What does D-AA-OP-23 actually weight?

Six topics, all published with weightings, and all of them sit between 12 and 23 percent. There is no dominant block and no trivial one. Social Network Analysis leads at 23 percent, Natural Language Processing follows at 20, and the remaining four split the rest almost evenly.

A flat distribution is harder to prepare for than a lopsided one, which is the opposite of what most people assume. When one topic carries 40 percent you know where to concentrate. When the smallest topic is still roughly seven questions out of 60, there is nowhere safe to be weak, and the cost of skipping anything is immediate.

It also means the exam resists the usual triage. You cannot decide that visualisation is a minor concern and spend the time on Spark instead, because visualisation is 12 percent and Spark is part of a topic worth 15.

What are the exam facts, and what does Dell not publish?

D-AA-OP-23 is 60 questions in 90 minutes at a 63 percent pass mark, priced at 230 USD and delivered through Pearson VUE. Sixty three percent of 60 is 38 correct answers, which leaves room for 22 wrong ones across six topics.

Now the honest part. Every figure above comes from the exam catalogue, and none of it could be confirmed a second time against Dell. Dell publishes its official exam description as a PDF rather than a web page, and its certification overview pages return no readable content.

That is not a reason to distrust the numbers, but it is a reason to check them yourself at the point of booking. Treat the table as the catalogue’s account rather than the vendor’s, and confirm the price and duration on the Pearson VUE screen before you pay.

One naming point that catches people out: the code reads like “advanced analytics”, and Dell’s own document filename uses that phrase, but the published exam name is Dell Data Science Optimize. Searching the name and searching the code will not always land you in the same place.

Why is graph theory the biggest topic?

Because Dell built this credential around the analytical problems that relationships create, and relationships are graphs. The topic covers SNA and graph theory, communities, and network problems and the tools that address them, and at 23 percent it is roughly 14 questions.

Graph thinking is a genuinely different mode from the tabular reasoning most data science study teaches. A table asks what a row contains; a graph asks what connects to what, how tightly, and which groupings emerge from the connections rather than from a label somebody assigned. Community detection is the clearest example: the groups are discovered from structure, not read from a field.

“Network problems” covers the recognisable tasks: finding the shortest path between two nodes, identifying which nodes are central or influential, spotting bridges whose removal fragments the network, and measuring how tightly clustered a neighbourhood is. Each has a standard measure behind it, and the exam expects you to match the problem to the right one rather than to derive anything.

If this material is unfamiliar, the general reference on social network analysis is a reasonable orientation before you touch exam-specific material, because the vocabulary is the barrier rather than the mathematics.

What does the 20 percent NLP topic cover?

Three objectives: natural language processing and the four main categories of ambiguity, text preprocessing, and language modeling. Twenty percent is around 12 questions, making it the second-largest topic and the other half of the exam’s applied-analytics core.

The ambiguity objective is the one to take literally. The blueprint names four categories, so the exam expects you to distinguish them rather than to discuss ambiguity in general. Lexical ambiguity is a word with more than one meaning; syntactic ambiguity is a sentence that parses more than one way; semantic ambiguity is a reading that remains unclear even once parsed; and pragmatic ambiguity depends on context outside the sentence. Being able to classify an example is exactly the kind of thing a multiple-choice paper can test cleanly.

Text preprocessing is the practical half: tokenisation, normalisation, stop word handling, stemming and lemmatisation. The distinction between stemming and lemmatisation is a standard question because the two produce different outputs for the same input and suit different purposes.

Language modeling completes the topic. Given the vintage of the rest of the blueprint, expect the classical treatment, probability over sequences and n-gram style reasoning, rather than transformer architecture. Prepare for the statistical foundation rather than for current large language model practice.

The Hadoop half, and how current it is

Two topics at 15 percent each, 30 percent together, cover the distributed data stack: the MapReduce framework and its Hadoop implementation, HDFS and YARN in the first; Pig, Hive, NoSQL, HBase and Spark in the second. It is worth being straightforward about what that represents.

This is the classical big-data stack. MapReduce as a programming model and Pig as a scripting layer are no longer how most new analytical workloads are built, and a candidate whose day job is on a modern cloud warehouse may not have touched either. The technologies are stewarded by the Apache Hadoop project and remain in production in many large estates, so the material is real, but it describes an earlier generation of practice.

That matters for two decisions. If you work in a Hadoop estate, 30 percent of this paper is your daily work and the credential is well aimed at you. If you do not, this is 18 questions of unfamiliar ground that you will have to learn deliberately, and you should price that into whether the exam is worth sitting.

The examinable depth is conceptual rather than operational. You are asked what MapReduce does and how it maps onto Hadoop, what HDFS and YARN are responsible for, and which ecosystem component suits which job, rather than to write a job or tune a cluster.

Theory, methods and visualisation

The last two topics take 27 percent between them and are the most conventional part of the paper. Data Science Theory and Methods at 15 percent names simulation, random forests, and multinomial logistic regression with maximum entropy. Data Visualization at 12 percent covers perception and visualization, and visualization of multivariate data.

The statistics topic is unusually specific for a vendor exam. Naming multinomial logistic regression and maximum entropy together is a signal in itself, since the two are closely related formulations of the same idea, and a question that expects you to know they are connected is a different question from one that treats them as separate techniques. Random forests bring ensemble reasoning, and simulation covers generating data to reason about a process you cannot observe directly.

Visualisation is the smallest topic and the one most often dismissed, which is a mistake at 12 percent, roughly seven questions. Note the framing: perception comes first. The objective is about how people read a chart, pre-attentive attributes, and why certain encodings mislead, rather than about which library draws it.

Multivariate visualisation is the more technical half, covering how to show more than two or three dimensions at once without producing something unreadable. It also connects back to the graph topic, since network visualisation is one of the harder multivariate problems on the paper.

How does this compare with the other Dell data exams?

Dell runs several data credentials and they are easy to confuse because the codes look alike. D-AA-OP-23 is the data science Optimize exam. D-DS-FN-23 is the foundations exam, a level below. D-DS-OP-23 is the Optimize exam on the data engineering track, a sibling rather than a successor.

The split matters when choosing. The data engineering track is about building and running the pipelines; this one is about analysing what comes out of them, which is why graph theory, NLP and statistics take 58 percent of it while infrastructure takes 30. A reader who wants the pipeline side should look at the data engineering Optimize route instead.

Foundations against Optimize is a seniority question rather than a subject one. If the topic list here reads as mostly unfamiliar, the foundations exam is the better entry point, and the Optimize paper will still be there afterwards.

There is one more thing worth saying about the family as a whole. The blueprint describes the data scientist role as it was understood before the split into data engineering and machine learning specialisms, which is why one exam spans Hadoop, NLP, graph theory and visualisation. Whether that breadth is a strength depends entirely on the job you are aiming at. An earlier look at the same credential from the career angle is available in the site’s D-AA-OP-23 career guide.

How do you prepare for a flat blueprint?

By covering everything and ranking by unfamiliarity rather than by weight. With no topic above 23 percent and none below 12, the usual tactic of concentrating on the big block does not apply, and the deciding factor becomes which topics you have never worked with.

1. Rate yourself honestly against all six topics before planning anything, because the plan follows the gaps rather than the weights.
2. Start with Social Network Analysis if graph work is new to you, since it is the largest topic and the one least likely to be covered by your day job.
3. Learn the four categories of ambiguity as a classification exercise, with an example of each you came up with yourself.
4. Separate stemming from lemmatisation with a worked example, since the distinction is a standard question.
5. Cover the Hadoop topics conceptually: what each component is responsible for and which job suits which tool, not how to operate a cluster.
6. Connect multinomial logistic regression to maximum entropy rather than learning them as two unrelated techniques.
7. Give visualisation one focused session on perception and multivariate encoding, which is enough for 12 percent.
8. Work through the D-AA-OP-23 sample questions to see how each topic is actually asked, since the framing varies sharply between them.

One planning note on the margin. Thirty eight correct answers from 60 leaves 22 wrong, which sounds generous until you notice it is spread across six topics. Being genuinely weak in two of them consumes most of that allowance before you have misread a single question elsewhere.

Frequently Asked Questions

How many questions are on the D-AA-OP-23 exam?

Sixty questions in 90 minutes, which is about 90 seconds each.

What is the passing score?

Sixty three percent, which works out at 38 correct answers from 60.

What is the largest topic on the exam?

Social Network Analysis at 23 percent, covering graph theory, communities, and network problems and tools. It is larger than MapReduce and the Hadoop ecosystem combined.

What are the six topics and their weightings?

Social Network Analysis at 23 percent, Natural Language Processing at 20, MapReduce at 15, Hadoop Ecosystem and NoSQL at 15, Data Science Theory and Methods at 15, and Data Visualization at 12.

How much does the exam cost?

Two hundred and thirty US dollars as listed in the exam catalogue. Dell publishes no readable price page, so confirm the figure when you book through Pearson VUE.

Is D-AA-OP-23 the same as D-DS-OP-23?

No. D-AA-OP-23 is the data science Optimize exam and D-DS-OP-23 is the Optimize exam on the data engineering track. They are siblings covering different work, not two versions of one exam.

Does the exam cover modern large language models?

The NLP topic names ambiguity, text preprocessing and language modeling. Given the vintage of the surrounding blueprint, prepare for the classical statistical treatment rather than transformer architecture.

How much Hadoop knowledge do I need?

Thirty percent of the paper is MapReduce and the Hadoop ecosystem, assessed conceptually: what each component does and which suits which job, rather than cluster operations.

How long is the certification valid?

No validity period is published anywhere that can be read, so this guide does not state one. Check your certification record after passing.

Is there an easier Dell data exam to start with?

D-DS-FN-23, the data science foundations exam, sits a level below and is the better entry point if most of this topic list is unfamiliar.

Conclusion

D-AA-OP-23 is a breadth exam with an unexpected centre of gravity. Sixty questions in 90 minutes, 63 percent to pass, 230 USD, and six topics in which graph theory is the largest and visualisation the smallest.

Plan by unfamiliarity rather than by weight, because a flat blueprint offers no safe area to concentrate on. Social Network Analysis and the classical NLP material are where most candidates have the furthest to travel, and the Hadoop half is either your daily work or 18 questions of deliberate study, depending entirely on the estate you work in.

Confirm the figures when you book. Dell publishes its exam description only as a document this kind of check cannot read, so everything above is the catalogue’s account rather than the vendor’s, and the booking screen is where you verify it.

What is the PfMP certification, and why is it not the top of the PMP ladder?

PfMP is PMI’s Portfolio Management Professional credential, and it certifies the ability to select and balance a collection of investments against organisational strategy. A project manager delivers a defined outcome. A portfolio manager decides which outcomes should be funded at all, and stops the ones that no longer earn their place.

That is a different job, not a more senior version of the same one. The clearest way to see it is to look at what each credential manages. PMP manages a project. PgMP manages a programme, meaning a group of related projects delivering one coordinated benefit. PfMP manages a portfolio, meaning everything the organisation has chosen to invest in, related or not.

The practical consequence for a candidate is that PMP revision transfers poorly. Earned value, critical path, procurement types and change control are the substance of one exam and largely absent from the other. What transfers is the vocabulary and the habit of thinking in governance structures.

Because the credential sits in an unfamiliar discipline, the sensible first step is reading the exam’s own scope rather than a training provider’s summary of it. The money site’s PfMP certification overview sets out the five domains and the exam mechanics together, which is the fastest way to decide whether this is the credential you actually want.

What does the PfMP exam look like?

The PfMP exam is 170 multiple choice questions in 240 minutes, delivered through Pearson VUE, drawing on The Standard for Portfolio Management, Fourth Edition and the PMBOK Guide. Four hours over 170 questions works out at roughly 85 seconds each, which is generous by certification standards and necessary given how much reading each item carries.

The length is the part candidates under-rate. Four hours of dense scenario reading is a physical test as much as a knowledge one, and people who have only ever sat 60 or 90 minute papers routinely find their accuracy falling away in the final hour rather than their knowledge.

A note on what is not published here

PMI’s own certification pages could not be read while researching this article, so every figure above comes from the money site’s syllabus page rather than from vendor confirmation. The eligibility rules, which govern how much portfolio experience you need before you may apply, are not published on that page either, and they are not guessed at here. They live in the official PfMP handbook, which is the document to read before paying anything.

How is PfMP scored when there is no pass percentage?

PfMP does not report a percentage. The result is one of four performance bands: Above Target, Target, Below Target or Needs Improvement. Any page quoting a specific pass percentage for this exam has invented it, because no such number is published for the credential at all.

This matters more than it first appears, because it changes what a study plan should optimise for. With a numeric cut score you can trade a weak area against a strong one and still clear the line. With band reporting there is no arithmetic to do, and no published rule that lets you convert one domain’s strength into another domain’s weakness.

What the bands describe

The four bands describe performance against the standard expected of a competent portfolio manager, not against other candidates and not against a raw mark. Target means you met that expectation. Above Target means you exceeded it. The two lower bands mean you did not, with Needs Improvement being the further away of the two.

The result report breaks performance down by domain as well as overall, which is the genuinely useful part for anyone who has to retake. A candidate who lands Below Target overall but Target on four domains knows exactly where the work is.

How to prepare for band scoring

Aim for even competence rather than a spiky profile. That sounds like generic advice until you notice how easy the alternative is: a working portfolio manager usually arrives strong on governance and performance because those are the parts of the job with meetings attached, and thin on risk and communications because those are the parts that get delegated.

What do the five PfMP domains cover?

PfMP has five weighted domains: strategic alignment at 25 percent, governance at 20 percent, portfolio performance at 25 percent, portfolio risk management at 15 percent and communications management at 15 percent. Each is expressed as a set of tasks, and each task names both the technique and the purpose it serves.

