AZ-400 DevOps Engineer Expert: Complete Exam Prep Guide 2026

What is the AZ-400 Certification?

The Microsoft Certified: DevOps Engineer Expert (AZ-400) is Microsoft's flagship DevOps certification. It validates advanced skills in continuous integration, continuous delivery, infrastructure as code, security in DevOps pipelines, monitoring, and collaboration practices across Azure DevOps and GitHub. It is one of the most valued cloud certifications in enterprise environments running Microsoft technology stacks.

Unlike many certifications that test knowledge in isolation, the AZ-400 expects you to integrate concepts across services. A single exam scenario may require you to design a pipeline using GitHub Actions, deploy infrastructure with Bicep, configure Azure Monitor alerts, and implement a secrets rotation policy in Azure Key Vault — all as one cohesive solution.

AZ-400 Prerequisites: What You Must Pass First

The AZ-400 is an Expert-level certification. Microsoft requires that you hold at least one of the following Associate-level certifications before you can earn the DevOps Engineer Expert designation:

• AZ-104 (Azure Administrator Associate): Best path for infrastructure-focused professionals. Covers VMs, networking, storage, identity, and governance.
• AZ-204 (Azure Developer Associate): Best path for developers. Covers App Service, Functions, Cosmos DB, API Management, and containerized workloads.

You can sit the AZ-400 exam before earning the prerequisite, but your DevOps Engineer Expert badge will not be awarded until the associate certification is on record. Plan accordingly.

AZ-400 Exam Domains and Weights

The AZ-400 exam is organized into eight skill areas as of the 2024-2025 curriculum update:

• Configure processes and communications (10-15%): Agile tooling in Azure Boards, GitHub Projects, work item tracking, team metrics.
• Design and implement source control (15-20%): Git branching strategies, pull request policies, managing large repos with Git LFS and TFVC migration.
• Design and implement build and release pipelines (40-45%): The heaviest domain. Covers Azure Pipelines YAML, GitHub Actions workflows, artifact management, release gates, approvals, and deployment strategies (canary, blue-green, ring).
• Develop a security and compliance plan (10-15%): Dependency scanning, SAST/DAST integration, secrets management with Azure Key Vault, managing technical debt.
• Implement an instrumentation strategy (10-15%): Azure Monitor, Application Insights, Log Analytics, distributed tracing, SLI/SLO design.

Azure DevOps vs GitHub Actions: What the Exam Expects

The AZ-400 tests both Azure Pipelines (the CI/CD engine within Azure DevOps) and GitHub Actions. Microsoft has been gradually positioning GitHub Actions as the preferred toolchain for greenfield projects, while Azure Pipelines remains dominant in enterprises with existing Azure DevOps investments. Expect questions on both.

• Azure Pipelines: Know YAML pipeline syntax, multi-stage pipelines, service connections, variable groups, environments, and deployment jobs. Classic (GUI) pipelines appear in legacy scenarios but are not the exam focus.
• GitHub Actions: Know workflow syntax, reusable workflows, environment protection rules, GitHub-hosted vs self-hosted runners, OIDC-based Azure authentication (no stored secrets), and GitHub Packages for artifact storage.
• Integration scenarios: The exam frequently tests bridging the two — for example, triggering an Azure Pipeline from GitHub, or using GitHub Advanced Security within an Azure DevOps organization.

Infrastructure as Code on the AZ-400

Infrastructure as Code is a first-class topic. You need working knowledge of ARM templates, Bicep (the modern ARM DSL), and Terraform on Azure. The exam does not require you to memorize syntax, but you must understand the deployment model, state management (for Terraform), idempotency, and how to integrate IaC deployments into a CI/CD pipeline.

Focus specifically on: Bicep modules and parameter files, Terraform remote state with Azure Storage backends, using the AzureRM provider, and running IaC validations (terraform plan, bicep build) as pipeline gates.

Best AZ-400 Study Resources 2026

• Microsoft Learn AZ-400 learning path: Free and always up to date with the current exam objectives. Use it as your primary syllabus.
• John Savill's AZ-400 Study Cram (YouTube): A single comprehensive video that covers all domains efficiently. Watch it twice — once at the start and once the week before the exam.
• Whizlabs or MeasureUp practice exams: MeasureUp is the official Microsoft partner. Their question style closely mirrors the real exam.
• Hands-on labs with a free Azure subscription: Build at least 3 end-to-end pipelines from scratch — one with Azure Pipelines, one with GitHub Actions, and one that deploys Bicep infrastructure.
• Certify Copilot AI: Use it to get instant explanations when practice questions reference Azure services or pipeline concepts you do not fully understand, without interrupting your study session.