CyberArk Defender Exam Prep

What you will be able to do

• You will be able to explain how CyberArk discovers unmanaged privileged accounts and onboards them through the Pending Accounts list and onboarding rules.
• You will be able to describe the Digital Vault's layered security and hierarchical encryption model, including the role of the Server Key and Recovery Key.
• You will be able to distinguish the CPM change, verify, and reconcile operations and identify when a reconcile account is required.
• You will be able to explain how the PSM isolates, records, and controls privileged sessions so credentials never reach the endpoint.
• You will be able to configure access the CyberArk way by separating Master Policy rules from platform-level and Safe-level settings.
• You will be able to perform routine operations and troubleshoot common CPM failures using the correct services and logs.
• You will be able to choose the BEST or MOST appropriate action in exam scenarios by applying least privilege and credential-isolation principles.

What is inside

5 modules, 5 lessons. Each module ends in a graded quiz.

1. 01

   Privileged account discovery

   Covers how CyberArk locates unmanaged privileged accounts and credentials across the environment using CyberArk DNA and the product's Accounts Discovery, then reviews them in the Pending Accounts list and onboards them manually, in bulk, or through automatic rules.

   1 lessons · 5 quiz questions

2. 02

   Vaulting & rotation

   Covers the Digital Vault's hardened design and hierarchical encryption, the roles of the Server Key and Recovery Key, how Safes and accounts organize and control access, and how the CPM changes, verifies, and reconciles credentials.

   1 lessons · 5 quiz questions

3. 03

   Session management

   Covers how the Privileged Session Manager isolates privileged sessions so credentials never reach the endpoint, records sessions as vaulted video and activity evidence, enables live monitoring with suspend and terminate, extends to SSH through PSMP, and connects users via PVWA using connection components.

   1 lessons · 5 quiz questions

4. 04

   Policy configuration

   Covers the two layers of CyberArk policy: the Master Policy that sets organization-wide access-workflow, password, session, and audit rules with exceptions, and platforms that hold the granular technical settings the CPM and PSM enforce, completed by least-privilege access control at the Safe level.

   1 lessons · 5 quiz questions

5. 05

   Operations & troubleshooting

   Covers keeping the core components healthy through their services, matching symptoms to the right component logs, reasoning through common CPM change, verify, and reconcile failures, and ensuring resilience with backup, the PADR disaster-recovery Vault, and safe custody of the Server and Recovery keys.

   1 lessons · 5 quiz questions