Why wait for shipping when your exam date is already fixed? Order the CyberArk Defender CAU201 practice material from Actual4Exams and the download reaches your inbox within a minute of payment — your 2026 study plan can start tonight.
CyberArk CAU201 Exam Overview:
| Certification Vendor: | CyberArk |
|---|---|
| Exam Name: | CyberArk Defender |
| Exam Number: | CAU201 |
| Passing Score: | 70% |
| Related Certifications: | CyberArk Certified Trustee CyberArk Certified Sentry CyberArk Certified Guardian |
| Real Exam Qty: | 40-65 |
| Certificate Validity Period: | 2 years |
| Exam Duration: | 90 minutes |
| Exam Price: | $200 USD |
| Available Languages: | English |
| Exam Format: | Scenario-based, Multiple-choice, Multiple-response |
| Recommended Training: | CyberArk Defender Study Guide CyberArk Privileged Access Security (PAS) Administration |
| Exam Registration: | Pearson VUE Registration CyberArk Exam Page |
| Sample Questions: |  |
| Exam Way: | Online proctored via Pearson VUE OnVUE or onsite at Pearson VUE test centers |
| Pre Condition: | No mandatory prerequisites; recommended: CyberArk Trustee knowledge or 6+ months hands-on experience with PAS |
| Official Syllabus URL: | https://training.cyberark.com/exam/level-2-defender |
CyberArk CAU201 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Privileged Account Management | 25% | - Password management: verification, change, reconciliation - SSH key and service account management - Account onboarding and discovery - Account request and access workflows |
| Topic 2: Monitoring, Reporting & Troubleshooting | 15% | - Basic troubleshooting and log review - Audit logs and event analysis - Built-in and custom reports - Backup and recovery overview - System health and component monitoring |
| Topic 3: Privileged Session Management | 15% | - PSMP for SSH/Telnet access - Session termination and alerts - Session recording, monitoring, and playback - PSM configuration and session initiation |
| Topic 4: CyberArk PAS Architecture & Fundamentals | 20% | - Core components and system workflow - Vault infrastructure and security model - PVWA, CPM, PSM, PSMP overview |
| Topic 5: Safe & Access Management | 25% | - User and group management - Master Policy and authorization rules - Dual control and workflow settings - Safe creation, configuration, and permissions |
Common Questions About the CyberArk CAU201 Exam
The CAU201 exam, officially known as CyberArk Defender, is the CyberArk test that leads to the CyberArk Certified Defender certification at the Intermediate / Defender level. Passing it validates the skills employers expect from a certified professional. It is also associated with related credentials such as CyberArk Certified Trustee, CyberArk Certified Sentry, CyberArk Certified Guardian.
The CAU201 exam contains 40-65 questions, and you have 90 minutes to complete them. Work out your per-question pace before test day, and flag slow items instead of stalling on them — time pressure, not knowledge, sinks many first attempts. Timed mock exams in the Actual4Exams test engines are the most reliable way to build that rhythm.
The passing score for the CAU201 exam is 70%, and the official registration fee is $200 USD. If you miss the mark, a retake means paying the full fee again, so book your seat only when you are ready. A practical benchmark: score consistently above the passing line on timed practice tests before scheduling the real exam.
No mandatory prerequisites; recommended: CyberArk Trustee knowledge or 6+ months hands-on experience with PAS
Entry requirements can change, so confirm the latest conditions on the official exam page: https://training.cyberark.com/exam/level-2-defender.
You can book the CAU201 exam through the official registration channels below:
Exam delivery: Online proctored via Pearson VUE OnVUE or onsite at Pearson VUE test centers. Seats at popular test centers fill quickly, so schedule early once your preparation is on track.
CyberArk recommends the following training options for CyberArk Defender candidates:
Pair any course with the 179 practice questions from Actual4Exams to measure how ready you really are before paying the exam fee.
Yes. A free PDF demo of the CyberArk Defender questions is available, so you can check the question style and answer quality before you pay. Every purchase also includes 365 days of free updates, and if the product expires you can renew the update service at a 50% discount from your member zone.
If you take the corresponding CAU201 exam within 60 days of purchase and do not pass, you can apply for a full refund under the 100% Money Back Guarantee: submit a scan of your enrollment slip and your official Score Report (PDF) within 2 days of the exam date, and the claim is processed within 7 days. Attempts made within 3 days of purchase, downloads without an actual exam attempt, free materials, and expired orders are not eligible, and the candidate name must match the payer name. Prefer new material instead of a refund? You can exchange your purchase for two free products of equal value and keep the update service on your original product. As for delivery, the files are available for instant download and are also emailed to you within one minute of payment — if nothing arrives within 2 hours, contact customer service. There is no limit on how many computers you can install the product on.
The official CyberArk Defender outline is organized into 5 domains. The first three are:
- Privileged Account Management — 25% of the exam
- Monitoring, Reporting & Troubleshooting — 15% of the exam
- Privileged Session Management — 15% of the exam
See the complete exam topics section above for the full outline and the weighting of every domain.
CyberArk Defender Sample Questions:
Question 1
In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.
A. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
B. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.
C. Configure the CPM to allow SSH logins.
D. Configure the Unix system to allow SSH logins.
Question 2
The Vault administrator can change the Vault license by uploading the new license to the system Safe.
A. True
B. False
Question 3
Accounts Discovery allows secure connections to domain controllers.
A. FALSE
B. TRUE
Question 4
CyberArk recommends implementing object level access control on all Safes.
A. True
B. False
Question 5
CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.
A. FALSE
B. TRUE
Solutions:
| Question 1 Answer: A | Question 2 Answer: A | Question 3 Answer: A | Question 4 Answer: B | Question 5 Answer: B |
No help, Full refund!
Actual4Exams confidently stands behind all its offerings by giving Unconditional "No help, Full refund" Guarantee. Since the time our operations started we have never seen people report failure in the CyberArk CAU201 exam after using our products. With this feedback we can assure you of the benefits that you will get from our products and the high probability of clearing the CAU201 exam.
We still understand the effort, time, and money you will invest in preparing for your certification exam, which makes failure in the CyberArk CAU201 exam really painful and disappointing. Although we cannot reduce your pain and disappointment but we can certainly share with you the financial loss.
This means that if due to any reason you are not able to pass the CAU201 actual exam even after using our product, we will reimburse the full amount you spent on our products. you just need to mail us your score report along with your account information to address listed below within 7 days after your unqualified certificate came out.
