A failed attempt costs the exam fee plus the hours behind it — that is what makes choosing material carefully worthwhile. ExamTorrent helps you get the CyberArk Defender + Sentry exam right with 230 verified practice questions and daily-checked updates.
CyberArk CAU302 Exam Overview:
| Certification Vendor: | CyberArk |
|---|---|
| Exam Name: | CyberArk Defender + Sentry (CAU302) |
| Exam Number: | CAU302 |
| Certificate Validity Period: | 3 years |
| Available Languages: | English |
| Exam Format: | Multiple-choice, Multiple-answer |
| Exam Duration: | 180 minutes |
| Exam Price: | $200–$300 USD (varies by region) |
| Related Certifications: | CyberArk Sentry PAM (PAM-SEN) CyberArk Defender PAM (PAM-DEF) |
| Passing Score: | 70% |
| Real Exam Qty: | Approximately 130–230 (commonly reported ~227 total for CAU302) |
| Recommended Training: | CyberArk Official Training (PAS / PAM courses) |
| Exam Registration: | CyberArk Certification Portal (Pearson VUE) |
| Sample Questions: |  |
| Exam Way: | Online proctored or Pearson VUE test center |
| Pre Condition: | Recommended: CyberArk Defender certification or equivalent hands-on PAM experience |
| Official Syllabus URL: | https://www.pearsonvue.com/us/en/cyberark.html |
CyberArk CAU302 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Security Policies and Compliance | - Audit and logging
|
| CyberArk Sentry Advanced Deployment Skills | - Installation and configuration
|
| Session Management and Monitoring | - Privileged session control
|
| Account Lifecycle & Privileged Account Management | - Account onboarding and discovery
|
| CyberArk Privileged Access Security (PAS) Architecture | - Core components (Vault, PVWA, CPM, PSM)
|
Studying for the CyberArk Defender + Sentry Exam: Answers
The CyberArk Defender + Sentry exam requires a score of 70% to pass, and the official registration fee is $200–$300 USD (varies by region). Because the fee is significant, preparing thoroughly the first time is the practical choice.
Every session in the test engine is scored and broken down, so you see clearly which topics you handle well and which ones keep costing you points. That picture tells you where your remaining study time belongs — a far better guide than rereading everything evenly.
The CyberArk Defender + Sentry exam contains Approximately 130–230 (commonly reported ~227 total for CAU302) questions, and you will have 180 minutes minutes to complete them. Practicing within the same limits builds the pacing the real exam demands.
Recommended: CyberArk Defender certification or equivalent hands-on PAM experience
You can confirm the current eligibility requirements on the official CAU302 exam page before you register.
This package includes 230 practice questions for the CyberArk Defender + Sentry exam. Every answer is verified by an experienced team of experts, so you can trust what you study.
You can register for the CyberArk Defender + Sentry exam through the official channels:
Yes. Once downloaded, the online test engine keeps running without an internet connection, on Windows, Mac, Android, or iOS. That means practice continues on flights, in waiting rooms, and anywhere else your day takes you — your CAU302 preparation never has to pause for a missing signal.
The CyberArk Defender + Sentry practice questions are organized around the official exam objectives. Key topics include:
- CyberArk Privileged Access Security (PAS) Architecture ()
- Session Management and Monitoring ()
- Security Policies and Compliance ()
Comparing your practice scores against these topics shows you where the next session should go.
Many candidates combine practice questions with official training. Recommended options include:
CyberArk Defender + Sentry Sample Questions:
The PSM Gateway (also known as the HTML5 Gateway) can be installed
- A. True
- B. False, the PSM Gateway must be installed on a separate Windows machine
Correct Answer: A 🗳️
Which parameter controls how often the Central Policy Manager (CPM) looks for soon-to-be-expired passwords that need to be changed?
- A. Interval
- B. The CPM does not change the password under this circumstance
- C. ImmediateInterval
- D. HeadStartInterval
Correct Answer: D 🗳️
What is the purpose of the PrivateArk Database service?
- A. Executes password changes
- B. Sends email alerts from the vault ID.
- C. Maintains Vault metadata.
- D. Communicates with components.
Correct Answer: B 🗳️
After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault. Can the administrator change these firewall rules?
- A. No, the Vault does not permit any changes to the firewall due to security requirements.
- B. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.
- C. Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.
- D. Yes, the administrator can still modify firewall rules via the Windows firewall interface.
Correct Answer: B 🗳️
Which of the following PTA detections are included in the Core PAS offering? (Choose all that apply.)
- A. Unmanaged Privileged Access
- B. Over-Pass-The-Hash
- C. Golden Ticket
- D. Suspected Credential Theft
Correct Answer: B,D 🗳️
Viewing page 1 out of 46 pages.
Viewing questions 1-5 out of 230 questions.
1128 Customer Reviews
