What Is the Certified Quality Improvement Associate Credential?

The Certified Quality Improvement Associate (CQIA) is ASQ’s foundation level quality credential. The computer based exam has 110 multiple choice questions, 100 of them scored, in 198 minutes of exam time, and a pass needs 550 points out of 750. It is open book, offered in English, and the certification never has to be renewed.

ASQ, the American Society for Quality, positions the CQIA for people who support improvement projects without holding a traditional quality job. Think of the operations analyst asked to map a process, the nurse on a patient safety team, or the service desk lead who has been handed a Pareto chart and a deadline. The credential shows that the holder knows the basic tools, the vocabulary and the team mechanics well enough to contribute.

A paper and pencil version also exists. It has 100 questions and runs for three hours, and it is the route ASQ uses for translated exams at scheduled locations. ASQ keeps the full record on its CQIA certification page, including the Body of Knowledge download and the current testing windows.

Who Can Sit the CQIA Exam?

CQIA eligibility has two routes. A candidate needs either two years of work experience in a full time, paid role, or an associate degree or two years of equivalent higher education. No earlier ASQ certification is required, and the experience does not have to come from a job with quality in its title.

That second point is what separates the CQIA from most of the ASQ catalogue. Credentials such as Certified Quality Engineer ask for years of experience in the specific Body of Knowledge, with part of it in a decision making role. The CQIA asks only that you have worked, or studied, for two years. ASQ reviews the application before you can book, and an applicant found not to meet the requirement is refunded the fee less a $130 processing charge, so it is worth checking your own dates before paying.

Is ASQ membership required?

No. Membership is optional and its effect on the exam is financial: members pay $334 for the first attempt where non-members pay $434. Whether joining is worth it depends on what else you would use, since the exam saving alone is $100.

How Are the 100 Scored Questions Split Across the Body of Knowledge?

The CQIA Body of Knowledge has five areas and ASQ publishes a question count for each: Quality Basics 30, Team Basics 16, Improvement 40, Supplier Relationship 7 and Customer Relationship 7. Those 100 questions are the scored ones. The 10 unscored questions on the computer based exam are mixed in and cannot be told apart.

Quality Basics: 30 questions

This area covers the language of the field: common definitions of quality, the purpose of a quality plan, and the difference between quality assurance, quality control and continuous quality improvement. It also asks how organizational culture shapes the success of lean, Six Sigma, ISO 9001, Baldrige and change management efforts. Baldrige refers to the performance excellence framework run through the Baldrige program at NIST, and knowing what it rewards helps with the culture questions.

Two further items deserve early attention. One is the SIPOC view of a system (supplier, input, process, output, customer), which is one of only two entries in the whole Body of Knowledge set at the Analyze level. The other is Foundations of Quality, which names six thought leaders whose teachings you are expected to understand: Walter Shewhart, W. Edwards Deming, Joseph Juran, Kaoru Ishikawa, Philip Crosby and Armand Feigenbaum.

Team Basics: 16 questions

Team Basics is more concrete than its name suggests. It lists seven team types, from process teams to virtual teams, and seven roles: sponsor, champion, facilitator, leader, member, scribe and timekeeper. It covers the five classic stages of team development, from forming to adjourning, and decision models such as multi-voting and consensus. Team conflict, including groupthink and how to overcome it, is the second Analyze level entry.

Because these questions are scenario shaped, reading a list of roles is not enough. Working through the CQIA sample questions shows how a short workplace situation is turned into a question about who should act, or which tool applies.

Supplier and Customer Relationship: 7 questions each

The two smallest areas mirror each other. Supplier Relationship covers selection criteria and approval, the challenges of a diverse supply base, and performance measures such as quality performance, on-time delivery and level of service. Customer Relationship separates internal from external customers and then works through voice of the customer: gathering satisfaction data, handling a complaint from documentation to resolution, and the key elements of quality function deployment (QFD).

Why Does the Improvement Area Carry 40 Questions?

Improvement is the largest CQIA area because it holds the working tools. Forty of the 100 scored questions sit here, spread over process improvement concepts, five improvement techniques, seven basic tools, root cause analysis and risk management. A candidate who is weak in this one area cannot make up the difference elsewhere.

Six Sigma and lean, at the level of understanding

The exam does not expect you to run a Six Sigma project. It expects you to understand the DMAIC phases (define, measure, analyze, improve, control) and to compare the concepts and tools. The lean entry is similar and names its tools: set-up and cycle-time reduction, pull systems (kanban), continuous improvement (kaizen), just-in-time, 5S, value stream mapping and error-proofing (poka-yoke). Benchmarking and the difference between incremental and breakthrough improvement complete the sub-area.

Techniques and tools you must apply

The next two sub-areas move up a level, from Understand to Apply. The techniques are brainstorming, the plan-do-check-act (PDCA) cycle, affinity diagrams, cost of poor quality (COPQ) and internal audits. The tools are:

• Flowcharts
• Histograms
• Pareto charts
• Scatter diagrams
• Check sheets
• Control charts
• Decision trees

Apply means you select the right tool for a situation and interpret what it shows. Expect to be given a small chart or a description of data and asked what conclusion it supports.

Root cause and risk

Root cause analysis asks you to use the 5 Whys and the fishbone diagram to reach correction and corrective action. Risk Management stays at Understand: failure modes and effects analysis (FMEA), SWOT, and how activities and projects are prioritised by risk.

What Does Open Book Actually Allow?

Every ASQ exam, the CQIA included, is open book, and each candidate brings their own references. The condition is binding: all reference material, notes included, must be bound and stay bound throughout the exam. Loose sheets, hand-stapled packets and blank writing tablets are not allowed in the room.

What counts as bound

ASQ defines bound as material permanently held by stitching or glue, or fastened in its cover by fasteners that go through every page. Ring binders, spiral binders, plastic snap binders, brads and screw posts all qualify. That means your own typed notes are acceptable once they are in a ring binder. The test centre administrator inspects every reference before you enter, and sticky notes are permitted only as tabs that were attached beforehand.

Calculators and scratch paper

Computer based exams include a basic on-screen scientific calculator, and a test centre can lend a hand-held basic one. You may bring a silent, battery operated calculator with no programmable memory. Programmable models are refused. Prometric supplies scratch paper and pencils.

Why open book is not easy

With 110 questions in 198 minutes you have 1.8 minutes per question. Looking up every answer is not possible in that time, so the book works as a safety net for the handful of items you cannot place. The handbook ASQ sells for this exam may be used in the room, and a candidate who knows where each topic sits in it will gain far more than one who opens it for the first time on the day.

How Do You Apply and Book a Testing Window?

The CQIA is not available on demand. ASQ runs the exam in fixed testing windows, each with an application deadline several weeks earlier, and you choose your window when you apply. Once ASQ approves the application, you schedule a date and place with Prometric inside that window.

1. Choose a testing window and submit the application to ASQ before that window’s deadline.
2. Wait for ASQ to review it, which takes 1 to 2 business days for an online application.
3. Watch for the eligibility email, sent 1 to 2 business days after approval, which explains how to schedule with Prometric.
4. Book a test centre seat or a remotely proctored session inside the window you chose.
5. Arrive 30 minutes early with a government-issued photo ID that matches the name on your application.

At the time of writing, the October 2026 window has closed to new applications. The next computer based window runs through December 2026 with an application deadline of 9 November 2026, followed by February 2027 (deadline 11 January 2027) and April 2027 (deadline 8 March 2027). ASQ lists the options, including remote proctoring through Prometric ProProctor, on its computer based testing page. Live remote proctoring is not offered in China, Saudi Arabia, the United Arab Emirates, Qatar or Pakistan, where candidates must use a test centre.

Two costs are easy to miss. Changing an appointment must be done at least five days ahead and carries a $130 fee, and failing to appear forfeits the application fee entirely. Arriving late has the same result as not appearing.

CQIA, CQPA or Six Sigma Yellow Belt: Which One Fits?

The CQIA suits people who support improvement work from outside a quality department. The Certified Quality Process Analyst (CQPA) has the same two year eligibility rule but is aimed at paraprofessionals working under quality engineers, and its exam is an hour longer. The Six Sigma Yellow Belt has no eligibility requirement at all.

Reading the table

The extra hour on the CQPA reflects a more analytical Body of Knowledge, and ASQ has published a revised CQPA Body of Knowledge that took effect on 1 August 2026. Its Quality Process Analyst page carries both versions. If your daily work is data analysis inside a quality function, the CQPA describes you better. If you sit on improvement teams as a subject expert from operations, service or healthcare, the CQIA does.

Where the CQIA leads

None of the three is a prerequisite for anything else, but the CQIA covers the vocabulary that later ASQ exams assume. People who move into a quality role often aim next at the engineer credential, and our walkthrough of the Certified Quality Engineer exam shows how much deeper the statistics and eligibility rules go at that level.

What Happens After You Pass or Fail?

On a computer based CQIA exam the result appears as soon as you submit, with an email confirmation in 3 to 5 business days. A pass needs 550 of 750 points, and ASQ does not tell successful candidates their score. A candidate who fails receives a performance summary and may retake at the $234 rate.

If you pass

ASQ’s issuing partner, Accredible, sends a separate email with a link to claim the digital certificate and badge, and your name is added to the ASQ Certification Verification Registry, which employers can search. ASQ withholds passing scores on purpose. Its exams are built to separate competent from not yet competent candidates, not to rank people, so a 580 is not treated as better than a 560.

After that, nothing more is required. ASQ’s recertification rules require most of its credentials to be renewed every three years, by collecting 18 recertification units or by retaking the exam. The Quality Improvement Associate is one of six named exceptions that are lifetime certifications.

If you fail

The detailed analysis in your ASQ account shows correct and incorrect counts for each Body of Knowledge subtopic, which is the best study guide you will get. There is no limit on the number of retakes, but three conditions apply: each attempt costs the retake fee, you may not retake in the same window as the failed attempt, and you must retake within two years or submit a new application at the full fee.

How Should You Prepare for an Open Book CQIA Exam?

Prepare for the CQIA by following the question counts and by building the reference you will carry in. Seventy of the 100 scored questions come from Improvement and Quality Basics, so those two areas deserve most of your time, and your bound notes should be organised so that any topic can be found in seconds.

• Start with the Body of Knowledge. Download it from ASQ and mark the cognitive level beside each entry. Apply and Analyze items need practice, while Remember items need only a findable page.
• Work the Improvement tools by hand. Draw a Pareto chart, a fishbone diagram and a simple control chart from real numbers at work.
• Build one bound reference. Tab it by the five areas before exam day, because tabs cannot be added in the room.
• Rehearse the pace. Practise in timed blocks at 1.8 minutes per question, and limit yourself to a few lookups per block.

If you want a second view of the study materials and how candidates usually sequence them, our earlier CQIA study resources page lists them in one place.

Frequently Asked Questions

Is the Certified Quality Improvement Associate exam open book?

Yes. All ASQ certification exams are open book. You bring your own reference materials, and everything, including personal notes, must be bound by stitching, glue or fasteners that pass through all pages, such as a ring or spiral binder.

How many questions are on the CQIA exam?

The computer based CQIA exam has 110 multiple choice questions, of which 100 are scored and 10 are unscored. The paper and pencil version has 100 questions.

How long is the CQIA exam?

Exam time on the computer based version is 3 hours and 18 minutes, inside a total appointment of three and a half hours. The paper and pencil version lasts three hours.

What is the passing score for the CQIA?

You need 550 points out of a possible 750. ASQ does not report the actual score to candidates who pass.

How much does the CQIA exam cost?

The exam fee is $434, and ASQ members save $100 on the first attempt, paying $334. A retake costs $234.

What are the CQIA eligibility requirements?

Candidates need two years of work experience in a full time, paid role, or an associate degree or two years of equivalent higher education.

Does the CQIA certification expire?

No. ASQ lists the Quality Improvement Associate as a lifetime certification with no recertification requirements.

Can I take the CQIA exam online from home?

Yes, in most countries. ASQ offers remote proctoring through Prometric ProProctor, but it is not available in China, Saudi Arabia, the United Arab Emirates, Qatar or Pakistan, where the exam must be taken at a Prometric test centre.

How soon can I retake the CQIA if I fail?

Not in the same testing window as the failed attempt. You may retake in a later window at the retake fee, as many times as you need, provided each retake falls within two years of your last attempt.

Is the CQIA harder than the Six Sigma Yellow Belt?

The CQIA is the longer exam, with 110 questions in 3 hours 18 minutes against 90 questions in 2 hours 18 minutes for the Yellow Belt, and it has an eligibility requirement the Yellow Belt does not. Its content is broader, taking in teams, suppliers and customers as well as improvement tools.

Conclusion

The Certified Quality Improvement Associate rewards a specific kind of preparation. Two years of work or study gets you through the door, 40 of the 100 scored questions come from Improvement, and the open book rule means a well tabbed, bound reference is worth more than another week of memorising. The 1.8 minutes available per question keeps that book a backup and nothing more.

The practical constraint is the calendar. Testing windows are fixed, deadlines fall weeks ahead of them, and a failed attempt cannot be repeated in the same window. Pick your window first, count back to the deadline, and plan your study weeks from there. Pass once and the credential is yours for good.

Is There an Adobe Journey Optimizer Certification?

Yes. Adobe offers the Adobe Journey Optimizer Business Practitioner Professional certification, exam code AD0-E607: 50 questions, 100 minutes, 31 correct answers to pass, and a $125 fee. It is one of two Journey Optimizer credentials; the other, AD0-E606 Developer Expert, covers administration, APIs and data modelling for technical roles rather than campaign and journey work.

Journey Optimizer is Adobe’s application for designing and delivering personalised customer journeys across email, SMS, push and other channels, built on Adobe Experience Platform. Adobe sometimes shortens it to AJO. The Business Practitioner exam checks that you can use the product as a marketer or campaign owner: build journeys, decide on offers, author content and understand the platform data underneath.

Adobe publishes the full record for this exam on its Journey Optimizer certification page, and every figure above matches what the EduSum syllabus page lists. There is no version number attached to the exam and no retirement date has been announced.

What Does the AD0-E607 Exam Test Across Its Four Domains?

AD0-E607 is split into four weighted sections: Campaign and Journey Optimization at 48 percent, Content Authoring at 20 percent, Foundations of AEP at 20 percent and Offer Decisioning at 12 percent. Across the four there are 25 published objectives, almost all of them phrased as scenarios, so the exam asks what you would do rather than what a feature is called.

The objectives below are reproduced as the syllabus states them. Each row is a fair guide to the question type: “Given a scenario” means a short situation followed by a choice of actions, while “Identify” items are closer to recall.

On a 50-question paper the weights translate to roughly 24 questions on journeys, 10 each on content and platform foundations, and 6 on offers. The passing score of 31 means you can miss 19 questions in total, so a weak offer section is survivable; a weak journey section is not.

Why Do Journeys Carry 48 Percent of the Marks?

