Chapter 5 of 8 · EC-Council 312-38

Enterprise Virtual, Cloud, and Wireless Network Protection

Virtualization, containers, cloud and Wi-Fi security, worth 15%.

  • 5topics
  • 25 minfast track
  • 1diagrams and exhibits
  • 15%of the exam

Topics in this chapter

Take them in order, or jump to the one you need.

  1. 1Virtualization, NV, SDN and NFV SecurityLearn virtualization basics and how to secure network virtualization, software defined networks and network function…5 min
  2. 2OS Virtualization, Containers, Docker and Kubernetes SecurityLearn OS virtualization and the security best practices for containers, Docker and Kubernetes that CND 312-38 candidates must…5 min
  3. 3Cloud Fundamentals, Security and Evaluating a ProviderLearn cloud computing fundamentals, cloud security insights and how to evaluate a cloud service provider before consuming a…5 min
  4. 4AWS, Azure, GCP and Cloud Security Best PracticesLearn the main security services of AWS, Azure and Google Cloud, plus general cloud security best practices and tools tested on…5 min
  5. 5Wireless Networks, Encryption, Authentication and SecurityLearn wireless fundamentals, WEP, WPA, WPA2 and WPA3 encryption, 802.1X and EAP authentication, and the security measures that…Diagram5 min

About this chapter

What this chapter covers

Enterprise Virtual, Cloud, and Wireless Network Protection is 15% of the EC-Council CND 312-38 exam. It covers securing virtualized networks (NV, SDN, NFV), containers and Kubernetes, the cloud and its major providers, and wireless networks.

Questions are single-answer multiple choice, often "Which of the following" and short named scenarios. You are asked to choose and operate the right defense for a given environment.

It has 19 outline topics, and five pages cover them.

How the topics fit together

The chapter moves from the layers that hide the hardware to the radio link everyone can hear.

Virtual networksNV, SDN, NFVContainersDocker, KubernetesCloudshared responsibilityProvidersAWS, Azure, GCPWirelessWPA3, 802.1X
  • Virtual and container pages show where isolation is enforced and where it can fail.
  • Cloud pages show who is responsible for what, and which service does which security job.
  • The wireless page covers encryption, authentication and the measures that protect a WLAN.
Exam tip

In most scenarios the right answer is the control that matches the layer in question: segmentation for virtual networks, least privilege and logging for cloud, and WPA3 or 802.1X for wireless.

How to use these pages

Each topic page has the same shape, so you can skim for what you need.

  • What it is: the idea in plain words.
  • How it works: the mechanism, with diagrams and tables.
  • What to remember for the exam: the facts to memorize.
  • Common mistakes: the classic traps.
  • Check yourself: three questions to test your understanding.

Try to name the best defense for each short scenario before reading the answer. The exam often describes a setup and asks which control fits.

Ready for more practice?

The full EC-Council 312-38 question bank has 800 questions, with timed practice exams and an explanation for every answer.

This study guide is independent and is not affiliated with, endorsed by, or sponsored by EC-Council. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.