Microsoft Azure DevOps Engineer Expert (AZ‑400) Practice Exams
About the Azure AZ-400 exam
Exam at a glance
Microsoft's senior DevOps certification at the expert tier.
Domain weighting
- Design and implement build and release pipelines: 40–45%
- Design and implement a source control strategy: 15–20%
- Configure processes and communications: 10–15%
- Develop a security and compliance plan: 10–15%
- Implement an instrumentation strategy: 10–15%
Tools and platforms in scope
- Azure DevOps Services — Boards, Repos, Pipelines (classic + YAML), Artifacts, Test Plans.
- GitHub — Actions, Advanced Security (CodeQL, secret scanning, Dependabot), Codespaces, Packages.
- Infrastructure as code — Bicep, ARM templates, Terraform, GitHub Actions for infrastructure.
- Containers and orchestration — Azure Container Registry, AKS deployment patterns, Helm.
- Security and supply chain — SAST/DAST integration, dependency scanning, SBOM, GitHub Advanced Security.
- Observability — Application Insights, Azure Monitor, Log Analytics, dashboards, alerts, action groups.
Prerequisites
AZ-400 has a formal prerequisite: you must already hold either the Azure Administrator Associate (AZ-104) OR the Azure Developer Associate (AZ-204) — only one is required, not both. You can technically pass AZ-400 first and earn the prerequisite afterward, but Microsoft will not award the DevOps Engineer Expert title until one of the two associate certifications is on record.
Why take this certification
- Microsoft's senior DevOps credential. AZ-400 is the recognized standard for DevOps engineers, site reliability engineers, and platform engineers in Microsoft-stack organizations. It signals you can own end-to-end CI/CD, not just write pipeline YAML.
- Spans Azure DevOps AND GitHub. Since GitHub joined Microsoft, AZ-400 has evolved into the only major certification that covers both toolchains and the migration patterns between them — a real differentiator in enterprises consolidating onto one platform.
- Strong salary signal. DevOps engineers with AZ-400 in the United States typically earn $130,000–$165,000 USD, with senior platform engineers and SREs reaching $180,000+ in major metros. Listings that name AZ-400 specifically tend to be senior-level.
- Free renewal forever. Microsoft's free online renewal assessment on Microsoft Learn means you keep the credential current without paying $165 again — among the cheapest certifications to maintain long-term in the industry.
What you'll learn in the AZ-400 exam
AZ-400 validates that you can design and operate production CI/CD across both Azure DevOps Services and GitHub. The exam is scenario-driven — most questions describe a delivery problem (slow releases, fragile environments, missing security controls) and ask you to choose the pipeline design, branching strategy, or instrumentation that fixes it.
Core technologies you'll be tested on
- Azure DevOps Services: Boards (work items, queries, dashboards), Repos (Git branching strategies, pull request policies), Pipelines (YAML, multi-stage, environments, approvals, gates, deployment jobs, agent pools), Artifacts (feeds, upstream sources, retention), Test Plans.
- GitHub: Actions (reusable workflows, composite actions, OIDC federation to Azure, self-hosted runners), Advanced Security (CodeQL, secret scanning, push protection, Dependabot alerts and updates), Codespaces, Packages, Environments with required reviewers.
- Pipeline-as-code: YAML pipelines (templates, variables, conditions, expressions), multi-stage release patterns, environment-scoped approvals, deployment gates, parallel jobs, matrix builds, cross-pipeline triggers.
- Infrastructure as code: Bicep, ARM templates, Terraform with Azure DevOps and GitHub Actions, state management for Terraform, drift detection.
- Containers and AKS: Container build/push to Azure Container Registry, AKS deployment patterns (Helm, Kustomize), GitOps with Flux/Argo, image scanning in the pipeline.
- Release strategies: Blue/green, canary, ring-based deployments, feature flags via Azure App Configuration, dark launches, progressive exposure.