Campaign and Journey Optimization is 48 percent of AD0-E607 because building, validating and evaluating journeys is the daily work of a Journey Optimizer business practitioner. The domain has only four objectives, which means each one is tested from several angles: how to build a customer journey, how to validate it, how to evaluate it after it runs, and when a unitary event or a business event is the right trigger.

Build, validate, run, evaluate

The four objectives describe a lifecycle. Building covers the journey canvas: entry conditions, the sequence of actions and conditions, wait steps, and the channels used at each step. Validation is the checking step before publication, where test profiles run through the canvas and the error panel is read. Evaluation happens after the journey is live, when reports show how many profiles entered, where they exited and which messages were delivered.

Adobe’s own documentation frames the product the same way: journeys that are designed, orchestrated and then optimised from their performance data. The Journey Optimizer documentation is organised around exactly those stages, with separate guides for journeys, campaigns and channels, and it is the most direct reference for this domain.

Unitary events and business events

The fourth objective is the one candidates most often get wrong. A unitary event is tied to a single profile: a purchase, an app open, a form submission. A business event is not tied to any profile, such as a flight delay or a price drop, and it starts a journey for every qualifying profile at once. The exam gives a situation and asks which trigger fits, so practise classifying real examples before test day.

Scenario questions in this domain reward hands-on time, and the quickest way to see how they are phrased is to work through the AD0-E607 sample questions and note which lifecycle stage each one is probing. Treat every wrong answer as a pointer to a documentation page you have not read yet.

How Do Offer Decisioning and Content Authoring Fit Together?

Offer Decisioning (12 percent) and Content Authoring (20 percent) are tested separately on AD0-E607 but used together in practice: an offer is decided for a profile, then placed into an email, a push message or a page by a decision activity inside the content. Between them they account for 32 percent of the exam, around 16 questions, and they share the theme of personalisation at scale.

Offer Decisioning: six objectives, twelve percent

The offer objectives follow the order of the work. You create a collection of offers, understand the stages of decisioning, configure an individual offer, and then use decision activities in content being authored. Two objectives are judgement calls: when to use offer decisioning rather than personalisation at scale, and how static offers differ from dynamic ones. A static offer has fixed content; a dynamic offer pulls values from the profile or context at the moment it is rendered.

Content Authoring: seven objectives, twenty percent

Content Authoring is broader. It covers asset essentials, adding personalised fields into emails, configuring and interpreting a content experiment, the benefits and types of fragments, and creating an email template. Fragments are reusable blocks of content shared across messages; the exam asks both why they help and which kinds exist. Content experiments are the A/B testing feature, and the “interpret” objective means reading a result and saying which treatment won and why.

Both domains reward the same habit: knowing where a setting lives and what changes when you flip it. Retail teams running the product describe the payoff in similar terms.

“With a unified structure for customer profiles and journeys, we’ve improved collaboration across our teams and can respond quickly as changes happen. We also use real-time dashboards to track performance, so the team can see how their work impacts the business.”

What Does Foundations of AEP Mean for a Marketer?

Foundations of AEP is the 20 percent of AD0-E607 that covers Adobe Experience Platform, the data layer Journey Optimizer runs on. Its eight objectives ask a business practitioner to recognise data types, read profile attributes and audience membership, tell profile-enabled datasets from the rest, know the identity types a journey supports, choose audience types and sequential logic, troubleshoot a data load and pick the right data label.

Profiles, identities and datasets

Adobe Experience Platform centralises customer data from many systems into a single profile, and Journey Optimizer reads that profile to decide who enters a journey and what they receive. The exam does not ask you to build a schema, which belongs to the Developer Expert exam. It asks whether you know that a dataset must be enabled for profile before its records appear on a customer record, and where to look up an individual’s attributes and audience membership when a journey behaves unexpectedly.

Identities matter because a journey can be triggered by an email address, a customer ID or a device ID, and the choice determines which profiles the event reaches. The Experience Platform overview is the right starting point for this domain, because it explains the profile, identity and dataset concepts in the same terms the exam uses.

Audiences, troubleshooting and labels

Two objectives deal with audiences: which audience type to use in a scenario, and the right logic for a sequential audience, where a profile must do one thing and then another in order. One objective covers troubleshooting a data loading issue, which in practice means checking dataset status and ingestion failures before blaming the journey. The last asks which data label applies, and data labels are the governance tags that control how sensitive fields can be used in marketing.

If you already work with Adobe’s customer data platform, this domain will feel familiar. The Real-Time CDP certification path covers the same profile and identity foundation from the data side, and the two credentials pair naturally.

Business Practitioner Professional or Developer Expert: Which One?

Choose AD0-E607 Business Practitioner Professional if you build journeys, offers and content as a marketer or campaign owner; choose AD0-E606 Developer Expert if you configure the platform, manage permissions and APIs, and model data. Both are 50 questions in 100 minutes, but the Developer exam costs $225, needs 33 correct answers, and spreads its marks across five technical domains.

The Developer Expert syllabus includes permissions, sandboxes, channel administration, throttling and capping APIs, schemas, datasets and segmentation services. None of those words appear in the Business Practitioner objectives. Conversely, content experiments, fragments and data labels appear on the Professional exam and are only touched on the Developer one.

A common path is to take AD0-E607 first, since it has the lower fee and the lower experience expectation, and move to AD0-E606 once you are the person others ask to fix the configuration. Nothing stops you taking the Developer exam first, but its five-domain spread assumes you have already worked inside the admin screens.

Who Should Take AD0-E607?

AD0-E607 is written for people with up to twelve months on Adobe Journey Optimizer who own campaigns and journeys rather than platform configuration. Adobe lists the target roles as Journey Optimizer business consultant, marketer, marketing automation business practitioner, campaign manager, journey manager, digital marketing specialist, CRM coordinator and MarTech analyst, and the exam content follows that list closely.

Experience level

Professional is Adobe’s entry tier, and the zero to twelve months guidance is a description of who the questions were written for rather than a prerequisite. There is no required prior certification and no proof of experience to submit. If you have built a handful of live journeys and sent a personalised email from the product, you are already inside the intended range.

Where it fits in a marketing career

Journey Optimizer belongs to the broad category of marketing automation software, and the skills the exam measures transfer across that category: triggered messaging, audience logic, content personalisation and experiment reading. In the United States, PayScale reports an average salary of about $74,700 for a marketing automation specialist, with a range from roughly $52,000 to $99,000. The certification does not set your pay, but it is the kind of evidence that moves a candidate within that range.

Marketers who already hold an Adobe Analytics credential will recognise the format. The Adobe Analytics Business Practitioner exam uses the same scenario style at the same Professional level, and reporting on journey results is where the two products meet.

How Much Does It Cost and How Does Renewal Work?

AD0-E607 costs $125 USD, or $95 for candidates in India, and the certification is valid for two years from the date you pass. Renewal is free: Adobe asks you to complete two short courses of roughly fifteen minutes each before the expiry date, and it notifies you 180 days in advance. There is no renewal exam and no renewal fee.

What the fee covers

The fee buys one attempt at the online proctored exam, delivered in English, with a camera required for the whole session. Budget separately for the AJO-BP200 course if your organisation does not already have access to Adobe’s learning content, and for the time to work through it: Adobe lists the course at about six hours.

The two-year clock

Because renewal is two short courses rather than a fresh exam, the sensible move is to complete them as soon as the 180-day notice arrives. Letting the credential lapse means sitting AD0-E607 again at full price. Adobe’s renewal courses also track product changes, which is how the certification stays tied to the current release of Journey Optimizer without a versioned exam code.

How Should You Prepare for AD0-E607?

Prepare for AD0-E607 in the order of the weightings: journeys first, then content and platform foundations, then offers. Adobe’s recommended course is AJO-BP200, Adobe Journey Optimizer for Business Practitioners (Professional), a six-hour programme that maps onto the four domains. Pair it with hands-on time in a sandbox and timed practice at the 100-minute, 50-question pace.

1. Complete the AJO-BP200 course end to end before opening any other material, so the vocabulary in every later step is Adobe’s own.
2. Build three journeys of your own in a sandbox: one started by a unitary event, one by a business event, and one by an audience qualification, and validate each with a test profile.
3. Read the Experience Platform overview and locate a profile’s attributes, identities and audience membership in the interface until you can find them without searching.
4. Create an email template with fragments and personalised fields, then run a content experiment on it and write down what each result panel means.
5. Configure one offer collection with a static and a dynamic offer, and place a decision activity in a message so you have seen the whole chain once.
6. Sit two full timed practice tests at 50 questions in 100 minutes and review every miss against the objective it belongs to before booking the exam.

Pacing on the day

Two minutes per question is comfortable for recall items and tight for scenarios. Answer the “Identify” questions quickly and bank the time for the “Given a scenario” items in the journey domain, where a careful second read often changes the answer. With 31 needed out of 50, leaving nothing blank is the single most useful rule.

Frequently Asked Questions

Is there an Adobe Journey Optimizer certification?

Yes. Adobe offers AD0-E607, the Adobe Journey Optimizer Business Practitioner Professional certification, and AD0-E606, the Adobe Journey Optimizer Developer Expert certification. The Business Practitioner exam is aimed at marketers and campaign owners; the Developer exam is aimed at the people who configure the platform.

How many questions are on the AD0-E607 exam?

AD0-E607 has 50 questions and a time limit of 100 minutes. The passing score is 31 correct answers out of 50, which is 62 percent. The exam is delivered online with a proctor and requires camera access for the full session.

What does AJO stand for?

In Adobe’s product world AJO is the abbreviation for Adobe Journey Optimizer. The same three letters are also a Spanish word for garlic and the name of a town in Arizona, so searching for the certification by its full product name returns far more relevant results than the acronym does.

How much does the Adobe Journey Optimizer Business Practitioner exam cost?

The AD0-E607 exam fee is $125 USD worldwide and $95 for candidates in India. The fee covers one attempt. The recommended AJO-BP200 course is separate and runs about six hours.

Which domain is the largest on AD0-E607?

Campaign and Journey Optimization is the largest domain at 48 percent, which is around 24 of the 50 questions. Content Authoring and Foundations of AEP are 20 percent each, and Offer Decisioning is 12 percent.

How long is the Adobe Journey Optimizer certification valid?

The certification expires two years after you earn it. Adobe notifies you 180 days before the expiry date, and you renew by completing two short courses of about fifteen minutes each at no cost. No renewal exam is required.

What is the difference between AD0-E607 and AD0-E606?

AD0-E607 is the Professional-level Business Practitioner exam: $125, 31 of 50 to pass, four domains led by journeys at 48 percent. AD0-E606 is the Expert-level Developer exam: $225, 33 of 50 to pass, five domains covering administration, orchestration, offers, content and data modelling.

Do I need experience before taking AD0-E607?

No formal prerequisite exists. Adobe describes the Professional level as suited to candidates with zero to twelve months of experience on Journey Optimizer, and the scenario questions assume you have built and validated journeys in the product at least a few times.

What is the best way to prepare for the AD0-E607 exam?

Take the AJO-BP200 course, then spend the most time on journeys because they are 48 percent of the marks. Build journeys in a sandbox with both event types, practise reading content experiment results, and finish with timed practice tests at the real pace of 50 questions in 100 minutes.

Conclusion

The Adobe Journey Optimizer certification that most marketers want is AD0-E607, and its shape is unusually clear: 50 questions, 100 minutes, 31 to pass, and nearly half the marks on building, validating and evaluating journeys. The remaining domains, content authoring, platform foundations and offer decisioning, are smaller but cannot be skipped, since a passing score leaves room for only 19 misses.

Decide first whether you are the practitioner or the developer, because the two exams share a product and little else. Then prepare in weighting order, keep hands-on time in a sandbox at the centre of the plan, and treat the two free renewal courses as part of owning the credential rather than an afterthought. The sample questions linked earlier are a quick way to see where you stand before you book.

What Does 1Z0-078 Actually Cover?

1Z0-078 covers three products that are normally learned separately: Real Application Clusters, Oracle Clusterware and Grid Infrastructure, and Automatic Storage Management. The syllabus runs to thirty topic groups split across those three areas, and the exam treats them as one body of knowledge because in a real cluster they are inseparable.

The practical consequence is that a strong single-instance DBA is perhaps a third of the way prepared. Backup and recovery, initialization parameters and undo tablespaces all appear, but every one of them is asked in its clustered form, where the answer differs from the standalone one. Redo threads per instance, undo tablespaces per instance and RMAN configured for a shared archive destination are the sort of distinction this exam lives on.

What Are the 1Z0-078 Exam Details?

1Z0-078 gives you 120 minutes for 77 multiple choice questions and requires 65 percent to pass. It costs 245 USD, though Oracle notes that pricing varies by country and by localised currency. Passing it awards Oracle Certified Professional, Oracle Database 19c – RAC, ASM, and Grid Infrastructure Administrator.

Those 77 questions in 120 minutes work out at roughly 93 seconds each, which is comfortable for recall items and tight for the scenario questions that describe a cluster behaving oddly and ask for the cause. The 1Z0-078 sample questions are a fair guide to how the longer items are phrased.

One caveat on sourcing. Oracle’s own certification pages could not be read while this article was written: education.oracle.com returns an error with a maintenance notice, and the MyLearn exam pages load their content in the browser rather than serving it, so nothing can be extracted from them. Every figure above therefore comes from the published exam syllabus rather than from a page on Oracle’s site. Treat them as accurate and current, but check Oracle directly before you book if the fee matters to your budget.

Why Are There No Topic Weightings?

The syllabus for 1Z0-078 lists its thirty topic groups without a single percentage. That is unusual for Oracle, whose cloud and application exams normally publish a weight for every domain, and it changes how you have to plan: there is no way to identify a section worth skipping, because no section declares its size.

The honest answer is that nobody outside Oracle knows the distribution, and inventing one would be worse than admitting it. What you can use instead is the shape of the syllabus itself. Counting topic groups gives a rough proxy: twelve for RAC, eleven for Grid Infrastructure and Clusterware, seven for ASM. Counting the individual objectives underneath them tilts slightly further toward RAC and Clusterware.

Two other signals are worth more than a guessed percentage. The first is verb choice. The syllabus mixes describe, explain, configure, manage, install and troubleshoot, and the configure and troubleshoot items are the ones that need a cluster to practise on. The second is repetition: patching and upgrading appear twice, once for RAC and once for Grid Infrastructure, and troubleshooting appears as a topic group of its own under Clusterware. Subjects Oracle lists twice are rarely marginal.

What Does the RAC Half of the Blueprint Ask?

The RAC portion is the largest of the three at twelve topic groups. It moves from architecture and installation through day to day administration, then into the areas where clustered databases genuinely differ from standalone ones: global resource coordination, cluster-aware tuning, and keeping client connections alive across an instance failure.

Global resources and cache coordination

This is the conceptual core of RAC and it carries six objectives, more than any other RAC topic group. It covers global concurrency control, global enqueue and instance lock management, the Global Resource Directory, global buffer cache management and the use of affinity to reduce contention. If you have ever wondered what Cache Fusion is actually doing when a block moves between instances, this section is that question examined properly. Oracle’s own RAC administration guide is the reference to work through.

