How to pass AZ-400 — and actually land the DevOps role
AZ-400 is the exam that punishes cramming hardest. It is an Expert-level, scenario-heavy paper that assumes you have designed and run real delivery pipelines — so the winning strategy is not more flashcards, it is building the thing the exam is about. Here is what it tests, where the marks actually are, and how to study for it on a real project instead of a slide deck.
New to cloud? CAMPUX is a free, build-first course. Start here →
The exam behind the DevOps Engineer Expert title is AZ-400, Designing and Implementing Microsoft DevOps Solutions, and its whole character is different from the associate exams below it. Those ask whether you can operate or build on Azure. AZ-400 asks whether you can design the delivery machine — source control, pipelines, security, monitoring — and it asks in the form of scenarios: here is a situation, choose the right approach. You cannot bluff that from memory. The good news is that the same fact makes the exam very predictable to study for: build one real end-to-end pipeline, and you will have touched most of what it tests by hand.
First, the prerequisite people miss: AZ-400 needs AZ-104 or AZ-204 — the Expert cert is only awarded once you hold an associate. For the exam itself: it is scenario-based and assumes hands-on delivery experience, and build and release pipelines are roughly half of it, so that is where your time goes. The most efficient way to prepare is to build one real pipeline end to end — source control, CI/CD, infrastructure as code, secrets and monitoring — then use Microsoft Learn and practice exams to patch the gaps. And remember the second half of the title of this note: the cert lands the job when a pipeline you can show sits behind it, not on its own.
First: the prerequisite that trips people up
Before any study plan, know this — AZ-400 is not a standalone certification. You can sit and pass the exam, but Microsoft only awards the DevOps Engineer Expert once you also hold the AZ-104 Azure Administrator or the AZ-204 Azure Developer associate. So "getting AZ-400" is two steps: the associate first, the Expert exam second. If you came up through operations, the natural route is AZ-104 to AZ-400; if you came up through code, AZ-204 is your prerequisite. Sort this out before you book, because a passed exam with no associate behind it does not give you the certification.
What AZ-400 tests — and where the marks actually are
The exam spreads across a handful of domains, but they are not weighted evenly, and knowing the weighting is half the battle. Build and release pipelines dominate; the rest support it. Approximate shares (confirm the current skills-measured breakdown on Microsoft Learn before you book, as Microsoft revises it):
| Domain | Roughly | What it means |
|---|---|---|
| Build & release pipelines | ~half | CI/CD, infrastructure as code, deployment patterns, testing, secrets in the pipeline |
| Source control strategy | ~10–15% | Branching, pull requests, repository structure at scale |
| Processes & communication | ~10–15% | Agile flow, work tracking, metrics, feedback loops |
| Security & compliance | ~10–15% | Secure DevOps — secrets, dependency and code scanning, governance |
| Instrumentation | ~5–10% | Monitoring, logging and feedback on what you shipped |
Build-and-release pipelines are about half the exam. Study everything, but spend your time where the marks are.
The study plan: pass it on one real pipeline
Because AZ-400 rewards judgement built from doing, the most efficient preparation is a project, not a playlist. Build one pipeline end to end and the heavy domains take care of themselves.
- Confirm the associate foundation. You already need AZ-104 or AZ-204, so this is not optional. Make sure you are genuinely comfortable with the Azure services your pipeline will deploy to — a pipeline that ships infrastructure you do not understand just fails faster.
- Put everything in source control, done properly. Set up a repository with a real branching strategy and pull-request reviews. This is a domain in its own right and the backbone of everything after it. Covered in Class 17 — Git fundamentals.
- Build the CI/CD pipeline — this is the big one. Wire a pipeline that builds, tests and deploys on every commit, in GitHub Actions or Azure Pipelines, authenticating to Azure with OIDC and no stored secrets, and deploying infrastructure as code with Bicep or Terraform. Since this is about half the exam, spend most of your time here — and if you are unsure which pipeline tool to learn, Azure Pipelines vs GitHub Actions compares them.
