AZ-400 syllabus

5 domains and 86 topics, updated November 2026

AZ-400 is about the whole delivery chain on Azure DevOps and GitHub: work tracking, source control, pipelines and releases, security and monitoring. Pipelines are over half the exam. This outline lists what each domain expects, in plain terms. Tick topics off as you cover them. Your ticks are saved in this browser.

This outline follows the official AZ-400 exam guide. Check it for the exact wording.

Configure processes and communications

10–15%

How work flows from idea to release, how teams get feedback, and how progress is measured and documented. Smallest technical load, but the details (AB# links, DORA metrics, wiki types) are tested.

Flow of work and traceability
Metrics, queries and dashboards
Collaboration and communication

Design and implement a source control strategy

10–15%

Branching, pull request governance and day-to-day repository management in Azure Repos and GitHub.

Branching strategies
Repository management

Design and implement build and release pipelines

50–55%

The largest domain by far (50-55%): packages, testing, YAML pipelines, agents, deployment strategies, infrastructure as code and keeping pipelines healthy.

Package management
Testing strategy for pipelines
Pipelines
Deployments
Infrastructure as code
Maintaining pipelines

Develop a security and compliance plan

10–15%

Identities, secrets and scanning for pipelines and repositories. The theme is no long-lived secrets and automated scanning.

Authentication and authorisation
Managing sensitive information
Security and compliance scanning

Implement an instrumentation strategy

5–10%

Telemetry and monitoring for the DevOps toolchain and the apps it ships, including basic KQL. Smallest domain (5-10%).

Monitoring for a DevOps environment
Analysing metrics