Read the task lists rather than the domain names. Strategic alignment alone runs to eight tasks, and they describe a sequence: understand the strategy, set the criteria, rank the priorities, identify candidate components, model scenarios, recommend one, absorb strategy changes, publish the roadmap. That sequence is the exam’s spine.

Why strategic alignment and portfolio performance carry half the marks

Strategic alignment and portfolio performance are 25 percent each, so together they account for 50 percent of the exam. That is not an accident of drafting. They are the two ends of the same loop: alignment decides what should be in the portfolio, performance measures whether that decision turned out to be right.

Governance, risk and communications are the machinery that keeps the loop running. They matter, they carry marks, and a candidate who ignores them will not reach Target. But they are supporting disciplines, and the exam’s weighting says so plainly.

The techniques named in the syllabus are the ones to know

The strategic alignment tasks name their methods explicitly rather than leaving them abstract: document review and interviewing for gathering information, qualitative and quantitative analysis for ranking, and what-if scenario modelling using options analysis, risk analysis, SWOT and financial analysis for evaluating options. Those are examinable by name.

The same pattern of naming the technique alongside the purpose shows up across PMI’s credential family. Anyone who has worked through the PMI-RMP risk credential will recognise the style immediately, and the risk vocabulary transfers almost intact into this exam’s fourth domain.

Where candidates lose ground

Portfolio performance is the domain that catches experienced people out, because in practice most organisations measure component delivery and call it portfolio performance. The exam treats them as different things. Whether every project came in on time says nothing about whether the portfolio produced the value that justified funding it.

What does PfMP cost, and does membership pay for itself?

The PfMP exam costs USD 800 for PMI members and USD 1000 at full price. The gap is USD 200, and that single figure decides the membership question for almost everyone: if annual membership costs less than USD 200, joining before booking is cheaper than not joining, and you keep the membership benefits as well.

That arithmetic is worth doing deliberately rather than assuming. It is the same structure PMI uses across its credential range, and it is why the member price is quoted first on almost every summary of the exam.

The costs that are not in the fee

Two reference works sit behind this exam, The Standard for Portfolio Management and the PMBOK Guide, and both are paid publications unless you have access through membership. Budget for them, and budget for the time to read them, because the standard is the source the questions are written from rather than a companion to it.

Retakes are the other line item. Four hours is a long sitting and a resit is not a small commitment of either money or stamina, which is an argument for going in genuinely ready rather than treating the first attempt as reconnaissance.

Who is PfMP actually for?

PfMP suits somebody who already makes or shapes investment decisions: a portfolio manager, a PMO lead with a funding remit, a head of delivery who sits in prioritisation meetings, or a programme manager whose scope has quietly grown into a portfolio. It is a poor fit for somebody who wants a more impressive project management credential.

The career case is genuine but narrower than PMP’s. Portfolio management roles are fewer, more senior and concentrated in organisations large enough to run a formal investment process. Published portfolio manager salary data shows a wide band, which is exactly what you would expect from a title that means something different in financial services than it does in a technology PMO.

The recognition question

Portfolio management as a discipline is considerably older than the credential and considerably broader than PMI’s treatment of it. Reading around project portfolio management is worth an hour before committing, because it makes clear which parts of the exam are PMI’s particular framing and which are the discipline’s common ground.

If you are weighing PfMP against a newer PMI credential in an adjacent space, the cost comparison is a useful reality check. The CPMAI credential pricing sits in similar territory for a very different skill set, and comparing what each actually buys is more informative than comparing badge prestige.

How should you prepare for a four-hour paper?

PfMP preparation is longer than most certification study plans, typically two to four months alongside a senior role, and it divides into learning an unfamiliar discipline and then building the stamina to reason about it for four hours. Skipping the second half is the most common mistake.

1. Read The Standard for Portfolio Management end to end before touching any question bank, because the exam is written from it rather than from general project management practice.
2. Work through the strategic alignment tasks as a sequence rather than a list, following it from understanding the strategy to publishing the roadmap.
3. Learn the named analysis techniques by name, covering options analysis, risk analysis, SWOT and financial analysis, since the syllabus examines them explicitly.
4. Build a governance model on paper for an imaginary portfolio, defining the boards, the policies and the decision rights, which converts the second domain from theory into something you have actually done.
5. Separate component performance from portfolio performance deliberately in your own mind, because conflating them is the single most reliable way to lose marks in the highest-weighted pair.
6. Study risk and communications last and hardest, since they carry 30 percent between them and are the two areas working portfolio managers usually delegate.
7. Sit at least one full 170 question paper in a single four hour block to find out where your accuracy starts to fall away.

Booking and the day itself

The exam runs through Pearson VUE delivery centres and online proctoring, and the choice between them matters more at four hours than it would at one. A centre removes the risk of a connection failure two hours in; a home sitting removes the commute and lets you control the chair you spend four hours in.

Frequently Asked Questions

How many questions are on the PfMP exam?

One hundred and seventy multiple choice questions, taken over 240 minutes, which works out at roughly 85 seconds each.

What is the passing score for PfMP?

There is no published percentage. The result is reported as Above Target, Target, Below Target or Needs Improvement, with a breakdown by domain. Any source quoting a percentage has invented it.

How long is the PfMP exam?

Four hours. It is one of the longer certification sittings in the field, and stamina is a genuine factor rather than a throwaway concern.

What does PfMP cost?

USD 800 for PMI members and USD 1000 at full price. The USD 200 gap usually makes membership worth taking out before booking.

Is PfMP harder than PMP?

It is not a harder version of PMP, it is a different subject. PMP examines delivering a project; PfMP examines choosing and balancing investments. PMP revision transfers only partly.

What are the PfMP domains and their weightings?

Strategic alignment 25 percent, governance 20 percent, portfolio performance 25 percent, portfolio risk management 15 percent and communications management 15 percent.

What experience do you need to apply for PfMP?

The money-site syllabus page does not publish the eligibility rules, and PMI’s certification pages could not be read while researching this article, so no requirement is asserted here. The official PfMP handbook is where those rules are set out.

Which books does the PfMP exam draw on?

The Standard for Portfolio Management, Fourth Edition, and the PMBOK Guide. The standard is the primary source; the guide is supporting context.

Where is the PfMP exam delivered?

Through Pearson VUE. Over a four hour sitting the choice between a test centre and online proctoring is worth thinking about properly.

How long does preparation usually take?

Two to four months alongside a senior role is typical, with the last few weeks given over to full-length timed practice rather than new material.

Conclusion

PfMP is a credential for people who decide what gets funded, and the syllabus says so in the only way that counts: five domains, none of them about delivery, with alignment and performance carrying half the marks between them. Approaching it as an advanced project management exam is the fastest route to a Below Target report.

Read the standard first, learn the strategic alignment sequence as a sequence, give risk and communications more time than instinct suggests, and sit at least one full four hour paper before the real one. The band scoring rewards even competence, so the goal is a flat profile rather than a spiky one.

And do the membership arithmetic before you book. A USD 200 gap on a single exam fee is the easiest saving available on this credential.

What Is the Testing with Generative AI Certification?

CT-GenAI is ISTQB’s specialist level module for applying generative AI to software testing. It sits above the Foundation Level in the ISTQB scheme and covers using large language models across the testing lifecycle: analysis, design, implementation, monitoring and reporting. The credential is aimed at people doing test work with a model, not at people building models.

That distinction shapes every chapter. There is no requirement to train a network, derive a loss function or reason about architecture at the research level. What there is instead is a body of practice for getting reliable test artefacts out of a system that is, by design, non deterministic. The syllabus treats that unreliability as the central engineering problem rather than an inconvenience.

ISTQB updated the syllabus to version 1.1, sharpening the emphasis on real world applications, advanced prompting practice and responsible adoption. That last theme runs further than most testers expect, taking in hallucinations, bias, privacy, security and even the energy cost of running models at scale. Candidates who want to see how that translates into question form usually work through the CT-GenAI practice exam before committing to a booking.

Where it sits in the ISTQB scheme

It is a specialist module, which in ISTQB terms means a focused subject rather than a tier of seniority. Holding it does not advance you along the core track. The ISTQB certification scheme continues through the Core Advanced modules and Expert Level separately, and CT-GenAI runs alongside that path rather than inside it.

Can You Even Sit CT-GenAI? The Prerequisite Nobody Mentions

Only if you already hold ISTQB Certified Tester Foundation Level. CTFL is a mandatory prerequisite for CT-GenAI, stated plainly on ISTQB’s own credential page, and there is no alternative route and no experience based waiver. Without it you cannot sit the exam, however much generative AI work you have done.

This catches people out because the prerequisite is easy to miss. Many summaries of the exam list the fee, the duration and the question count and say nothing about eligibility, so a candidate can plan a study schedule and get as far as booking before discovering the gate. If you do not hold CTFL, that is the exam to sit first.

The requirement makes sense once you read the syllabus. Every chapter assumes you already know what test analysis is, what a test condition is, what test monitoring and control mean and how a test process is organised. The generative AI material is layered onto that vocabulary rather than explained alongside it. A candidate without the Foundation grounding would spend the exam translating.

There is no stated requirement for prior AI experience, and none is implied by the objectives. The syllabus starts by distinguishing symbolic AI, classical machine learning, deep learning and generative AI, which is where someone with no background would need to start anyway. The details are set out on the official CT-GenAI page.

What Are the CT-GenAI Exam Details?

CT-GenAI is 40 questions answered in 60 minutes, scored out of 46 points with 30 points needed to pass, which works out at 65 percent. The fee is around 199 US dollars and delivery is through Pearson VUE. Candidates sitting the exam in a language that is not their native one receive an extra 25 percent of time.

The forty six points against forty questions is the detail worth pausing on. Some items are worth more than one point, which means the exam is not a flat count of right answers and a handful of heavier questions carry disproportionate weight. ISTQB does not publish which ones, so the practical response is simply to answer everything rather than triaging by apparent difficulty.

Sixty minutes for forty questions is ninety seconds each, which is tight for an exam where several objectives are phrased as apply and select rather than recall. Questions that ask which prompting technique fits a given test task take longer to read than a definition question, and there is no reading time allowance beyond the language extension.

Why Does Prompt Engineering Take Nearly Half the Syllabus?

Because prompting is the skill the rest of the credential depends on. Prompt Engineering for Effective Software Testing carries 365 of the syllabus’s 815 recommended study minutes, roughly 45 percent, and it is the only chapter that asks you to produce something rather than understand something. Its objectives run from prompt structure through applying prompts to real test tasks and on to evaluating what comes back.

Read that table as study time rather than as exam weighting. Neither ISTQB nor the published syllabus summary states how the forty questions divide between the five chapters, so nobody can honestly tell you that 45 percent of the paper is prompting. What the minutes do tell you is where the authors think the learning effort belongs, and that is a reliable planning signal even without the question split.

The chapter breaks into three parts. Effective prompt development covers prompt structure, the core prompting techniques and the difference between a system prompt and a user prompt. Applying the techniques covers test analysis, test design and implementation, and test monitoring and control, each as a separate objective. Evaluation covers the metrics for judging what a model produced and the techniques for refining a prompt iteratively.

The objective people underestimate

Selecting the appropriate prompting technique for a given context and test task is the one that separates candidates. Knowing the techniques is recall. Choosing between them when a scenario describes a specific task, a specific constraint and a specific quality bar is judgement, and it is the shape most of this chapter’s questions take.

What Does the Risk Chapter Actually Make You Learn?

Four distinct risk areas at 160 recommended minutes, the second largest chapter. Managing Risks of Generative AI in Software Testing covers hallucinations, reasoning errors and biases; data privacy and security; energy consumption and environmental impact; and the AI regulations, standards and best practice frameworks that increasingly govern all three.

The hallucination material goes beyond defining the term. The objectives ask you to identify hallucinations, reasoning errors and biases in actual model output, summarise mitigation techniques for each in a test context, and recall how to handle non deterministic behaviour. That last point matters more in testing than almost anywhere else: a test asset that changes between generations is not a test asset yet.

Privacy and security is the area with the clearest external reference point. Feeding production data, defect reports or source code into a hosted model creates exposure that did not exist before, and the syllabus asks for both the risks and the mitigations. OWASP’s Top 10 for LLM applications maps closely onto this objective and is the most efficient way to give the topic structure.

The regulations objective is deliberately broad, asking only that you recall examples of relevant regulations, standards and frameworks. The NIST AI Risk Management Framework is the example most commonly cited in practice, and knowing one framework properly serves better than half remembering four.

Energy consumption gets a single objective and is the chapter’s smallest piece. It asks how task characteristics and model usage affect energy cost, which in practice means understanding that model size and call volume drive consumption. It is a short topic and worth a short study session.

What Is in the LLM-Powered Solutions Chapter?

The architecture around the model, at 110 recommended minutes. LLM-Powered Solutions for Software Testing covers the key architectural components of a language model backed testing setup, Retrieval-Augmented Generation, the role of LLM powered agents in automating test processes, fine tuning models for specific test tasks, and LLMOps.

Retrieval-Augmented Generation is the concept to get right. It is the pattern where a model’s answer is grounded in documents retrieved at query time rather than in whatever was in its training data, and in a testing context those documents are usually requirements, specifications or existing test assets. It is the practical answer to a model that does not know your system.

Agents are the newer material. The objective asks you to explain their role in automating test processes, which means understanding that an agent plans and executes a sequence of steps rather than answering a single prompt. Fine tuning and LLMOps close the chapter by covering how a model is adapted to a specific test task and how it is then deployed and managed over time.

