AZ-400
Microsoft Azure DevOps Solutions
Microsoft Azure DevOps Solutions Exam Guide: AZ-400 Preparation and Scheduling
Exam AZ-400: Designing and Implementing Microsoft DevOps Solutions validates whether you can design and implement the processes, source control, pipelines, security practices, and instrumentation used to deliver software continuously. It serves developers, infrastructure administrators, and DevOps engineers who work across Azure, GitHub, Azure DevOps, and cross-functional teams. This guide helps you decide whether your background is ready, which skills deserve the most study time, how to build useful hands-on practice, and what to verify before scheduling the exam.
What AZ-400 actually validates
AZ-400 tests applied DevOps judgment rather than isolated knowledge of Azure commands. Microsoft describes the role as combining development or infrastructure administration with expertise in people, processes, and products to enable continuous delivery of value.
The assessed work covers the flow from collaboration and source control through automation, testing, delivery, deployment, monitoring, and feedback. You should therefore prepare to choose an appropriate approach for a scenario, not merely recognize a product name.
The role behind the exam
A DevOps engineer designs and implements strategies for collaboration, code, infrastructure, source control, security, compliance, continuous integration, testing, delivery, monitoring, and feedback. The role commonly intersects with developers, site reliability engineers, Azure administrators, and security engineers.
That breadth explains why the exam can move between team processes, repositories, pipeline design, secrets, deployment patterns, and operational feedback. A candidate who knows only Azure administration or only application development will usually need to broaden their preparation.
Who should take this exam
AZ-400 is best suited to candidates who already administer and develop in Azure and have strong skills in at least one of those areas. Microsoft also expects experience implementing both GitHub and Azure DevOps solutions.
The certification is a sensible target when your current work includes improving delivery flow, automating infrastructure or releases, managing repositories, integrating security, or turning production signals into development feedback. It is less suitable as a first introduction to Azure or software delivery.
Check the certification prerequisite first
AZ-400 is part of the requirements for Microsoft Certified: DevOps Engineer Expert. To earn that certification, Microsoft lists either Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Azure Developer Associate as the prerequisite certification, followed by AZ-400.
Treat this as a scheduling gate, not an optional recommendation. If you do not hold one of those certifications, plan that exam and its preparation before treating AZ-400 as the final step toward the expert certification.
When experience is uneven
An Azure administrator may need more practice with application build workflows, testing, package management, and developer collaboration. A developer may need to strengthen identity, infrastructure automation, release controls, monitoring, and operational governance.
Use the official audience profile as a gap checklist. Do not assume that passing an associate certification automatically demonstrates the cross-functional experience Microsoft describes for AZ-400.
Which skills carry the most exam weight
Build and release pipelines are the largest measured domain, so they should anchor your study plan. The current Microsoft exam page lists five domains, with design and implementation of build and release pipelines at 50-55%.
The remaining domains still matter because the exam is designed around an end-to-end DevOps solution. Study the relationships between them: source control feeds pipelines, security constrains them, and instrumentation supplies the feedback needed to improve them.
Read every percentage with its domain
Design and implement processes and communications accounts for 10-15% of the exam domain. Design and implement a source control strategy accounts for 10-15% of the exam domain. Design and implement build and release pipelines accounts for 50-55% of the exam domain. Develop a security and compliance plan accounts for 10-15% of the exam domain. Implement an instrumentation strategy accounts for 5-10% of the exam domain.
These percentages describe the current outline, not a promise about a fixed distribution of individual questions. Use them to allocate study attention, while still covering every objective and its listed subtopics.
Use the study guide version that matches your date
Microsoft says the English-language version of AZ-400 was updated on July 27, 2026, and identifies the skills measured as of July 27, 2026. The study guide includes versions of the skills outline for different exam timing and explains that exams are updated periodically.
Before studying from saved notes, compare them with the current official study guide. Microsoft updates the English version first; an available localized version is updated approximately eight weeks after the English version, although localized updates can vary.
How to study the pipeline domain
Start with a complete delivery flow: commit code, validate it, produce an artifact, promote that artifact, deploy it using an appropriate pattern, and collect feedback. Then revisit each decision point and identify the security, approval, testing, and rollback implications.
This sequence is more useful than memorizing individual pipeline features because it forces you to connect continuous integration, dependency management, release strategy, deployment, and monitoring.
