Real Questions and boot camp for CAU302 exam
CAU302 Latest Questions are provided by CAU302 certified specialists at killexams.com. Many individuals become confused as there are numerous CAU302 Practice Test suppliers available, making it challenging to choose the latest, legitimate, and up-to-date CyberArk Defender + Sentry Exam Questions. However, killexams.com has solved this issue by providing days-updated, latest, and legitimate CAU302 PDF Dumps with Latest Questions for exercise tests that function great in actual CAU302 exams.

If you're looking to pass the CyberArk CAU302 exam in order to find a highly paid job or advance in your current organization, then you should register at killexams.com. There, you will find many professionals who gather real CAU302 exam questions to ensure your success. You'll receive updated CyberArk Defender + Sentry exam questions each time you log in to your account, ensuring that you're always up-to-date. Although there are other providers offering CAU302 PDF Braindumps, it's important to remember that not all of them are legit or up-to-date. Beware of free dumps found on the web, as they may not be reliable and could cause you to fail the exam. It's better to invest in killexams CAU302 actual questions and pay a small fee, rather than risking a big exam fee.

With CAU302 cheat sheet in PDF format, you can easily access and memorize the CAU302 PDF Braindumps on any device such as an iPad, iPhone, PC, smart TV, or android device. This saves you precious time and allows you to study the CAU302 real questions at your convenience, increasing your chances of success. Practice CAU302 cheat sheet with the VCE exam simulator until you're confident and can achieve a 100% mark. Once you feel ready, you can head to the test center for the real CAU302 exam.

We provide actual CAU302 exam questions and answers real questions in two file formats: CAU302 PDF and CAU302 VCE exam simulator. Pass the CyberArk CAU302 exam quickly and effectively with our help. You can read the CAU302 PDF Braindumps PDF format on any device, and you can even print CAU302 cheat sheet to create your own study guide. Our pass rate is 98.9%, and the similarity between our CAU302 study guide and the real exam is 98%. If you want to pass the actual CAU302 exam in just one attempt, visit killexams.com straight away.

This certification provides the practical knowledge and technical skills to maintain day-to-day operations and support the on-going performance of the CyberArk Privileged Access Security Solution



The CyberArk Defender Certification tests for the practical knowledge and technical skills to maintain day-to-day operations and to support the on-going maintenance of the CyberArk Privileged Account Security Solution. It is intended to certify an examinees competence to fill one of the following roles within a Privileged Account Security Program.



Exam : CAU302

Exam Name : CyberArk Defender + Sentry

Questions : 65

Type : multiple-choice questions

Duration : 90 minutes

Passing score : 70%



A CyberArk Certified Defender is capable of performing the following tasks:

Describing the system architecture and workflows. Successfully managing passwords (Verification, Change, and Reconciliation). Onboarding accounts using Accounts Discovery and the Password Upload Utility. Configuring sessions to be directed through a PSM. Monitoring recorded sessions. Describing how connections through a PSMP can be established. Modifying Master Policy settings. Producing reports on various system and user activities. Monitoring the CyberArk implementation. Describing and configuring the various logs that are available to troubleshoot problems. Utilizing the knowledge base and other available resources to resolve problems. Performing common administrative tasks.



The CyberArk Defender Certification tests examanees ability to form the following tasks in seven knowledge domains. Only functions of the Core PAS Solution are included.

Account Onboarding

• Perform a bulk upload of accounts using Password Upload Utility or REST

• Create an Onboarding Rule

• Onboard an account from the pending accounts list

• Setup a Unix Discovery

• Setup a Windows Discovery

• Manually onboard an account

• Onboard SSH Keys with Account Uploader



Application Management

• Describe tools that could be used to monitor CyberArk Application Health

• Use PrivateArk with Proficiency

• Describe how each component communicates with others or devices on network at a high level

• Maintain an appropriate chain of custody for Encryption Keys



Ongoing Maintenance

• Restore DR to normal operation after a failover

• Backup Vault Data with PAReplicate

• Resync a credential file by running createcredfile manually on the command line

• Identify the log files for each component

• Identify and locate component configuration files

• Assemble necessary log files for submission to a case (X-RAY)

• Ensure each component is operational

• Open a support case with appropriate description and severity

• Create or Upvote an ER

• Restore an object to the vault from a PAReplicate Backup



Password Management Configuration

• Configure a request/approval process

• Configure workflow processes to ensure non-repudiation

• Setup automatic verification, management, and reconciliation of passwords or SSH Keys

• Explain the differences between a logon versus a reconcile account

• Configure a logon account

• Configure a reconcile account

• Properly configure the “SearchForUsages” Platform parameter

• Configure workflow processes to reduce the risk of credential theft

• Configure workflow processes to comply with audit/regulatory policies

• Import a Custom Platform from the Marketplace

• Duplicate a Platform

• Manage the password of a supported usage

• Provision a Safe

• Follow a safe naming convention

• Configure Safe Retention

• Configure Management of Workstation Passwords using Loosely Connected Devices

• Add a User/Group to a safe in accordance with access control policies

• Use an OOB Platform to manage a device



Security and Audit

• Configure a Response to Unmanaged Credentials

• Describe the various PTA detections

• Configure Automatic Session Termination

• Configure a Response to Credential Theft

• Search for a recording

• Utilize safe permissions to limit the scope of reports for specific users

• Understand the purpose of EVD

• Grant appropriate permission to allow users to run reports

• Describe all reports and what information they give a user

• Review a recording

• Configure email alerts in PTA



Session Management Configuration

• Configure the Master Policy to enable the PSM

• Grant Access to view recordings

• Configure a recording safe

• Make a PSM for SSH Connection using an SSH Client

• Make a PSM Connection using the Connect Button

• Make a PSM Connection using an RDP Client

• Setup text based or video based recordings on PSM

• Configure the PSM to utilize the HTML5 Gateway

• Configure the Master Policy to enable the connect button

• Configure the Master Policy to create PSM recordings

• Configure a split workflow

• Describe connection components and what they do



User Management Configuration

• Be able to describe the difference between safe and vault level permissions without the GUI (web or PA client)

• Add an LDAP User/Group to a Local Group

• Configure additional LDAP hosts

• Validate Proper Function of Pre-Configured Directory Mappings

• Verify an LDAP Configuration is using SSL

• Add a User to a Vault Group

• Configure Safe Level Permissions on a User or Group

• Configure Vault Level Permissions on a User

• Describe the purpose of each Built-In Vault User

• Login as the Master user

• Provision an internally authenticated user in the vault

• Set/Reset a Vault Users Password