High availability for services and connections

Two topic groups cover this, and together they hold eleven objectives, which makes availability the most heavily specified subject in the RAC half. Services come first: configuring and managing them, service aggregation and tracing, and using services from client applications. Then the connection layer, covering client-side and server-side connect-time load balancing, Transparent Application Failover, the Load Balancing Advisory, Fast Application Notification, Transparent Application Continuity, co-location tags and dynamic services fallback.

Monitoring, tuning and the rest

RAC-specific tuning gets its own group of seven objectives, including AWR and ADDM used in a cluster, RAC-specific wait events and global enqueues, SGA runtime management and the Cluster Database Performance pages. Beyond that the RAC half covers installation and conversion from single instance, redo and undo configuration per instance, RMAN and ARCHIVELOG in a cluster, rolling patches, RAC One Node conversion, Quality of Service Management, and multitenant container and pluggable databases in a clustered environment.

How Much Clusterware and Grid Infrastructure Is Examined?

More than most candidates expect. Grid Infrastructure and Clusterware account for eleven topic groups, only one fewer than RAC itself, and they cover the entire lifecycle of the cluster layer rather than just its concepts. Installation planning, installation, node addition and removal, patching, troubleshooting and application high availability all appear as separate groups.

The opening groups are conceptual: cluster principles and purposes, Grid Plug and Play, hardware best practices, Clusterware architecture and startup sequence, and Flex Clusters including the effect of a node failure. The independent ClusterLabs project is a useful way to see how these ideas look outside Oracle’s implementation, which often makes the Oracle-specific version easier to hold.

From there it becomes operational. Installation planning covers groups and users, system and network requirements and directory creation. The installation group adds ASM disk group configuration and the optional Grid Infrastructure Management Repository. Cluster node management covers the prerequisite steps for extending a cluster, adding nodes with DBCA and deleting a node.

Traditional Clusterware management and policy-based cluster management sit side by side, which is a hint in itself. The traditional group covers daily administration, what-if command evaluation, Oracle Cluster Registry backup and recovery, securing cluster communication and network settings. The policy-based group covers policy sets, server categorisation and activating a policy. Expect to be asked to distinguish administration-managed from policy-managed configurations.

Troubleshooting closes the area out with the Clusterware log file locations, diagcollection.pl, component-level and resource debugging, and OCR file troubleshooting. Zero-downtime patching of Grid Infrastructure appears explicitly in the patching group.

What ASM and CloudFS Knowledge Do You Need?

ASM is the smallest of the three areas at seven topic groups, but it reaches further than storage administrators often assume, because two of those groups cover Oracle CloudFS rather than plain ASM. The material runs from ASM architecture and instance administration through Flex ASM, disk groups, files and directories, and then into ACFS.

The core ASM groups cover the architecture and its components, initialization parameters for an ASM instance, the V$ASM dynamic performance views, and managing ASM instances and their processes. Flex ASM has a group of its own covering architecture, management, installation and configuration. Disk group administration covers creation and deletion, ongoing maintenance, attributes and the performance and scalability considerations that decide how you lay them out.

File-level knowledge is examined too: client tools for accessing ASM files, how files, directories and aliases are created and managed, the format of a fully qualified ASM file name, and disk group templates. The fully qualified name format is the kind of precise detail that suits a multiple choice question, so learn its structure rather than recognising it.

CloudFS is where candidates most often run short. One group covers ASM Dynamic Volume Manager, implementing ACFS, managing volumes and using ACFS snapshots. A second, listed as advanced topics, covers ACFS auditing, tagging, encryption, high availability NFS and ACFS replication. That is nine objectives on a file system many Oracle DBAs never touch in production. An earlier 1Z0-078 walkthrough covers the general study approach, and Oracle’s storage administration guide is the reference for the ASM material itself.

Is 19c Still the Current RAC Exam?

Yes, on the evidence available. 1Z0-078 carries no release suffix, and no higher-numbered replacement exists for RAC, ASM and Grid Infrastructure administration. Oracle has released 23ai exams for database administration and for SQL, but the clustered infrastructure specialism has not been reissued alongside them.

That is worth stating carefully rather than confidently. Oracle’s certification pages cannot be read by any automated means at the moment, so the absence of a successor is established from the exam catalogue rather than from a statement by Oracle that 19c remains current. Nothing found while researching this article suggests a retirement date, and 19c is Oracle’s long term support release, which makes a clustered exam on it a reasonable thing to keep alive.

The practical reading is that the version question matters less here than it would on a cloud exam. Cluster architecture, Cache Fusion, service failover and ASM disk group design are not features that turn over every year, and most of what this exam tests would survive a version bump intact.

How Should You Prepare for 1Z0-078?

Preparation works best built around a cluster you can break, because the majority of the syllabus is configure and troubleshoot rather than describe. With no published weightings to steer by, the sequence below follows the syllabus in the order the three products depend on one another, which is also roughly the order of topic group counts.

1. Build a two node cluster in virtual machines, because almost nothing on this exam can be practised on a single instance.
2. Install Grid Infrastructure yourself rather than inheriting one, working through the planning, group and user creation, and network requirements as separate steps.
3. Configure ASM disk groups during that installation, then practise adding, dropping and rebalancing them until the maintenance operations are familiar.
4. Create a RAC database on top, then convert a single instance database to RAC so that both routes are known.
5. Work through services, connect-time load balancing and Transparent Application Failover, which together carry more objectives than any other subject in the RAC half.
6. Study global resource coordination and Cache Fusion properly, because the concepts underpin every RAC tuning question.
7. Practise node addition and deletion, rolling patches and OCR backup and recovery, then deliberately break the cluster and use the log files and diagcollection.pl to find out why.
8. Finish with ACFS and CloudFS, the area production experience is least likely to have given you.

Oracle names three preparation workshops for this exam, covering RAC administration, ASM administration and Clusterware administration separately, which is another signal that the three areas carry comparable weight. For the wider Oracle database certification picture, the Autonomous Database exam breakdown shows how Oracle structures a modern database credential by comparison.

Frequently Asked Questions

How many questions are on the 1Z0-078 exam?

77 multiple choice questions in 120 minutes, with a passing score of 65 percent. That is about 93 seconds per question, which is comfortable for recall items and tighter for the cluster scenarios.

What are the topic weightings for 1Z0-078?

None are published. The syllabus lists thirty topic groups with no percentages attached, which is unusual for Oracle. Plan by topic group counts and by the balance of configure and troubleshoot verbs instead.

How much does 1Z0-078 cost?

245 USD, with the published note that pricing varies by country and by localised currency. Oracle’s own pages could not be read to confirm regional figures, so check the price for your country before booking.

What certification does 1Z0-078 earn?

Oracle Certified Professional, Oracle Database 19c – RAC, ASM, and Grid Infrastructure Administrator. It is a specialism credential covering all three products rather than a step in the general database administration path.

Can I pass 1Z0-078 with single instance experience only?

It would be difficult. Familiar subjects such as redo, undo and RMAN all appear, but each is examined in its clustered form, where the correct answer differs from the standalone one. Most of the syllabus has no single instance equivalent at all.

Which area of the syllabus is largest?

Real Application Clusters, at twelve topic groups, with Grid Infrastructure and Clusterware close behind at eleven and ASM at seven. Since no weightings are published, those counts are the best available proxy rather than a stated distribution.

Is there a 23ai version of this exam?

No replacement was found. Oracle has issued 23ai exams for database administration and SQL, but not for the RAC, ASM and Grid Infrastructure specialism. 19c is Oracle’s long term support release, so the exam remaining on it is unsurprising.

How much ACFS is on the exam?

More than many candidates expect. Two topic groups cover Oracle CloudFS, holding nine objectives between them including auditing, tagging, encryption, high availability NFS and replication. It is commonly the weakest area for working DBAs.

Do I need to install Grid Infrastructure myself to prepare?

It is strongly advisable. Installation planning, installation, node addition and deletion, patching and troubleshooting are all separate topic groups, and they are hard to learn from reading alone. A two node virtual cluster is enough.

Conclusion

1Z0-078 asks for working knowledge of three products at once, and it is the missing weightings that make it awkward to plan rather than the difficulty of any single topic. Thirty topic groups across RAC, Grid Infrastructure and ASM, 77 questions and 120 minutes at a 65 percent pass mark is the whole published specification, and Oracle offers nothing more granular than that.

Plan by structure instead. Twelve topic groups for RAC, eleven for Clusterware and Grid Infrastructure and seven for ASM is the nearest thing to a distribution available, and the configure and troubleshoot objectives tell you where laboratory time is repaid. Build a two node cluster, install the stack yourself, break it deliberately, and give ACFS more attention than production experience has probably given you.

What Does GB0-372 Cost, and How Long Do You Get?

GB0-372 costs 135 USD and gives you 60 minutes for 50 questions, with a passing score of 600 out of 1000. Registration is through Prometric, and the exam is delivered as an online test. It is one of three exams for the H3CSE-RS+ certification, so the same fee and format apply twice more for GB0-382 and GB0-392.

Sixty minutes across 50 questions is 72 seconds per item. That is comfortable for a recall question about a VLAN tag and tight for a scenario that describes two buildings, a directory migration and a symptom that follows users across switches. The sample questions published for this exam are mostly the second kind, and three of the ten ask for two answers, so pace yourself for reading rather than for ticking boxes.

The passing score is a scaled 600 on a 1000 point scale. Neither H3C nor the money site publishes how 50 answers map onto that scale, so do not work backwards to a number of questions you can afford to miss. Treat 600 as the target and aim well above it in practice.

One registration note is worth checking before you book. The syllabus page and H3C’s own certification FAQ both name Prometric as the test provider for the senior routing and switching exams. H3C’s H3CSE-RS+ programme page, however, tells candidates to contact H3C’s learning arm, H3CL, or a local H3C office. If Prometric shows no H3C exams in your country, that contact route is the one to use.

Which Seven Sections Does the GB0-372 Syllabus Cover?

The GB0-372 syllabus has seven sections: Campus Network Overview, VLAN Technologies, Spanning Tree Protocol, High Availability Technologies, IP Multicast, Campus Network Security Technologies, and Campus Network Maintenance and Management. No weightings are published for any of them, so the blueprint gives you no way to prioritise by marks, and no section can safely be skipped.

Read the seven as a campus being built in order. The first three sections are the structure: a hierarchy of access, aggregation and core, VLANs to divide it, and spanning tree to keep it loop free. The fourth makes it survive a failure. The fifth lets it carry one video stream to many receivers. The last two decide who can join and how you find out what went wrong.

The first three sections overlap with the entry-level GB0-192 exam, and that is deliberate. The senior version asks for the extensions rather than the basics: Super VLAN and QinQ rather than a plain 802.1Q trunk, MSTP configuration rather than what a BPDU is. If a topic looks familiar from H3CNE-RS+, expect the question to start one step further in.

How Does GB0-372 Test High Availability?

The High Availability Technologies section of GB0-372 covers five things: link aggregation, VRRP, IRF, DRNI and BFD. The exam tests them as behaviour rather than definitions. A typical item describes what a network did after a reboot or a link failure and asks which setting explains it, which is exactly the shape of the two in the morning failback.

The failback, explained

In the opening scene the recovered router took the master role back because VRRP preemption was enabled and it held the higher priority. That is default behaviour, not a fault. If the operations team wants the role to stay put until they move it deliberately, preemption is the setting to change. The sample question that describes this scenario lists advertisement intervals, interface tracking and virtual MAC ownership as the distractors, and each one is a plausible story if you have only read about VRRP rather than run it.

The protocol itself is an IETF standard. The current specification, VRRP version 3, covers both IPv4 and IPv6 and defines the priority, preemption and advertisement mechanics that H3C implements. Reading the master election section once makes the exam’s VRRP questions feel like a description of something you already understand.

IRF, DRNI and the other three

IRF is H3C’s way of joining several physical switches into one logical device with a single control plane. DRNI is the alternative that keeps two devices separate but lets them present one aggregate link to a downstream switch. The syllabus asks for the principles, typical networking and basic configuration of both, so expect to be asked when you would choose one over the other, not just what the initials stand for.

BFD is the detection layer under all of this. One sample question puts it well: a stadium network runs some links under a dynamic routing protocol and others under static routes, wants sub-second failure detection on both, and will not change either routing design. BFD fits because it runs its own lightweight session over the link, independent of the protocol carried, and then notifies its registered clients so each reconverges without waiting for its own timers.

The best way to see how this section is written is to read the GB0-372 sample questions before you study, not after. Three of the ten are high availability scenarios, and one of them is not about configuration at all. It asks whether a logistics depot should buy hardware with a lower failure rate or deploy sub-second detection with automated failover, and the correct reasoning is that cutting restoration from forty minutes to under a minute removes more downtime than a third fewer failures ever could.

What Multicast Knowledge Does the Exam Expect?

The IP Multicast section of GB0-372 expects you to explain multicast addressing and RPF forwarding, configure group management with IGMPv2, IGMPv3 and IGMP Snooping, configure the three PIM modes, PIM-DM, PIM-SM and PIM-SSM, and understand multicast VLAN. It is the section most candidates coming from a unicast background find newest, and the exam questions it through symptoms.

Snooping on the access layer

The first published sample question is a water utility whose access VLAN floods a video stream to every port even though only three ports have subscribed receivers. The answer is IGMP Snooping on that VLAN, because a switch has to read the membership reports before it can restrict a group to particular ports. The distractors offer RPF checks, multicast VLAN and PIM-SM, and each is a real multicast feature applied at the wrong layer.

PIM-SM without a rendezvous point

The second multicast scenario is subtler. A new aggregation router in a PIM-SM domain has formed neighbours and has the mode enabled, but bootstrap messages are filtered on its path, so it has learned no rendezvous point. Two consequences follow: membership reports from its receivers produce no join towards the shared tree, and a source attached to it is never registered, so receivers elsewhere never learn the source exists. The specification behind that behaviour is RFC 7761 for PIM-SM, which is worth an evening if the register and join mechanics are new to you.

Knowing which mode is which

The exam names all three PIM modes, so the minimum is being able to say what each assumes. Dense mode floods first and prunes back, which suits a small network where most segments want the stream. Sparse mode builds trees on demand around a rendezvous point, which suits a campus where receivers are scattered. Source-specific multicast skips the rendezvous point because the receiver already knows the source, which is why it pairs with IGMPv3.

How Is Campus Access Control Examined?

The Campus Network Security Technologies section of GB0-372 covers AAA with RADIUS and TACACS+, port access control through 802.1X, dynamic VLAN, guest VLAN, MAC address authentication and port security, network access control through H3C’s EAD solution, portal authentication and Ethernet ACLs, and SSH. The exam tests where a fault sits in that chain, not just what each piece does.

The clearest example is the school district in the sample set. Staff who authenticate through 802.1X keep landing in the guest VLAN, the behaviour follows them across two buildings, guests on the same ports land correctly, and the switches have not been touched since a directory migration. The fault is in the authorisation attribute returned for the staff group at authentication, which now names the guest VLAN and is applied by every switch. Nothing on the access ports would produce a symptom that consistent.