• Know what each architectural component contributes, not just its name
• Be able to say when retrieval beats fine tuning and when it does not
• Understand what an agent adds over a single prompt
• Treat LLMOps as the operations discipline it is, not as a synonym for deployment

Who Should Take This Certification?

Testers, test analysts, automation engineers and test managers who already hold CTFL and whose organisations have started putting language models into test work. ISTQB also names user acceptance testers, developers, project and quality managers, business analysts, IT directors and consultants as an audience, which is a broader list than most specialist modules carry.

The strongest fit is a tester who has already been experimenting. If you have asked a model to generate test cases from a requirement and been disappointed by what came back, the prompt engineering chapter will read as an explanation of why, and the evaluation objectives will read as the missing half of what you were doing. That is the moment this credential is worth most.

It also suits a test manager who has to make a decision rather than write a prompt. The final chapter covers shadow AI, defining a strategy, choosing between large and small language models and the phases of adoption, all of which are management problems rather than technique problems. A manager can get real value from that chapter alone.

It is a weaker fit for someone without CTFL, who simply cannot sit it, and for someone wanting to build AI systems rather than test with them. Testers already holding the AI testing module will find some conceptual overlap but a different centre of gravity, and our guide to the ISTQB CT-AI exam covers that neighbouring credential in detail.

What you get out of it

• A structured account of prompting for test work rather than accumulated habit
• Vocabulary for arguing about model risk with people outside the test team
• Enough architecture to tell a retrieval problem from a prompting problem
• A defensible position when someone proposes pasting production data into a chat window

How Should You Prepare for CT-GenAI?

By following the study minutes, since they are the only proportional signal the syllabus publishes. Prompt engineering is worth more preparation time than the other four chapters put together at one end, and deployment is worth a single session at the other. Practical work on prompts beats reading about them at every stage.

1. Confirm you hold ISTQB Certified Tester Foundation Level before anything else, because CT-GenAI is closed to you without it and no amount of preparation changes that.
2. Read the introductory chapter once to fix the vocabulary, learning the difference between foundation, instruction tuned and reasoning models properly since later chapters assume it.
3. Write real prompts against a real requirement from your own work, asking a model to produce test conditions, then test cases, then data, so that each applying objective has an experience attached to it.
4. Deliberately break those prompts by removing context, so you can recognise a hallucination and a reasoning error in output rather than only in a definition.
5. Learn one risk framework properly rather than skimming several, and map its categories onto the privacy, security and bias objectives in the risk chapter.
6. Study retrieval and fine tuning as alternatives to one another, since most architecture questions turn on choosing between them for a stated constraint.
7. Finish with the deployment chapter in a single session, treating shadow AI and the adoption phases as the management vocabulary they are.

Time yourself on practice questions from the start rather than at the end. Ninety seconds per question is the real constraint on a paper where several objectives ask you to select and apply rather than recall, and candidates who discover that in the exam room lose marks they had the knowledge to earn. Testers preparing for other ISTQB specialist modules report the same, and our notes on the CT-STE exam materials cover how the specialist papers differ from the Foundation format.

Frequently Asked Questions

How many questions are on the CT-GenAI exam?

Forty questions in 60 minutes, scored across 46 total points. Because some items carry more than one point, the number of questions and the number of points are deliberately different figures.

What is the CT-GenAI passing score?

Thirty of the 46 available points, which ISTQB expresses as 65 percent. It is a share of points rather than a share of questions, so heavier items matter more than a flat count suggests.

Do I need any certification before CT-GenAI?

Yes. ISTQB Certified Tester Foundation Level is a mandatory prerequisite with no alternative route and no experience waiver. Without CTFL you cannot sit the exam at all.

How much does the exam cost?

Around 199 US dollars. ISTQB does not publish a single global price because exams are sold through member boards and exam providers, so the figure varies by region and provider.

How long should I study for CT-GenAI?

The syllabus recommends 815 minutes of study across its five chapters, a little under fourteen hours. Roughly 365 of those minutes belong to the prompt engineering chapter alone.

Is prompt engineering the biggest part of the exam?

It is the biggest part of the recommended study time at 365 of 815 minutes. Neither ISTQB nor the published syllabus states how the 40 questions divide between chapters, so the question share is not known.

Do I get extra time if English is not my first language?

Yes. ISTQB grants a 25 percent extension for candidates sitting the exam in a language that is not their native one, taking the window from 60 minutes to 75.

Does CT-GenAI require any AI experience?

No prior AI experience is required. The first chapter starts by distinguishing symbolic AI, classical machine learning, deep learning and generative AI, so the syllabus builds the background it needs.

What comes after CT-GenAI?

It is a specialist module rather than a rung on the core ladder. ISTQB names the Core Advanced modules, covering test analysis, technical test analysis, test management and test engineering, as the onward path, followed later by Expert Level.

Conclusion

The testing with generative AI certification is narrower and more practical than its name suggests. Forty questions in 60 minutes, 30 of 46 points to pass, around 199 US dollars, CTFL required first, and a syllabus whose recommended study time is dominated by one chapter on writing, applying and evaluating prompts for test work. The remaining chapters handle model risk, the architecture around a model, and rolling any of it out across a test organisation.

Preparation should follow that shape rather than treating five chapters as five equal subjects. Write real prompts against real requirements, break them deliberately so you can recognise failure modes in output, learn one risk framework properly, and time yourself from the first practice question rather than the last. Working through a full practice set is the quickest way to find out which chapter still owes you study time.

What Does the Fortinet SD-WAN Certification Cover?

FCSS_SDW_AR-7.6 covers five published sections: basic SD-WAN setup, rules and routing, centralised management through FortiManager, advanced IPsec, and SD-WAN troubleshooting. The scope runs from configuring members, zones and performance SLAs on a single FortiGate up to orchestrating overlays across a multiregion deployment.

The shape of that list tells you what Fortinet means by architect. Three of the five sections are about building something at scale, and two are about proving it works when it does not. There is no section on strategy, vendor selection or business case. This is a hands-on exam about a specific implementation of SD-WAN inside FortiOS.

The security framing is not decoration either. Fortinet places the exam in its network security track rather than a routing one, and its product leadership has been explicit about why that distinction exists.

“Most of the original SD-WAN vendors were focused on the routing stack. A lot of them forgot that when you open up that wide area network you’re then creating an edge that needs to be protected.”

Anyone coming from a pure routing background should read the section list with that in mind. Fortinet’s SD-WAN administration guide is the reference the objectives track most closely, and its ordering matches the exam’s own.

What Are the FCSS_SDW_AR-7.6 Exam Details?

FCSS_SDW_AR-7.6 is 38 questions in 75 minutes, priced at 200 US dollars and scheduled through Pearson VUE. Questions are multiple choice and multiple select, answers must be fully correct to score, and there is no partial credit and no penalty for a wrong answer. The result is reported as pass or fail with no number attached.

Divide the clock by the paper and you get 118 seconds a question. That sounds generous until you remember what a multiple select question looks like at this level: a topology, a set of requirements, and four or five candidate configurations of which more than one may be right. Getting three of four selections correct scores nothing.

The full track listing, including the sibling exams and the exams that count toward the same certification, is published on the Fortinet Network Security track page.

Why Does Fortinet Publish No Pass Mark or Weightings?

Fortinet reports FCSS_SDW_AR-7.6 as pass or fail and attaches no percentage to any of the five sections. In practice that means you cannot rank the sections by value and study accordingly, and you cannot tell after a fail whether you missed by one question or by ten. Both consequences change how preparation should be planned.

The first is the useful one. On a weighted exam it is rational to spend most of the time on the 25 percent domain. Here, a section with three objectives and a section with two are worth an unknown amount each, so the safe assumption is that they are roughly comparable and that no section can be written off. Troubleshooting has three objectives and is the last item on the list, which is exactly the position candidates tend to under-prepare.

What the scoring rules do tell you

Fortinet is specific on one point that matters more than a pass percentage would. An answer must be entirely correct to earn credit, there is no partial credit on multiple select items, and a wrong answer costs nothing beyond the mark itself. That combination rewards attempting everything and punishes half-knowledge of a topic much more heavily than complete ignorance of it.

Because the two strongest search signals for this exam are candidates typing whole questions about performance SLAs and about ECMP behaviour, the fastest calibration available is working FCSS SD-WAN sample questions in the same multiple select format rather than reading the objectives again.

What Does the Advanced IPsec Section Expect?

The advanced IPsec section has three objectives: deploying a hub-and-spoke IPsec topology for SD-WAN, configuring ADVPN, and configuring IPsec multihub, multiregion and large deployments. It is the section that separates a branch administrator from an architect, because every objective is about what happens when the number of sites stops being small.

ADVPN is the pivot. A conventional hub-and-spoke design sends spoke to spoke traffic through the hub, which is fine at ten sites and painful at two hundred. Auto Discovery VPN lets spokes build shortcuts directly to each other on demand, and the exam expects you to know how those shortcuts are negotiated and what has to be in place for them to form.

Multiregion is where the design questions get harder. Once there is more than one hub, routing has to prefer the right one, failover has to behave predictably, and the shortcut logic has to work across regions rather than only within them. Fortinet’s ADVPN configuration reference covers the mechanics, and the underlying protocol behaviour is defined in the IETF’s IPsec security architecture.

Candidates who have only ever built two-site tunnels find this section the hardest, and it is the one where lab time cannot be substituted with reading.

How Does FortiManager Change an SD-WAN Deployment?

The centralised management section covers deploying SD-WAN from FortiManager, implementing branch configuration deployment, and using SD-WAN Manager with overlay orchestration. It assumes the estate is large enough that per-device configuration has stopped being viable, which is the practical definition of the architect tier.

Three ideas sit behind those objectives. Templates push a consistent configuration to many branches. Branch deployment turns a new site into a repeatable process rather than a project. Overlay orchestration builds and maintains the tunnel mesh so nobody has to hand-configure it as the estate grows.

The examinable subtlety is the relationship between what FortiManager pushes and what a device holds locally. An engineer used to configuring FortiGates directly has to think in terms of what the manager owns and what remains device-specific, because a question about a misapplied branch template is really a question about that boundary.

Which Troubleshooting Skills Does the Exam Test?

Troubleshooting is one of the five sections and carries three objectives: SD-WAN rules and session behaviour, SD-WAN routing, and ADVPN. Each mirrors a build objective elsewhere in the syllabus, so the section is effectively asking whether you understand the earlier material well enough to explain it failing rather than only to configure it working.

Session behaviour is the one people underestimate. An SD-WAN rule chooses a path for a new session, and existing sessions do not necessarily move when conditions change. A question about traffic that did not fail over is usually a question about session tables rather than about the rule itself.

Routing troubleshooting expects fluency in how SD-WAN service rules interact with the routing table underneath them. In most real deployments that means BGP, whose behaviour the IETF defines in the BGP-4 specification, and the exam is interested in the interaction rather than the protocol in isolation.

ADVPN troubleshooting closes the loop with the advanced IPsec section. Shortcuts that never form, form and then collapse, or form in one direction only are the classic scenarios, and each has a different root cause.

How Should You Prepare for the SD-WAN Architect Exam?

Preparation for an unweighted exam works differently. With no percentages to optimise against, the plan should follow the dependency order of the technology instead: build correctly, scale it, manage it centrally, then break it deliberately. Fortinet publishes no prerequisite for this exam, but the objectives assume working FortiGate experience throughout.

1. Build a basic SD-WAN by hand first, configuring members, zones and performance SLAs until the SLA thresholds and their effect on path selection are second nature.
2. Move on to rules and routing, and make sure you can explain why a given session took the path it did rather than only that it did.
3. Lab a hub-and-spoke IPsec topology and then enable ADVPN on it, watching the shortcuts form so the negotiation is something you have seen rather than read about.
4. Extend that lab to a second hub and a second region, because multiregion behaviour is where the architect-level questions live.
5. Deploy the same design from FortiManager using templates and branch configuration, paying attention to what the manager owns and what stays local to the device.
6. Break each piece on purpose and diagnose it, covering rules and session behaviour, routing, and ADVPN shortcuts that fail to form.
7. Drill multiple select questions specifically, since a partly correct answer scores zero and that is a different skill from knowing the topic.
8. Sit timed practice at roughly two minutes a question so the longer topology items do not eat the clock.

If you are still working at administrator level, the FortiSASE and SD-WAN administrator exam covers the same product from the operational side and is the more natural first step.

Where Does FCSS SD-WAN Architect Sit in the Fortinet Track?

FCSS_SDW_AR-7.6 is one of three exams in the Fortinet Certified Solution Specialist Network Security track, alongside the Enterprise Firewall Administrator and LAN Edge Architect credentials. Fortinet also counts NSE 7 SD-WAN, in any version, toward the same certification, which matters to anyone holding the older credential.

That equivalence is worth checking before booking. An engineer who passed an NSE 7 SD-WAN exam under the previous scheme may already hold what this exam awards, and the sensible move is then a different exam in the track rather than a repeat of the same subject in a newer version.

For everyone else the track reads as a set of specialisms rather than a ladder. The LAN Edge Architect exam sits at the same level and covers switching and wireless instead of the wide area network, so the choice is about which part of the estate you actually run.

Frequently Asked Questions

How many questions are on the FCSS_SDW_AR-7.6 exam?

38 questions in 75 minutes, which works out at roughly 118 seconds each. Both figures appear on the Fortinet Training Institute track page and on the NWExam syllabus page for the exam.

What is the passing score for the Fortinet SD-WAN certification?

Fortinet does not publish one. The result is reported as pass or fail with no percentage and no scaled score, and none of the five sections carries a published weighting either.

How much does the FCSS SD-WAN Architect exam cost?

200 US dollars per attempt, scheduled through Pearson VUE. Local taxes and currency conversion apply depending on where the appointment is booked.

