AZ-400 Certification Guide 2026: Become a Microsoft Azure DevOps Engineer Expert
skilltech club
AZ-400 is an expert-level certification, and unlike the fundamentals exams it assumes you already administer or develop on Azure daily. This AZ-400 certification guide breaks down the prerequisites, the skills measured, the exam mechanics and an eight-week plan to become a certified Azure DevOps Engineer Expert.
What AZ-400 actually certifies
AZ-400 (Designing and Implementing Microsoft DevOps Solutions) validates that you can combine people, processes and technologies to deliver software continuously. That means version control strategy, CI/CD pipelines, infrastructure as code, security and compliance built into the pipeline and feedback loops from production. It is less about memorising portal screens and more about designing a delivery system, which is exactly why it pays well and why it is harder than an associate exam.
The prerequisite most people miss
AZ-400 is the only Azure certification on this list with a hard prerequisite: you must already hold either the Azure Administrator Associate (AZ-104) or the Azure Developer Associate (AZ-204) before the expert credential is awarded. You can sit and pass AZ-400 first, but the badge only appears once the associate requirement is met. Most candidates come through AZ-104 (operations background) or AZ-204 (developer background). If you have neither yet, start there, our AZ-104 exam guide is the fastest on-ramp for the ops route.
AZ-400 exam format, cost and passing score
| Attribute | Detail |
|---|---|
| Level | Expert (role-based) |
| Prerequisite | AZ-104 or AZ-204 (associate) |
| Questions | Typically 40–60, including case studies |
| Duration | 100 minute |
| Passing score | 700 out of 1000 (scaled) |
| Cost | USD $165, regional pricing applies (India and other regions billed locally); confirm at booking |
| Renewal | Free online renewal each year before expiry |
Expert certifications renew annually with a free, unproctored online assessment. Diarise the window, a lapsed expert badge means resitting the full exam, prerequisite still intact.
AZ-400 skills measured: domains and weightings
The weighting here is lopsided on purpose, nearly half the exam is pipelines. Plan your study hours to match, not to spread evenly.
| Domain | Weight | Core skills |
|---|---|---|
| Design and implement processes and communications | 10–15% | Work-tracking, metrics and dashboards, traceability, team collaboration, notification strategy |
| Design and implement a source control strategy | 10–15% | Git branching models, repository structure, pull requests, large-file and monorepo handling, GitHub/Azure Repos |
| Design and implement build and release pipelines | 50–55% | Azure Pipelines and GitHub Actions, CI/CD, infrastructure as code, deployment patterns, secrets and agents |
| Develop a security and compliance plan | 10–15% | Secret management, dependency and container scanning, governance, secure pipelines (DevSecOps) |
| Implement an instrumentation strategy | 5–10% | Monitoring, logging, Application Insights, feedback loops, site reliability signals |
The authoritative scope is on the Microsoft Learn DevOps Engineer page and the AZ-400 exam details. Check them before booking, as skills are periodically refreshed.
An 8-week study plan to pass AZ-400
Weeks 1–2 — Source control and processes
Lock down Git strategy first: branching models (trunk-based vs GitFlow), pull-request policies and how Azure Repos and GitHub differ. Set up a sample project with branch policies and required reviewers. Add work-item traceability so a commit links back to a requirement.
Weeks 3–5 — Build and release pipelines
This is 50–55% of the exam, so it gets over half of your time. Build CI pipelines in both Azure Pipelines (YAML) and GitHub Actions. Practise multi-stage pipelines, environments and approvals, deployment strategies (blue-green, canary, rolling), self-hosted vs Microsoft-hosted agents and variable/secret handling. Deploy infrastructure as code with Bicep or Terraform as a pipeline stage; our Azure Bicep guide covers the syntax you will wire in.
Week 6 — Security and compliance (DevSecOps)
Move security left: store secrets in Azure Key Vault, scan dependencies and containers in the pipeline and apply governance so insecure builds fail fast. Expect scenario questions where the "working" pipeline is wrong because it leaks a secret or skips a scan.
Week 7 — Instrumentation and feedback
Wire up Application Insights and log-based alerts and learn how production telemetry feeds back into planning. Small domain, easy marks - do not skip it.
Week 8 — Timed practice and case studies
Take full-length timed practice tests including case studies, which AZ-400 uses heavily. Review every miss until you can justify the correct design and reject the alternatives. The AZ-400 DevOps course on SkillTech ships these pipelines, so you spend the eight weeks building rather than configuring tooling.
Tools you must be fluent in
AZ-400 assumes working command of Git, YAML pipeline syntax, at least one IaC language (Bicep or Terraform) and a scripting language (PowerShell or Bash) for pipeline tasks. You do not need to be a senior developer, but you must read a pipeline definition and predict what it produces, many questions show a YAML snippet and ask for the outcome. Practising the same deployment two ways (Azure Pipelines and GitHub Actions) is the single highest-return habit for this exam.
Common reasons candidates fail AZ-400
Three patterns sink otherwise-capable engineers.
First, under-weighting the pipelines domain - it is 50–55% of the exam, yet candidates spend equal time on every section and run short on the one that matters most.
Second, knowing only one CI/CD tool; if you live in Azure Pipelines and ignore GitHub Actions (or vice versa), roughly half the pipeline questions become guesswork.
Third, treating security and instrumentation as afterthoughts — the exam deliberately plants scenarios where a pipeline "works" but leaks a secret or ships without telemetry, and the correct answer is the secure, observable design.
Fixing all three is mostly a matter of rebalancing your study hours toward how the exam is actually weighted.
Is AZ-400 worth it in 2026?
For anyone owning delivery, yes. DevOps remains one of the strongest-paid Azure specialisms and the expert badge signals that you can design the pipeline, not just operate it. It also pairs naturally with the AI track: the same CI/CD and IaC discipline is what moves an agent from a notebook to production. For the full progression across roles, see the Azure certification roadmap.
Frequently asked questions
Do I need AZ-104 or AZ-204 before AZ-400?
Yes — the expert certification requires one of the two associate credentials. You can pass AZ-400 first, but the badge is only issued once the prerequisite is met.
How hard is AZ-400?
It is a genuine expert exam with heavy scenario and case-study content. With daily DevOps exposure, eight weeks is realistic; without hands-on pipeline practice it is very difficult.
Does AZ-400 cover GitHub Actions or only Azure Pipelines?
Both. Microsoft now tests GitHub Actions alongside Azure Pipelines, so prepare to build CI/CD in each.
What is the AZ-400 passing score?
700 out of 1000, scaled. Target 80%+ in practice tests before booking.
Ready to become a certified Azure DevOps Engineer Expert?
Start the lab-first AZ-400 track with mentorship at SkillTech Club Training and turn this guide into a pass.