That question rewards a habit: separate what the switch decides from what the RADIUS server tells it. 802.1X, dynamic VLAN and guest VLAN are one mechanism seen from three angles. The supplicant proves who it is, the server returns the VLAN, and the switch applies it. Port security and MAC authentication are the fallback for devices that cannot run a supplicant at all, such as printers and cameras.

Portal authentication and EAD sit one layer up, controlling access by web login and by endpoint health rather than by port. SSH closes the section on the management side, replacing Telnet for device access. If you have read this site’s H3CNE-Security firewall exam guide, you will recognise the same AAA and policy vocabulary applied to the firewall instead of the switch, which is a useful way to see where the routing and switching track stops and the security track begins.

What Does the Maintenance and Management Section Ask?

The Campus Network Maintenance and Management section of GB0-372 lists NQA, SNMP, LLDP, mirroring, NTP and telemetry, plus an overview of management objectives and challenges. In the sample questions it is the largest single theme, with four of the ten items, and every one of them turns on how a monitoring protocol actually behaves under load.

Trap or inform

Two of those items are about SNMP notifications. In the first, link-down events from remote encoder sites never reach the management platform although each device logged them locally, and the path crosses a congested link. Switching the devices from Traps to Informs fixes it because an Inform is acknowledged by the manager, so the agent retransmits when no acknowledgement arrives, whereas a Trap is sent once and never confirmed. The second asks what SNMPv2c added over v1, and the answers are GetBulk for retrieving large tables in fewer exchanges, and Inform together with a richer error status set.

Severity, mirroring and time

A stadium network drowning in tens of thousands of syslog messages a minute during an incident is the third scenario. The two correct moves are to restrict which severities each device may send to the collector, so informational and debug output never consumes ingest capacity, and to filter the incident view to the more severe levels first. Raising every device’s configured severity or discarding unrecognised values are the traps.

The remaining objectives are narrower. NQA is H3C’s network quality analyser for scheduled probes, LLDP tells you what is plugged into what, port, remote and stream mirroring send copies of traffic to an analyser, NTP keeps every log timestamp comparable, and telemetry pushes counters to a collector instead of waiting to be polled. The exam asks for basic principles and configuration on each, so know what the feature is for and roughly how it is turned on.

Where Does GB0-372 Sit in the H3CSE-RS+ Route?

GB0-372 is the first of three exams for the H3CSE-RS+ certification. The other two are GB0-382, Advanced Routing and Switching Technology 2, and GB0-392, Network Security Optimization. You need a valid H3CNE-RS+ certificate before you can be awarded the senior credential, each exam result stays valid for 12 months, and the certificate itself is valid for three years.

H3C describes the credential as proof of the theoretical knowledge and operational skill needed to deploy campus networks, including routing, switching, multicast, VPN, QoS and basic security, and to build and manage large and medium sized complex networks. GB0-372 delivers the campus half of that promise. GB0-382 moves to routing protocols on large scale networks, and GB0-392 covers secure, optimised WANs, including VPNs, QoS, VXLAN and EVPN.

The three courses behind the exams add up to 15 working days of recommended training, and one sitting of each exam adds up to 405 USD, which is simple arithmetic from the 135 USD fee rather than a package price. H3C lists the full requirements, the recommended course order and the validity rule on its H3CSE-RS+ programme page, and the fee, duration and Prometric details on its certification FAQ page.

Two more facts help with planning. When the certificate expires after three years, H3C’s rule is that you retake the exams rather than submit continuing education. And the plus programme replaced an older H3CSE Routing and Switching route built on GB0-371, GB0-381 and GB0-391 with an H3CNE prerequisite, so if a study guide or an employer’s job description still quotes those codes, it is describing the previous generation of the same credential.

Above the senior tier sits H3CIE-RS+, the expert level, which completes H3C’s three-level routing and switching ladder. Most candidates never need it. The senior credential is the one that maps onto running a campus estate, and GB0-372 is where it starts.

How Should You Prepare for GB0-372?

Prepare for GB0-372 by working the seven sections in the order the syllabus lists them, then spending most of your revision time on the four that carry the scenario questions: high availability, multicast, security and management. Use the official mock exam to check recall and the scenario sample questions to check reasoning, and book only when both feel comfortable inside 72 seconds a question.

1. Confirm your H3CNE-RS+ certificate is still valid, because the senior credential cannot be issued without it.
2. Print the seven-section objective list and mark every technology you have never configured, since those are the ones the scenario questions will expose.
3. Lab VRRP, link aggregation and IRF first, and deliberately break each one so you have seen the failover and the failback behaviour yourself.
4. Work through IGMP Snooping and PIM-SM on a small topology, then read the register and join sections of the PIM-SM specification with the lab in front of you.
5. Configure 802.1X against a RADIUS server with a dynamic VLAN and a guest VLAN, and watch which side decides the VLAN.
6. Sit the official GB0-372 mock examination and the scenario sample questions under a 60 minute clock, and book the exam when both are comfortable.

The official GB0-372 mock examination is dated May 2024 and leans towards recall: access layer functions, Super VLAN behaviour, MAC learning, STP timers and the relationship between RSTP and STP. Several of its items take more than one answer. It is a good measure of whether you know the vocabulary, and a poor measure of whether you can diagnose a symptom, which is why the scenario questions matter as much.

If you want a second set of practice items on this site, the older GB0-372 practice questions page walks through the exam structure and study strategy and quotes the same 50 question, 600 out of 1000 format, which is a useful sign that the exam’s shape has been stable.

Two habits carry the most marks. When a question describes a symptom, ask which device made the decision that produced it, the switch, the server or the router. And when two answers both sound like real features, ask which one operates at the layer the question describes. Both of the published multicast questions and the 802.1X question are solved by exactly that step.

Frequently Asked Questions

How many questions are on the GB0-372 exam?

GB0-372 has 50 questions and a 60 minute time limit, which is 72 seconds per question. The published sample questions include both single-answer and choose-two items.

What is the passing score for GB0-372?

The passing score is 600 out of 1000. Neither H3C nor the money site publishes how the 50 answers map onto that scale, so there is no published number of questions you can miss.

How much does the GB0-372 exam cost?

The exam costs 135 USD. H3C’s certification FAQ lists the same fee for each of the three senior routing and switching exams, so one sitting of all three comes to 405 USD.

Is H3CNE-RS+ required before GB0-372?

A valid H3CNE-RS+ certificate is required to be awarded the H3CSE-RS+ certification. H3C states this as a certification requirement on its programme page, so hold the entry credential before planning the three senior exams.

How many exams are needed for H3CSE-RS+ certification?

Three: GB0-372 Advanced Routing and Switching Technology 1, GB0-382 Advanced Routing and Switching Technology 2, and GB0-392 Network Security Optimization. H3C recommends studying the three courses in that order.

How long is the H3CSE-RS+ certificate valid?

The certificate is valid for three years. On expiry, H3C requires candidates to retake the certification exams. Individual exam results are valid for 12 months.

Does GB0-372 publish weightings for its sections?

No. The syllabus lists seven sections and their objectives without any percentage weighting, so study all seven rather than trying to prioritise by marks.

Where do you register for the GB0-372 exam?

The syllabus page and H3C’s FAQ name Prometric as the test provider, and the exam is delivered online. H3C’s programme page also directs candidates to contact H3CL or a local H3C office for arrangements.

What replaced the old GB0-371 exam?

GB0-372 is the first exam of the current H3CSE-RS+ programme, which replaced the older H3CSE Routing and Switching route built on GB0-371, GB0-381 and GB0-391. Study material quoting the old codes describes the previous generation of the credential.

Conclusion

The failback at two in the morning was not a fault in the network. It was a setting nobody had thought about, and the GB0-372 exam is built from moments like it: a stream flooding a VLAN, a notification lost on a congested link, staff landing in the guest VLAN after a directory change. Each has one explanation and three plausible ones.

The numbers are fixed. GB0-372 is 50 questions in 60 minutes for 135 USD, 600 out of 1000 to pass, seven sections with no weightings, and the first of three exams towards an H3CSE-RS+ certification that requires a valid H3CNE-RS+ and lasts three years.

Lab the high availability and multicast features until you have watched them fail, learn which device makes each decision, and sit the mock and the scenario questions against the clock. When both are comfortable, book.

What do two attempts in 364 days mean for your booking?

The SailPoint Certified IdentityIQ Associate enrolment costs 300 USD and includes two attempts, both of which must be scheduled and taken within 364 days of registering. A first attempt that falls short is not recorded as a failure straight away. The final result is only fixed after the second attempt, or when you pass.

SailPoint describes the sequence on its own IdentityIQ Associate exam page, and the three status labels are worth knowing before you buy:

• Passed appears as soon as an attempt succeeds, whether it is the first or the second.
• Not Complete appears after an unsuccessful first attempt and stays until you sit the second.
• Not Passed appears only if the second attempt is also unsuccessful.

Why the window changes your plan

Most candidates treat a purchase date as a formality. Here it is the start of a countdown, so the sensible order is reversed: prepare first, register when you are close to ready, and keep a comfortable share of the 364 days in reserve for a second sitting.

The second attempt is a safety net, and it works best when you leave time to use it. A first attempt taken in the final weeks of the window leaves almost no room to study the weak topics and return. A first attempt taken early leaves months.

What SailPoint recommends before you enrol

SailPoint recommends one year of hands-on experience for this certification and describes it as a role-based credential for on-premise identity security. It also states that the exam serves as the final exam for two of its courses, IdentityIQ Introduction and IdentityIQ Essentials, which tells you where the question writers drew their material.

What does the IdentityIQ Associate exam look like?

The SailPoint Certified IdentityIQ Associate exam has 43 questions and a 90 minute time limit, costs 300 USD, and is reported as Pass or Fail with no published percentage. The syllabus covers seven topics and gives no weighting for any of them, so you cannot rank your study time by share of marks.

Ninety minutes across 43 questions works out at just over two minutes each. That is a generous pace, which means the clock is unlikely to be what decides your result. Reading accuracy is.

How the sample questions are worded

The published sample items share one pattern. Each presents a single statement about IdentityIQ and asks whether it is accurate, with yes or no as the only choices. There is no list of four options to compare, so you cannot work backwards by elimination. You either know how the feature behaves or you do not.

The statements are built to sound plausible. One claims that removing attributes from an account schema improves correlation. Another says an IT role is made by grouping business roles. Both are wrong, and both read smoothly. Working through the IdentityIQ Associate sample questions early shows you how small the gap between a true statement and a false one can be.

Watch for absolute words. A statement that says a business role is acquired only by detection, or that a QuickLink never grants access by itself, turns on that one word. Read each statement twice before you answer.

Which seven topics does the syllabus name?

The IdentityIQ Associate syllabus names seven topics: Foundational Concepts, Applications, Identity Modeling, Access Modeling, Governance, User-Driven Requests, and Provisioning. SailPoint lists the same seven on its exam page. No weightings are published, but the number of objectives under each topic shows where the detail sits.

That is 41 objectives in total. An objective count is not a weighting, and you should not read it as one. Still, Applications carries nine objectives and Governance carries four, so Applications simply has more to learn.

Notice the verbs as well. Almost every objective begins with describe, explain, identify or compare. None asks you to write a rule or build a workflow. The Associate exam tests whether you understand what IdentityIQ does and why, which matches a credential tied to introductory and essentials training.

How do applications, identities and roles fit together?

In IdentityIQ, an application represents a connected system, aggregation reads its accounts, correlation attaches each account to an identity, and the resulting IdentityCube holds what that person has. Entitlements are then catalogued and grouped into roles. Three of the seven IdentityIQ Associate topics follow this chain, so learning it as one flow saves time.

Applications: where the data comes in

The Applications topic has the most objectives because everything else depends on it. You need to know the difference between account and group schema types, which settings depend on the connector you choose, and which task options affect aggregation. You also need the process for resolving uncorrelated accounts, which are accounts IdentityIQ has read but cannot yet match to a person.

One sample statement suggests that running an identity refresh resolves an uncorrelated account. It does not, and the item exists because the two ideas are easy to blur. The product’s own IdentityIQ product documentation has separate chapters for application configuration, correlation and the entitlement catalog, and reading them in that order mirrors the syllabus.

Identity Modeling: the cube and its attributes

Here the syllabus asks you to contrast an identity attribute with an account attribute. An account attribute belongs to one account on one application. An identity attribute belongs to the person. Manager correlation sits in this topic too, and it commonly uses manager information from an authoritative application to link each identity to the correct manager.

Access Modeling: entitlements and two kinds of role

Marking an account schema attribute as managed lets its values be governed as entitlements, so they can be catalogued, requested and reviewed. Roles sit above that. The syllabus asks you to compare business and IT roles and to describe how identities obtain them, and the sample items test both points directly.

The idea is older than the product. Role based access control was formalised in 1992 by David Ferraiolo and Rick Kuhn at NIST, and the NIST model was adopted as an American national standard in 2004. IdentityIQ applies that thinking at enterprise scale, which is why the role questions reward understanding over memorised definitions.

What do governance, requests and provisioning add?

Governance, User-Driven Requests and Provisioning cover what happens after access is modelled. Governance reviews and polices existing access, User-Driven Requests lets people ask for change, and Provisioning carries approved change out to target systems. Together they hold 14 of the 41 IdentityIQ Associate objectives and describe the daily work of an identity team.

Governance

You must identify the certification phases and what occurs in each, and describe the many ways a certification can be initiated. In IdentityIQ a certification is an access review, not an exam, and the double meaning catches newcomers. Policies complete the topic: know examples of common policies and how violations are detected. SailPoint’s explainer on identity governance and administration gives the wider context.

User-Driven Requests

QuickLink Populations control who can request what for whom. That phrase comes straight from the syllabus, and it is the core of the topic. Being shown a request QuickLink does not grant the access requested through it. Approval and provisioning still have to happen.

Provisioning

Six objectives sit here: define provisioning, list the IdentityIQ actions that trigger it, describe provisioning policies, summarise the process, and explain Lifecycle Events and attribute synchronization. Lifecycle Events matter most in practice, because they turn a change in a person’s status into a change in access without anyone raising a request.

All three topics serve one aim, which the NIST identity program states plainly.

“Identity and Access Management is a fundamental and critical cybersecurity capability. Simply put, with its focus on foundational and applied research and standards, NIST seeks to ensure the right people and things have the right access to the right resources at the right time.”

Keep that sentence in mind when a statement looks unfamiliar. If a described behaviour would give someone access without a review, a request or a policy behind it, the statement is probably false.

IdentityIQ Associate or IdentityIQ Engineer?

The IdentityIQ Associate exam costs 300 USD and has 43 questions, while the IdentityIQ Engineer exam costs 400 USD and has 66. Both run for 90 minutes, both are reported as Pass or Fail, and both enrolments give two attempts within 364 days. The difference is scope: the Associate tests understanding, the Engineer tests implementation.