Is there partial credit on multiple select questions?

No. Fortinet states that an answer must be fully correct to earn credit, that there is no partial credit, and that a wrong answer carries no additional deduction beyond the lost mark.

Does NSE 7 SD-WAN still count toward this certification?

Yes. Fortinet lists NSE 7 SD-WAN in any version as an exam that counts toward the same certification, so holders of the older credential should check their status before booking the newer exam.

What does the advanced IPsec section cover?

Three objectives: deploying a hub-and-spoke IPsec topology for SD-WAN, configuring ADVPN, and configuring IPsec multihub, multiregion and large deployments. It is the most design-heavy section on the paper.

Do you need FortiManager experience to pass?

One of the five sections is centralised management, covering SD-WAN deployment from FortiManager, branch configuration deployment, and SD-WAN Manager with overlay orchestration. Skipping it leaves a fifth of the syllabus untouched.

Which section do candidates find hardest?

Advanced IPsec, because multiregion and multihub behaviour cannot be learned from documentation alone. Troubleshooting comes second, largely because it sits last on the list and gets the least study time.

Are there prerequisites for the FCSS SD-WAN Architect exam?

None are published on the syllabus page. The objectives assume working FortiGate administration experience throughout, so it is an architect exam in scope rather than an entry point to the platform.

Which other exams sit in the same Fortinet track?

The FCSS Network Security track holds three exams: SD-WAN Architect, Enterprise Firewall Administrator and LAN Edge Architect. They are peers covering different parts of the estate rather than a sequence.

Conclusion

An exam with no published pass mark and no section weightings takes away the shortcut most candidates rely on. There is no 25 percent domain to prioritise here, and no way to tell after a fail how close you were.

What replaces it is the dependency order of the technology itself. Get members, zones and performance SLAs right, understand why a session took the path it took, then scale the design through ADVPN into multihub and multiregion territory where the architect-level questions actually live. Add FortiManager once the design is sound, because centralised management is a fifth of the syllabus and the boundary between template and device is exactly what gets asked about. Then break everything deliberately, since troubleshooting mirrors every build objective on the paper. With 118 seconds a question and no partial credit on multiple select items, timed practice in the real question format is the step that turns a working lab into a pass.

What Does the SC-401 Exam Cover?

SC-401 covers three domains, each weighted 30 to 35 percent: implement information protection, implement data loss prevention and retention, and manage risks, alerts and activities. Passing awards the Microsoft Certified Information Security Administrator Associate credential. The whole exam sits inside Microsoft Purview and the related services that feed it.

Microsoft positions the credential at intermediate level, under the Microsoft 365 Security Center product, for the administrator role, with the subject given as information protection and governance. That combination describes the reader well: someone who already administers a tenant and now owns the data side of it.

The one thing the domain names hide is where the newest material lives. AI data security sits inside the third domain rather than standing on its own, so an objective list read at heading level makes the exam look unchanged.

What Are the SC-401 Exam Details?

SC-401 gives you 100 minutes to complete the assessment, carries 40 to 60 questions, and is passed at 700 on a 1000 point scale. It costs 165 US dollars, is booked through Pearson VUE, is proctored, and may include interactive components rather than only multiple choice items.

The duration is worth pausing on, because 120 minutes is quoted for this exam in a lot of places. Microsoft’s own SC-401 exam page states 100 minutes to complete the assessment. The 120 comes from Microsoft’s general duration policy, which allows 100 minutes for associate and expert role-based exams without labs and 120 minutes for those that may contain labs. SC-401 sits in the first group. Microsoft deliberately publishes no list of which exams carry labs, because a lab can be withdrawn at any time, so the exam page is the figure to trust.

The 700 pass mark is a scaled score rather than a percentage, so there is no fixed number of questions you can afford to lose. With a variable item count of 40 to 60, that is the only sensible way to score it. A failed first attempt can be retaken after 24 hours; later retakes carry longer waits. Working through SC-401 practice material before booking is the cheapest way to find out which of the three domains is thin.

Is SC-401 Just SC-400 With a New Number?

No. SC-401 replaces SC-400 and inherits most of its Purview content, but the credential name changed from Information Protection Administrator to Information Security Administrator and the objectives were extended into AI data security. Sensitivity labels, DLP, retention and insider risk carry over; the AI material and the surrounding governance framing are new.

For anyone part way through SC-400 preparation, that is good news. The classification work, the label lifecycle, the policy precedence rules and the retention model are the same product behaviours, and time spent on them is not wasted.

What actually changed

Three things. The role description now spans information security for sensitive data rather than information protection specifically. The third domain absorbed AI data security, including Data Security Posture Management for AI. And Adaptive Protection appears in the DLP objectives, tying policy strength to insider risk levels rather than treating the two as separate systems.

What that means for study material

Material written for SC-400 remains useful for roughly the first two domains and misses a meaningful part of the third. Anyone working from an older guide should treat the AI objectives as a separate reading exercise rather than assuming coverage. The CertificationBox SC-400 exam guide is still a reasonable orientation to the shared Purview ground.

What Does Implement Information Protection Ask For?

The information protection domain covers data classification, sensitivity labels and protection for content outside the cloud, at 30 to 35 percent of the exam. It runs from identifying an organisation’s sensitive information requirements through to applying labels automatically across Teams, SharePoint, Microsoft 365 Groups and Power BI.

Classification is the harder half. The objectives name custom sensitive information types, document fingerprinting, exact data match, trainable classifiers and optical character recognition support, which are five distinct mechanisms for finding sensitive content and each suits a different problem. Knowing which to reach for is a more realistic exam question than knowing how to configure one.

• Built in and custom sensitive info types for structured patterns such as identifiers and card numbers.
• Document fingerprinting for content that follows a known form or template.
• Exact data match for values checked against a known list rather than a pattern.
• Trainable classifiers for categories that cannot be expressed as a rule at all.

The labels half then covers roles and permissions, label creation for items and containers, protection settings and content marking, publishing policies, and auto-labelling. The domain closes outside the cloud entirely, with the Purview Information Protection client and scanner for on-premises data, and message encryption for mail. Microsoft’s own Purview documentation is the reference for all of it.

How Much of SC-401 Is Data Loss Prevention?

Data loss prevention shares its domain with retention, and the two together carry 30 to 35 percent of SC-401. DLP itself covers policy design, roles and permissions, policy and rule precedence, Adaptive Protection, Endpoint DLP and file policies in Defender for Cloud Apps. Retention covers labels, adaptive policy scopes, policy precedence and recovering retained content.

Precedence appears in both halves and is the concept most likely to decide a question. When several policies could apply to the same item, the outcome is determined by rules the exam expects you to be able to trace, and Microsoft provides Policy lookup precisely because the answer is not obvious. The underlying discipline is not Microsoft specific, and a general grounding in how data loss prevention works helps make sense of why the product behaves as it does.

Endpoint DLP is its own topic

The objectives for Endpoint DLP are specific: device requirements including file extensions, advanced rules for devices, endpoint settings, just in time protection and activity monitoring. Someone who has only configured DLP for Exchange and SharePoint should treat this as unfamiliar ground rather than an extension of what they know.

Adaptive Protection links the domains

Configuring DLP policies for Adaptive Protection means policy strength varies with a user’s insider risk level, which is calculated in the third domain. It is the clearest example of the exam expecting the three domains to be understood as one system rather than three product areas.

What Does the Exam Expect About AI Data Security?

SC-401 examines protecting data used by AI services as a named objective group inside the third domain. It covers implementing controls in Purview and in Microsoft 365 productivity workloads to protect content in an environment using AI services, the prerequisites for Data Security Posture Management for AI, the roles and permissions for it, configuring DSPM for AI policies, and monitoring activity in it.

The scope is narrower than the phrase suggests, and that should reassure anyone without a machine learning background. Nothing here asks about model training, prompt engineering or AI architecture. The question the objectives ask is a data governance one: when an assistant can read everything a user can read, what stops sensitive content leaving through it.

That reframing is what makes the material examinable at administrator level. Labels and DLP policies already control what leaves through mail and endpoints. AI services are simply another egress path, and DSPM for AI is the visibility layer over it. The broader discipline is moving quickly, and the Cloud Security Alliance AI research is a useful independent view of the risks the objectives are responding to.

The practical consequence for study is that this material is genuinely new. There is no SC-400 equivalent to fall back on, and it needs hands on time in a tenant rather than reading.

Why Are All Three Domains Weighted the Same?

All three SC-401 domains sit at 30 to 35 percent, which is the flattest weighting on any exam of this kind. There is no dominant domain to prioritise and no light domain to skim. Microsoft is signalling that the three areas are one job rather than three specialities, and that a candidate strong in two of them is not ready.

The ranges overlap completely, so the actual split varies between forms of the paper. Any of the three could be the largest on the day you sit it. Planning study time in equal thirds is the only defensible reading of that.

It also has a practical consequence for revision order. On an exam with a 30 percent domain, you start there. Here, the better sequence follows the product rather than the marks: classify content first, then control where it goes, then watch what happens to it. That order matches how the objectives reference each other, with Adaptive Protection in the second domain depending on insider risk levels from the third.

How Should You Prepare for the SC-401 Exam?

Preparation works best in product order rather than domain order, because the three domains are evenly weighted and reference each other. Classification has to be understood before labels make sense, labels before DLP policies, and insider risk before Adaptive Protection. Working the objectives in that dependency order removes most of the confusion candidates report.

1. Start with data classification and learn where each mechanism fits, separating custom sensitive info types, document fingerprinting, exact data match and trainable classifiers by the kind of content each is designed to find.
2. Move to sensitivity labels, covering creation for items and containers, protection settings, publishing policies and auto-labelling, since everything downstream depends on content being labelled correctly.
3. Cover the on-premises and mail side of information protection, including the Purview Information Protection client and scanner and message encryption, which candidates working only in the cloud tend to skip.
4. Work data loss prevention next, paying particular attention to policy and rule precedence and to Endpoint DLP, which behaves differently from DLP in Exchange and SharePoint.
5. Add retention labels and policies, and practise interpreting precedence with Policy lookup rather than reasoning it out from memory.
6. Study Insider Risk Management properly, including connectors, policy indicators, templates and risk levels, because Adaptive Protection in the DLP domain depends on it.
7. Finish with the AI data security objectives, setting up Data Security Posture Management for AI in a tenant rather than reading about it, since there is no equivalent material on the previous exam to fall back on.
8. Take Microsoft’s free practice assessment and the exam sandbox before booking, then sit timed practice questions to confirm the pace across 40 to 60 items in 100 minutes.

Keeping the Credential Current

Microsoft role-based certifications expire unless they are renewed, and SC-401 is one of them. Renewal is free and is done by passing an online assessment on Microsoft Learn rather than by sitting the full exam again. The assessment is unproctored, taken at your own desk, and can be retried.

That model suits a product that changes as often as Purview does. A credential awarded once and never revisited would say progressively less about whether someone can administer the current feature set, and the renewal assessment is deliberately weighted towards what has changed.

One small piece of practical advice from Microsoft’s own booking guidance is worth repeating: register with a personal Microsoft account rather than a work or school account. Certifications tied to an organisational account become awkward to reach when you change employer. If you are mapping the wider Microsoft security track, the SC-200 certification guide covers the operations analyst route that sits alongside this one.

Frequently Asked Questions

How long is the SC-401 exam?

Microsoft states 100 minutes to complete the assessment. The 120 minute figure comes from Microsoft’s general duration policy, which allows 100 minutes for associate and expert role-based exams without labs and 120 for those that may contain labs. SC-401 is in the first group.

How many questions are on SC-401?

Between 40 and 60, and the exam may include interactive components rather than only multiple choice items. The variable count is why the result is reported as a scaled score.

What is the passing score for SC-401?

700 on a scale of 1000. Because it is scaled rather than a raw percentage, there is no fixed number of questions you can afford to get wrong.

Does SC-401 replace SC-400?

Yes. The credential moved from Information Protection Administrator to Information Security Administrator, keeping most of the Purview content and adding AI data security objectives that SC-400 did not examine.

How much does SC-401 cost?

165 US dollars, booked through Pearson VUE. Microsoft also publishes a free practice assessment and an exam sandbox on the credential page.

Which domain is worth the most marks?

None of them. All three are weighted 30 to 35 percent, and the ranges overlap completely, so any of the three could be the largest on the form you sit.

Do I need machine learning knowledge for the AI objectives?

No. The AI objectives are data governance ones: controls in Purview and Microsoft 365 workloads, and setting up and monitoring Data Security Posture Management for AI. No model building is examined.

Does the SC-401 certification expire?

Yes. Microsoft role-based certifications expire unless renewed, and renewal is free through an unproctored online assessment on Microsoft Learn rather than a full re-sit.

What languages is SC-401 available in?

Seven: English, Portuguese for Brazil, French, German, Japanese, Simplified Chinese and Spanish.

Can I retake SC-401 straight away if I fail?

Not immediately. A first retake can be booked 24 hours after the initial attempt, and the waiting period increases for subsequent attempts.

Conclusion

SC-401 rewards someone who treats Purview as one system. The three domains are weighted identically because classification, control and monitoring are three views of the same job, and the objectives reference each other often enough that studying them in isolation leaves gaps.

Two things are worth fixing in your plan before anything else. The exam is 100 minutes, not 120, so rehearse at the real pace. And the AI data security objectives have no SC-400 equivalent, which makes them the one part of the syllabus where older material will quietly let you down. Build them in a tenant, then use practice questions in the exam’s own format to find whatever is left.

What Is the HCIA-Datacom Certification?

