CyberArk CDE (CAU302)
CyberArk Certified Defender (CDE) - CAU302
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The CyberArk Certified Defender (CDE) credential, aligned with exam CAU302, validates the day-to-day skills of administrators who operate CyberArk Privileged Access Management in production. It suits PAM administrators, security operations staff, and implementation engineers who already work with the platform and want independent confirmation of their operational competence. The exam spans account onboarding and management; safe and safe member administration; platform management and CPM configuration; session management and PSM configuration; access control, authentication, and authorization; monitoring, reporting, and auditing; and troubleshooting and day-to-day operations. Questions are multiple choice and multiple response, and the official body publishes the current question count, time limit, fee, passing score, retake policy, and validity period on its website. Preparation should be hands-on: build or use a lab environment, onboard accounts end to end, create and tune platforms, configure PSM connections and recordings, manage safe memberships, run reports, and deliberately break and repair CPM and PSM workflows. Pair lab work with the official exam objectives and product documentation, then practice explaining why each configuration choice exists. This page is an independent study resource and is not affiliated with or endorsed by CyberArk.
What you'll study
About CyberArk CDE (CAU302) preparation
What is the format of the CAU302 exam?
The exam uses multiple choice and multiple response questions delivered electronically. The official body publishes the current question count, time limit, and delivery details on its website. Expect scenario-based items that ask you to choose the correct configuration or interpret an error, rather than simple definitions.
How difficult is the CDE exam?
It is an operational exam, so difficulty comes from breadth and precision rather than obscure trivia. Candidates who have only read documentation often struggle with platform settings, CPM workflow dependencies, and PSM connection details. Hands-on lab experience across all seven domains is the strongest predictor of comfort on exam day.
Can I retake the exam if I fail?
Retake rules, waiting periods, and any fees are set by the official certification body, not by this page. Check the official CyberArk certification site for the current retake policy before scheduling. Plan your first attempt as late as your preparation allows so a retake is a backup, not part of the plan.
How long should I study, and in what order?
There is no official study duration. A practical order is account onboarding first, then safes and members, then platforms and CPM, then PSM, then access control, and finally reporting and troubleshooting. Spend the most time on CPM and PSM, because they carry the most configuration detail and the most common operational failures.
What are the most common failure modes on this exam?
Candidates commonly lose points on CPM platform settings that control password changes and reconciliation, on PSM connection components and recording parameters, and on safe member permissions and authorization flows. Another frequent gap is not knowing which log or report to check when an account fails to change or a session fails to launch.
Do I need production experience to pass?
Production experience helps, but a structured lab can cover the same ground. Build a small environment with a domain, a few target systems, and the vault components, then practice onboarding, platform creation, CPM execution, and PSM sessions. Document what you change and why, because the exam rewards understanding consequences.
How should I use practice questions while preparing?
Use them as diagnostics, not as a question bank to memorize. After each set, review every wrong answer and trace it back to the relevant configuration screen or log. If you cannot explain why the other options are wrong, return to the lab and reproduce the scenario before moving on.
Where do I find official exam logistics and registration?
Registration, scheduling, pricing, and current exam policies are published by the official certification body. This page does not state question counts, time limits, fees, passing scores, or validity periods because those figures change. Always confirm them on the official CyberArk certification website before you book.