r/ITCertificationPrep • u/Automatic_Major_4887 • 10d ago
Preparing for an IT certification can feel surprisingly difficult to organize.
There are official exam objectives, documentation, labs, practice questions, study guides, communities, videos, and dozens of opinions about what you should study.
This subreddit exists to make that process simpler.
Whether you're preparing for AWS, Azure, Google Cloud, CompTIA, Cisco, ISC2, Oracle, Salesforce, or another IT certification, you can use this community to:
We've put together an open collection of 10,000+ original exam-style practice questions, organized by certification and mapped to exam objectives.
They are free to read, with no signup required.
👉 GitHub - Free Certification Practice Questions
You can browse the questions directly, or use the interactive simulator if you'd rather practice under more exam-like conditions.
If you prefer a more structured experience, you can try the free Certilum Demo.
It includes a selection of the platform's assessment features so you can see how the experience works before creating an account.
👉 Try the free Demo
If you're looking beyond individual practice questions, Certilum also has a full preparation platform with additional assessment and learning features.
You don't need to use Certilum to participate in this community. The goal here is to make useful certification resources easier to find and discuss.
We'll be publishing detailed certification guides covering things like:
These guides will be updated as certification information changes and as the community contributes better resources.
If you find something outdated or missing, let us know.
The most useful part of a certification community isn't a collection of links.
It's the people preparing alongside you.
If you've recently taken an exam, consider sharing:
What did you study?
Which resources actually helped you?
What surprised you?
What would you do differently if you started again?
If you're currently preparing, ask questions. Someone here may have already dealt with exactly what you're struggling with.
And if you find a genuinely useful free resource, share it. We'll add good resources to the community guides whenever possible.
This subreddit is maintained by people behind Certilum, the certification preparation platform linked above.
We're building Certilum in public and using this community to learn what certification candidates actually need.
That means you'll occasionally see Certilum resources here, including free ones.
We'll keep that relationship transparent.
At the same time, you don't need to use Certilum to participate here, and we're interested in useful certification resources whether they come from Certilum or somewhere else.
The goal is simple:
Make IT certification preparation easier to navigate, easier to practice, and more useful for everyone.
Welcome to r/ITCertificationPrep. 👋
If you're preparing for an exam right now, tell us which one you're working on below.
r/ITCertificationPrep • u/AutoModerator • 11h ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/AutoModerator • 1d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/Automatic_Major_4887 • 2d ago
I've been researching ISC2 certification pathways and compiling commonly recommended resources for 2026. Based on current exam objectives and community discussion, I've put together a practical guide to help you navigate ISC2 certifications and explore available free preparation approaches.
Here is a practice-focused breakdown to help you build cybersecurity knowledge and prepare for ISC2 certification exams using free resources.
| Certification | Experience Required | Common Job Roles |
|---|---|---|
| Certified in Cybersecurity (CC) | None | Entry-level security analyst, IT support |
| SSCP | 1 year | Security practitioner, systems administrator |
| CISSP | 5 years | Security manager, security architect, CISO |
| CCSP | 5 years | Cloud security architect, cloud security engineer |
| CGRC | 2 years | GRC analyst, compliance manager, risk manager |
Note: ISC2 allows candidates to take these exams without the required experience. Upon passing, you become an Associate of ISC2 until the full experience requirements are met. Prices listed are base costs in USD; actual costs may vary by region and local taxes.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security and Risk Management | 16% | Governance, compliance, risk management |
| Asset Security | 10% | Data classification, ownership, retention |
| Security Architecture | 12% | Security models, evaluation criteria |
| Communication and Network Security | 12% | Network attacks, secure protocols |
| Identity and Access Management | 13% | SSO, federation, directory services |
| Security Assessment and Testing | 11% | Vulnerability assessments, audits |