The HCIA-Datacom certification is Huawei’s associate level credential in data communication, earned by passing exam H12-811. Its full name is Huawei Certified ICT Associate-Datacom, and it covers eight weighted domains running from network reference models and Ethernet switching through IP routing, security services, wireless, data centre basics, operations and a campus networking solution.

Datacom is one of several Huawei ICT tracks, and it is the enterprise networking one. The blueprint is written around Huawei devices and their operating system rather than around abstract theory, so the configuration topics assume you will be working on Huawei switches, routers and access controllers rather than a generic device.

What makes it unusual for an associate paper is the breadth. Most vendor entry credentials stop at the routed and switched network. This one adds a wireless domain, a data centre domain, an operations and automation domain and a solution design domain on top, and gives them real weight rather than a passing mention.

What Are the H12-811 Exam Details?

H12-811 carries 60 questions in 90 minutes, is scored out of 1000 with a passing score of 600, and costs 200 US dollars. It is booked through Pearson VUE. Passing it awards the Huawei Certified ICT Associate-Datacom credential, published by Huawei as HCIA-Datacom V1.0.

Sixty questions in ninety minutes is ninety seconds an item, which is comfortable by certification standards and tells you something about the question style. There is room for a configuration snippet to be read and reasoned about rather than only recognised, so expect stems that show you a command output or a topology and ask what happens next.

The 600 out of 1000 pass mark is a scaled score. It does not mean 36 correct answers out of 60, because items are not worth equal raw marks across the scale, so counting your way to a target is not a strategy. Working through H12-811 sample questions tells you far more about your position than arithmetic on the pass mark does.

How Is H12-811 Weighted Across Eight Domains?

H12-811 splits into eight weighted domains: IP Technology Basics at 25 percent, Ethernet Technology Basics at 20 percent, Network Security and Services at 15 percent, and four domains at 10 percent or below. The three largest carry 60 percent of the paper between them, which leaves 40 percent spread across five smaller domains that are easy to under prepare.

Read the tail rather than the head. The three small domains at 10, 5 and 5 percent add up to 20 percent of the paper, roughly twelve questions, and they are the ones candidates skip because they look like padding. Twelve questions is more than the gap between most passes and most failures.

There is also a structural point in how Huawei has ordered the list. The domains run in the order you would actually build a network: understand the models, switch the frames, route the packets, secure and translate them, then extend to wireless, data centre and campus. Studying in blueprint order is unusually sensible here.

Why Does IP Technology Carry the Largest Share?

IP Technology Basics is the biggest domain on H12-811 at 25 percent, roughly fifteen questions. It names four sub-topics: IP address and configuration, IP routing basics, OSPF fundamentals and configuration, and IPv6 address and configuration. It is the only domain that carries a named routing protocol, which is why it dominates.

OSPF is the single most examinable technology in the whole blueprint. It appears as its own sub-topic inside the heaviest domain, and it is the protocol every later Huawei credential builds on. Huawei’s own OSPF reference page describes the areas, LSA types and neighbour states in the same vocabulary the exam uses, which matters because terminology differs subtly between vendors.

IPv6 sitting at the same level as IPv4 addressing is a deliberate signal. It is not an appendix topic on this paper. Address structure, configuration and the coexistence questions that follow from running both stacks are inside scope at associate level, which is not true of every vendor’s entry credential.

Routing basics means the table, not just the protocol

The IP routing basics sub-topic is separate from the OSPF one, and that separation is the hint. You are expected to reason about the routing table itself: how routes are selected, what preference and cost do, how static and dynamic entries coexist, and what happens when two sources offer a path to the same destination. Questions of that shape do not require OSPF at all, and they are the ones that catch candidates who learned a protocol without learning the table underneath it.

What Does the Ethernet Domain Expect You to Configure?

Ethernet Technology Basics is worth 20 percent and names four sub-topics: Ethernet switching basics, VLAN fundamentals and configuration, STP fundamentals and configuration, and Ethernet link aggregation. Three of those four say configuration explicitly, so this is the most hands-on domain on the paper.

VLANs are where most of the marks sit in practice, because they underpin everything above them. Access and trunk port behaviour, tagging, the default VLAN, and inter-VLAN routing all follow from the same model, and Huawei’s VLAN documentation sets out the port types in the exact terms the exam uses. Huawei names its port types differently from other vendors, and that difference is examinable.

Spanning tree gets its own sub-topic rather than a mention. Expect root bridge election, port roles and states, and the reasoning about why a particular port ended up blocking. All of it sits on top of the Ethernet layer defined by IEEE 802.3, and the exam expects standard behaviour rather than vendor specific shortcuts.

Link aggregation closes the domain. Two devices, several physical links, one logical one, and a set of rules about which member links may join. It is a small topic with a predictable question shape, and it is the cheapest set of marks in the whole 20 percent.

Which Domains Are Not Routing and Switching?

Four domains on H12-811 sit outside routing and switching entirely: WLAN Technology Basics at 10 percent, Network O and M and Troubleshooting at 10 percent, Data Center Network Basics at 5 percent, and Typical Campus Networking Solution at 5 percent. Together they are 30 percent of the paper, or roughly eighteen questions, and they are the most commonly skipped part of the blueprint.

The WLAN domain names three sub-topics: WLAN overview, WLAN networking architecture, and WLAN fundamentals and configuration. Architecture is the one to take seriously, because the exam distinguishes between the ways access points and controllers are arranged rather than treating wireless as one thing. The Wi-Fi Alliance overview is the neutral reference for the generation names and capabilities that sit under Huawei’s product vocabulary.

Network O and M and Troubleshooting is quietly the most modern domain on the paper. Alongside device management and troubleshooting it names network programming and automation, which puts scripting and programmatic device interaction inside an associate level exam. That is not decoration. It reflects how Huawei expects campus networks to be run.

The data centre domain covers DC evolution and DCN basics at 5 percent, which is concept level rather than configuration level. The campus solution domain, also 5 percent, covers basic concepts of campus networks and practices in campus network projects, and it is the only domain framed around a delivered project rather than a technology. Huawei’s campus network reference covers the architecture those questions assume.

How Much Security Is in an Associate Level Paper?

Network Security and Services is worth 15 percent of H12-811, the third largest domain, and names four sub-topics: ACL fundamentals and configuration, AAA fundamentals and configuration, network services and applications, and NAT fundamentals and configuration. That is roughly nine questions on control, identity and address translation.

ACLs carry more weight than their size suggests, because they appear as a tool elsewhere too. An access control list is how traffic is matched for filtering, and the same matching logic reappears in NAT configuration and in policy questions. Learning the ACL model properly pays for itself twice.

AAA is the identity half. Authentication, authorisation and accounting as a framework, and how a device is configured to use it, sits at associate level here rather than being reserved for a security specialisation. Candidates coming from a pure switching background often meet it for the first time on this exam.

The network services and applications sub-topic is the quiet one. It covers the services a network provides rather than the network itself, and questions here tend to test whether you know which service solves which problem rather than how to configure it in depth.

Where Does HCIA-Datacom Sit in the Huawei Path?

HCIA-Datacom is the entry tier of the Huawei ICT certification ladder, which runs associate, then professional, then expert. HCIA sits at the bottom as the associate credential, HCIP is the professional level above it, and HCIE is the expert level at the top. The Datacom track keeps the same subject at all three tiers, so H12-811 is the first step of a defined route rather than a standalone badge.

That structure changes how the exam should be treated. The domains that look thin here, wireless, data centre and campus solution, are the ones that expand into full subjects at the professional tier. Learning them properly now is preparation for the next exam, not just for this one.

The step up is real. If you want to see the shape of it, our walkthrough of the H12-891 expert exam shows how far the same Datacom subject travels once it reaches the top tier of the ladder.

One practical consequence for planning: because the tracks share subject matter rather than stacking prerequisites, there is nothing stopping a candidate from studying the associate blueprint in the order that suits their existing job. Someone already running a campus wireless estate can start at the WLAN domain and work backwards without breaking anything.

How Should You Prepare for the H12-811 Exam?

Preparation for HCIA-Datacom works best when the study order follows the blueprint order, because Huawei has written the domains in the sequence a network is actually built. Start with the models and the device operating system, then switch, then route, then secure, then take the four smaller domains seriously rather than leaving them to the final week.

1. Learn the network reference models and the Huawei device operating system first, since every configuration topic that follows assumes you can navigate the command line.
2. Work through the Ethernet domain hands on, configuring VLANs, spanning tree and link aggregation rather than reading about them, because three of its four sub-topics say configuration explicitly.
3. Build the IP domain next, giving OSPF the most time of any single technology on the paper and treating IPv6 addressing as a first class topic rather than an appendix.
4. Add ACLs, AAA and NAT together, since the matching logic in an access control list reappears inside NAT configuration and in policy questions.
5. Cover the four smaller domains deliberately, allocating real hours to wireless, operations and automation, data centre concepts and the campus solution, which together carry 30 percent of the paper.
6. Rehearse under a ninety minute timer across all eight domains at once, so the small domains are answered at the same speed as the large ones.

Give yourself a written record of which domains you keep losing marks on rather than a general feeling about them. Our older H12-811 exam materials page collects the practice resources for that rehearsal in one place.

Frequently Asked Questions

How many questions are on the H12-811 exam?

Sixty questions in 90 minutes, which works out at about ninety seconds per item. That is enough time to read a configuration snippet and reason about it rather than only recognising an answer.

What is the passing score for HCIA-Datacom?

600 out of 1000. It is a scaled score rather than a raw count, so it does not translate into a fixed number of correct answers out of the sixty.

How much does the HCIA-Datacom exam cost?

200 US dollars, booked through Pearson VUE.

Which domain is worth the most on H12-811?

IP Technology Basics at 25 percent, covering IP addressing, routing basics, OSPF and IPv6. Ethernet Technology Basics is second at 20 percent and Network Security and Services third at 15 percent.

Is HCIA-Datacom only about routing and switching?

No. Four domains sit outside routing and switching entirely: WLAN at 10 percent, network operations and troubleshooting at 10 percent, data centre network basics at 5 percent, and a campus networking solution at 5 percent. Together that is 30 percent of the paper.

Does the exam cover automation?

Yes. Network programming and automation is a named sub-topic inside the Network O and M and Troubleshooting domain, which carries 10 percent. Programmatic interaction with devices is inside scope at associate level.

Is IPv6 on the HCIA-Datacom exam?

Yes. IPv6 address and configuration is one of the four sub-topics in the largest domain, listed alongside IPv4 addressing rather than beneath it.

What version of HCIA-Datacom is current?

Huawei publishes the credential as HCIA-Datacom V1.0, and the exam code appears in search demand as both H12-811 and H12-811_V1.0. No successor version has been announced.

What comes after HCIA-Datacom?

HCIP at the professional tier and HCIE at the expert tier. The Datacom subject continues across all three levels, so the smaller domains on this paper expand into full subjects higher up.

How much security is on the exam?

Fifteen percent, covering ACLs, AAA, network services and applications, and NAT. It is a general networking security domain rather than a specialist security syllabus, and it assumes no prior security credential.

Conclusion

The HCIA-Datacom certification is wider than the shorthand suggests. Eight weighted domains, 25 percent on IP technology, 20 percent on Ethernet, 15 percent on security and services, and a full 30 percent spread across wireless, operations and automation, data centre basics and a campus solution. Sixty questions, 90 minutes, 600 out of 1000 to pass, at 200 US dollars through Pearson VUE.

Study it in the order Huawei wrote it, configure the Ethernet topics rather than reading them, give OSPF the largest single block of time, and refuse to treat the four small domains as optional. They are eighteen questions, and eighteen questions decide the result more often than any single protocol does.

What Is the CrowdStrike Falcon Administrator Certification?

The CrowdStrike Falcon Administrator certification, exam code CCFA-200b, validates the ability to run the Falcon platform rather than to investigate what it finds. It covers eight areas: user management, sensor deployment, host management and setup, group creation, policy application, rules configuration, dashboards and reports, and workflows. CrowdStrike aims it at administrators and at analysts who hold administrative console access.

Every section describes something you do inside the Falcon console. There is no malware analysis on this paper, no memory forensics, no scripting language to learn. What there is instead is a long list of configuration decisions and their consequences, which is a different kind of difficulty and one that rewards having administered a real tenant.

CrowdStrike recommends at least six months of experience with the platform in a production environment before attempting it. That recommendation reads as genuine rather than promotional once you look at the objectives, several of which are about predicting the effect of a setting rather than knowing where the setting lives.

Where Does CCFA Sit Among the CrowdStrike Certifications?

CrowdStrike publishes eight certifications: six platform credentials covering Practitioner, Administrator, Responder, Hunter, SIEM Analyst and SIEM Engineer, and two specialist credentials for Identity and Cloud. CCFA is the administration credential in that set, and it is the one concerned with configuring the platform rather than working the alerts it produces.

The distinction matters when choosing. Responder and Hunter are analyst credentials: they assume the platform is already configured and ask what you make of what it shows you. Administrator assumes the alerts will arrive and asks whether the tenant is set up so that the right ones do. Two people in the same SOC can reasonably sit different exams.

The full map is published on CrowdStrike’s own Falcon certification programme page, which also names the recommended learning path for each credential. None of the eight is marked retired, so the whole set is currently attainable.

For a candidate already holding an analyst credential, CCFA is genuinely additive rather than a step down. The two skill sets overlap less than the shared platform suggests, and the objectives here are the ones most likely to be missing from an analyst’s day to day.

What Are the CCFA-200b Exam Details?

CCFA-200b carries 60 questions in 90 minutes, costs 250 US dollars, and requires 80 percent to pass. It is booked through Pearson VUE. That combination, a high bar over a moderate number of items, means there is very little room to be uncertain across the eight sections.