- Security and compliance: SAST and DAST integration (Microsoft Defender for DevOps, GitHub Advanced Security, OWASP ZAP), dependency vulnerability scanning, secret detection and rotation, software bill of materials (SBOM), supply-chain security (SLSA, signed builds, attestation).
- Instrumentation: Application Insights (request, dependency, exception telemetry, availability tests, custom events), Azure Monitor metrics, Log Analytics with KQL, workbooks, dashboards, alert rules, action groups.
Architectural patterns you'll need to recognize
- Choosing between Azure Pipelines and GitHub Actions for a given workflow — and designing hybrid pipelines that use both.
- Migrating from classic Azure Pipelines to YAML, or from Jenkins to GitHub Actions / Azure Pipelines.
- Securing pipelines against supply-chain attacks: pinned actions, OIDC federation instead of long-lived secrets, branch protection, environment approvals.
- Designing branching strategies (GitHub Flow, trunk-based, release branches) and matching them to release cadence and team size.
- Integrating security scanning at the right pipeline stages so feedback is fast but blocking only when it should be.
- Building an instrumentation strategy that combines Application Insights, Azure Monitor, and Log Analytics into actionable dashboards and alerts.
How the practice exams help
Each free question and every premium exam mirrors the scenario-style format Microsoft uses — long stem describing a real DevOps problem, four to six plausible options, one or two correct. Detailed explanations cover not just why the right answer is right but why the distractors are wrong, so you learn the trade-offs between Azure DevOps and GitHub solutions rather than memorizing one tool.
How to prepare for the AZ-400 exam
A successful AZ-400 preparation strategy combines deep tool familiarity, real pipeline-building practice, and exam simulation. Recommended approach:
- Confirm your prerequisite (week 0). Make sure you already hold AZ-104 (Azure Administrator) or AZ-204 (Azure Developer) — Microsoft won't issue the DevOps Engineer Expert credential without one. If you don't, prepare and pass that exam first; it builds the Azure baseline AZ-400 assumes.
- Work through Microsoft Learn (3–4 weeks). Complete the official AZ-400 learning path. Microsoft refreshed the content in April 2026, so prioritize the modules covering GitHub Actions, GitHub Advanced Security, and the unified Azure DevOps + GitHub workflows. Read the official skills measured document end-to-end at least twice.
- Hands-on with both toolchains (3–4 weeks). Spin up free tiers of Azure DevOps and GitHub. Build the same multi-stage CI/CD pipeline in both — once in Azure Pipelines YAML, once in GitHub Actions — deploying to App Service or AKS. Practice OIDC federation, environment approvals, deployment gates, and rollback strategies. Configure Application Insights and at least one alert rule per pipeline.
- Security and supply chain (1–2 weeks). Enable GitHub Advanced Security on a sample repo and walk through CodeQL, secret scanning, and Dependabot. Add SAST and dependency scanning to your pipelines. Generate an SBOM. This area trips up candidates who only know "happy path" CI/CD.
- Practice exams (1–2 weeks). Take timed practice tests to identify weak areas — pipeline design and source control strategy combined are ~60% of the exam, so weight your prep accordingly. Detailed explanations on every answer option help you learn the reasoning. Aim for consistent 80%+ scores before scheduling your exam.
Recommended timeline
10–14 weeks of focused study (10–15 hours per week) for AZ-104 / AZ-204 holders with some prior CI/CD experience. Allow 14–18 weeks if you're brand-new to either Azure DevOps or GitHub Actions. Candidates without any prior CI/CD background in any platform should expect significantly longer.
Official resources
Download the official AZ-400 exam page and skills measured document and work through the Microsoft Learn AZ-400 learning path. The Azure DevOps documentation and GitHub Actions documentation are essential references — most exam scenarios trace directly back to capabilities described there.
Frequently asked questions
Are these actual exam questions?
No. All Nex Arc Azure AZ-400 practice questions are original content based on the provider's published exam blueprint, official documentation, and real-world scenarios across every topic the exam covers. We do not offer brain dumps, leaked questions, or actual exam content. Using or distributing real exam questions violates certification provider agreements and can result in certification revocation.