Build a small reference workflow
Create a simple application repository and document a pipeline that performs source retrieval, validation, testing, packaging, and artifact publication. Add a second stage that consumes the published artifact rather than rebuilding the application.
The exercise should leave you with a diagram and a short explanation of why each stage exists. Include branch or trigger assumptions, variables, secrets, approvals, and the evidence you would inspect when a run fails.
Study release and deployment decisions together
Separate the release strategy from the deployment pattern. A release workflow defines how a version moves through environments and controls; a deployment pattern describes how the new version reaches users or infrastructure.
For each pattern in your notes, record its purpose, risk profile, traffic behavior, rollback approach, and fit for the scenario. This prevents a common mistake: selecting a familiar deployment term without explaining what problem it solves.
Include containers and dependencies
The official course syllabus includes artifact and dependency management, container build strategy, release strategy, release management workflow, and deployment pattern. Make these topics part of the same practical workflow rather than isolated flashcard categories.
Practice tracing a dependency from declaration to restore, build, artifact, and release. For a containerized workload, identify the image source, build context, tag strategy, vulnerability or policy checks, and promotion path.
Prepare source control and collaboration skills
Source control preparation should cover both repository strategy and the collaboration practices around it. Microsoft’s role description includes flow of work, collaboration, communication, source control, and automation, while the exam specifically measures source control strategy.
Study how branching, pull requests, permissions, history, and repository organization affect build reliability and team throughput. Explain the trade-off behind each choice instead of treating one branching model as universally correct.
Use GitHub and Azure DevOps deliberately
Microsoft expects experience implementing both GitHub and Azure DevOps solutions. Your preparation should therefore distinguish platform capabilities from the underlying DevOps practice: repository hosting, pull-request review, work tracking, automation, package handling, and integration.
Create a comparison table in your own words. For each task, note where it is performed, what identity or permission is required, what event triggers automation, and where the resulting evidence is recorded.
Do not neglect enterprise Git concerns
The AZ-400 course syllabus explicitly includes scaling Git for an enterprise. Review repository organization, branch protections, permissions, pull-request policies, and the effect of large teams on ownership and workflow.
A useful exercise is to start with one repository and then redesign it for multiple teams or services. Record what should remain centralized, what should be delegated, and how the design affects pipeline triggers and code ownership.
Turn security and compliance into pipeline controls
Security and compliance should appear throughout the delivery lifecycle, not as a final checklist. Prepare to place controls around identities, secrets, code changes, dependencies, artifacts, approvals, infrastructure, and deployment evidence.
For every control, identify the risk it addresses and the point in the workflow where it is most effective. This approach helps with scenario questions that ask for the best design rather than a list of security products.
Practice secret-handling decisions
The official course syllabus includes managing secrets. Review how secrets differ from ordinary configuration, how access should be limited, and how pipeline logs or artifacts can accidentally expose sensitive values.
In a lab, deliberately separate non-sensitive settings from protected values and document who can read, change, or use each one. Check that a failed run would not disclose the protected value through output, diagnostics, or generated files.
Connect compliance to traceability
A compliant release needs more than a successful deployment. It should be possible to connect a change to its review, validation, artifact, approval, deployment, and operational outcome.
Build a traceability checklist for your sample workflow. When studying a control, ask what evidence it creates, who can alter that evidence, and how the control affects release speed.
Learn instrumentation through feedback loops
Instrumentation is the smallest measured domain, but it completes the DevOps cycle. Prepare to explain how telemetry, monitoring, alerts, work-item feedback, and release information help a team detect problems and improve delivery.
Do not study monitoring as a catalogue of dashboards. Start with a service objective or delivery question, then decide what signal would answer it, where the signal is collected, who receives it, and what action follows.
Map signals to decisions
For each practice application, deployment, or infrastructure signal, write the decision it supports. Examples include identifying a failed deployment, detecting a regression, finding a dependency problem, or deciding whether a release should proceed.
Then add the feedback destination: an alert, incident workflow, work item, dashboard, or pipeline gate. This makes instrumentation concrete and connects it to continuous delivery rather than treating it as post-release decoration.
Use the official course without mistaking it for the exam
Microsoft’s AZ-400T00-A course is an advanced course related to the DevOps Engineer Expert certification and is listed with a course duration of 4 days. Its syllabus covers planning, source control, enterprise Git, artifacts, dependencies, secrets, continuous integration, containers, release strategy, deployment patterns, and feedback.