Ninety minutes for 60 questions gives ninety seconds an item, which is workable. The pressure on this paper does not come from the clock. It comes from the mark you have to reach, and from the fact that CrowdStrike publishes no weightings, so there is no small section you can afford to leave alone.

Because the margin is narrow, timed rehearsal is worth more here than on most papers. Working through CCFA-200b sample questions against the 80 percent bar rather than a comfortable 70 tells you whether you are actually ready.

Why Is the Pass Mark Set at 80 Percent?

Eighty percent of 60 questions is 48 correct answers, leaving a margin of twelve. Spread across eight sections that works out at roughly one and a half questions per section, so a single topic you have skipped entirely can put the result out of reach before the clock is even a factor.

The reason for the height of the bar is visible in the objectives themselves. Almost every one of them describes a change that affects a live security posture: disabling detections for a host, adjusting prevention policy settings, configuring containment exclusions, releasing a quarantined file. A partially informed administrator making those changes is a genuine risk, which is not true of every certification subject.

Practically, it changes how you should treat your weakest section. On a 62 or 70 percent exam you can accept one soft area and pass on the strength of the rest. At 80 percent that arithmetic stops working, because the twelve questions you can lose are the entire budget for careless errors, ambiguous wording and genuine gaps combined.

There is one consolation. Sixty questions is a small enough set that the sections cannot be sampled deeply, so breadth beats depth here. Knowing something about every objective is a better strategy than knowing three sections thoroughly.

What Does the Sensor Deployment Section Expect?

The sensor deployment section covers four things: determining the prerequisites for a successful Falcon sensor installation across supported operating systems, analysing default policies and preparing workloads, uninstalling a sensor, and troubleshooting one. It is the section closest to traditional endpoint administration and the one most likely to appear as a scenario.

Prerequisites carry more weight than they sound like they should. Sensor installation depends on operating system version, on connectivity to the cloud, and on the customer identifier being supplied correctly, and a question describing a failed rollout is usually testing which of those was missed.

Uninstallation is a named objective in its own right, which is unusual and worth noticing. Removing a sensor is not simply the install in reverse, and the exam expects you to know the controls that stop it happening accidentally.

Reduced Functionality Mode is the sleeper topic

The host management section names Reduced Functionality Mode three separate times: explaining its impact, explaining its causes, and locating hosts that are in it. Three references to one concept in a blueprint that names most things once is the clearest weighting signal this exam gives you. A sensor in RFM is still installed and still reporting, but is not doing the job you think it is doing, which is exactly the sort of state an administrator is expected to find and fix.

How Much of the Exam Is Policy Configuration?

Policy application is the largest section by objective count, with six named items covering prevention policy settings and their effect on security posture, sensor update policy, applying roles and policies alongside Falcon RTR audit logs, containment policy behaviour, containment exclusions for IP addresses and subnets, and quarantined file management.

Prevention policy is the heart of it. These settings decide what the sensor blocks rather than merely reports, so a question about them is usually framed as a consequence: given this configuration, what happens when this behaviour occurs. Knowing where the toggles are is not enough, because the exam asks what turning them on does to the estate.

Containment is the pair to it and is frequently misread. Containing a host cuts its network communication while leaving it reachable by the platform, and the exclusion list for IP addresses and subnets is what keeps essential connectivity alive during that period. Configuring the exclusions is a named objective, which tells you the exam expects the operational detail and not just the concept.

Sensor update policy is the quiet one, and it is the objective most likely to be under prepared. It governs how and when sensors move between versions, which is an availability decision as much as a security one, and administrators who inherited a working tenant often never touch it.

What Do You Need to Know About IOA and IOC Rules?

The rules configuration section asks you to create custom indicator of attack rules for monitoring non malicious behaviour, to interpret business requirements so that trusted activity is allowed and false positives are resolved, to assess indicator of compromise settings for a customised security posture, and to understand management configurations that apply across the whole customer identifier.

The distinction between the two indicator types is the concept the section turns on. An indicator of compromise is an artefact: a hash, a domain, an address that has been seen before. An indicator of attack describes behaviour, a sequence of actions that looks like an attack whether or not anything on the list has appeared. The behavioural taxonomy behind that idea is maintained independently by MITRE ATT&CK, and reading a few technique entries there is the fastest way to make custom rule writing feel less arbitrary.

The false positive objective is the one that reads like real work, because it is. Interpreting a business requirement means someone in the organisation needs a piece of software to do something that looks suspicious, and your job is to allow exactly that without opening a hole. Exam questions of this shape give you the requirement and ask which mechanism fits.

Customer identifier wide configuration closes the section. Some settings apply to a single host group and some apply to the entire tenant, and knowing which is which prevents an answer that is right in scope but wrong in reach.

Which Console Pages Should You Have Actually Used?

Several CCFA objectives name a specific console page and expect operational familiarity with it rather than knowledge of what it is for. Host Management appears with its filtering behaviour named explicitly. Roles and permissions appear as a creation task. API key management appears as its own objective, as do sensor reports, audit log types and workflow triggers.

Filtering on the Host Management page is the clearest example of the pattern. The objective is not to know that filtering exists; it is to understand how it is used, which in practice means finding inactive sensors, finding hosts in a degraded state, and knowing the retention period after which an inactive sensor disappears from view. All three are separately named objectives that resolve on the same screen.

Workflows are the newest part of the blueprint and the shortest, with a single objective about configuring a workflow to respond to a defined trigger. Short does not mean absent, and on a paper with a twelve question margin a single unfamiliar objective is a real cost. The wider platform context is set out on CrowdStrike’s Falcon platform overview.

If you have never worked in an endpoint detection and response product at all, the category background is worth an hour before the exam material, and the neutral EDR overview covers what these tools are for without a vendor frame. For how the neighbouring credential reads by comparison, our walkthrough of the CCFH Falcon Hunter exam shows the analyst side of the same platform.

How Should You Prepare for the CCFA Exam?

Preparation for CCFA works best inside a real or trial Falcon tenant, because most objectives describe a configuration change and its consequence rather than a fact. Cover all eight sections before going deep on any of them, since the 80 percent bar punishes a missing topic far more than it punishes a shallow one.

1. Read all eight sections of the blueprint first and mark every objective you have never performed, because at a twelve question margin those are the ones that decide the result.
2. Work through roles and permissions in the console, creating a role, assigning a user to it, and generating an API key, so user management is muscle memory rather than theory.
3. Install a sensor on each supported operating system you can reach, then uninstall one and deliberately break another so that troubleshooting and Reduced Functionality Mode are things you have seen.
4. Build host groups and attach different prevention and sensor update policies to them, then predict and check what each setting changes about the security posture.
5. Configure a containment policy with an IP or subnet exclusion, contain a test host, and confirm what still communicates while it is contained.
6. Write a custom indicator of attack rule for a benign behaviour, then resolve the false positives it produces, since that loop is exactly what the rules objectives describe.
7. Finish on dashboards, audit logs and a single workflow trigger, then rehearse against the 80 percent bar rather than a comfortable score.

The recommended course path sits in CrowdStrike University, and the wider set of credentials is mapped on our CrowdStrike certification hub for anyone still deciding which one to sit.

Frequently Asked Questions

How many questions are on the CCFA-200b exam?

Sixty questions in 90 minutes, which is ninety seconds per item. The time is comfortable; the pass mark is what makes the paper hard.

What is the passing score for the CrowdStrike Falcon Administrator exam?

Eighty percent, which is 48 correct answers out of 60. That leaves a margin of twelve questions across eight sections.

How much does the CCFA certification cost?

250 US dollars, booked through Pearson VUE.

What is the difference between CCFA and CCFR?

CCFA is the administrator credential and covers configuring the Falcon platform: roles, sensors, host groups, policies and rules. CCFR is the responder credential and covers working the detections the platform produces. They test opposite halves of the same alert.

How much Falcon experience is recommended before CCFA?

CrowdStrike suggests at least six months with the platform in a production environment. Several objectives ask you to predict the effect of a setting, which is difficult to answer from reading alone.

Are the CCFA domains weighted?

No percentages are published for the eight sections. The nearest weighting signal is that Reduced Functionality Mode is named three separate times and policy application carries six objectives, more than any other section.

Does the exam cover custom detection rules?

Yes. Creating custom indicator of attack rules, assessing indicator of compromise settings, and resolving false positives against a business requirement are all named objectives in the rules configuration section.

What is Reduced Functionality Mode?

A state in which a Falcon sensor is installed and reporting but not operating with full capability. The blueprint asks you to explain its impact, explain its causes, and locate hosts that are in it.

How many CrowdStrike certifications are there?

Eight: six platform credentials covering Practitioner, Administrator, Responder, Hunter, SIEM Analyst and SIEM Engineer, plus two specialist credentials for Identity and Cloud.

Is CCFA worth taking if you already hold an analyst credential?

The overlap is smaller than the shared platform suggests. An analyst credential assumes the tenant is configured; CCFA is about the configuration itself, including policy design, containment exclusions and sensor update control, which many analysts never touch.

Conclusion

The CrowdStrike Falcon Administrator certification is a console exam with a high bar. Sixty questions in 90 minutes, 250 US dollars, 80 percent to pass, and eight unweighted sections running from roles and API keys through sensor deployment, host groups, prevention and containment policy, custom rules, reporting and workflows.

Prepare it inside a tenant rather than a book. Break a sensor so you have met Reduced Functionality Mode, contain a host so you understand what an exclusion protects, and write a rule that produces false positives so you have had to resolve them. Then rehearse against 48 out of 60 rather than a comfortable score, because on this paper twelve wrong answers is the entire budget.

What Is the AVIXA CTS Certification?

CTS is the Certified Technology Specialist credential awarded by AVIXA, the trade association for the audiovisual industry. It is the general-practitioner certification in AV: it covers the whole lifecycle of a system, from working out what a client needs through designing, installing, supporting and maintaining it, rather than specialising in any one stage.

Audiovisual work sits awkwardly between trades. It borrows from electronics, networking, acoustics, lighting, construction and project management, and no single one of those disciplines describes it. The audiovisual field has historically had few portable credentials, which is a large part of why CTS carries weight with employers and on tender documents.

AVIXA sets out the credential and its application process on its own CTS certification page. Two points there are worth knowing before you start. There are no formal prerequisites to apply, and AVIXA recommends around six months of AV experience rather than requiring it.

That openness is easy to misread. No prerequisite does not mean no expectation. The blueprint is written from a job analysis of what working AV professionals actually do, so a candidate with no site experience is being asked to reason about tasks they have never performed.

How Is the CTS Exam Weighted Across the Four Duties?

The CTS blueprint splits into four duties: Creating AV Solutions at 35 percent, Implementing AV Solutions at 30 percent, Servicing AV Solutions at 20 percent, and Supporting AV System Operation at 15 percent. Underneath those sit ten individual tasks, each carrying its own published percentage, which is unusually granular for a certification blueprint.

Read down the task column and the exam’s real shape appears. The two largest single tasks are integrating an AV solution and managing that integration, at 15 percent each. Providing AV support matches them at 15 percent. Those three tasks alone are 45 percent of the paper, and none of them is a design activity.

At the other end, supervising AV operations is worth 4 percent, the smallest task on the blueprint. It is the one candidates most often over-prepare, because it sounds senior. Nine questions of the paper turn on maintenance and troubleshooting between them, more than twice its weight.

What Are the CTS Exam Details?

The CTS exam is 115 questions in 150 minutes, scored on a scaled range where 350 out of 500 is a pass, and delivered through Pearson VUE. That works out at roughly 78 seconds per question, which is generous by certification standards and reflects the scenario framing of much of the paper.

Booking runs through Pearson VUE AVIXA examinations once AVIXA has approved your application. There is a detail in that sequence worth planning around: your eligibility notice gives you 120 days to sit the exam, counted from the day the notice is emailed. Applying before you are ready starts a clock rather than reserving a place.

A scaled score of 350 out of 500 is not the same as 70 percent of the questions. Scaling adjusts for the difficulty of the particular form you are given, so two candidates answering the same number of items correctly on different forms can land on different scaled scores. Practising against CTS exam questions is useful for finding weak duties, but treat any raw percentage you score as a rough guide rather than a prediction.

How Much Does the CTS Exam Cost?

The CTS exam costs 490 US dollars for non-members and 390 US dollars for AVIXA Premium and Elite members, a 100 dollar difference that is one of the more meaningful membership arguments in the industry. AVIXA also publishes the fee in euros, pounds and Australian dollars, and operates discounted pricing for candidates in eligible emerging economies.

The regional pricing matters more than it looks. Candidates in India, South East Asia and parts of Latin America regularly search for the local cost precisely because the headline dollar figure is misleading for them, and AVIXA lists the qualifying countries in its candidate handbook rather than on the pricing summary.

One more cost is easy to miss. AVIXA does not require any preparatory course before the exam, so the training spend is genuinely optional. Candidates who buy the two-course sequence are choosing structure, not clearing a gate.

What Does Creating AV Solutions Actually Cover?

Creating AV Solutions is the largest duty at 35 percent, and it covers everything that happens before anything is installed: understanding what the customer needs, surveying the room, writing the project scope, and producing the design. Its four tasks are weighted at 7, 9, 9 and 10 percent, so no single one dominates.

The site survey task at 9 percent is broader than most candidates expect. The blueprint names lighting, access, acoustics, seating, finishes, architectural features, dimensions and logistical constraints. That is a walk-the-room discipline, and it rewards anyone who has actually stood in a half-finished space with a tape measure and a light meter.

Scope and design are separate skills

Developing a project scope and designing the solution are listed as two distinct tasks for a reason. Scope defines what the system will and will not do and which components are in the package. Design produces the drawings, the program report and the bill of materials. Conflating them is the classic route to a project that is delivered exactly as drawn and still fails the client.