The pace differs sharply. The Engineer exam fits 66 questions into the same 90 minutes, which is about 82 seconds each against roughly 126 seconds on the Associate. The Engineer also expects custom development and debugging, neither of which appears in the Associate syllabus.

SailPoint’s certification program page lists both IdentityIQ exams beside its cloud certifications, and it also describes a recertification program for keeping a certification active. If your employer runs IdentityIQ on its own infrastructure, the Associate is the natural first step.

If your organisation has moved to Identity Security Cloud, the cloud track fits better. This site’s guide to the Identity Security Engineer exam covers that route, which costs 400 USD and runs to 73 questions in 120 minutes.

How should you prepare inside the enrolment window?

Prepare for the IdentityIQ Associate exam before you register, so that the 364 day window is spent on sitting the exam and not on starting to study. Learn the seven topics in data flow order, practise judging single statements, take the first attempt early, and keep enough of the window free for a second attempt.

1. Study the seven topics before you pay, because registration starts the 364 day clock.
2. Work through Applications first, since aggregation and correlation feed every later topic.
3. Follow one identity through Identity Modeling and Access Modeling until you can explain how it obtains a role.
4. Cover Governance, User-Driven Requests and Provisioning together as the three ways access is reviewed, requested and delivered.
5. Practise on yes or no statements and write down why each false statement is false.
6. Register and schedule the first attempt early in the window, leaving months and not weeks for a second.
7. Use a Not Complete result to list the topics that felt uncertain, restudy them, then sit the second attempt.

Hands-on time beats rereading

SailPoint recommends a year of hands-on experience for a reason. Statements about aggregation options or certification phases are far easier to judge when you have run an aggregation task and completed an access review yourself. If you have access to a test environment at work, use it for every topic you can.

Keep a wrong statement log

Because each item is a single statement, your errors fall into patterns. You may keep confusing identity refresh with correlation, or business roles with IT roles. A short log of the statements you misjudged, with one line on the correct behaviour, is the most useful revision document you can build.

Frequently Asked Questions

How many questions are on the SailPoint IdentityIQ Associate exam?

The exam has 43 questions and a 90 minute time limit, which gives you just over two minutes per question.

What is the passing score for the IdentityIQ Associate exam?

The result is reported as Pass or Fail. No percentage or cut score is published, so any figure you see quoted elsewhere is not an official one.

How much does SailPoint IdentityIQ certification cost at Associate level?

The SailPoint Certified IdentityIQ Associate enrolment costs 300 USD, and that price includes two attempts.

How long do I have to take the exam after registering?

You have 364 days from registration to schedule and take the exam. Both attempts must fall inside that window.

What happens if I fail the first attempt?

Your status shows Not Complete until you take the second attempt. After the second attempt it changes to Passed or Not Passed.

Which topics does the IdentityIQ Associate exam cover?

Seven topics: Foundational Concepts, Applications, Identity Modeling, Access Modeling, Governance, User-Driven Requests, and Provisioning. No weightings are published.

Is experience required before the IdentityIQ Associate exam?

SailPoint recommends one year of hands-on experience. It is a recommendation, and the exam is described as the final exam for the IdentityIQ Introduction and IdentityIQ Essentials courses.

Which IdentityIQ version does the exam target?

Neither the syllabus nor the SailPoint exam page names a product version for the exam, so none is stated here. Check the exam prep guide in your SailPoint account before you study version-specific features.

Is the IdentityIQ Associate exam harder than the IdentityIQ Engineer exam?

The Engineer exam is broader and faster, with 66 questions in 90 minutes and topics such as custom development and troubleshooting. The Associate has 43 questions in the same time and tests understanding.

Conclusion

The SailPoint Certified IdentityIQ Associate exam is 43 questions in 90 minutes with a Pass or Fail result, and the rule that shapes everything else is the enrolment: two attempts, 364 days, 300 USD. Register when you are nearly ready, not when you begin.

The seven topics make most sense as one flow. Applications bring accounts in, identities and roles give them meaning, and governance, requests and provisioning keep access correct afterwards. Learn that chain and the single statement questions become much easier to judge.

Sit the first attempt early enough that the second is a real option. Then read a set of sample statements, note every one you misjudge, and let that list decide what you study next.

What does the ZDXA exam look like on the day?

The ZDXA exam has 60 questions in 90 minutes with an 80 percent passing score and a price of 300 USD. It is scheduled through Pearson VUE. The syllabus splits the content into four sections, three of them weighted at 30 percent each and one at 10 percent, so almost all of the marks sit in day to day operations.

Do the arithmetic before you book. Eighty percent of 60 is 48, so you can miss 12 questions and still pass. Ninety minutes across 60 questions is 90 seconds each. That is a comfortable pace for a recall question and a tight one for a scenario that gives you three sets of metrics to compare.

Zscaler prices the exam at 300 USD or one credit per attempt. A failed attempt costs the same again, which is a good reason to treat the 80 percent bar as the real obstacle. Aim to score well above 48 in practice before you pay.

Which four domains does the ZDXA syllabus weight?

The ZDXA syllabus has four sections. Monitoring and Triaging Digital Experience, Operational Configuration and Optimization, and Troubleshooting and Root Cause Analysis each carry 30 percent. Administration and Operational Governance carries 10 percent. On a 60 question paper that is roughly 18 questions for each large section and 6 for the small one.

The question counts are arithmetic from the published weights, not a published split, so treat them as a planning guide. What matters is the shape. No single section can carry you, and no large section can be skipped. If you lose half the marks in any 30 percent section, you have already used 9 of your 12 misses.

The objectives are also written as verbs. They say explain, interpret, analyze, configure and execute. A good way to see how those verbs become questions is to work through a set of ZDXA sample questions early, before you have studied much. You will notice that many items describe a situation and ask for the next sensible action.

How does the ZDX Score turn a complaint into a number?

The ZDX Score rates digital experience on a scale from 0 to 100. The ZDXA syllabus expects you to explain that the score is derived from the lowest performing metric among Web Probes and Cloud Paths. In other words, the weakest measurement sets the score, so one bad link in the chain is never averaged away.

Why the weakest metric wins

Think about the finance analyst again. Her laptop is healthy and the application servers respond quickly, but her home internet provider is dropping packets. An average would hide that. A score based on the lowest performing metric shows it, because her experience is only as good as the worst part of the journey.

From one score to incident scope

The first objective after the score itself is scope. You are expected to interpret the Performance Dashboard and decide whether a problem affects:

• a single user
• a site
• a region
• most of the organisation

Scope decides the response. One user with a low score points to a device or a home network. A whole site points to the local network or its provider. A widespread drop on one application points to the application or the SaaS vendor. Getting scope right is what stops three teams investigating the same ticket.

What else sits in this domain

The monitoring section also covers how Zscaler Client Connector interacts with the ZDX cloud, comparing applications in the Application view, device health statistics, last mile and intermediate ISP performance, the basics of Copilot, the value of integrations such as call quality monitoring and ServiceNow, and the purpose of the ZDX API.

What is the difference between Web Probes and Cloud Path Probes?

In ZDX, a Web Probe tests the application and a Cloud Path Probe tests the network route to it. Web Probes report on availability and response, such as page fetch and DNS times. Cloud Path Probes report latency and packet loss hop by hop. The ZDXA syllabus asks you to define and differentiate both, along with Hosted Probes.

Synthetic tests and real sessions

The first three rows are synthetic. They send a test on a schedule whether or not anyone is working. Real User Monitoring is different, because it records browser based performance metrics from actual sessions. The syllabus wants you to configure both kinds for Predefined Applications and for Custom Applications that you define yourself.

The measurements are older than the product

Nothing about latency or loss is unique to Zscaler. The IETF defined a round-trip delay metric for IP networks in RFC 2681, published in 1999. If you understand what a round trip measures and why a lost packet matters, the Cloud Path view reads like a familiar trace with better labels.

One sample question captures the upkeep side of this domain. It asks why probe configurations need periodic review. The answer is that probes must still reflect where users are and which applications they use. A probe pointed at last year’s application measures nothing useful.

How does ZDX show whose fault the slowdown is?

ZDX separates a slow experience into three tiers: the device, the network and the application. The Troubleshooting and Root Cause Analysis section of ZDXA, worth 30 percent, tests whether you can read telemetry from each tier, find the one that is failing, and recommend a remediation or an escalation that the evidence supports.

Reading the three tiers

• Device: health statistics from the laptop, including local Wi-Fi quality.
• Network: path information across every hop, used to find bottlenecks through the entire path.
• Application: response from the service itself.

The logic is elimination. A sample question gives stable network performance with consistently high application response times and asks for the next action. The answer is to escalate to the application owner or the SaaS provider. The network has been cleared by data, so the network team can close its part of the ticket.

Diagnostics, AI and sharing

Beyond the dashboards, the syllabus lists diagnostics session output, Zscaler AI for faster resolution, predefined and customized reports, and organisation wide incident dashboards. It even includes sharing the current state of a page through a shareable URL. That last objective sounds minor, yet it is how evidence reaches another team intact.

Zscaler describes the product in the same terms on its ZDX product overview, which is a useful map of the features the exam names. Customers quoted there talk about time to resolution more than anything else.

“Our remote users are now more productive … ZDX provides full end-to-end visibility…reducing the time it takes to investigate and identify network issues”

The configuration section adds one more remediation skill. You may be asked about running approved remediation or optimization scripts at scale, including prerequisites, permissions and safety considerations, and then validating the outcome.

What does the 10 percent administration domain cover?

Administration and Operational Governance is the smallest ZDXA section at 10 percent, or about 6 of the 60 questions. It covers three tasks: assigning role based access control, configuring alert rules with their notification types, and configuring admin authentication settings for ZDX. It is short, specific and easy to score well on.

Role based access is tested through the principle of giving each person only what the job needs. The syllabus gives its own example: a help desk analyst receives Service Desk access, not Super Admin. Expect a scenario that names a role and asks which level of access fits.

Alert rules are about balance. One sample question asks how alerts should be tuned for proactive monitoring, and the correct answer is to tune thresholds so that sensitivity and noise are balanced. Alerting on every metric buries the real incident. Relying on defaults misses it.

Access control and alerting are common to every platform in this family. If you work with secure access service edge products from more than one vendor, this site’s Fortinet SASE exam article shows how another vendor tests the administrator role.

Who is the Zscaler ZDX certification meant for?

Zscaler designed the Digital Experience Administrator certification for security professionals, network engineers, security engineers and solutions architects. It is the final step in the Zscaler Digital Experience Operationalization learning path, known as EDU 310. There are no strict prerequisites, although Zscaler highly recommends completing that path and its self-guided lab first.

The scope is wider than the name suggests. According to Zscaler, the exam validates an understanding of the zero trust platform and proficiency with ZIA, ZPA and ZDX together. That makes sense in practice. User traffic reaches an application through Zscaler Internet Access or Zscaler Private Access, so you cannot read a path without knowing which service it crosses.

The certification outcomes listed on the Zscaler Academy page are practical ones:

• Understand, describe and configure ZDX components and functions.
• Navigate and analyze the ZDX dashboard, graphs and widgets.
• Pinpoint user experience issues more efficiently.
• Gain a unified view into user experiences in one portal.

In job terms, this suits the person who receives the escalated ticket. That may be a network operations engineer, a service desk lead, or an administrator who already runs a Zscaler tenant and has been asked to add experience monitoring to it.

How should you prepare for ZDXA?

Prepare for ZDXA by following the weights. Spend about 30 percent of your time on each of monitoring, configuration and troubleshooting, and 10 percent on administration. Work through the EDU 310 path and its lab, read the blueprint, then practise scenario questions until you can name the failing tier from the metrics alone.

1. Download the blueprint and the study guide from Zscaler, and mark every objective you cannot yet explain aloud.
2. Complete the ZDX Operationalization path and the self-guided lab, since hands-on time is what the verbs in the syllabus assume.
3. Learn the score first, including why the lowest performing metric sets it and how scope changes the response.
4. Configure one Predefined Application and one Custom Application, with a Web Probe and a Cloud Path Probe on each.
5. Practise triage on real or lab data by deciding device, network or application before you open the detailed view.
6. Finish with roles, alert rules and admin authentication, then sit timed sets of 60 questions in 90 minutes.

Zscaler keeps the registration steps, the practice exam, the exam day rules and the Pearson VUE scheduling guides on its ZDXA exam registration page. Read the rules before you schedule, not on the morning of the exam.

Path analysis is a network skill before it is a product skill. If hop by hop reasoning is new to you, the Palo Alto SD-WAN guide on this site covers path quality from the wide area network side and makes a useful companion read.

Book when your timed scores sit clearly above 48 out of 60. With 12 misses allowed and scenario questions that take longer than 90 seconds, a narrow practice pass is not enough margin.

Frequently Asked Questions

How many questions are on the ZDXA exam?

The ZDXA exam has 60 questions and a 90 minute time limit, which works out at 90 seconds per question.

What is the passing score for ZDXA?

The passing score is 80 percent. On 60 questions that means 48 correct answers, so you can miss 12.

How much does the Zscaler ZDXA exam cost?

The exam costs 300 USD. Zscaler lists the price as 300 USD or one credit per attempt, so a second attempt is charged again.

Are there prerequisites for the Zscaler Digital Experience Administrator exam?

There are no strict prerequisites. Zscaler highly recommends completing the ZDX Operationalization learning path, EDU 310, and its self-guided lab before you attempt the exam.

Which ZDXA domain carries the most weight?

Three domains tie at 30 percent each: monitoring and triage, operational configuration, and troubleshooting with root cause analysis. Administration and governance carries the remaining 10 percent.

What is the ZDX Score?

The ZDX Score is a rating from 0 to 100 for digital experience. The syllabus states it is derived from the lowest performing metric among Web Probes and Cloud Paths.

Where do you take the ZDXA exam?

The exam is scheduled through Pearson VUE. Zscaler publishes an account creation guide and a scheduling guide on its exam page.

Is the ZDXA exam available in languages other than English?

Zscaler lists English as the only available language for the Digital Experience Administrator exam.

Does the ZDXA exam cover ZIA and ZPA as well as ZDX?

Yes. Zscaler says the exam validates an understanding of its zero trust platform and proficiency with ZIA, ZPA and ZDX, because user traffic reaches applications through those services.

Conclusion

The slow expenses app from the opening is not a trick scenario. It is the daily work the Zscaler Digital Experience Administrator exam measures: read the score, set the scope, check the device, follow the path, test the application, and hand the ticket to the team the evidence points to.

The numbers are simple. ZDXA is 60 questions in 90 minutes at an 80 percent passing score for 300 USD, with three domains at 30 percent and one at 10 percent. The balance tells you how to study, because no section is large enough to rescue a weak one.

Start with the blueprint and the lab, build your own probes, and practise naming the failing tier before you look at the answer. When your timed scores hold comfortably above 48, schedule the exam.

What is the OCEB 2 certification, and where does Fundamental fit?

OCEB 2, the OMG Certified Expert in BPM 2, is the Object Management Group’s business process management certification track. It has three exams: Fundamental, Intermediate and Advanced. Fundamental has no prerequisite of its own, and it is the required first step before either higher level can be taken.

