CyberArk Level 2 - Defender Practice Exam
CyberArk Level 2 - Defender
Level 2 - Defender
The CyberArk Defender Certification tests for the practical knowledge, understanding, and technical skills to maintain day-to-day processes and to support the on-going maintenance of the CyberArk Privileged Account Security Solution. It is intended to certify an examinee’s competence to fill one of the roles within a Privileged Account Security Program which is Application Support, Vault Administrator, and Data Administrator.
Target Audience
The Defender Certification is designed for:
- IT Personnel who will work with the CyberArk Privileged Account Security Solution on a daily basis
- IT Personnel who will provide first level support for the products
- IT personnel who will make basic configuration changes to the system
- Anyone who will need to open a support ticket with CyberArk 2nd level support
Course Structure
The CyberArk Defender Certification tests an examinee's ability to form the following tasks in seven knowledge domains.
1. Account Onboarding
● Perform a bulk upload of accounts using Password Upload Utility or REST
● Create an Onboarding Rule
● Onboard an account from the pending accounts list
● Setup a Unix Discovery
● Setup a Windows Discovery
● Manually onboard an account
● Onboard SSH Keys with Account Uploader
2. Application Management
● Describe tools that could be used to monitor CyberArk Application Health
● Use PrivateArk with Proficiency
● Describe how each component communicates with others or devices on the network at a high level
● Maintain an appropriate chain of custody for Encryption Keys
3. Ongoing Maintenance
● Restore DR to normal operation after a failover
● Backup Vault Data with PAReplicate
● Resync a credential file by running create credible manually on the command line
● Identify the log files for each component
● Identify and locate component configuration files
● Assemble necessary log files for submission to a case (X-RAY)
● Ensure each component is operational
● Open a support case with appropriate description and severity
● Create or Upvote an ER
● Restore an object to the vault from a PAReplicate Backup
4. Password Management Configuration
● Configure a request/approval process
● Configure workflow processes to ensure non-repudiation
● Setup automatic verification, management, and reconciliation of passwords or SSH Keys
● Explain the differences between a logon versus a reconciled account
● Configure a login account
● Configure a reconcile account
● Properly configure the “SearchForUsages” Platform parameter
● Configure workflow processes to reduce the risk of credential theft
● Configure workflow processes to comply with audit/regulatory policies
● Import a Custom Platform from the Marketplace
● Duplicate a Platform
● Manage the password of a supported usage
● Provision a Safe
● Follow a safe naming convention
● Configure Safe Retention
● Configure Management of Workstation Passwords using Loosely Connected Devices
● Add a User/Group to a safe in accordance with access control policies
● Use an OOB Platform to manage a device
5. Security and Audit
● Configure a Response to Unmanaged Credentials
● Describe the various PTA detections
● Configure Automatic Session Termination
● Configure a Response to Credential Theft
● Search for a recording
● Utilize safe permissions to limit the scope of reports for specific users
● Understand the purpose of EVD
● Grant appropriate permission to allow users to run reports
● Describe all reports and what information they give a user
● Review a recording
● Configure email alerts in PTA
6. Session Management Configuration
● Configure the Master Policy to enable the PSM
● Grant Access to view recordings
● Configure a recording safe
● Make a PSM for SSH Connection using an SSH Client
● Make a PSM Connection using the Connect Button
● Make a PSM Connection using an RDP Client
● Setup text-based or video-based recordings on PSM
● Configure the PSM to utilize the HTML5 Gateway
● Configure the Master Policy to enable the connect button
● Configure the Master Policy to create PSM recordings
● Configure a split workflow
● Describe connection components and what they do
7. User Management Configuration
● Be able to describe the difference between safe and vault level permissions without the GUI (web or PA client)
● Add an LDAP User/Group to a Local Group
● Configure additional LDAP hosts
● Validate Proper Function of Pre-Configured Directory Mappings
● Verify an LDAP Configuration is using SSL
● Add a User to a Vault Group
● Configure Safe Level Permissions on a User or Group
● Configure Vault Level Permissions on a User
● Describe the purpose of each Built-In Vault User
● Log in as the Master user
● Provision an internally authenticated user in the vault
● Set/Reset a Vault User’s Password
Exam Format
- Exam Name: CyberArk Defender Certification
- Number of Questions: 65
- Exam Fee: $200 USD
- Exam Format: Multiple-choice
- Passing score: 75%
- Time Give: 90 minutes
What do we offer?
- Full-Length Mock Test with unique questions in each test set
- Practice objective questions with section-wise scores
- An in-depth and exhaustive explanation for every question
- Reliable exam reports evaluating strengths and weaknesses
- Latest Questions with an updated version
- Tips & Tricks to crack the test
- Unlimited access
What are our Practice Exams?
- Practice exams have been designed by professionals and domain experts that simulate real-time exam scenarios.
- Practice exam questions have been created on the basis of content outlined in the official documentation.
- Each set in the practice exam contains unique questions built with the intent to provide real-time experience to the candidates as well as gain more confidence during exam preparation.
- Practice exams help to self-evaluate against the exam content and work towards building strength to clear the exam.
- You can also create your own practice exam based on your choice and preference.
100% Assured Test Pass Guarantee
We have built the TestPrepTraining Practice exams with 100% Unconditional and assured Test Pass Guarantee!
If you are not able to clear the exam, you can ask for a 100% refund.