Customer needs analysis, the smallest task in this duty at 7 percent, is also the one most often skipped in real projects. The exam treats it as the foundation the other three tasks stand on, and questions here tend to test whether you can separate what a client asked for from what they actually require.

Why Do Implementation and Service Take Half the Paper?

Implementing AV Solutions is 30 percent and Servicing AV Solutions is 20 percent, so together they carry half the exam. Add Supporting AV System Operation at 15 percent and roughly two thirds of CTS is about what happens after the design is signed off, which is where AV careers are actually spent.

Implementation splits evenly into two 15 percent tasks. Integrating the solution covers systems verification and supply installation, the hands-on half. Managing the integration covers training, schematics, warranties, operations manuals and as-built drawings, the documentation half. Both are the same weight, and the second is routinely the weaker area for technically strong candidates.

Servicing splits three ways. Supervising AV operations is 4 percent, conducting maintenance activities is 8 percent, and troubleshooting and repairing solutions is 8 percent. The maintenance task explicitly names preventative maintenance, firmware upgrades and equipment upgrades, which places firmware management squarely inside the exam scope.

Support is a whole duty on its own

Supporting AV System Operation is a single 15 percent task, and its scope is wider than the name suggests: troubleshooting, remote assistance, live event support, in-room operation and end-user training. Live event support in particular is a distinct skill, closer to broadcast operations than to installation work, and it is worth deliberate revision if your background is fixed installs.

How Should You Prepare for the CTS Exam?

Preparation for the AVIXA CTS certification works best when it follows the blueprint’s own order, because the four duties describe a project lifecycle rather than four separate subjects. Working through them in sequence means each duty arrives with the context the previous one built.

1. Audit yourself against all ten tasks first, scoring each one honestly as done regularly, done occasionally, or never done, before opening a single study resource.
2. Close the never-done gaps with real exposure, walking a site survey with a colleague or reading a completed scope of work end to end, since these tasks are hard to learn from a page.
3. Study the design and documentation tasks together, working from a real bill of materials and its matching as-built drawings so the connection between them is concrete.
4. Apply only when the audit shows no never-done tasks left, because the eligibility notice starts a 120 day clock the moment it is emailed.
5. Finish with a full timed rehearsal of 150 minutes across all four duties, then review by task rather than by score to see which of the ten is still costing you marks.

AVIXA publishes its own two-course sequence and supporting material through its certification prep overview, which is worth reading even if you do not buy the courses, because it shows how AVIXA itself groups the material. For a wider view of what the credential involves before you commit, the site’s CTS certification overview covers the application route and what candidates typically find hardest.

The step most people get wrong is the fourth one. Applying early feels like progress and is the single most common reason a candidate ends up sitting the exam underprepared, because 120 days disappears quickly around a full project schedule.

Which AVIXA Credential Comes After CTS?

CTS is the general credential and the entry point to two specialisms. CTS-D covers design, CTS-I covers installation, and both require CTS first. AVIXA also offers ANP, the Audiovisual Network Professional credential, for practitioners whose work has moved decisively toward networked AV.

Choosing between the two specialist paths is mostly a question of where your time already goes. If the Creating AV Solutions duty felt like familiar ground and the integration tasks felt like revision, design is the natural direction. If the reverse was true, installation is. Candidates weighing the design route will find the specialist blueprint noticeably deeper in acoustics and signal management, and our CTS-D exam resources set out what changes at that level.

ANP sits slightly apart. It is not a tier above CTS so much as a sideways move for AV professionals working with IP-based distribution, network design and converged infrastructure. For anyone whose recent projects have involved more switch configuration than cable pulling, it may matter more than either specialism.

Whichever direction you take, the credential has to be maintained rather than simply earned. AVIXA runs a renewal-unit programme, and CTS holders accumulate renewal units through continuing education and industry participation to keep the credential current.

Frequently Asked Questions

How many questions are on the AVIXA CTS exam?

One hundred and fifteen questions in 150 minutes. That is roughly 78 seconds per question, which is comfortable by certification standards and reflects how many items are framed as short scenarios rather than direct recall.

What is the passing score for the CTS exam?

Three hundred and fifty out of a scaled 500. Because the score is scaled rather than a raw percentage, two candidates answering the same number of questions correctly on different exam forms can receive different final scores.

How much does the CTS exam cost?

Four hundred and ninety US dollars for non-members and 390 dollars for AVIXA Premium and Elite members. AVIXA also publishes euro, pound and Australian dollar pricing, and discounted rates apply in eligible emerging economies.

Are there prerequisites for the AVIXA CTS certification?

No formal prerequisites are required to apply. AVIXA recommends around six months of audiovisual experience, which is guidance rather than a gate, but the blueprint assumes familiarity with real project work.

Which CTS duty carries the most marks?

Creating AV Solutions, at 35 percent. Implementing AV Solutions follows at 30 percent, Servicing AV Solutions at 20 percent, and Supporting AV System Operation at 15 percent as a single task.

How long is the CTS eligibility window?

One hundred and twenty days from the day your eligibility notice is emailed to you. The clock starts on approval rather than on booking, so applying before you are ready shortens your effective preparation time.

Do I have to take an AVIXA course before the CTS exam?

No. AVIXA states that no preparatory course is required to sit the exam. The two-course sequence it publishes is optional structure for candidates who want a guided path through the blueprint.

What is the difference between CTS, CTS-D and CTS-I?

CTS is the general credential covering the whole AV lifecycle. CTS-D specialises in design and CTS-I in installation, and both require CTS as a prerequisite before you can pursue them.

Is troubleshooting part of the CTS exam?

Yes, in two places. Troubleshooting and repairing AV solutions is an 8 percent task under Servicing, and troubleshooting also appears inside the 15 percent Supporting AV System Operation task alongside remote assistance and live event support.

How long should I prepare for the CTS exam?

Long enough to close every never-done task in a self-audit against the ten blueprint tasks. For someone already working across design and install, that is often a matter of weeks. For a candidate strong in only one duty, it is longer.

Conclusion

The AVIXA CTS certification measures a job, not a product catalogue. Four duties, ten tasks and a published percentage on every one of them tell you exactly where the 115 questions sit, and two thirds of them land after the design is finished. Integration, integration management and support are worth 45 percent between them.

Score yourself task by task against the blueprint before you spend anything, close the gaps where you have never done the work rather than the ones where you feel rusty, and apply only when the 120 day eligibility clock will work in your favour. The task table above is the honest checklist to keep returning to.

What Is the 2V0-17.25 Certification?

2V0-17.25 is the exam code for VMware Cloud Foundation 9.0 Administrator, which awards the VCP-VCF Administrator credential. It is a 60-question proctored exam delivered through Pearson VUE, priced at $250 US dollars, with an appointment time of 135 minutes and a scaled passing score of 300 out of 500.

The credential sits at professional level and targets the person who runs a VMware Cloud Foundation estate day to day rather than the person who designs one. That distinction runs right through the objective list: the verbs are deploy, configure, manage, monitor and consume, and the recurring phrase is “given a scenario”, which signals situational judgement rather than recall. Running an estate now includes accounting for what it costs, which is the ground cloud cost certification covers.

Two recommended courses sit behind it, VMware Cloud Foundation: Build, Manage, and Secure, and VMware Cloud Foundation: Automate and Operate. The pairing is a useful clue to the exam’s shape. One course covers standing the platform up and securing it; the other covers running and automating it once it exists. The exam draws heavily from both.

Why Does VCF 9.0 Change What the Exam Tests?

Because VCF 9.0 is not a version bump. Broadcom brought the compute, storage and networking teams together to build one integrated private cloud suite instead of discrete products sold separately, and the result has a single operations interface, a self-service provisioning surface for developers, and a Kubernetes service managing containers and virtual machines through the same model.

An exam written against that architecture asks different questions. Where an older paper might have tested how to configure a distributed switch, this one asks you to differentiate between VCF networking components and configure virtual networking fabrics, connectivity, routing and services as parts of one fabric. Where an older paper tested vCenter administration, this one asks how you import an existing vCenter into VMware Cloud Foundation, which is a migration task rather than an administration one.

The independent account of the release is worth reading before you study, because it explains the product logic the objectives assume. Coverage of the VCF 9 release sets out how the suite was assembled, and a longer analysis of what changed covers the operational model the exam keeps returning to.

The practical consequence is that a candidate whose estate has not yet moved to VCF 9.0 cannot rely on familiarity. The concepts transfer; the surfaces do not.

How Are the 2V0-17.25 Objectives Distributed?

The syllabus names three sections and publishes objectives under two of them. Seventeen objectives sit in the fundamentals section and 42 sit in the deploy, configure and operate section, giving 59 published objectives against 60 questions. The middle section, Plan and Design, is named but carries no published objectives at all.

No percentage weightings are published, so nobody can honestly tell you that operations is worth 30 percent of the paper. What the objective counts do tell you is where the syllabus authors spent their effort, and roughly 71 percent of the published objectives describe running VCF rather than understanding it. Working through 2V0-17.25 sample questions section by section is the quickest way to see whether that distribution matches your own confidence.

Which Sub-Area Carries the Most Objectives?

VCF Operations, with 14 published objectives, more than any other sub-area and more than the entire storage and network fundamentals areas combined. Consume and Automate follows with 12, Deploy and Configure has 9, and Manage has 7. Monitoring and automation together account for 26 of the 59 objectives.

What VCF Operations actually asks

The 14 operations objectives run from cluster components and deployment options through metrics against properties, custom views and reports, shared dashboards, alerting, log events, health and diagnostics, network monitoring, vSAN storage monitoring, policies, application monitoring, security hardening and compliance, and configuration drift. That is a monitoring product in its own right, and treating it as a footnote to infrastructure work is the most common way to underprepare.

What Consume and Automate asks

The 12 automation objectives cover VCF Automation’s use case, its components and deployment options, regions, multi-organizational tenancy, provider networking, provider content libraries, organizational administrator tasks, organizational networks, content management, extensibility for business processes, governance policies, and Supervisor-based services. Tenancy and governance are the unfamiliar parts for most administrators, because they belong to a service-provider mental model rather than a single-estate one.

What Happens to the Plan and Design Section?

The syllabus names Plan and Design the VMware by Broadcom Solution as a section and lists nothing underneath it. Every published objective on the exam therefore belongs to either fundamentals or to deploy, configure and operate. The section header exists; the objectives do not.

The honest reading is the narrow one. A section with no published objectives is a section you cannot study for from the blueprint, and nothing in the readable official material explains the gap. It would be easy to assume the section is inert on an administrator-level exam, and that assumption may well be right, but it is an assumption rather than a documented fact.

What follows practically is simple enough. Plan your revision entirely around the 59 objectives that are published, because they are the only concrete statement of scope available. If design-flavoured judgement does appear, it will read as a scenario question about choosing a deployment model, which the Deploy and Configure objectives already cover directly.

What Are the 2V0-17.25 Exam Details?

The exam runs 60 questions in a 135-minute appointment, costs $250 US dollars, and is passed at a scaled 300 out of 500. Delivery is proctored through Pearson VUE. The official exam guide behind those figures carries a last-updated date of 23 April 2026, so the blueprint in circulation is current.

Two details in that table deserve a second look. The 135 minutes is an appointment time, so it includes the administrative wrapper around the questions rather than being pure thinking time. And the pass mark is scaled, which is why it reads as 300 out of 500 instead of a raw count. A scaled mark means you cannot compute how many questions you may miss, and planning around a comfortable margin is guesswork. Broadcom publishes the current figures on its VCP-VCF Administrator page, with the full blueprint in the downloadable VCF Administrator exam guide.

Does 2V0-17.25 Cover vSphere?

Yes, but as a component rather than as the subject. The compute fundamentals objectives ask you to deploy and configure vCenter and ESX, configure a vSphere cluster, deploy and configure virtual machines, and manage a virtual machine through vCenter. That is four objectives out of 59, roughly seven percent of the published list.

Storage is treated the same way. Six objectives cover vSphere storage configuration, the use cases for vSAN ESA against vSAN OSA, deploying a vSAN cluster, vSAN storage policies, resilience and data availability options, and vSAN space efficiency. A vSphere administrator will recognise all of it, and will still find that recognition accounts for under a fifth of the paper.

The gap is everything above the hypervisor. Fleet management in VCF Operations, workload domains, the VCF Network Gateway, licence and certificate and password management at fleet scale, importing an existing vCenter into the platform, multi-organizational tenancy in VCF Automation: none of that has an obvious vSphere ancestor. Candidates coming from the architect side of the family will find our 2V0-13.25 architect guide a useful map of how the two exams divide the same platform.

How Should a vSphere Administrator Prepare?

Invert the usual order. Start with the material that has no vSphere equivalent, because that is where the objective count is heaviest and the transfer is weakest, and leave compute and storage fundamentals until last, since those are the objectives your existing work already rehearses daily.

1. Read the objective list end to end first and mark every objective that names a product you have not personally operated, because those are the ones no amount of vSphere experience will cover.
2. Work VCF Operations before anything else, since 14 objectives sit there and the monitoring surface is the largest single block of unfamiliar material on the exam.
3. Take VCF Automation next, concentrating on regions, multi-organizational tenancy and governance policies, which assume a service-provider model most single-estate administrators have never used.
4. Rehearse the deployment objectives against the deployment models, so that identifying the right model for a scenario becomes a decision you have already made rather than one you reason out under time pressure.
5. Finish on compute, storage and networking fundamentals, treating them as a confidence pass rather than a learning exercise, and confirming only that the VCF naming has not moved under you.
6. Sit a full timed rehearsal at 135 minutes, because scaled scoring gives you no way to estimate a safety margin and pace is the only variable you control.

