CNDA case studies
CNDA · Put your knowledge to work in context.
The CNDA is a cybersecurity certification offered by Mile2 Cybersecurity Institute, a training and certification body based in Tampa, Florida. The credential sits in Mile2's certification catalog alongside its other role-based and foundational programs, and its subject matter is network defense: the practices and controls used to protect networks, hosts, and boundaries against intrusion, and to detect and respond when defenses are tested. Candidates who pursue it are typically security analysts, network or systems administrators, SOC staff, and IT professionals moving into a defensive security role, as well as students in academic programs that use Mile2 materials. Mile2 markets its certifications to individuals and to organizations, and publishes a role-based certification roadmap, detailed course outlines, learning material samples, exam prep guides, and cyber range labs that candidates can use to plan study. The CNDA case studies are 5 cases and about 2,802 words.
1ACL Order and Placement in a Three-VLAN Campus
A 1,200-employee manufacturer runs a /16 campus network on a core Layer 3 switch. VLAN 10 (clients, 10.20.10.0/24) and VLAN 20 (servers, 10.20.20.0/24) are routed; VLAN 30 (building management, 10.20.30.0/24) contains HVAC and badge controllers that must be reachable only from a jump host at 10.20.20.10.
563 words, about 3 min2DMZ Web Server Cannot Reach Vendor Updates
A retailer exposes an on-premises storefront through a firewall with three zones: Untrust, DMZ, and Trust. The public IP 203.0.113.10 is statically NATed to the DMZ web server 172.16.50.20.
568 words, about 3 min3EDR LSASS Alert on Engineering Workstations
An engineering firm with 240 endpoints runs EDR managed by a small SOC. At 02:14 on Tuesday, EDR raises a high-severity alert on ENG-WS-042: powershell.exe accessed LSASS memory, parent taskeng.exe, command line contains an encoded blob.
570 words, about 3 min4High-Volume DNS Tunneling Alert from Marketing
A SOC receives about 1,800 SIEM alerts per day. The top rule, 'Possible DNS tunneling,' generates 900 alerts from the marketing VLAN 10.20.40.0/24.
554 words, about 3 min5Ransomware on File Servers with Domain-Joined Backups
A 500-user professional services firm suffers a ransomware incident on Monday at 06:40. Three file servers, FS01-FS03, hold 12 TB total.
547 words, about 3 min