The three levels describe three different jobs. OMG positions a Fundamental holder as someone who can work productively on a BPMN project team. Intermediate moves to designing and running a BPM project of moderate scope, and Advanced is aimed at people who lead large, enterprise-wide BPM programmes and advise senior management.

Because Fundamental gates the other two, every OCEB 2 holder has passed it. OMG’s BPM certification page carries the exam information sheet for each level, and it is worth reading the Fundamental one before anything else.

What are the OCEB 2 Fundamental exam facts?

OMG-OCEB2-FUND100 is a 90 question multiple choice exam. Candidates in native English-speaking countries get 90 minutes and everyone else gets 120. You need 62 correct answers to pass, which OMG also expresses as 69 percent. The fee is 350 US dollars plus local taxes, and the exam is booked through Pearson VUE.

Two numbers in that table shape everything else. First, 62 of 90 means you can afford 28 wrong answers, a reasonable margin until you notice how the marks are spread. Second, the image questions are real: some items show you a diagram rather than describe one, so recognising BPMN symbols instantly matters as much as knowing their definitions.

The extra 30 minutes outside native English-speaking countries is applied after you order the exam. OMG confirms it by email, so check that message rather than assuming the longer time is on your booking.

How are the marks split between BPMN and everything else?

BPMN carries 40 percent of OCEB 2 Fundamental across two topics, concepts at 24 percent and modeling skills at 16. The remaining 60 percent spreads over five topics: business motivation at 16, governance and metrics frameworks at 15, process fundamentals at 11, BPM fundamentals at 10 and business goals at 8.

The question counts are approximations from the weightings, not published figures, but they make the risk visible. A candidate who models BPMN every day and ignores everything else can bank perhaps 36 questions at best, which is well short of 62. The pass mark needs about 26 more, and they can only come from the business side.

The weightings and topic scopes are identical on OMG’s own information sheet and on the OCEB 2 Fundamental syllabus, so you can plan against them with confidence. Treat the list above as your study budget, not just a description of the paper.

What do the two BPMN topics actually test?

The two BPMN topics split knowing the notation from using it. Business Process Modeling Concepts, at 24 percent, tests the definition and use of every element in BPMN 2.0.2’s descriptive and analytic conformance subclasses. Business Process Modeling Skills, at 16 percent, gives you short scenarios as a diagram or a few sentences and asks you to reason about them.

Concepts: the element vocabulary

The concepts topic is the notation itself: events, activities, gateways, sequence and message flows, pools, lanes and the grouping elements that organise a model. OMG’s information sheet points to specific parts of the specification, including the conformance tables in chapter 2 and the basic and extended modeling element tables in chapter 7, with the focus on Process and Collaboration diagrams.

One boundary saves real time. Element attributes are explicitly not examined, so you need to know what an element is for and how it behaves, not every property it can carry. The analytic subclass is still larger than what most teams use day to day, so expect questions on elements you rarely draw.

Skills: reading a situation

The skills topic is closer to real work. A question might describe a hand-off between two departments and ask which construct models it correctly, or show a diagram and ask what happens when a particular event fires. This is where the image-based questions concentrate.

“It is intended to be used directly by the stakeholders who design, manage and realize business processes, but at the same time be precise enough to allow BPMN diagrams to be translated into software process components.”

That dual purpose explains the question style. The exam expects diagrams a business reader can follow and that are still precise, and the BPMN 2.0.2 specification is the reference that settles any argument about what a symbol means.

Why is the Business Motivation Model worth 16 percent?

The Business Motivation Model, BMM 1.3, is worth 16 percent because it is how OMG expects a process professional to connect work to intent. The topic covers vision, goals, objectives, mission, strategies, tactics, and the difference between ends and means. It carries exactly as much weight as the BPMN skills topic.

BMM is the part of the paper that answers the operations director from the workshop. It gives a precise vocabulary for why a process exists, and the exam uses that precision. Most questions turn on distinctions that everyday business language blurs.

• A vision is an overall image of what the organisation wants to be or become, while a mission describes its ongoing operational activity.
• A goal tends to be longer term and defined qualitatively, while an objective is a time-targeted, measurable step toward a goal.
• Ends are the vision and the desired results, meaning goals and objectives; means include the mission and the courses of action.
• Strategies generally support goals, while tactics implement strategies and generally support objectives.

Candidates who come from project work often treat goal and objective as synonyms, and that habit costs marks here. OMG’s information sheet points to chapters 1, 7 and 8 of the BMM specification, which define the core elements, so read those rather than a summary.

Nine frameworks in 15 percent: how deep do you go?

The Process Quality, Governance and Metrics Frameworks topic names nine frameworks and gives them 15 percent together, roughly 13 or 14 questions. That is about one or two questions per framework, so the exam tests recognition and purpose: what each framework is for and when an organisation would use it, not detailed application.

BPMM deserves slightly more attention than the rest, because it is OMG’s own standard and the information sheet points to specific chapters of it. For the two regulatory entries, knowing the purpose is enough. The Basel Committee’s Basel II framework is long, and the exam asks why such rules shape process design, not what the capital ratios are.

The business half: processes, BPM and goals

Three topics worth 29 percent together cover how a business and its processes work. Business process fundamentals takes 11 percent, BPM fundamentals takes 10, and business goals and objectives takes 8. They are the easiest marks to underrate, because the material looks like common sense until the questions ask for precise distinctions.

Process and BPM fundamentals

The process topic covers discovering processes, their characteristics, the difference between an As-Is and a To-Be model, levels of process modeling, and tying processes to goals. The BPM topic contrasts a functional organisation with a process-centric one, and covers styles of process management, stakeholder roles and responsibilities, and the tools that support BPM.

Business goals and objectives

The 8 percent business topic is the one that surprises technical candidates. It covers strategy, planning and goal-setting, plus project management, marketing, staffing and finance at an introductory level. OMG’s recommended reading for it includes two general MBA primers, which shows the intended depth: broad literacy, not specialist knowledge.

This business literacy is also where most candidates arrive underprepared. The site’s OCEB2 FUND100 resource page collects the Fundamental exam material in one place, and it is worth reading against the business half of the syllabus before you book.

Who should start with OCEB 2 Fundamental?

OCEB 2 Fundamental suits business analysts, process analysts, BPM team members and anyone who models or improves processes and wants a vendor-neutral credential. It has no prerequisites. It suits people whose work spans both the diagram and the business case, because that is how the exam is weighted.

Three profiles tend to find it a good fit:

• Business analysts who already draw process maps and want a standard notation and a recognised credential behind them.
• Process improvement practitioners from a Six Sigma or quality background, who will find the frameworks topic familiar and need to build up the BPMN side.
• Technical staff who implement workflows in a BPM or automation tool and need to understand the business models those workflows serve.

“The BPM certifications helped me gain a greater knowledge of business process notation, how to accurately model processes and how to deal with various scenarios while modeling”

If your work is purely technical and never touches goals, stakeholders or governance, expect the business topics to take longer than the BPMN ones. That is not a reason to skip the exam, but it should change how you plan your time.

How do booking, languages, retakes and validity work?

You book OMG-OCEB2-FUND100 through a Pearson VUE account, at a test centre or online. The exam is available in English and Japanese. Cancelling more than 24 hours before the appointment brings a full refund. A failed attempt’s score report includes a 20 percent discount code for a retake, and the certification lasts three years.

Pearson VUE’s OMG exam booking page now lists the credential as the EDMA-Certified Expert in Business Process Management 2, under the EDM Association, the wider body that OMG belongs to. OMG’s own certification page and information sheet still use the OMG name and publish the syllabus described here, so study from those. If you choose online delivery, run Pearson VUE’s system test on the computer you will use before you book.

Validity matters more than most candidates expect. OMG states that certifications expire three years after the exam date, and that passing the same or a higher level exam extends them. In practice, that means moving on to Intermediate within three years also keeps the credential current. Passing candidates receive a Credly digital credential, usually within hours.

How should you prepare for OMG-OCEB2-FUND100?

Prepare in proportion to the weightings: roughly two fifths of your time on BPMN and three fifths on business motivation, frameworks and business fundamentals. Work from the primary specifications OMG names, practise reading diagrams quickly, and test yourself on scenario questions before booking.

1. Read the Fundamental information sheet and list every specification chapter and book it names, so your reading follows the exam rather than a general BPM course.
2. Learn the BPMN elements in the descriptive and analytic conformance subclasses until you can name any symbol on sight.
3. Model three or four real processes you know in BPMN, including at least one collaboration with two pools.
4. Study BMM chapters 1, 7 and 8 and practise sorting statements into ends and means.
5. Build a one-line summary of each of the nine frameworks and what it is used for.
6. Cover the business fundamentals with an introductory business text, as OMG’s own reading list suggests.
7. Work timed scenario questions to check your pace against 90 questions in 90 minutes.

For the process side, the textbook Fundamentals of Business Process Management is useful. Its authors are Dumas, La Rosa, Mendling and Reijers, and OMG’s information sheet lists the book’s early chapters on process identification and modeling.

Once Fundamental is done, the next step on the same track is covered in the site’s OCEB 2 Intermediate overview, which shows how BMM and governance deepen at the second level.

Frequently Asked Questions

What is the OCEB 2 certification?

OCEB 2, the OMG Certified Expert in BPM 2, is the Object Management Group’s business process management certification. It has three levels, Fundamental, Intermediate and Advanced, and every candidate starts with Fundamental.

How many questions are on the OCEB 2 Fundamental exam?

Ninety multiple choice questions, some presented as text and some as images such as BPMN diagrams.

What is the passing score for OMG-OCEB2-FUND100?

You need 62 correct answers out of 90. OMG also expresses this as 69 percent.

How long is the exam?

Ninety minutes in native English-speaking countries and 120 minutes everywhere else. OMG confirms the extra time by email after you order the exam.

Are there prerequisites for OCEB 2 Fundamental?

No. Fundamental has no prerequisites, but it is itself the prerequisite for the Intermediate and Advanced exams.

How much of the exam is BPMN?

Forty percent. Business Process Modeling Concepts is 24 percent and Business Process Modeling Skills is 16 percent. The other 60 percent covers business motivation, frameworks and business fundamentals.

How much does the exam cost?

The fee is 350 US dollars plus taxes, or the regional currency equivalent, paid when you book through Pearson VUE.

How long does the certification last?

Three years from the exam date. Passing the same or a higher level exam extends it.

Which languages is the exam offered in?

English and Japanese. Translation apps are not allowed during the exam.

Conclusion

The OCEB 2 certification starts with one exam for everyone: OMG-OCEB2-FUND100, with 90 questions, 62 correct needed to pass, 350 US dollars, and 90 or 120 minutes depending on where you sit it. It has no prerequisites, and it is the gate to both higher levels.

The most useful thing to know before you start is the split. BPMN is 40 percent of the marks, and even a flawless modeler cannot pass on BPMN alone. Business motivation, the nine frameworks and the business fundamentals decide the result, so plan your preparation around them as much as around the notation.

Start with the official weightings and the specification chapters OMG names, then practise on scenarios until reading a diagram feels as natural as drawing one.

What does D-AA-OP-23 actually weight?

Six topics, all published with weightings, and all of them sit between 12 and 23 percent. There is no dominant block and no trivial one. Social Network Analysis leads at 23 percent, Natural Language Processing follows at 20, and the remaining four split the rest almost evenly.

A flat distribution is harder to prepare for than a lopsided one, which is the opposite of what most people assume. When one topic carries 40 percent you know where to concentrate. When the smallest topic is still roughly seven questions out of 60, there is nowhere safe to be weak, and the cost of skipping anything is immediate.

It also means the exam resists the usual triage. You cannot decide that visualisation is a minor concern and spend the time on Spark instead, because visualisation is 12 percent and Spark is part of a topic worth 15.

What are the exam facts, and what does Dell not publish?

D-AA-OP-23 is 60 questions in 90 minutes at a 63 percent pass mark, priced at 230 USD and delivered through Pearson VUE. Sixty three percent of 60 is 38 correct answers, which leaves room for 22 wrong ones across six topics.

Now the honest part. Every figure above comes from the exam catalogue, and none of it could be confirmed a second time against Dell. Dell publishes its official exam description as a PDF rather than a web page, and its certification overview pages return no readable content.

That is not a reason to distrust the numbers, but it is a reason to check them yourself at the point of booking. Treat the table as the catalogue’s account rather than the vendor’s, and confirm the price and duration on the Pearson VUE screen before you pay.

One naming point that catches people out: the code reads like “advanced analytics”, and Dell’s own document filename uses that phrase, but the published exam name is Dell Data Science Optimize. Searching the name and searching the code will not always land you in the same place.

Why is graph theory the biggest topic?

Because Dell built this credential around the analytical problems that relationships create, and relationships are graphs. The topic covers SNA and graph theory, communities, and network problems and the tools that address them, and at 23 percent it is roughly 14 questions.

Graph thinking is a genuinely different mode from the tabular reasoning most data science study teaches. A table asks what a row contains; a graph asks what connects to what, how tightly, and which groupings emerge from the connections rather than from a label somebody assigned. Community detection is the clearest example: the groups are discovered from structure, not read from a field.

“Network problems” covers the recognisable tasks: finding the shortest path between two nodes, identifying which nodes are central or influential, spotting bridges whose removal fragments the network, and measuring how tightly clustered a neighbourhood is. Each has a standard measure behind it, and the exam expects you to match the problem to the right one rather than to derive anything.

If this material is unfamiliar, the general reference on social network analysis is a reasonable orientation before you touch exam-specific material, because the vocabulary is the barrier rather than the mathematics.

What does the 20 percent NLP topic cover?

Three objectives: natural language processing and the four main categories of ambiguity, text preprocessing, and language modeling. Twenty percent is around 12 questions, making it the second-largest topic and the other half of the exam’s applied-analytics core.

The ambiguity objective is the one to take literally. The blueprint names four categories, so the exam expects you to distinguish them rather than to discuss ambiguity in general. Lexical ambiguity is a word with more than one meaning; syntactic ambiguity is a sentence that parses more than one way; semantic ambiguity is a reading that remains unclear even once parsed; and pragmatic ambiguity depends on context outside the sentence. Being able to classify an example is exactly the kind of thing a multiple-choice paper can test cleanly.

Text preprocessing is the practical half: tokenisation, normalisation, stop word handling, stemming and lemmatisation. The distinction between stemming and lemmatisation is a standard question because the two produce different outputs for the same input and suit different purposes.

Language modeling completes the topic. Given the vintage of the rest of the blueprint, expect the classical treatment, probability over sequences and n-gram style reasoning, rather than transformer architecture. Prepare for the statistical foundation rather than for current large language model practice.

The Hadoop half, and how current it is

Two topics at 15 percent each, 30 percent together, cover the distributed data stack: the MapReduce framework and its Hadoop implementation, HDFS and YARN in the first; Pig, Hive, NoSQL, HBase and Spark in the second. It is worth being straightforward about what that represents.

