PAM-DEF practice examsIn development
CyberArk Defender - PAM
Operating a privileged access deployment: what each component does and why the Vault is built the way it is, safes and the authorisations that matter, password rotation including the service accounts nobody dares touch, session brokering, and what to do when something fails.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Architecture, the Vault and account onboarding | Not published |
| Sessions, monitoring and operations | Not published |
Two sample questions
1. Which is a reason to require a ticket reference on privileged access requests?
- Access is rotated as soon as the ticket closes
- Access is recorded by the session manager
- Access is tied to a piece of authorised work — correct
- Access is approved by a second administrator
Why: A ticket reference ties each privileged access to a piece of authorised work, supporting later review.
2. What does a discovery scan feed?
- Onboarding rules — correct
- The DR Vault
- The recording store
- The web theme
Why: A discovery scan feeds accounts into onboarding rules.
The real PAM-DEF exam
| Length | 90 minutes |
|---|---|
| Questions | 65 |
| Pass mark | Not published by CyberArk |
| Price | $200 USD |
| Recommended before you sit it | None formally. CyberArk expects hands-on experience with a deployment. |
| Valid for | 2 years |
Exam facts as published by CyberArk; always check the vendor’s page before you book.
Study PAM-DEF with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.