Question 1

Which CyberArk certification should I start with?

Accepted Answer

Start with CyberArk Defender PAM (PAM-DEF, $200). This foundational certification validates practical knowledge in maintaining and operating CyberArk's Privileged Access Security solution. It is designed for PAM administrators, system operators, and junior security engineers with 6-12 months of hands-on PAM experience.

Question 2

Do CyberArk certifications expire?

Accepted Answer

Yes, all CyberArk certifications are valid for 2 years from the date of successful examination. Recertification requires passing the current version of the certification exam to reflect the latest platform updates. This is shorter than many vendors, reflecting CyberArk's rapid product evolution.

Question 3

Does CyberArk offer online proctoring?

Accepted Answer

As of November 1, 2025, all CyberArk certification exams are administered exclusively in-person at Pearson VUE test centers. Online proctoring is no longer available to ensure exam integrity. Candidates must schedule at a local test center and present a government-issued ID.

Question 4

What is the passing score and exam format for CyberArk?

Accepted Answer

CyberArk Defender exams (PAM-DEF, ACC-DEF, EPM-DEF) typically have ~60 multiple-choice questions over 90 minutes. Sentry exams are similarly structured but with more advanced scenario-based questions. Passing requires achieving the minimum scaled score set by CyberArk, typically requiring correct answers on most domains.

Question 5

How much do CyberArk certification exams cost?

Accepted Answer

Each CyberArk certification exam costs $200 USD. Official training courses range from $1,500-$3,000 for instructor-led training. Exam vouchers are purchased through Pearson VUE. Retakes cost the full $200 fee each time.

Question 6

What is the retake policy for CyberArk exams?

Accepted Answer

If you fail the first attempt, you may retake after 5 days. After a second failure, you must wait 30 days between additional attempts. Maximum of 3 attempts in a 12-month period. All retakes require full payment of the exam fee.

Question 7

What is the difference between Defender, Sentry, and Guardian?

Accepted Answer

Defender validates day-to-day operational maintenance of CyberArk solutions ($200). Sentry validates deployment, installation, and configuration expertise ($200). Guardian validates advanced architectural skills combining organizational strategy with privileged account security. Guardian requires deep expertise and is typically pursued by solution architects with 5+ years of PAM experience.

Exam	Name	Level	PDF questions	Free samples
ACCESS-DEF	CyberArk Defender Access	Defender	50	free samples
CAU201	CyberArk Defender	Defender	142	free samples
CAU301	CyberArk Sentry	Sentry	27	free samples
CAU302	CyberArk Defender + Sentry	Defender + Sentry	139	free samples
CPC-SEN	CyberArk Sentry - Privilege Cloud	Sentry	86	free samples
EPM-DEF	CyberArk Endpoint Privilege Manager	Defender	109	free samples
PAM-CDE-RECERT	CyberArk CDE Recertification	Recertification	90	free samples
PAM-DEF	CyberArk Defender – PAM	Defender	101	free samples
PAM-SEN	CyberArk Sentry – PAM	Sentry	93	free samples

CyberArk

Choosing a CyberArk certification

About CyberArk

Why certify?

CyberArk Certification FAQ