The course can provide a structured foundation, but completion does not replace practice with the measured skills. Use its modules to organize labs and then return to the current exam study guide to verify coverage.
Choose self-paced or instructor-led study
Microsoft provides self-paced and instructor-led preparation options. Self-paced study is useful when your schedule varies or when you already know which domains need attention. Instructor-led training can provide a fixed sequence and guided explanation.
Choose based on your gap pattern. If you need repeated hands-on troubleshooting, reserve time for labs even in a classroom course. If you already operate pipelines, use self-paced material to target weaker areas instead of repeating familiar administration topics.
A practical six-stage study roadmap
A reliable roadmap moves from eligibility and baseline measurement to one integrated implementation, targeted remediation, and final readiness checks. Keep a record of decisions and failures; those notes are more valuable than passive completion indicators.
Adjust the pace to your experience and the current exam outline. The sequence below is a planning framework, not an official Microsoft schedule.
Stage one: confirm scope and eligibility
Open the current AZ-400 exam page and study guide. Record the title, measured domains, update information, language choice, and prerequisite certification status. Create a topic checklist from the official outline.
Mark each topic as confident, familiar, or unknown. Do not begin with a large collection of third-party notes before you know which version of the outline you are following.
Stage two: measure your baseline
Use Microsoft’s free practice assessment as a diagnostic after reviewing the outline. Treat missed answers as evidence of a knowledge gap, not as a prediction of the live exam result.
For each miss, write the underlying concept, the confusing alternatives, and the source you will use to resolve it. Group misses by domain so your revision time follows the blueprint rather than your personal comfort zone.
Stage three: build the delivery spine
Implement or diagram a workflow that joins source control, continuous integration, artifacts, dependencies, release management, deployment, secrets, and feedback. Explain the workflow to yourself in terms of inputs, controls, outputs, and failure handling.
If you lack access to a full environment, produce design records and small demonstrations where possible. The objective is to practice choosing and justifying a design, not to claim experience you have not obtained.
Stage four: remediate the weak domains
Return to processes and communications, source control, security and compliance, and instrumentation after the pipeline spine is clear. For each domain, complete a focused lab or scenario exercise and update your decision notes.
Give extra time to pipeline topics because design and implement build and release pipelines accounts for 50-55% of the exam domain. Continue reviewing the other domains because their controls and inputs shape pipeline outcomes.
Stage five: rehearse scenarios
Use official practice material and your own scenario cards to rehearse trade-offs. For each scenario, identify the requirement, the constraint, the affected service or process, and the evidence that would prove the design works.
Avoid memorizing answer patterns. If you cannot explain why the rejected options fail under the stated constraints, your preparation is not yet robust.
Stage six: perform a final readiness review
Recheck the current study guide, revisit every missed practice topic, and confirm that you can describe an end-to-end workflow without relying on prompts. Then verify the scheduling details on Microsoft Learn immediately before registration.
Keep the final review focused. Learning an unrelated tool at the last moment is usually less useful than clarifying permissions, triggers, artifacts, deployment controls, secret handling, and feedback in the tools already covered by the outline.
What exam delivery details are confirmed
Microsoft lists AZ-400 in English, Japanese, Simplified Chinese, Korean, German, French, Spanish, Brazilian Portuguese, Traditional Chinese, and Italian, and the current exam page shows no retirement date. Pricing depends on the country or region where the exam is proctored.
Microsoft lists a passing score of 700. The supplied official information does not establish a fixed question count or exam duration, so verify those details in the current scheduling experience rather than relying on older guides.
Language and accommodation decisions
If the exam is not available in your preferred language, Microsoft says you can request an additional 30 minutes to complete the exam. Localized versions may be updated approximately eight weeks after the English version, with possible variation in the actual update schedule.
Choose your language after checking the live exam page and the current study guide. If you need assistive technology, extra time, or another modification, use Microsoft’s accommodation process before the appointment rather than assuming it will be arranged on the day.
Protect your certification record
Microsoft strongly recommends registering with a personal Microsoft account. If an organizational work or school account is used and you later leave that organization, Microsoft warns that exam records can be lost and unrecoverable.
Connect your certification profile to Microsoft Learn so you can schedule and manage appointments, certificates, and transcripts. Confirm the account identity before paying or booking.