The reason this order works is arithmetic rather than preference. Twenty-six of the 59 objectives are in operations and automation. Fourteen are in compute, storage and network fundamentals combined. Spending equal time on both halves would mean spending twice as long per objective on the material you already know.

Where the Credential Sits in the VCF Track

VCP-VCF Administrator is the operator credential in Broadcom’s VMware Cloud Foundation family, sitting alongside rather than beneath the architect and specialist credentials. It proves you can run the platform; a separate exam covers designing it. The two overlap in vocabulary and diverge sharply in what they ask you to produce.

For anyone mapping a path, the useful comparison is with the vSphere professional credential, which remains the right choice for an estate that has not adopted VMware Cloud Foundation. Our 2V0-21.23 blueprint breakdown covers what that exam still tests, and reading the two objective lists side by side makes the boundary obvious.

The strategic question is about your estate, not your CV. If your organisation is on VCF 9.0 or moving to it, this credential describes the job you already do. If it is running vSphere without the wider suite, roughly three quarters of the objectives describe products you do not operate, and the credential becomes an investment in a future role rather than a validation of a current one.

Frequently Asked Questions

What is the 2V0-17.25 exam?

It is the VMware Cloud Foundation 9.0 Administrator exam, which awards the VCP-VCF Administrator credential. It contains 60 questions, runs in a 135-minute appointment, and is delivered proctored through Pearson VUE.

How many questions are on 2V0-17.25?

Sixty. The published syllabus lists 59 objectives, so the paper works out at roughly one question per published objective, although no official mapping between the two is published anywhere.

What is the passing score for 2V0-17.25?

Three hundred out of 500, calculated using a scaled method. Because the score is scaled rather than raw, there is no published way to work out how many questions you are allowed to answer incorrectly.

How much does the 2V0-17.25 exam cost?

Two hundred and fifty US dollars. Scheduling runs through Pearson VUE, and the two recommended courses behind the credential are priced separately by Broadcom and its training partners.

Which section of 2V0-17.25 has the most objectives?

Deploy, Configure, and Operate VMware Cloud Foundation, with 42 of the 59 published objectives. Within it, VCF Operations alone carries 14, more than compute, storage and network fundamentals combined.

Does 2V0-17.25 test vSphere skills?

Only in part. Four compute objectives cover vCenter, ESX, clusters and virtual machines, and six storage objectives cover vSphere storage and vSAN. Together that is ten of 59 objectives, under a fifth of the published list.

Why does the syllabus list a Plan and Design section with nothing in it?

The section is named but carries no published objectives, and no readable official source explains why. Practically, it means all 59 published objectives belong to the other two sections, so revision should be built entirely around those.

Is 2V0-17.25 the same as the VCF Architect exam?

No. 2V0-17.25 is the administrator exam and covers running the platform. The architect exam carries a different code and asks you to design a solution, so the two share vocabulary but test different work.

Is the 2V0-17.25 exam proctored?

Yes. It is delivered as a proctored exam through Pearson VUE. The 135 minutes quoted is an appointment time, so it includes the administrative wrapper around the questions themselves.

How current is the 2V0-17.25 blueprint?

The official exam guide carries a last-updated date of 23 April 2026. That makes it the current statement of scope, and any study material predating VMware Cloud Foundation 9.0 should be treated with caution.

Conclusion

The 2V0-17.25 certification is best understood as an exam about operating a platform, not about virtualising servers. Fifty-nine published objectives, 42 of them in one section, and a scaled pass mark of 300 out of 500 all point the same way: the paper rewards fluency with VCF Operations and VCF Automation far more than it rewards vSphere seniority.

Plan around the objective counts rather than around instinct. Start where the objectives are densest and least familiar, treat compute and storage fundamentals as a confidence pass, and rehearse once at full length because scaled scoring leaves you no way to estimate a margin. Then sit it knowing exactly which quarter of the paper you were weakest on going in.

Why Does the Tableau Desktop Foundations Exam Pass at 48 Percent?

Because Analytics-101 is an entry-level credential measuring whether you can operate Tableau Desktop at all, not whether you can do it expertly. Salesforce sets the English cut score at 48 percent and the Japanese cut score at 55 percent. On 40 scored questions, 48 percent means roughly 20 correct answers are enough to earn the certification.

Two things follow from that. The first is that no single domain can sink you. With 20 marks needed and 40 available, you can be genuinely weak in one area and still clear the bar comfortably on the other three. The second is that the exam is testing recognition rather than mastery, which is why the objectives are written as tasks you perform in the product rather than concepts you reason about.

The differing cut scores between language versions are worth noticing too. A pass mark that changes with the translation is a sign the standard was set per version rather than copied across, so the English paper’s lower bar is a property of that specific form.

What Are the Four Analytics-101 Domains?

Analytics-101 publishes four weighted domains. Exploring and Analyzing Data is the largest at 37 percent, followed by Sharing Insights at 25 percent, Connecting to and Preparing Data at 23 percent, and Understanding Tableau Concepts at 15 percent. Between them they cover the full path from a data source to a shared dashboard.

The ordering matters more than it looks. Three of the four domains are procedural, describing things you click and configure. Only the last one is conceptual, and it is the smallest. That balance is the clearest signal of what kind of exam this is.

How Many Questions Does Each Domain Get?

Applying the weights to 40 scored questions gives roughly 15 questions on exploring and analyzing, 10 on sharing insights, 9 on connecting and preparing data, and 6 on Tableau concepts. Against a target of 20 correct answers, the two largest domains alone supply 25 questions, which is more than enough to pass on their own.

Read that as a strategy rather than a licence to skip anything. Getting every question right in Exploring and Analyzing plus most of Sharing Insights clears 48 percent by itself, which tells you where the first three study sessions belong. Testing yourself against Analytics-101 exam material domain by domain is the fastest way to confirm those 25 questions are safe before worrying about the remaining 15.

What Is the Analytics-101 Exam Format?

Analytics-101 delivers 40 scored multiple-choice and multiple-select items in 70 minutes, with a registration fee of $75 US dollars and a free retake. Salesforce also includes up to five unscored questions on top of the 40, and adds no extra allowance for them, so plan the clock around 45 items rather than 40.

Seventy minutes across 45 possible items is about 93 seconds each, and no reference material is permitted during the exam. Registration runs through Pearson VUE for Salesforce, and the full Salesforce exam guide publishes the same four weightings used above.

One more detail that separates this credential from the professional tier: Salesforce states there is no required maintenance for it. Once earned, it does not need renewing.

Charts You Have to Be Able to Build

The largest domain names nine chart types explicitly, and the list is worth learning as a checklist rather than a topic. Every one of them is a build task, phrased as something you produce rather than something you describe, which means practice in the product beats reading about it.

• Bar chart, line chart and scatterplot, the three that carry most of the questions
• A map built from geographic data, and a density map
• A combined axis chart and a dual axis chart, which candidates routinely confuse
• A stacked bar
• A crosstab or highlight table, for showing specific values rather than shapes

Alongside the charts sit the organising tools: groups created from marks, headers or the data pane, sets created the same way, dimensions arranged into a hierarchy, and both ordinary and date filters. Then the analytics layer, which includes manual and computed sorts, reference lines, quick table calculations, bins and histograms, calculated fields, parameters and worksheet totals.

That is a long list for 15 questions, so depth is not the goal. Being able to say which menu produces which result, and what distinguishes a group from a set or a combined axis from a dual axis, covers most of what gets asked. The wider context on why particular chart forms suit particular comparisons is well covered in the data visualization overview if the vocabulary is new.

Where Do the Marks Hide in Connecting and Preparing Data?

In the distinctions rather than the mechanics. The 23 percent domain asks you to create live connections and extracts, explain the difference between them, save metadata properties in a .TDS file, and build a data source that uses multiple connections. Then it moves to the data model: relationships, joins, unions, and knowing when a join is right instead of a relationship.

The join-versus-relationship objective is the one that catches people. Relationships are the newer, looser way Tableau associates tables, and the exam asks you to explain when each is appropriate, not merely to create both. Anyone who learned Tableau before relationships existed tends to answer this from habit.

The rest of the domain is field housekeeping: renaming a field, giving a value an alias, assigning a geographic role, changing a field’s data type between number, date, string and Boolean, and changing default properties such as number format, aggregation, colour and date format. These are quick marks, and they are the cheapest nine questions on the paper to secure.

What Does Understanding Tableau Concepts Really Test?

Vocabulary, and specifically four pairs of ideas that Tableau treats as fundamental: dimensions against measures, discrete against continuous fields, discrete date parts against continuous date values, and how aggregation behaves by default. At 15 percent, or roughly six questions, it is the smallest domain and the only purely conceptual one.

The aggregation objective goes slightly further than the others. It asks you to explain the default aggregation for measures and to describe how an aggregated measure changes when dimensions are added to a view. That is a genuine reasoning question rather than a definition, and it is the single most useful idea in the whole syllabus for actually using the product.

Because the domain is small and self-contained, it is the best candidate for a final revision session. Six questions of pure vocabulary are worth more than a third of the marks needed to pass, and they can be secured in an afternoon.

How Does This Compare With the Tableau Data Analyst Exam?

Analytics-101 sits a full tier below Analytics-DA-201. The Foundations paper asks whether you can build a chart, a dashboard and a data connection. The Data Analyst credential asks whether you can make analytical judgements with those tools, and it carries the maintenance requirement that Foundations does not.

That gap shows in the objective verbs. Foundations objectives begin with “create”, “add”, “change” and “explain”. The higher-tier exam expects choices to be defended. If you already work in Tableau daily, Foundations may be too shallow to be worth the sitting, and the Tableau Data Analyst guide is the better place to start.

The full ladder, and where each credential sits relative to the others, is set out on the Tableau certification overview. Reading it before booking is worth ten minutes, because the entry tier and the professional tier answer different questions about a candidate.

Where Foundations genuinely earns its fee is as a first credential: no prerequisites, no maintenance, a $75 entry, a free retake and a 48 percent bar. For a career changer or an analyst who has used Tableau informally without ever proving it, that combination is hard to argue with.

How Should You Prepare for a Free-Retake Exam?

Differently from how you would prepare for one that charges again. A free retake turns the first attempt into the most accurate diagnostic available, so the efficient plan front-loads the two biggest domains, books early, and uses the result to aim the second half of study rather than trying to be complete first.

1. Start with the nine named chart types and build every one of them yourself in Tableau Desktop, because the largest domain is written entirely as build tasks.
2. Move to the organising and analytics tools in the same domain, focusing on the pairs candidates confuse: groups against sets, combined axis against dual axis, and quick table calculations against calculated fields.
3. Cover Sharing Insights next, working through dashboard actions, device-specific layouts, stories and the export routes to PDF, image and Microsoft PowerPoint.
4. Spend a session on the data domain, concentrating on when a relationship is correct instead of a join and on saving metadata properties into a .TDS file.
5. Finish with the six-question concepts domain, which is pure vocabulary and can be secured in a single afternoon of revision.
6. Book the exam once the two largest domains feel solid, and treat any gap the first attempt exposes as the syllabus for the free second sitting.

Three to four weeks of evening study is realistic for someone who has opened Tableau before, and six for a complete beginner working from the free how-to videos. If the aim is a longer Tableau path rather than a single certificate, the Tableau Architect route shows where the ladder eventually leads.

Frequently Asked Questions

What is the passing score for the Tableau Desktop Foundations exam?

Forty-eight percent for the English version and 55 percent for the Japanese version. On 40 scored questions, 48 percent works out at roughly 20 correct answers.

How many questions are on Analytics-101?

Forty scored questions, plus up to five unscored items that do not affect your result. The 70-minute limit covers all of them, so pace for 45 questions rather than 40.

How much does the Tableau Desktop Foundations certification cost?

Seventy-five US dollars to register, and the retake is free. That combination makes it one of the cheapest routes to a recognised Salesforce credential.

Does the Tableau Desktop Foundations credential expire?

No. Salesforce states there is no required maintenance for this certification, which distinguishes it from the professional-tier Tableau credentials that do need upkeep.

Are there prerequisites for Analytics-101?

None. The exam is aimed at people with foundational Tableau Desktop knowledge, and no earlier certification or formal training is required before booking.

Which domain carries the most marks?

Exploring and Analyzing Data at 37 percent, roughly 15 of the 40 questions. It covers chart building, grouping and filtering, and the worksheet analytics layer.

Can you use reference material during the exam?

No. Salesforce does not permit references during the exam, which is delivered proctored either at a test centre or in an online environment.

How is this different from Tableau Desktop Specialist?

Desktop Foundations is the current Salesforce entry-level Tableau credential with its own code, Analytics-101. Candidates searching for older Tableau exam names should confirm which credential is actually on offer before booking.

What chart types does the exam expect you to build?

Bar, line, scatterplot, map from geographic data, combined axis, dual axis, stacked bar, density map, and a crosstab or highlight table for showing specific values.

How long does preparation usually take?

Three to four weeks of evening study for someone who has used Tableau before, and around six weeks for a complete beginner working through the free how-to training videos.

Conclusion

Analytics-101 is unusual among certifications in being genuinely designed to be passable. Twenty correct answers out of 40, no prerequisites, no maintenance, a $75 fee and a free second attempt add up to a credential that rewards booking early rather than over-preparing. The four domains are heavily weighted toward things you do in the product, and the single conceptual domain is the smallest on the paper.

Build the nine named chart types by hand, get comfortable with dashboards and actions, learn when a relationship beats a join, and spend one clear afternoon on dimensions, measures, discrete and continuous fields and aggregation. Once those are in place, working through sample items domain by domain will tell you quickly whether the first attempt is worth booking or whether one more week is the better call.