- Add security and monitoring to the pipeline. Fold in secret handling and dependency/code scanning (Class 39i — pipeline security), and instrument what you deploy with logs, metrics and alerts (Class 28 — Azure Monitor). These are smaller domains, but doing them on your own pipeline makes the questions concrete instead of abstract.
- Then drill the gaps with Microsoft Learn and timed practice exams. With the hands-on foundation in place, work the official learning paths to cover anything your project did not touch — the processes/communication domain especially — and sit full-length, timed practice sets to find weak spots. Practise on the exam practice page. Do this last, not first; practice questions confirm readiness, they do not build it.
Format, score and cost, briefly
AZ-400 runs roughly 40 to 60 questions, needs 700 out of 1000 to pass, and — the part that catches people — includes case studies and scenario items, not just multiple choice. You are handed a situation and asked to design or troubleshoot the right solution, which is exactly why memorisation underperforms. The exam costs about $165 USD, varying by the region you sit it in. Confirm the current format, passing score and price on Microsoft Learn before you book, since Microsoft adjusts these.
The honest part: passing AZ-400 is not the same as getting hired
Here is where I diverge from the cram guides, because it is the thing that actually decides your outcome. AZ-400 is an Expert credential, and DevOps is the discipline where hiring managers screen hardest for proof over paper. A resume that leads with a DevOps Engineer Expert badge and links to nothing is weaker than a plain one that links to a public repository with a pipeline that visibly builds, tests and deploys. So the pipeline you build to study for the exam is not just study material — it is the portfolio piece that gets you the interview, and the thing you will be asked to walk through when you are in the room. Study for AZ-400 by building, keep the build public, and you prepare for the exam and the interview at once. If you are weighing how much any single cert does for employability, which Azure certifications actually get you hired puts it in context, and the DevOps engineer certifications that matter covers the wider set.
It worked for them.
Questions people also ask
Is AZ-400 hard?
It is a genuine Expert-level exam, so yes, it is harder than the associate exams — but the difficulty is specific. AZ-400 is not a memorisation test; it is scenario-heavy and assumes you have actually designed and run pipelines, managed source control at scale, and wired security and monitoring into delivery. People who have built this in practice find it fair; people who only studied the concepts find it brutal, because the questions ask you to choose the right approach for a situation, not recall a definition. The hands-on experience is the real study material.
How long does it take to study for AZ-400?
It depends heavily on how much real DevOps work you have already done, so treat any single number with suspicion. For someone already working with pipelines day to day, a few weeks of focused review is common; for someone who holds the associate prerequisite but has done little hands-on delivery, plan on a couple of months, most of it spent building rather than reading. The fastest route for anyone is to build one pipeline end to end, because that single project covers most of the exam's heaviest domain.
Do I need AZ-104 before AZ-400?
You need AZ-104 or AZ-204. AZ-400 is not a standalone certification — Microsoft only awards the DevOps Engineer Expert once you already hold either the AZ-104 Azure Administrator Associate or the AZ-204 Azure Developer Associate. You can sit and pass the AZ-400 exam first, but the certification will not be granted until the associate one is in place. So getting AZ-400 is really two steps: the prerequisite associate, then the Expert exam on top. Confirm the current prerequisite on Microsoft Learn before you plan.
How many questions is AZ-400 and what is the passing score?
Like most role-based Microsoft exams, AZ-400 has roughly 40 to 60 questions and requires a score of 700 out of 1000 to pass, though the exact count varies between sittings. Importantly, it includes case studies and scenario-based items, not just multiple choice — you are given a situation and asked to design or troubleshoot the right DevOps solution for it. That format is why hands-on experience matters so much: the questions reward judgement more than recall. Confirm the current format and passing score on Microsoft Learn before you book.
Is AZ-400 worth it?
It is worth it when a working pipeline sits behind it. AZ-400 is a strong signal for someone with real delivery experience moving into senior DevOps or platform roles, and it appears in those job requirements. But DevOps hiring screens hard for demonstrable work, so the certificate does the most when it confirms a story your portfolio already tells — a public repository with a pipeline that builds, tests and deploys. Earned on top of that, AZ-400 is a genuine differentiator; earned cold with nothing to show, it makes an Expert-level claim your experience cannot back.