Common preparation mistakes to avoid
Most weak preparation plans fail through poor prioritization rather than lack of study material. They overfocus on memorized terminology, ignore the prerequisite, use an obsolete outline, or spend nearly all their time on a familiar tool.
Correct these problems by tying every study activity to an assessed decision and by maintaining a visible list of unresolved gaps.
Mistake: studying only Azure DevOps screens
AZ-400 includes collaboration, source control, security, compliance, pipelines, deployment, monitoring, and feedback. Knowing where to click in one product does not establish that you can design a solution across a heterogeneous team and toolchain.
For each feature, write the operational problem it addresses, the prerequisite configuration, the security implication, and the evidence it produces.
Mistake: treating the largest domain as the only domain
Design and implement build and release pipelines accounts for 50-55% of the exam domain, but processes and communications, source control, security and compliance, and instrumentation remain explicitly measured domains.
Use the blueprint to weight your time, not to justify skipping smaller areas. A gap in a smaller domain can still determine whether your overall result reaches the required passing score.
Mistake: relying on dumps or recalled questions
Exam dumps and leaked-question claims are not a dependable preparation method and do not demonstrate the ability to apply DevOps practices. Memorization also becomes fragile when Microsoft updates the exam.
Use the official skills outline, Microsoft Learn training, hands-on implementation, the exam sandbox, and an official practice assessment. Focus on solving new scenarios under stated constraints.
Mistake: ignoring update and retirement notices
Microsoft updates exams to reflect role requirements, and the current English AZ-400 version is identified as updated on July 27, 2026. A saved course or video may therefore omit or overemphasize topics in the current outline.
Check the official exam page and study guide at the start of preparation and again before scheduling. The current page shows no retirement date, but time-sensitive status should always be confirmed directly with Microsoft.
How to decide whether you are ready to schedule
Schedule only after you can connect the blueprint to demonstrated ability. You should be able to explain a delivery design, defend its source-control and security choices, trace an artifact into deployment, and describe how instrumentation feeds corrective action.
A practice assessment can reveal gaps, but it is not the sole readiness test. Combine its results with hands-on work, outline coverage, and the ability to reason through unfamiliar scenarios.
Use a readiness evidence list
Before booking, confirm that you have reviewed every current domain; completed at least one integrated delivery design or lab; investigated practice-assessment misses; checked your prerequisite certification; selected a supported language; and verified the current scheduling information.
If one item is missing, make it the next action. This creates a concrete decision rule and prevents scheduling based only on enthusiasm or a completion percentage.
What happens after certification
Microsoft says associate, expert, and specialty certifications expire annually and can be renewed by passing a free online assessment on Microsoft Learn. Renewal is therefore an ongoing maintenance task rather than a one-time administrative detail.
Keep your Learn profile connected and monitor Microsoft’s renewal information. Continue following changes to Azure, GitHub, Azure DevOps, security, and observability practices so your working knowledge remains aligned with the role.
Turn the exam into a work-improvement plan
After studying, keep the artifacts that helped you learn: pipeline diagrams, security checklists, deployment decision records, repository policies, and feedback maps. These can guide conversations with developers, operations, and security teams without exposing exam content.
Review them against real delivery problems and update them when your organization’s constraints change. The useful outcome is not a memorized product list but a repeatable way to design, implement, and improve delivery.
Conclusion
Use the current Microsoft AZ-400 outline as your control document, then prepare around one integrated delivery workflow. Confirm the prerequisite certification, give priority to the build and release pipeline domain, and deliberately connect source control, security, deployment, and instrumentation. Before registration, verify the current language, account, accommodation, price, and exam-status details on Microsoft Learn. Schedule when your practice evidence shows that you can justify design decisions across the full DevOps lifecycle, not when you have merely finished a course.
Related exams
- AZ-104 exam — Microsoft Azure Administrator
- 77-725 exam — Microsoft Word 2016 Core: Document Creation, Collaboration and Communication (MOS)
- AZ-120 exam — Planning and Administering Microsoft Azure for SAP Workloads
- 77-727 exam — Excel 2016: Core Data Analysis, Manipulation, and Presentation
- AZ-140 exam — Configuring and Operating Windows Virtual Desktop on Microsoft Azure
- 77-728 exam — Excel 2016 Expert: Interpreting Data for Insights