Hi everyone!

I’m planning to take the CyberArk PAM Defender certification exam and would appreciate any advice on exam preparation, key topics to focus on, and recommended study resources or practice questions. If anyone has recently taken the exam, I’d love to hear about your experience.

Thanks in advance!

Hi Everyone,

I’m planning to take the CyberArk PAM Sentry certification exam at a test center and would appreciate your guidance.

If anyone has recently taken this exam, could you please share your experience, preparation strategy, important topics, and any reliable practice questions or study resources?

I would also appreciate guidance on the exam pattern, difficulty level, and the types of questions to expect.

Any tips, sample questions, or legitimate practice dumps based on publicly available or authorized study material would be really helpful for my preparation.

Thanks in advance for your support!

I given exam on 8 october for cyberark defender and passed but I not received certificate till now . anyone how knows how many days it will take??

Hi,

We have a domain joined PSM server running CyberArk 14.2, installed and hardened according to CyberArk's recommendations. However, we need to comply with PCI requirements, and two GPO settings are causing issues.

1. For PCI: "Allow log on locally": This policy must be restricted to the Administrators group.
   

However, this configuration does not work for us because PSM connections fail unless we also include Users/PSMShadowUsers in the GPO. Otherwise, we receive error PSMSC025E, as described in the article:

https://community.cyberark.com/s/article/00003033

1. For PCI: "Network security: Restrict NTLM: Incoming NTLM traffic": must be set to "Deny all domain accounts"
   

However, this setting causes an "Incorrect function" error for both shadow users and local accounts and prevents connections. The only workaround we have found is to set the policy to "Allow all" (related to bug 00013829 and error PSMSC025E).

Seems this issue also affects CPM and EPM, as described in the articles:

https://community.cyberark.com/s/article/00003033

https://community.cyberark.com/s/article/CPM-Scheduled-Task-Password-Change-Fails-with-Access-is-Denied-error-message

https://community.cyberark.com/s/article/Login-Page-for-EPM-is-on-loop-due-to-EPM-server-hardening

These security requirements must be enforced to comply with PCI.

Three questions:

1- Why it happens? what is the issue here? What core functionality of CyberArk we are breaking?

2- Is there a workaround that allows us to enforce both PCI GPO restrictions, or at least the Network security: Restrict NTLM: Incoming NTLM traffic policy, while maintaining CyberArk functionality?

3- Is there any official CyberArk documentation confirming whether these restrictions that says such GPO's are required for PSM shadow users? looking for official documentation beyond the community articles listed above.

Thank you.

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hey, has anyone passed the recertification exam to CDE or CPC, both of them are soon to expire for me on December. I assume that the exam includes all technical knowledge but since the recert isn't a challenge but an exam, if someone has any guidance on this, I would appreciate it very much

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Anyone can share documents or brief explain what each status icon means? Especially the triangle with person in front icon.

Hi Everyone,

Does someone have any free exam dump for CyberArk Sentry CPC exam? or anyone who recently gave me the exam? Planning to give the exam in the upcoming week.

Hello All,

This is a bit about me.

I have been working in corporate for 6 years now, and I had almost 4.5 to 4.8 years of experience in CyberArk self-hosted, where I was part of operations and I've learnt atleast a bit of the configuration files and worked on upgrade activities.

A yr ago, I switched and moved to a different organization where I was looped to a project where the client works on a SaaS or the CPC environment, I've been trying to understand the structure and the work, but feels clueless about my understanding on CPC and I've been only given Ad-hoc activities to work on here.

Looking at the current job market and the evolving AI, I'm quite scared, and I'm here to seek some advice and help from the exprets on how can I develop my skills and practice and seek opportunities and have a continuous learning and keep my job safe.

Any advice and suggestions are welcome.

On CyberArk PAM, is it possibile to modify multiple paltforms (100+) via API or PsPAS? Change the value of PasswordLength from one value to another, say to change them all to PasswordLength value 20. If not what can be the fastest approach?

