CyberArk Guardian study guide
CyberArk Guardian · Work through your exam, one topic at a time.
The CyberArk Certified Guardian is a vendor credential associated with CyberArk's privileged access and identity security portfolio, which the source now presents under the Idira brand, described as "the next-generation identity security platform, built on CyberArk's legacy and powered by Palo Alto Networks." Candidates researching this certification should know one thing first: the certification pages now resolve to the Idira platform site, and that site publishes no exam blueprint. Question count, time limit, passing score, fee, delivery format, retake rules, validity period, and domain weightings are all absent from the source, so treat any figure you see elsewhere as unverified until you confirm it with the vendor. The CyberArk Guardian study guide has 4 sections and about 1,718 words.
01Privileged Access Management (PAM)
The PAM domain tests the control plane around privileged accounts in CyberArk: the Digital Vault, Safes, Master Policy, Central Policy Manager (CPM), and Privileged Session Manager (PSM/PSM for SSH). Expect scenario questions about onboarding an account, granting use without exposing the password, enforcing dual control, and proving that sessions were recorded.
429 words, about 2 min02Human Identity Security
The Human Identity Security domain tests workforce identity in CyberArk Identity: directory integration, single sign-on, multi-factor authentication, adaptive authentication, provisioning, and lifecycle management. Questions typically ask how a user authenticates, how an application is assigned, and how access is removed when a person changes roles or leaves.
422 words, about 2 min03Machine and Nonhuman Identity Security (Secrets Management)
This domain tests secrets management for applications, containers, CI/CD pipelines, and cloud workloads. The core question is how a nonhuman identity proves what it is, retrieves only the secrets it needs, and avoids hardcoded credentials.
436 words, about 2 min04Agentic Identity Security and Identity Governance
This domain covers autonomous and semi-autonomous nonhuman identities, such as AI agents, bots, and RPA workers, plus identity governance controls that prove access is appropriate. The exam tests whether you can give an agent a distinct, owned identity with least privilege and short-lived credentials, and whether you can govern that access through certifications, entitlements, separation of duties, and lifecycle events.
431 words, about 2 min