How many questions are in the Azure AZ-400 exam?
The Azure AZ-400 exam typically consists of 40-60 questions that you need to complete in 100 minutes (plus an additional 20 minutes of seat time for instructions, NDA, and survey). Question formats include multiple choice, multiple response, case studies, drag-and-drop, and scenario-based questions covering Azure DevOps Services and GitHub.
What's the AZ-400 passing score?
The passing score is 700 out of 1000. Microsoft uses a scaled scoring model, and not all questions carry the same weight. Focus on understanding pipeline design, security integration, and cross-tool workflows rather than memorizing answers.
How do I access the full AZ-400 practice exam?
Click on the Buy Now button in the sidebar to purchase the complete Azure AZ-400 course. After payment, you'll have instant access to 12 practice exams with detailed explanations and lifetime access.
What are the prerequisites for the AZ-400 exam?
AZ-400 has a formal certification prerequisite: you must hold either the Microsoft Certified: Azure Administrator Associate (AZ-104) OR the Microsoft Certified: Azure Developer Associate (AZ-204) — only one is required, not both. Microsoft enforces this requirement before awarding the DevOps Engineer Expert credential, though you can technically sit and pass the AZ-400 exam first and earn the prerequisite afterward. Beyond the formal requirement, candidates should have hands-on experience with Azure administration and development, as well as practical exposure to both Azure DevOps Services and GitHub.
How long is the AZ-400 certification valid?
Microsoft role-based certifications, including AZ-400, are valid for one year from the date you pass the exam. Unlike most other vendors, Microsoft offers a free online renewal assessment through Microsoft Learn — no proctored exam or fee required. The renewal window opens six months before expiration, and you can retake the assessment as many times as needed until you pass. This makes Microsoft certifications among the easiest to keep current in the industry.
What's the exam cost and can I retake it if I fail?
The AZ-400 exam costs $165 USD in the United States (pricing varies by country based on Microsoft's regional rate card). The exam is delivered through Pearson VUE at testing centers or via online proctoring. If you fail your first attempt, you must wait 24 hours before your second attempt. Subsequent retakes (3rd-5th) require a 14-day waiting period each, and you can take the exam a maximum of five times in a 12-month period. Each attempt requires a new exam fee. Microsoft's Exam Replay offering bundles an exam plus one retake at a discount.
What topics are most heavily tested on AZ-400?
Pipeline design and implementation is by far the largest topic — roughly 40-45% of the exam — covering YAML pipelines in Azure DevOps and GitHub Actions, multi-stage release patterns, environments, approvals, deployment gates, and infrastructure-as-code integration. Source control strategy (15-20%) covers branching strategies, monorepo vs polyrepo, code reviews, and GitHub Advanced Security. The remaining ~40% splits across processes/communications, security/compliance (SAST, DAST, dependency scanning, secret detection, SBOM, supply-chain security), and instrumentation (Application Insights, Azure Monitor, Log Analytics dashboards, alerts, action groups). Expect questions that span both Azure DevOps and GitHub for the same workflow.
Does AZ-400 cover GitHub or just Azure DevOps?
Both. Microsoft's April 2026 update to AZ-400 places near-equal weight on Azure DevOps Services (Boards, Repos, Pipelines, Artifacts, Test Plans) and GitHub (Actions, Advanced Security, Codespaces, Packages). Many questions present a workflow and ask you to choose between an Azure DevOps and a GitHub implementation, or to design a hybrid that combines both — for example, GitHub Actions for CI with Azure Pipelines for release orchestration, or GitHub Advanced Security findings flowing into Azure DevOps work items. Candidates who only know Azure DevOps tend to struggle.
Can I retake the AZ-400 exam if I fail?
Yes. Microsoft allows up to five attempts in a 12-month period. The first retake requires a 24-hour wait; attempts three through five require a 14-day wait each. You pay the full $165 fee for each attempt unless you have an Exam Replay voucher.