CyberArk Guardian

Very little. The CyberArk certification URLs now redirect to the Idira platform site, which describes products and capabilities but publishes no exam blueprint. There is no stated question count, duration, passing score, fee, format, or retake policy in the source, so confirm those details directly with the vendor before scheduling.

The source does not say. It states that Idira is built on CyberArk's legacy and powered by Palo Alto Networks, and that existing CyberArk customers "can continue to use the platform as you always have," noticing only a new logo and design. Whether certification branding follows the same path is not addressed, so verify with the vendor.

Start with privileged access fundamentals: discovery of privileged accounts, eliminating standing privileges in favor of just-in-time access, session isolation, and credential vaulting. The source frames modern PAM around continuous visibility, AI-driven analytics, and a unified command center that embeds threat detection into privileged workflows. Those themes underpin most Guardian-level scenarios.

Treat it as core, not optional. The source states machines outnumber human identities 109:1 and that Idira covers discovery, risk analytics, secrets management, governance and reporting across vaults and workloads, plus remediation of unmanaged secrets and CI/CD integration. Expect questions on secret sprawl, rotation, vault governance, and developer pipeline access.

Yes. The source reports 99 out of 100 organizations have adopted AI agents and describes agentic controls: scanning SaaS, cloud, and developer environments to find active agents, enriching them with ownership and permission context, granting access only for a task's duration, and auditing agent actions. Study how those controls extend the same privilege principles used for humans.

Work in layers: identity and least privilege concepts, then human PAM and endpoint controls, then secrets and workload identity, then identity governance lifecycle, then agentic scoping and audit. Finish by mapping each area back to the source's control-plane description - discover risk, apply privilege dynamically, govern the full lifecycle - so you can reason about unfamiliar scenarios rather than memorizing features.

Candidates typically lose points by treating PAM as vaulting alone, ignoring nonhuman identities, or assuming standing admin rights are acceptable when just-in-time access is the model. Others miss the governance layer entirely - access decisions, lifecycle review, and auditability across human and machine identities. Breadth across all identity types matters more than depth in one product module.

Only through the vendor. The certification pages currently redirect to the Idira platform site, which contains no scheduling, pricing, or blueprint information. Check the vendor's certification and training pages directly, and treat any question count, time limit, or fee you find on third-party sites as unverified until the vendor confirms it.