AZ-400 — exam map

Skills measured as of 27 July 2026. Pass mark 700. This map reflects the current blueprint, which moved build and release pipelines up to 50–55%.

The mock distribution is derived from the curriculum's exam_config weights (13/13/53/13/8) by largest remainder, and every unit lands inside its official band.

How to spend your study time

Unit 3 is worth more than the other four combined. If time is short, work 3.3 (pipelines), 3.4 (deployments) and 3.6 (maintaining pipelines) until they are automatic, then 4.1 and 4.2.

Units 1 and 5 reward understanding a handful of definitions precisely — lead time vs cycle time, p95 vs average, metrics vs logs — rather than breadth.

The highest-value facts in the whole syllabus

1. Jobs run in parallel by default; stages run sequentially.
2. extends constrains; template composes. Task groups do not exist in YAML.
3. Checks belong to the resource owner — five categories, Exclusive lock last.
4. rolling is VM-only, hooks fire per batch; runOnce hooks fire once.
5. CI and PR triggers are ON when unconfigured.
6. OIDC gives a short-lived, single-job token; its claims are the authorisation surface.
7. Key Vault keys never leave the vault.
8. Dependabot: alerts inform, security updates fix, version updates refresh — dependabot.yml configures only version updates.
9. Deny beats Allow.
10. Expand → Migrate → Contract, because on: failure cannot restore data.

Currency warnings for older study material