From a free demo to 2026 updates and a 60-day money back guarantee, ExamTorrent covers the full CAU302 preparation journey. Get the CyberArk Defender + Sentry practice questions in PDF, desktop, or online format and study on your own terms.
CyberArk CAU302 Exam Overview:
| Certification Vendor: | CyberArk |
|---|---|
| Exam Name: | CyberArk Defender + Sentry (CAU302) |
| Exam Number: | CAU302 |
| Real Exam Qty: | Approximately 130–230 (commonly reported ~227 total for CAU302) |
| Exam Duration: | 180 minutes |
| Available Languages: | English |
| Exam Price: | $200–$300 USD (varies by region) |
| Exam Format: | Multiple-answer, Multiple-choice |
| Related Certifications: | CyberArk Sentry PAM (PAM-SEN) CyberArk Defender PAM (PAM-DEF) |
| Certificate Validity Period: | 3 years |
| Passing Score: | 70% |
| Recommended Training: | CyberArk Official Training (PAS / PAM courses) |
| Exam Registration: | CyberArk Certification Portal (Pearson VUE) |
| Sample Questions: | ![]() |
| Exam Way: | Online proctored or Pearson VUE test center |
| Pre Condition: | Recommended: CyberArk Defender certification or equivalent hands-on PAM experience |
| Official Syllabus URL: | https://www.pearsonvue.com/us/en/cyberark.html |
CyberArk CAU302 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| CyberArk Sentry Advanced Deployment Skills | - Installation and configuration
|
| Account Lifecycle & Privileged Account Management | - Account onboarding and discovery
|
| Session Management and Monitoring | - Privileged session control
|
| Security Policies and Compliance | - Master Policy configuration
|
| CyberArk Privileged Access Security (PAS) Architecture | - Core components (Vault, PVWA, CPM, PSM)
|
Common Questions About the CyberArk CAU302 Exam
The CAU302 exam, officially known as CyberArk Defender + Sentry, is the CyberArk test that leads to the CyberArk Defender + Sentry certification at the Professional level. Passing it validates the skills employers expect from a certified professional. It is also associated with related credentials such as CyberArk Defender PAM (PAM-DEF), CyberArk Sentry PAM (PAM-SEN).
The CAU302 exam contains Approximately 130–230 (commonly reported ~227 total for CAU302) questions, and you have 180 minutes to complete them. Work out your per-question pace before test day, and flag slow items instead of stalling on them — time pressure, not knowledge, sinks many first attempts. Timed mock exams in the ExamTorrent test engines are the most reliable way to build that rhythm.
The passing score for the CAU302 exam is 70%, and the official registration fee is $200–$300 USD (varies by region). If you miss the mark, a retake means paying the full fee again, so book your seat only when you are ready. A practical benchmark: score consistently above the passing line on timed practice tests before scheduling the real exam.
Recommended: CyberArk Defender certification or equivalent hands-on PAM experience
Entry requirements can change, so confirm the latest conditions on the official exam page: https://www.pearsonvue.com/us/en/cyberark.html.
You can book the CAU302 exam through the official registration channels below:
Exam delivery: Online proctored or Pearson VUE test center. Seats at popular test centers fill quickly, so schedule early once your preparation is on track.
CyberArk recommends the following training options for CyberArk Defender + Sentry candidates:
Pair any course with the 230 practice questions from ExamTorrent to measure how ready you really are before paying the exam fee.
Yes. A free PDF demo of the CyberArk Defender + Sentry questions is available, so you can check the question style and answer quality before you pay. Every purchase also includes 365 days of free updates, and if the product expires you can renew the update service at a 50% discount from your member zone.
If you take the corresponding CAU302 exam within 60 days of purchase and do not pass, you can apply for a full refund under the 100% Money Back Guarantee: submit a scan of your enrollment slip and your official Score Report (PDF) within 2 days of the exam date, and the claim is processed within 7 days. Attempts made within 3 days of purchase, downloads without an actual exam attempt, free materials, and expired orders are not eligible, and the candidate name must match the payer name. Prefer new material instead of a refund? You can exchange your purchase for two free products of equal value and keep the update service on your original product. As for delivery, the files are available for instant download and are also emailed to you within one minute of payment — if nothing arrives within 2 hours, contact customer service. There is no limit on how many computers you can install the product on.
The official CyberArk Defender + Sentry outline is organized into 5 domains. The first three are:
- CyberArk Privileged Access Security (PAS) Architecture
- Account Lifecycle & Privileged Account Management
- Security Policies and Compliance
See the complete exam topics section above for the full outline and the weighting of every domain.
CyberArk Defender + Sentry Sample Questions:
What is the proper way to allow the Vault to resolve host names?
- A. The Vault cannot resolve host names due to security standards
- B. Define a DNS server
- C. Define a WINS server
- D. Defining the local hosts file
Correct Answer: D 🗳️
Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?
- A. PVWA > Platform Management > LDAP Integration
- B. PVWA > Administration > Options > LDAP Integration
- C. PVWA > LDAP Integration
- D. PVWA > Administration > LDAP Integration
Correct Answer: D 🗳️
You are successfully managing passwords in the alpha.cyberark com domain; however when you attempt to manage a password in the beta.cyberark.com domain, you receive the 'network path not found* error What should you check first?
- A. That an appropriate trust relationship exists between alphaxyberark.com and beta.cyberark.com
- B. That the end user has the correct permissions on the safe
- C. That the CPM can successfully resolve addresses in the beta cyberark com domain
- D. That the username and password are correct.
Correct Answer: C 🗳️
Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the target email server during Simple Mail Transfer Protocol (SMTP) integration?
- A. PVWA > LDAP Integration > Notification Settings
- B. PVWA > Administration > Notification Settings
- C. PVWA > Options > Notification Settings
- D. PVWA > Platform Management > Notification Settings
Correct Answer: B 🗳️
An SMTP integration allows you to forward audit records to a monitoring solution.
- A. FALSE
- B. TRUE
Correct Answer: A 🗳️
Viewing page 1 out of 46 pages.
Viewing questions 1-5 out of 230 questions.








