The Q/ND (Qualified Network Defender) Certification Class is a 40-hour instructor-led training program focused on network defense and security skills assessment. The course is the final component of the Q/ISP (Qualified Information Security Professional) certification track. The training consists of 75% hands-on laboratory exercises covering defensive scenarios to protect networks from attacks, internal misconfigurations, data breaches, and compromises. Students learn network firewall and router monitoring and defense, deep packet analysis including IDS and IPS implementation, DNA malware detection and reverse engineering, and a five-step best practice process for measuring network defense goals. The curriculum addresses risk mitigation at DMZs, internet-facing connections, external partner connections, and intranet traffic. Topics include incident handling processes, data classification programs, data loss prevention solutions, Snort signature writing, IPS filtering techniques, and network access control for containment. The class uses dual-core machines with 4GB RAM running Windows, Linux, and VMware Workstation. Students work with tools including Nmap, Nessus, Wireshark, Snort, Metasploit, Netcat, John the Ripper, Cain and Abel, and various Cisco firewall and router platforms. Prerequisites include understanding of TCP/IP protocols. The course awards 40 CPE credits and 3 CEU credits upon completion. Evaluation is based on 95% attendance and 100% completion of labs. The final exam is required for graduation.