Passed CAD on second attempt – here's what finally worked

Good point about scenarios vs. memorization. I passed on my first try last November with 79% and I'd say 70% of the questions were “given this environment, what do you do” type situations. Pure flashcard cramming won't get you there.

Congrats on passing. I'm about 4 weeks into my prep and the policy enforcement stuff is exactly where I keep losing points on practice tests. Did you use any third-party study materials or stick to CyberArk's own docs?

Also curious how long the exam runs – I keep seeing different numbers online ranging from 90 to 120 minutes.

My company is pushing everyone on the security team to get CAD this quarter, so this thread is really helpful. Roughly how much hands-on CyberArk experience would you say you need before the content starts clicking?

The SSH key questions wrecked me too on my first attempt. What helped was drawing out the trust relationships between the vault and target machines on paper rather than trying to hold it in my head. Takes more time up front but the retention is way better.

Honestly I almost quit after that first fail. Two years of daily CyberArk work and I still couldn't crack the scenario questions on policy enforcement -- it felt humiliating. What finally clicked for me was drilling specifically on CPM behavior in edge cases, like what happens when a safe has conflicting platform settings. I spent a few sessions on cad/questions/central policy manager cpm and the practice questions there actually matched the style of what I saw on the real exam way better than the official study material did.

Don't give up if you're in that same spot. The second attempt felt completely different once I stopped trying to memorize features and started thinking about WHY CyberArk makes certain policy decisions. That mindset shift is what got me across the line.

What finally clicked for me was going through every practice question I got wrong and figuring out why the wrong answers were wrong, not just accepting that the right answer was right. Like, if I chose B and the answer was D, I'd sit there and write out exactly what was flawed about A, B, and C. It took way longer but after a couple weeks I stopped pattern-matching and actually started thinking like the exam wanted me to.

The policy enforcement scenarios especially -- once I understood why a certain safe configuration would create an exposure even if it looked fine on the surface, those questions stopped feeling like tricks. You've got to get comfortable with "this is almost right but here's the subtle gap" thinking. Didn't memorize a single thing differently the second time around, just changed how I processed the questions I was getting wrong.

This is exactly the mindset shift that helped me too. I stopped flagging questions I got right and started obsessing over the wrong ones instead. Like, I'd sit there and actually think through why that distractor was so tempting, what assumption it was exploiting, and where my mental model was off. For the policy enforcement stuff especially, CyberArk's logic has a lot of "it depends" nuance that the exam loves to test with near-identical scenarios where one small detail changes the correct answer.

Once I started treating wrong answers as the real study material, everything clicked faster. It's slower at first because you're doing more thinking per question, but you're not just pattern-matching anymore. You actually understand why the platform behaves a certain way, which means you can reason through scenarios you've never seen before instead of guessing based on vibes.

This is exactly what clicked for me too. I stopped reviewing questions by asking "what's the right answer" and started asking "why would someone pick the wrong one." Like, once you understand that the distractor answers on policy enforcement questions are almost always technically valid in a different context, you stop second-guessing yourself. It's not about memorizing what CyberArk does, it's about knowing why the other three options don't apply to that specific scenario.

Honestly the scenario-based items got way easier once I built that habit. I'd read a wrong answer and just think through the gap between what it describes and what the question is actually asking. Took maybe a week of practicing that way before it felt natural. If you're still grinding flashcards, try switching to that mindset instead, even just for your last few study sessions before the exam.