Council exam platform, or at an approved test centre when a seat is available.
Do I need to work in security already to take CND?
No. Networking basics and Windows or Linux administration experience are enough. The course is taught in French or English, with materials and the exam in English.
Complementary certifications
BeginnerIntermediateCySA+
Detect, analyse and respond to threats: the certification for SOC analysts and blue teams.
5 days · 35 h✓ Voucher included
From12,900 MAD
BeginnerCCNA
The networking foundation Moroccan employers look for, and the strongest base for a cybersecurity career.
5 days · 40 h✓ Voucher included
From10,900 MAD
Related articles
Certifications· 7 min read
Cybersecurity certification prices in Morocco in 2026 (in MAD)
How much does a cybersecurity certification cost in Morocco? Here are 2026 prices in dirhams for the 12 most requested certifications, what they cover and the extra costs to plan for.
Read the article
Careers· 6 min read
Becoming a SOC Analyst in Morocco: Duties, Skills and Certifications
A SOC analyst monitors, triages and handles an organisation's security alerts, often in a team and on shifts. Here are the duties, L1 to L3 levels, skills, certifications and practical steps to land a first job in Morocco.
Read the article
Business· 6 min read
Training Your Teams in Cybersecurity: A Guide for Moroccan Companies
Incidents, the human factor, Law 05-20, client and tender requirements: training staff in cybersecurity has become a management issue. Here is how to identify needs, choose certifications and build a yearly training plan.
Read the articleReady to earn your certification?
Book a free 15-minute call with an advisor: we assess your level and recommend the fastest path to your goal.