Azure DevOps Engineer Certification Guide

Earning the Microsoft Certified: DevOps Engineer Expert credential takes two things: an active Azure Administrator Associate certification (AZ-104) — or, for those who earned it before its 2026 retirement, Azure Developer Associate (AZ-204) — and a pass in exam AZ-400, "Designing and Implementing Microsoft DevOps Solutions". Unlike most Microsoft certifications, you cannot shortcut this one: passing AZ-400 without the prerequisite certification awards you nothing but a score report. This guide walks the whole route — confirming eligibility, understanding the exam domains, booking, and a staged preparation sequence — so you reach the credential without a wasted step.

One scoping note before we start. This is the how-to-get-it guide. If you are still deciding whether the credential justifies the effort against experience-based hiring, that question has its own dedicated analysis in our verdict on whether the Azure DevOps certification is worth it, and if you are torn between the developer and DevOps tracks, Azure Developer vs Azure DevOps Engineer settles the sequencing question.

What the DevOps Engineer Expert credential is

DevOps Engineer Expert is one of Microsoft's two expert-tier Azure certifications (the other being Azure Solutions Architect Expert), and one of only two Microsoft certifications with a mandatory certification prerequisite. It validates that you can design and run the delivery machinery of a modern engineering organisation on Microsoft's stack: source control strategy, build and release pipelines, security and compliance gates, and telemetry — across both GitHub and Azure DevOps, which the exam treats as first-class citizens side by side.

As of August 2026 the certification is fully active, with no retirement warning — worth stating explicitly, because Microsoft's 2025–26 overhaul retired several neighbouring exams (AZ-204, AI-102, DP-100 among them) and candidates reasonably wonder what is still standing. AZ-400 is a survivor, and its page was updated as recently as July 2026.

Step 1: Satisfy the prerequisite

Microsoft requires you to hold Azure Administrator Associate (AZ-104) or Azure Developer Associate (AZ-204) before the DevOps Engineer Expert certification can be issued.

In practice, the 2026 landscape narrows this to one route for new candidates:

• AZ-104 (Azure Administrator Associate) is the practical path. It is active, current, and the anchor certification of the Azure operations track.
• AZ-204 (Azure Developer Associate) was retired at the end of July 2026 and can no longer be taken. If you already hold it, it still exists on your transcript; the reasonable reading is that a valid AZ-204 continues to satisfy the prerequisite while it lasts, but Microsoft has not published detailed transition guidance we could verify — if you are in this position, confirm your eligibility on Microsoft Learn or with Microsoft support before booking AZ-400.

If you have neither, plan AZ-104 as a genuine first project rather than a formality. It is a 100-minute proctored exam spanning identities and governance, storage, compute, virtual networking and monitoring, and it expects hands-on comfort with the portal, PowerShell, Azure CLI and ARM or Bicep templates. Our full Azure Administrator AZ-104 guide covers it in depth. Developers sometimes resent this ops detour; in truth the pipeline work in AZ-400 leans constantly on the networking, identity and infrastructure-as-code fluency AZ-104 builds.

You can sit the two exams in either order — the sequencing rule applies to issuing the certification, not to booking exams. Most candidates still take AZ-104 first, because its content underpins the AZ-400 material.

Step 2: Know exactly what AZ-400 measures

AZ-400's official skills outline groups the exam into five areas. Rather than restate the outline, here is what each area actually demands and where candidates get caught out:

Design and implement processes and communications

DevOps is a working method before it is a toolchain, and the exam reflects that. Expect scenarios about structuring work in Azure Boards or GitHub Projects, wiring notifications and dashboards so teams see delivery status without asking, and designing feedback loops between development and operations. Candidates from a purely technical background often under-prepare here because it feels "soft" — it is examinable, so treat it as syllabus.

Design and implement a source control strategy

Branching models, pull-request policies, repository permissions, handling large repositories, and recovering from source-control mishaps. You should be able to argue for trunk-based development versus long-lived branches in a given scenario, not just define them.

Design and implement build and release pipelines

The heart of the exam. YAML pipelines, deployment strategies (blue-green, canary, rings), environment approvals and checks, artifact and package management, infrastructure as code within the pipeline, and — reflecting the exam's dual-platform stance — the GitHub Actions equivalents of the Azure DevOps constructs. If you have only ever used one of the two platforms, closing that gap is likely your single biggest preparation task.

Develop a security and compliance plan

Secrets management (never hard-coded, always vaulted), service connections and managed identities, dependency and container scanning, and gating releases on security checks. Microsoft has pushed secure-supply-chain thinking hard, and the exam follows.

Implement an instrumentation strategy

Telemetry, logging, alerting and dashboards that tell you whether the thing you shipped actually works. Expect to reason about what to measure and how to route alerts, not merely which service collects logs.

Microsoft does not publish a question count for AZ-400, and the certification page we verified does not state the exam's duration — check the current exam page when you book rather than trusting third-party figures. Like every Microsoft technical exam, it is scored from 1 to 1,000 with a pass mark of 700, and that is a scaled score, not 70% of questions correct.