CyberArk Defender - Identity study guide
CyberArk Defender - Identity · Work through your exam, one topic at a time.
The CyberArk Defender – Identity credential is a vendor certification aimed at security practitioners who operate and defend identity security controls across an enterprise. Candidates typically come from PAM administration, secrets management, endpoint security, and identity governance roles, and are expected to reason about how privilege is discovered, brokered, rotated, monitored, and audited rather than merely recite menu paths. The exam is organized around four equally weighted domains: Human Identity Security (Privileged Access Management), Machine and Nonhuman Identity Security (Secrets Management), Agentic Identity Security (Secure AI Agents), and Endpoint Privilege Manager and Identity Governance. That split signals the vendor's current framing: privilege control extends past administrators to every identity, including the machine and agentic identities the vendor groups as nonhuman identities. The CyberArk Defender - Identity study guide has 4 sections and about 1,587 words.
01Human Identity Security (Privileged Access Management)
This domain tests how you protect, control, and audit human privileged access in CyberArk PAM: safe design, account onboarding, CPM lifecycle, PSM brokering, and policy controls. The exam favors operational judgment over memorized screens.
410 words, about 2 min02Machine and Nonhuman Identity Security (Secrets Management)
This domain tests how workloads authenticate and obtain secrets without humans in the loop. Expect questions on CyberArk Secrets Manager/Conjur policy, workload identity, secret retrieval, rotation, and removing hardcoded credentials.
398 words, about 2 min03Agentic Identity Security (Secure AI Agents)
This domain tests how to give AI agents identities, credentials, and tool permissions without treating them as trusted humans. The exam focuses on least privilege, credential brokering, human oversight, and auditability across agent workflows.
401 words, about 2 min04Endpoint Privilege Manager and Identity Governance
This domain tests least privilege on endpoints and governed access to entitlements. Expect EPM policy design, elevation and application control, plus access requests, certifications, roles, and separation of duties in Identity Governance.
378 words, about 2 min