AZ-400 Exam Domains 2026: Complete Guide to All 5 Content Areas

Overview: How the Five AZ-400 Domains Fit Together

The Microsoft Certified: DevOps Engineer Expert credential is earned by passing one exam - AZ-400 - and it is not a survey of loosely related trivia. Microsoft organizes the exam into five skills-measured domains, each mapping to a distinct slice of a real DevOps engineer's job: getting teams and processes aligned, managing code history safely, automating the path from commit to production, protecting the pipeline and its outputs, and knowing whether what you shipped is actually working. If you're just getting oriented, our What Is AZ-400? overview and the broader AZ-400 Certification page are good starting points before you dive into domain-level detail.

What makes AZ-400 different from an associate-level exam is that it assumes you already know how to administer or develop in Azure. Microsoft requires candidates to hold Azure Administrator Associate or Azure Developer Associate before the Expert badge is awarded, and the exam questions are written with that baseline assumed rather than explained. That's part of why the domain structure matters so much: each domain builds on infrastructure and coding knowledge you're expected to bring with you.

The rest of this guide walks through each domain in the order Microsoft lists them, then shows how to convert that weighting into an actual study sequence. For a broader difficulty assessment beyond just domain content, see How Hard Is the AZ-400 Exam? Complete Difficulty Guide 2026.

Domain 1: Design and Implement Processes and Communications (10-15%)

This domain sits at the front of the exam blueprint because process decisions precede tooling decisions. Before you write a single pipeline stage, you need an agreed-upon way for teams to plan work, communicate changes, and structure collaboration across development, operations, and security groups.

Questions here tend to be scenario-driven: you're given a company situation - distributed teams, compliance constraints, merger of two toolchains - and asked to pick the process or configuration that best fits. There isn't a single "right tool" answer key; you're being tested on judgment. For a deeper domain-specific breakdown, see AZ-400 Domain 1: Design and implement processes and communications (10-15%) - Complete Study Guide 2026.

Domain 2: Design and Implement a Source Control Strategy (10-15%)

Source control strategy is deceptively simple-sounding but frequently trips up candidates who've only worked with basic Git workflows. Microsoft expects fluency in branching models, repository structure decisions, and migration scenarios.

Expect at least one scenario requiring you to choose a branching strategy given constraints like release cadence, team size, or hotfix requirements. This domain overlaps with Domain 3 in practice - your branching model directly shapes how your pipeline triggers builds - so study them close together. Full coverage is in AZ-400 Domain 2: Design and implement a source control strategy (10-15%) - Complete Study Guide 2026.

Domain 3: Design and Implement Build and Release Pipelines (50-55%)

This is the domain that decides whether you pass. At 50-55% of the exam, Domain 3 is effectively the exam - everything else is supporting context. If you only have time to master one area deeply, this is it.

Because this domain is so broad, candidates often underestimate how much hands-on lab time it requires. Reading about YAML syntax is not the same as debugging a broken multi-stage pipeline under time pressure. Build actual pipelines in a free-tier Azure DevOps organization and a GitHub repo - trigger failures on purpose so you recognize the error patterns during the exam. The complete domain breakdown, including which sub-topics historically get the most exam attention, is in AZ-400 Domain 3: Design and implement build and release pipelines (50-55%) - Complete Study Guide 2026.

Domain 4: Develop a Security and Compliance Plan (10-15%)

Domain 4 shifts focus from "how do we ship" to "how do we ship safely." Microsoft expects candidates to reason about security as a pipeline property, not an afterthought bolted on post-deployment.

Because security touches every stage of the pipeline, expect Domain 4 questions to reference scenarios you already saw in Domain 3 - a failed deployment because a secret wasn't scoped correctly, or a scan gate blocking a release. Studying these two domains together reinforces both. See AZ-400 Domain 4: Develop a security and compliance plan (10-15%) - Complete Study Guide 2026 for the detailed breakdown.

Domain 5: Implement an Instrumentation Strategy (5-10%)

The smallest domain by weight, but not one to skip - a 5-10% domain can still swing a borderline score. Instrumentation is about proving your deployments are healthy after release, closing the feedback loop that Domain 1's process design promised to deliver.

Because this domain is compact, a few focused study sessions covering Application Insights configuration and alert-to-pipeline integration should be sufficient - don't let its low weight tempt you to skip it entirely, since it can still appear in multi-part scenario questions shared with Domain 3.

Turning Domain Weighting Into a Study Plan

Once you understand what each domain actually tests, the next step is sequencing your study time so it matches the exam's weighting rather than an arbitrary "read the whole syllabus once" approach.

If you want a more detailed week-by-week breakdown with specific resource recommendations, our AZ-400 Study Guide 2026: How to Pass on Your First Attempt expands on this timeline. You can also sharpen domain-specific weak spots using scenario-style practice questions on our AZ-400 practice test platform before scheduling your real attempt.

Exam Mechanics: Format, Registration, and Scoring

Domain content is only half the picture - understanding how the exam is delivered matters just as much for a first-attempt pass.

• Delivery: AZ-400 is administered by Pearson VUE, with both test-center and online proctored options.
• Cost: Pricing varies by country/region; the U.S. price is commonly listed around $165 USD, confirmed at scheduling. See AZ-400 Certification Cost 2026: Complete Pricing Breakdown for a full breakdown.
• Question formats: Expect multiple choice, multiple response, drag and drop, build list, hot area, case studies, and possibly labs - heavily scenario-based rather than fact-recall.
• Passing score: 700 on Microsoft's scaled scoring system, not a raw percentage.
• Prerequisite: Azure Administrator Associate or Azure Developer Associate must be held alongside passing AZ-400 to earn the Expert credential.
• Content currency: The official skills-measured outline reflects the July 27, 2026 update - always check Microsoft Learn for the current version before you study.
• Renewal: The Expert certification expires annually and renews free via an online assessment on Microsoft Learn.

For a realistic sense of how difficult candidates find this combination of breadth and scenario depth, read How Hard Is the AZ-400 Exam? Complete Difficulty Guide 2026, and check AZ-400 Pass Rate 2026: What the Data Shows for context on outcomes. If you're weighing whether the investment is worthwhile given your career goals, Is the AZ-400 Certification Worth It? Complete ROI Analysis 2026 and AZ-400 Salary Guide 2026: Complete Earnings Analysis cover that angle, while AZ-400 Jobs looks at who's actually hiring for this credential. Once you're confident in your domain knowledge, run through timed practice sets on our practice exam simulator to check readiness against the full question format mix.

Frequently Asked Questions