From the documentation I could not find it.

Thank you

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hi everyone,

I am planning to prepare for and take the CyberArk CDE certification exam. I have nearly 4.5 years of experience with Self-Hosted PAM and about 1.5 years with CyberArk Privilege Cloud (CPC). Having already earned my Defender and Sentry certifications, my next goal is the PAM-CDE certification.

I would appreciate your guidance on key focus areas and career opportunities, particularly as the industry rapidly integrates AI into Identity Security.

Additionally, could you clarify the difference between ACCESS-CDE-RECERT and PAM-CDE-RECERT on Pearson VUE so I know which exam to schedule?

Thanks in advance for your assistance!

How do you guys manage sudo permissions in mac and linux? For context, all of our users do not have admin rights and we used to give our devs and engineers permissions in cyberark so they all the sudo stuff they need in the Terminal or whatever scripts they run by having the Elevate policy and I've added definition for sudo command and the wildcard * so they can run whatever sudo command they need. However, our security team asked us to take that away.

How do you guys handle the sudo commands in Terminal especially if they run all these different sudo commands that it will be almost impossible to track and add each and one of them in a policy?

Also, for a larger context we are removing elevated policies for all of the applications we've added in cyberark. How do you manage this in your org? Do you have a list of applications that is madated to be run with admin rights for certain people only? We are just now onboarding to Idira as well and I can't even manage our device groups yet because I still need to make sure all devices are running a supported agent version before I can enable the new endpoint group management

Hello everyone, does anyone know how to retrieve or download reports via API from the Idira/CyberArk ISPSS tenant?

I’ve gone through the available documentation, but it seems there isn’t currently an API to access or download these reports. If the functionality isn’t exposed via API, does anyone know the reason why? Also, is there any possible workaround or alternative approach to retrieve these reports programmatically?

Any guidance would be appreciated. Thank you!

I am facing a very weird issue with SIA when a user downloads the RDP file it launch session but all of a sudden it automatically goes into reconnecting when the user is working on a remote session. It’s pretty random and the network is fairly clean no drop , not latency . All is working as expected. Has anyone experienced something similar?

Hi I have my cyber ark defender pam exam schedule in next week.can anyone please guide me how is the exam toughness ? How many more than one correct questions are their?

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hey everyone, I have my CPC-SEN exam scheduled for the end of October. Has anyone taken the exam recently? How was your experience.
Thanks!

Hi everyone,

I wanted to share my recent experience with SAP account onboarding in CyberArk and would really appreciate hearing from anyone who has faced similar issues.

We recently onboarded SAP Application (Dialog) user accounts into CyberArk. After onboarding, we encountered several usability issues:

• Some pop-ups in the SAP application were not displaying their content properly. We were able to partially resolve this by allowing Microsoft Edge WebView, but we still encountered some additional pop-up-related issues.
• When users launch a browser through SAP Fiori, the session starts in Incognito mode, which prevents them from accessing previously downloaded files. We believe this might be addressable through Chrome/Edge policy configuration, but we haven't fully explored it yet.
• A major issue reported by the client was the inability to switch between multiple windows/tabs using Alt + Tab as they normally do on their local PCs when working with SAP GUI. Since they frequently work with multiple windows, this was affecting their workflow.

To address the usability concerns, we introduced a Windows Jump Server for the SAP users. However, after moving SAP GUI usage to the Jump Server, users started experiencing lag and occasional application crashes.

At this point, I'm trying to determine whether these performance issues could be related to the CyberArk PSM/connection configuration, the Jump Server itself, SAP GUI, network latency, or something else in the environment.

Has anyone faced similar SAP GUI performance/crash issues when using CyberArk PSM or a Jump Server?

I'd really appreciate it if you could share your experience, troubleshooting approach, or any resolutions that worked for you.

Thanks in advance!

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.