This is the classical big-data stack. MapReduce as a programming model and Pig as a scripting layer are no longer how most new analytical workloads are built, and a candidate whose day job is on a modern cloud warehouse may not have touched either. The technologies are stewarded by the Apache Hadoop project and remain in production in many large estates, so the material is real, but it describes an earlier generation of practice.

That matters for two decisions. If you work in a Hadoop estate, 30 percent of this paper is your daily work and the credential is well aimed at you. If you do not, this is 18 questions of unfamiliar ground that you will have to learn deliberately, and you should price that into whether the exam is worth sitting.

The examinable depth is conceptual rather than operational. You are asked what MapReduce does and how it maps onto Hadoop, what HDFS and YARN are responsible for, and which ecosystem component suits which job, rather than to write a job or tune a cluster.

Theory, methods and visualisation

The last two topics take 27 percent between them and are the most conventional part of the paper. Data Science Theory and Methods at 15 percent names simulation, random forests, and multinomial logistic regression with maximum entropy. Data Visualization at 12 percent covers perception and visualization, and visualization of multivariate data.

The statistics topic is unusually specific for a vendor exam. Naming multinomial logistic regression and maximum entropy together is a signal in itself, since the two are closely related formulations of the same idea, and a question that expects you to know they are connected is a different question from one that treats them as separate techniques. Random forests bring ensemble reasoning, and simulation covers generating data to reason about a process you cannot observe directly.

Visualisation is the smallest topic and the one most often dismissed, which is a mistake at 12 percent, roughly seven questions. Note the framing: perception comes first. The objective is about how people read a chart, pre-attentive attributes, and why certain encodings mislead, rather than about which library draws it.

Multivariate visualisation is the more technical half, covering how to show more than two or three dimensions at once without producing something unreadable. It also connects back to the graph topic, since network visualisation is one of the harder multivariate problems on the paper.

How does this compare with the other Dell data exams?

Dell runs several data credentials and they are easy to confuse because the codes look alike. D-AA-OP-23 is the data science Optimize exam. D-DS-FN-23 is the foundations exam, a level below. D-DS-OP-23 is the Optimize exam on the data engineering track, a sibling rather than a successor.

The split matters when choosing. The data engineering track is about building and running the pipelines; this one is about analysing what comes out of them, which is why graph theory, NLP and statistics take 58 percent of it while infrastructure takes 30. A reader who wants the pipeline side should look at the data engineering Optimize route instead.

Foundations against Optimize is a seniority question rather than a subject one. If the topic list here reads as mostly unfamiliar, the foundations exam is the better entry point, and the Optimize paper will still be there afterwards.

There is one more thing worth saying about the family as a whole. The blueprint describes the data scientist role as it was understood before the split into data engineering and machine learning specialisms, which is why one exam spans Hadoop, NLP, graph theory and visualisation. Whether that breadth is a strength depends entirely on the job you are aiming at. An earlier look at the same credential from the career angle is available in the site’s D-AA-OP-23 career guide.

How do you prepare for a flat blueprint?

By covering everything and ranking by unfamiliarity rather than by weight. With no topic above 23 percent and none below 12, the usual tactic of concentrating on the big block does not apply, and the deciding factor becomes which topics you have never worked with.

1. Rate yourself honestly against all six topics before planning anything, because the plan follows the gaps rather than the weights.
2. Start with Social Network Analysis if graph work is new to you, since it is the largest topic and the one least likely to be covered by your day job.
3. Learn the four categories of ambiguity as a classification exercise, with an example of each you came up with yourself.
4. Separate stemming from lemmatisation with a worked example, since the distinction is a standard question.
5. Cover the Hadoop topics conceptually: what each component is responsible for and which job suits which tool, not how to operate a cluster.
6. Connect multinomial logistic regression to maximum entropy rather than learning them as two unrelated techniques.
7. Give visualisation one focused session on perception and multivariate encoding, which is enough for 12 percent.
8. Work through the D-AA-OP-23 sample questions to see how each topic is actually asked, since the framing varies sharply between them.

One planning note on the margin. Thirty eight correct answers from 60 leaves 22 wrong, which sounds generous until you notice it is spread across six topics. Being genuinely weak in two of them consumes most of that allowance before you have misread a single question elsewhere.

Frequently Asked Questions

How many questions are on the D-AA-OP-23 exam?

Sixty questions in 90 minutes, which is about 90 seconds each.

What is the passing score?

Sixty three percent, which works out at 38 correct answers from 60.

What is the largest topic on the exam?

Social Network Analysis at 23 percent, covering graph theory, communities, and network problems and tools. It is larger than MapReduce and the Hadoop ecosystem combined.

What are the six topics and their weightings?

Social Network Analysis at 23 percent, Natural Language Processing at 20, MapReduce at 15, Hadoop Ecosystem and NoSQL at 15, Data Science Theory and Methods at 15, and Data Visualization at 12.

How much does the exam cost?

Two hundred and thirty US dollars as listed in the exam catalogue. Dell publishes no readable price page, so confirm the figure when you book through Pearson VUE.

Is D-AA-OP-23 the same as D-DS-OP-23?

No. D-AA-OP-23 is the data science Optimize exam and D-DS-OP-23 is the Optimize exam on the data engineering track. They are siblings covering different work, not two versions of one exam.

Does the exam cover modern large language models?

The NLP topic names ambiguity, text preprocessing and language modeling. Given the vintage of the surrounding blueprint, prepare for the classical statistical treatment rather than transformer architecture.

How much Hadoop knowledge do I need?

Thirty percent of the paper is MapReduce and the Hadoop ecosystem, assessed conceptually: what each component does and which suits which job, rather than cluster operations.

How long is the certification valid?

No validity period is published anywhere that can be read, so this guide does not state one. Check your certification record after passing.

Is there an easier Dell data exam to start with?

D-DS-FN-23, the data science foundations exam, sits a level below and is the better entry point if most of this topic list is unfamiliar.

Conclusion

D-AA-OP-23 is a breadth exam with an unexpected centre of gravity. Sixty questions in 90 minutes, 63 percent to pass, 230 USD, and six topics in which graph theory is the largest and visualisation the smallest.

Plan by unfamiliarity rather than by weight, because a flat blueprint offers no safe area to concentrate on. Social Network Analysis and the classical NLP material are where most candidates have the furthest to travel, and the Hadoop half is either your daily work or 18 questions of deliberate study, depending entirely on the estate you work in.

Confirm the figures when you book. Dell publishes its exam description only as a document this kind of check cannot read, so everything above is the catalogue’s account rather than the vendor’s, and the booking screen is where you verify it.

What does GSOC examine, and how is it different from GSOM?

GSOC examines running the console. Triage, log interpretation, traffic and protocol analysis, endpoint attacks, and the systems a SOC runs on. GSOM, the GIAC Security Operations Manager credential, examines running the team. They are separate exams for separate jobs, and they are routinely confused with one another.

The confusion is not the reader’s fault. Search data shows people looking for a SOC manager course under the GSOC name, and GIAC’s own GSOC page currently carries an instructor testimonial that talks about GSOM rather than GSOC. If you want leadership, process frameworks and team structure, GSOM is the credential. If you want the analytical work, this is the one.

Within that scope GSOC is broad rather than deep. Ten objectives cover analytic design and tuning, blue team defence concepts, endpoint defence, HTTPS analysis, interpreting events, intrusion triage, network traffic analysis, operational improvement, protocol attacks, and SOC management systems. GIAC frames the outcome as being able to defend an enterprise using blue-team incident response tools and techniques, and to help run a security operations centre.

What are the GSOC exam facts?

GSOC is one proctored exam of 75 questions in 120 minutes, with a minimum passing score of 67 percent. It costs 999 USD and is associated with the SEC450 SOC analyst course. Ten objectives are published, and GIAC attaches no weighting to any of them.

Two of those rows are easy to skim past and expensive to miss. Proctoring is mandatory and comes in two forms, remote or onsite, which is a scheduling decision rather than a formality. And the attempt expires: you have 120 days from the moment GIAC activates it in your account, so buying early and preparing slowly has a deadline attached. Both are stated on the official GSOC page.

The pass mark deserves a note as well. GIAC set 67 percent through a psychometric standard-setting study, applying to exam versions released on or after 28 August 2021, and it says it reviews specifications periodically. The practical advice GIAC itself gives is to confirm the format and pass mark for your own attempt in your account rather than trusting any third-party figure, including this one.

Every figure above was checked against GIAC directly and matches the exam catalogue exactly, which is not always the case. The one field GIAC does not publish on that page is the price, so confirm 999 USD at the point of purchase.

What does 999 USD actually buy?

One proctored attempt, and nothing else. No course, no lab, no practice material beyond what you buy separately. At roughly three times the price of a mainstream vendor-neutral security exam, the cost is the single most common reason people stop and reconsider, and search data shows them asking about it directly.

The number makes more sense once you see how GIAC certifications are normally bought. The exam is tied to the SEC450 course, and most candidates take the two together as a package funded by an employer, where the attempt is a component of a much larger training spend rather than a standalone purchase. Bought on its own, 999 USD is the price of the assessment alone.

That leads to the honest framing. If your employer is funding SEC450, the certification attempt is the natural end of it and the price is not really your decision. If you are paying yourself, compare it against what you are actually buying: a recognised blue-team credential assessed at analyst depth, versus cheaper credentials that cover similar ground with less specificity. Neither answer is wrong, but they are different purchases.

One practical consequence of the price: there is little room for a casual first attempt. The 120-day window and the cost together argue for preparing before activation rather than activating and then starting to study.

How do the ten objectives map to a shift?

Almost exactly. Rather than a pyramid with one dominant domain, the objectives are ten roughly parallel competencies that together describe analytical SOC work. With 75 questions across ten areas, that is about seven or eight questions each, and no area is small enough to write off.

Read top to bottom that is a shift: understand the mission, build and tune the detections, read what they produce, work out what the endpoint did, decide how urgent it is, and then widen out to the network and the protocols carrying the activity. The last two rows are the infrastructure and the improvement loop around all of it.

Because nothing is weighted, the only sensible planning method is coverage. Work through a set of GSOC sample questions early and treat the result as a map of which objectives you have never really touched, rather than as a score.

Detection, endpoints and interpreting events

Four objectives sit at the centre of the exam and of the job: analytic design and tuning, interpreting events, endpoint defence, and intrusion triage. They are the ones where experience shows most clearly, and where a candidate who has only read about SOC work will come unstuck.

Analytics are designed, not just consumed

The wording matters here. The objective expects you to design, enrich, test, share and improve analytics, not merely to respond to alerts somebody else wrote. Enrichment and testing are the parts most often skipped in practice: an analytic that has never been tested against a known-bad sample is a hypothesis, and one without enrichment produces alerts nobody can action.

Events, logs and files

Interpreting events covers common Windows and Linux events, how they are represented, where they live in logs, and how to extract information from potentially malicious files. Know which Windows event identifiers matter and what their Linux equivalents look like, because questions will describe a log line rather than name the event for you.

Endpoints and triage

Endpoint defence pairs attack knowledge with logging knowledge, which is the combination that lets you tell what actually happened after the fact. Intrusion triage then adds the part most technical material leaves out: prioritising by organisational factors. The same technical indicator on a test box and on a payment system are not the same incident, and the exam expects you to say so. The CIS Controls are a useful reference for the baseline a SOC is usually monitoring against.

What do the traffic and protocol objectives expect?

A working understanding of how enterprise traffic is monitored and how common protocols are abused, rather than packet-level mastery. GIAC frames network traffic analysis as high-level architecture and monitoring, reviewing traffic, and identifying and protecting against DNS attacks specifically.

DNS is singled out for good reason. It is the protocol most reliably present, least reliably inspected, and most often used for command and control or exfiltration. Expect to recognise the shapes that matter: queries to domains nobody has resolved before, request volumes that do not match a human, and responses carrying more data than a name lookup should.

The protocol objective names six by title: SMTP, SMB, DHCP, ICMP, FTP and SSH. For each, know what it is for, how an attacker uses it, and what a defence looks like. SMB and SSH tend to appear as lateral movement, SMTP as delivery, ICMP and DNS as covert channels, DHCP as a foothold for interception, and FTP as plaintext credential exposure.

HTTPS analysis completes the set, covering attacks carried over web traffic and the defences against them. The practical difficulty is that the traffic is encrypted, so much of the skill is reasoning from what remains visible: destinations, timing, volumes and certificate details rather than payloads.

Operational improvement, the newest objective

This is the objective that dates the exam to the current era of SOC work, and the one most likely to be under-prepared. It asks how blue team efficiency is improved through automation of tasks, orchestration of response, and training, which is a management-adjacent competency assessed at analyst level.

Automation and orchestration are not the same thing, and the distinction is examinable. Automating a task removes manual effort from one step, such as enriching an alert with reputation data. Orchestrating a response coordinates several systems and decisions into a defined workflow. The first saves minutes; the second changes how the team handles a class of incident.

Training as an examinable outcome surprises people, but it follows from the rest: a SOC improves when its analysts improve, and deciding what the team needs to learn is part of operating one. This is also where GSOC comes closest to GSOM without crossing into it, since the analyst is asked to improve the work rather than to lead the people. Frameworks such as the FIRST CSIRT services framework set out the wider service model this improvement loop sits inside.

SOC management systems sit alongside it, covering the role and function of incident management systems, threat intelligence platforms and SIEMs. The examinable knowledge is what each type of system is for and how it fits with the others, not how to operate any particular product.

Who should take GSOC?

Working blue-team practitioners, and GIAC is unusually specific about it. Its own list covers security analysts, incident investigators, security engineers and architects, technical security managers, SOC managers wanting a technical perspective on improving analysis quality and reducing turnover, and people starting a career on the blue team.

That last group needs a caveat the list does not carry. Starting on the blue team is a reasonable time to aim at GSOC, but ten objectives at analyst depth and a 999 USD attempt make it an expensive first credential. The people who get most from it are those already sitting shifts who want the breadth formalised, and engineers or architects who build for a SOC without having worked in one.

It fits poorly in two cases. If you want to lead a security operations team, GSOM is the credential and this one will answer a different question. And if your interest is offensive work, almost nothing here transfers: the entire paper is written from the defender’s side of the console. Analysts wanting to go deeper on intrusion detection specifically may find the GCIA intrusion analyst route a closer match to that narrower interest.

How should you prepare?

Cover all ten objectives before deepening any of them, and build the index you will actually use. With no weightings published and roughly seven or eight questions per objective, a gap in one area costs more than extra depth in another can recover.

1. List the ten objectives and rate yourself honestly against each, because the list is the only study plan GIAC provides.
2. Work a set of sample questions early and treat the output as a coverage map rather than a score.
3. Spend your first sessions on the objectives you rated lowest, not on the ones you enjoy.
4. Practise reading raw log lines from Windows and Linux until you can name the event without being told what it is.
5. Learn the six named protocols as attack surfaces, one at a time, with a defence for each.
6. Separate automation from orchestration in your own words, since the distinction is examinable and easy to blur.
7. Decide your proctoring route and book it before activating the attempt, because the 120-day window starts on activation.

If you are coming from threat intelligence rather than operations, invert the emphasis. The analytic design, triage and management-systems objectives will feel familiar, while endpoint logging and protocol-level analysis will not, and those are where the questions will find you. A view of the adjacent intelligence discipline appears in the GCTI objectives breakdown.

Frequently Asked Questions

How many questions are on the GSOC exam?

Seventy five questions in 120 minutes, which is about 96 seconds each.

What is the passing score for GSOC?

Sixty seven percent minimum. GIAC set that figure through a psychometric standard-setting study for exam versions released on or after 28 August 2021.

How much does GSOC cost?

Nine hundred and ninety nine US dollars for the certification attempt. GIAC does not publish a price on its own certification page, so confirm the figure at the point of purchase.

Are the ten objectives weighted?

No. GIAC publishes no weightings for GSOC, so plan by objective rather than by percentage. Seventy five questions across ten objectives averages seven or eight each.

What is the difference between GSOC and GSOM?

GSOC is the analyst credential covering triage, log interpretation and traffic analysis. GSOM is the SOC manager credential covering leadership, process and team structure. They are separate exams for separate roles.

Does GSOC mean Google Summer of Code?

That acronym is used for Google Summer of Code and for a Global Security Operations Centre as well, but in the certification context GSOC is GIAC Security Operations Certified.

How is the exam delivered?

As one web-based proctored exam. Proctoring is mandatory and available either remotely through ProctorU or onsite through Pearson VUE.

How long do I have to sit it after buying?

One hundred and twenty days from the date GIAC activates the attempt in your account.

Do I need the SEC450 course to pass?

The course is the associated training and most candidates take the two together, usually employer funded, but the certification attempt is sold as its own product.

How long is the certification valid?

GIAC does not publish a renewal period on the GSOC certification page, so this guide states none. Check the renewal requirements in your GIAC account.

Conclusion

GSOC is the analyst’s blue-team exam, not the manager’s. Seventy five questions, 120 minutes, 67 percent to pass, 999 USD, and ten objectives that GIAC declines to weight because they are roughly parallel parts of the same job.

Plan for coverage rather than depth. Seven or eight questions per objective means a skipped area costs more than extra study in a strong one can win back, and the objectives most often neglected are operational improvement and protocol-level analysis rather than the triage work people practise naturally.

Settle the practical questions before you activate anything: which proctoring route you want, and whether the attempt is being funded alongside the course or bought on its own. The 120-day window starts when GIAC activates it, not when you feel ready, and at this price that is the detail worth getting right first.

What does Oracle Accounting Hub Cloud actually do?

It accounts for transactions that originate outside Oracle. A loan servicing platform, a policy administration system, a billing engine or a trading application produces business events; Accounting Hub registers that application as a source system, applies configurable rules to each event, and posts the resulting journal entries into the Oracle general ledger.

That is the difference between this credential and every other Oracle Financials paper. Payables, Receivables and the rest examine subledgers that generate their own transactions and come with their own accounting already built. Accounting Hub ships with no accounting at all. You build it, for data the product has never seen, which is why the blueprint spends so much of its attention on rules rather than on screens.

The practical value is that one transaction can produce several accounting representations at once. The same loan payment can be booked one way for statutory reporting and another for management reporting, from a single event, because the rules are defined per ledger. Organisations reporting under more than one framework need exactly that, and the IFRS accounting standards are a common reason a second representation exists in the first place.

One naming note that trips people up in search results and in job adverts. The product was Fusion Accounting Hub, and implementers still call it FAH. It is the same thing. Oracle’s current material sits under Oracle Cloud Financials, and the destination for everything the engine produces is the ordinary general ledger any accountant would recognise.

What are the 1Z0-1060-26 exam facts?

1Z0-1060-26 runs 90 minutes with 36 multiple choice questions at a 68 percent pass mark, which is 25 correct answers. It costs 245 USD, and passing grants the Oracle Accounting Hub Cloud 2026 Implementation Professional credential. Nine syllabus areas are published, with no weighting attached to any of them.

Two honest caveats about that table. The figures come from the exam catalogue rather than from a page Oracle publishes openly: Oracle’s own certification pages now resolve into an application shell that returns no readable specification, so nothing above could be confirmed a second time against the vendor. Confirm the price and the duration on the booking screen before you pay.

The second caveat concerns the code itself. The suffix rolls annually, so 1Z0-1060-24 and 1Z0-1060-25 were the same exam in earlier releases and still surface in search results. The current paper is the 26 release. If a study resource names an older suffix, most of its content will still apply, but the release-specific material at the end of the blueprint will not.

Nothing is published anywhere readable about a validity period, a retake window or a prerequisite, so this guide states none. That silence is itself worth knowing before you plan around an assumption.

Why do 36 questions change how you prepare?

Because the margin is thin and the coverage is wide. Nine areas across 36 questions averages four questions per area, and 68 percent leaves room for 11 wrong answers. Skip one area entirely and you have spent a third of your margin before you have misread a single question in the areas you did study.

Compare that with a 60 or 70 question paper at a similar pass mark, where a weak area can be carried by strength elsewhere. Here the arithmetic works the other way. Two shaky areas is a fail even if everything else is solid, which makes breadth the priority and depth the luxury.

It also changes what practice is for. With four questions per area, a practice set is not primarily a score check; it is a coverage check. The useful output is the list of areas the questions touched that you could not answer at all, and the fastest way to produce that list is to work through a set of 1Z0-1060-26 sample questions early rather than as a final rehearsal.

Ninety minutes for 36 questions is 150 seconds each, which is generous by Oracle standards and reflects the kind of question a configuration exam asks. Expect scenarios that describe a requirement and ask which component delivers it, rather than recall of a menu path.

How do you plan across nine unweighted areas?

You plan by structure, not by percentage, because Oracle publishes no weightings for this exam and the catalogue does not invent any. What the blueprint does reveal is its own shape: some areas list a single objective, while one lists nine separate component types. That imbalance is the closest thing to a weighting signal available.

Read that table as a sequence rather than a list. Areas three, four, five and six describe one continuous journey: understand what the source system produces, register it, define how its events become journal entries, then move the data and deal with what breaks. Studying them in that order costs nothing extra and makes each one explain the next.

Areas one, two, seven, eight and nine are context around that spine. They are not filler, and with four questions per area on average they carry the same nominal weight as the rest, but they are the parts an experienced Fusion implementer is most likely to already know.

Registering the source systems

Source system registration is the step that has no equivalent on any other Oracle Financials exam, and it gets an area of its own. Registering a source system tells Accounting Hub what kind of application is sending data, what transaction types it produces, and what attributes travel with each event so the rules have something to work with.

The examinable content splits cleanly. Analysis comes first: identifying the transaction lifecycle inside the source application, establishing what registration will require, and designing an accounting event model that names the events worth accounting for. Registration itself, and updating a registration when the source application changes, follows from that analysis.

The design decision worth understanding properly is the accounting event model. Get it wrong and every rule built on top of it is aimed at the wrong thing. A question that describes a business process and asks which events should be registered is testing this, and no amount of fluency with the rules screens will rescue an answer.

Accounting attribute assignment belongs to the same analysis. Attributes are the fields the rules can reference later, so deciding what the source system must send is an early and largely irreversible decision. Oracle’s Accounting Hub implementation guide is the reference for the mechanics if you have no environment to explore.

What does the accounting rules engine ask you to build?

Eight named component types, which makes this the largest single block on the blueprint. User-defined formulas, supporting references, description rules, mapping sets, account rules, journal line rules, journal entry rule sets and accounting methods each do a distinct job, and the exam expects you to know which one solves a described requirement.

They nest, and the nesting is the thing to learn. Account rules and description rules are assembled into journal line rules, which determine the individual debit and credit lines. Journal line rules are collected into journal entry rule sets, which handle a complete event. Rule sets are gathered into an accounting method, which is what a ledger is actually assigned.

• Mapping sets translate a source value into an accounting value, such as a product code into a natural account
• User-defined formulas calculate amounts the source system did not supply
• Supporting references carry source detail into the ledger so balances can be analysed by it later
• Description rules build the text that appears on the journal line
• Account rules determine which account a line posts to, conditionally

Supporting references deserve separate attention because they are the component most often underused in practice and most often misunderstood in questions. They are how you retain the source system’s own dimensions after the transaction has become a general ledger balance, and choosing them late is expensive.

The reason the hierarchy matters for the exam is that a scenario can be solved at more than one level, and only one answer is the right one. A requirement to vary an account by transaction type is an account rule question. A requirement to produce a different set of lines entirely is a rule set question. Recognising which layer is in play is most of the skill.

What happens when a transaction fails to account?

It becomes an exception, and handling exceptions is examinable in its own area alongside loading the data. Transactions arrive by spreadsheet or by automated upload, the accounting rules run against them, and anything the rules cannot resolve stops rather than posting something wrong into the ledger.

The blueprint names three related tasks: uploading transaction data, correcting errors and managing exceptions, and creating adjustments. They are not the same activity. An error is data that failed validation on the way in. An exception is data that arrived cleanly but could not be accounted, usually because a rule has no answer for the values it received. An adjustment is a deliberate correction to accounting that already happened.

Most exception questions resolve to a diagnostic instinct: when a transaction will not account, the fault is nearly always a rule that does not cover the case, not a defect in the upload. Practising that reasoning on a described scenario is more useful than memorising the screens, and anyone who prepared for an earlier release of this exam will find the earlier 1Z0-1060 material still largely applicable here.

Reporting, automation and Redwood

Three areas sit after the accounting engine, and together they account for roughly a third of the blueprint’s areas even though they are the parts implementers tend to prepare least. Reporting is the largest of the three, naming five distinct tools, while automation and Redwood carry one objective each.

The reporting tools divide by purpose rather than by preference. OTBI answers analytical questions interactively. Financial Reporting Web Studio builds statutory-style financial reports. BI Publisher produces schedulable, formatted output. Smart View brings ledger data into a spreadsheet. Account groups organise what the reports address. A question naming a reporting requirement is usually testing which of those five is the correct instrument.

Redwood is the current Oracle interface generation, and the objective is specific: enabling Redwood capabilities and understanding their implications for existing configuration. The second half is the examinable half. Turning it on is straightforward; knowing what it changes for configuration that already exists is the point, and it is also the area most likely to differ from whatever release you last worked on.

The AI, machine learning, mobile and automation area is the vaguest objective on the blueprint, phrased as using those features to streamline processing and improve operational efficiency. Treat it as awareness-level: know which automation capabilities exist in the current release and what they remove manual effort from.

Who should take this exam?

People who implement Accounting Hub, and a narrower group than the exam name suggests. It suits functional consultants integrating a non-Oracle application into Oracle Financials, finance systems analysts responsible for subledger accounting, and Fusion implementers who have been handed a source system and asked to make it produce journal entries.

It suits fewer people than the broader Financials credentials do, which is the honest position. If your work is Payables, Receivables or General Ledger configuration and no external system feeds your accounting, this paper examines a product you will not touch. The adjacent papers serve you better, and the same reasoning applies in reverse to a credential such as the EPM data integration certification, which addresses a different flow of financial data entirely.

Where it earns its place is on integration-heavy engagements, and in industries where the systems of record are specialised: banking, insurance, utilities, telecommunications, anywhere the transaction volume lives in an application built for that industry rather than in an ERP subledger. Accounting Hub is often the only viable route to a supportable ledger in those estates.

Experience assumptions are not published, but the blueprint makes them plain enough. Areas one and two expect existing familiarity with Functional Setup Manager, security configuration and ledger structures, so this is not a reasonable first Oracle Cloud exam.

How should you prepare?

Build the rules yourself, in that order, and use practice to find the areas you have not covered rather than to confirm the ones you enjoy. With four questions per area and room for only 11 wrong answers, coverage beats depth, and the blueprint’s own sequence is a better study plan than any reordering of it.

1. Read the nine areas and mark the ones you have never configured, because those are the ones that will cost you the margin.
2. Work the transformation spine in order: source analysis, registration, accounting rules, then upload and exceptions.
3. Build one complete accounting method from the bottom up, starting with an account rule and finishing with the method assigned to a ledger, so the hierarchy is something you have assembled rather than read.
4. Take one realistic requirement and design the accounting event model for it before touching any configuration screen.
5. Learn the five reporting tools by what each one is for, since that is how the questions frame them.
6. Read the current release notes for Redwood and note what it changes for existing configuration.
7. Sit a full timed set of 36 and use the result as a coverage audit, then study the gaps it exposes.

If you have no access to an environment, the implementation documentation carries the component definitions and the order in which they combine, which is enough to learn the hierarchy even without a screen to click. What it cannot give you is the judgement about which layer solves a requirement, and that is worth borrowing an environment for.

Frequently Asked Questions

How many questions are on the 1Z0-1060-26 exam?

Thirty six multiple choice questions in 90 minutes, which is about 150 seconds each.

What is the passing score for 1Z0-1060-26?

Sixty eight percent, which is 25 correct answers out of 36. That leaves room for 11 wrong ones.

How much does the exam cost?

Two hundred and forty five US dollars, though Oracle varies pricing by country and local currency, so confirm the figure when you book.

What credential does passing it earn?

Oracle Accounting Hub Cloud 2026 Implementation Professional.

Are the nine syllabus areas weighted?

No. Oracle publishes no weightings for this exam, so plan by area rather than by percentage. Nine areas across 36 questions averages four questions each.

Is Accounting Hub the same thing as Fusion Accounting Hub?

Yes. FAH is the older name and implementers still use it, which is why it appears in search results and job adverts alongside the current one.

What is the difference between this and the other Oracle Financials exams?

The other papers examine subledgers that produce their own transactions with accounting already built. Accounting Hub accounts for transactions from applications Oracle did not build, so you configure the accounting yourself.

What do 1Z0-1060-24 and 1Z0-1060-25 refer to?

Earlier annual releases of the same exam. The suffix rolls each year and the current paper is the 26 release, so older codes still appear in search results but are superseded.

Are there prerequisites?

None are published. The blueprint assumes working familiarity with Functional Setup Manager, security configuration and ledger structures, so it is not a sensible first Oracle Cloud exam.

How long is the certification valid?

No validity period is published anywhere that can be read, so this guide does not state one. Check your certification record after you pass.

Conclusion

1Z0-1060-26 is a configuration exam for a product with an unusual job: accounting for transactions that originate outside Oracle. Thirty six questions, 90 minutes, 68 percent to pass, 245 USD, and nine areas that Oracle declines to weight.

The short paper is the planning constraint. Twenty five correct answers is the bar and 11 wrong ones is the whole allowance, so cover every area before deepening any of them. Learn the accounting rules hierarchy by building one, because it is the largest block on the blueprint and the one that rewards assembly over reading.

Treat the published figures as the catalogue’s rather than the vendor’s, since no readable Oracle page confirms them, and check the current release notes for what Redwood changes. Then work the transformation spine in the order the blueprint gives it, which is the only prioritisation this syllabus offers.