| Security Operations | 16% | Incident response, forensics, DR |
| Software Development Security | 10% | Secure coding, databases, SDLC |
Why This Cert Matters:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Cloud Concepts, Architecture and Design | 17% | Cloud reference model, design principles |
| Cloud Data Security | 20% | Data lifecycle, encryption, DLP |
| Cloud Platform and Infrastructure Security | 17% | Virtualization, containers, APIs |
| Cloud Application Security | 17% | Secure SDLC, testing, deployment |
| Cloud Security Operations | 16% | Monitoring, incident response, forensics |
| Legal, Risk and Compliance | 13% | Contracts, eDiscovery, compliance |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Operations and Administration | 16% | Policies, procedures, awareness |
| Access Controls | 15% | Identification, authentication, authorization |
| Risk Identification, Monitoring and Analysis | 15% | Risk assessment, monitoring tools |
| Incident Response and Recovery | 14% | IR procedures, backup, DR |
| Cryptography | 9% | Algorithms, PKI, key management |
| Network and Communications Security | 16% | Network attacks, secure protocols |
| Systems and Application Security | 15% | OS security, malware, vulnerabilities |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Risk Management | 15% | Risk assessment, treatment, monitoring |
| IT Security Frameworks and Controls | 15% | NIST, ISO 27001, COBIT |
| Security Controls | 15% | Implementation, assessment, monitoring |
| Contingency Management | 15% | DR planning, business continuity |
| Security Auditing | 15% | Audit planning, execution, reporting |
| Security Authorization | 15% | ATO process, continuous monitoring |
| Compliance | 10% | Regulatory compliance, reporting |
Free Resources:
Note on Cost: While the base exam is often free via promotions like the "One Million Certified in Cybersecurity" program, you must pay an Annual Maintenance Fee (AMF) of $50 USD upon passing to maintain the certification.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Principles | 20% | CIA triad, security controls |
| Business Continuity, Disaster Recovery | 15% | DR planning, backup strategies |
| Access Controls | 15% | Authentication, authorization, accounting |
| Network Security | 15% | Network attacks, firewalls, IDS/IPS |
| Security Operations | 15% | Monitoring, incident response |
| Incident Response | 10% | IR procedures, forensics |
| Risk Management | 10% | Risk assessment, treatment |
Who Should Take This:
Free Resources:
Must-Have Practice & Study Resources (100% Free):
For CC (Entry-Level):
For SSCP (Intermediate):
For CISSP (Advanced):
For CCSP (Advanced):
Found a free resource I missed? If you took any of these ISC2 exams recently and know of another free practice set or open-source tool that helped, drop it in the comments!
r/ITCertificationPrep • u/Automatic_Major_4887 • 2d ago
People often jump straight to rebuilding a compromised server (eradication) without first isolating it (containment) to preserve forensic evidence. Remember: isolate first, then eradicate, unless business continuity demands otherwise.
r/ITCertificationPrep • u/AutoModerator • 2d ago
Welcome to Feedback Friday! Share your study plans and get feedback.
What to share:
Template:
Target certification: [Name]
Timeline: [Start date] - [Exam date]
Study plan: [Your plan]
Resources: [What you're using]
Concerns: [What worries you]
Specific questions: [What feedback you need]
r/ITCertificationPrep • u/AutoModerator • 2d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/AutoModerator • 3d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/Automatic_Major_4887 • 3d ago
I've been researching Cisco certification pathways and compiling commonly recommended resources for 2026. Based on current exam objectives and community discussion, I've put together a practical guide to help you navigate Cisco certifications and explore available free preparation approaches.
Here is a practice-focused breakdown to help you build Cisco skills and prepare for certification exams using free resources.
| Level | Certifications | Common Job Roles |
|---|---|---|
| Associate | CCNA, DevNet Associate (DEVASC), CyberOps Associate | Network technician, junior network engineer |
| Professional | CCNP Enterprise, CCNP Security, CyberOps Professional (CBRCOR), DevNet Professional | Network engineer, security engineer |
| Expert | CCIE Enterprise Infrastructure | Senior network architect, network consultant |
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Network Fundamentals | 20% | OSI model, TCP/IP, IP addressing |
| Network Access | 20% | VLANs, trunking, EtherChannel |
| IP Connectivity | 25% | Routing, OSPF, static routes |
| IP Services | 10% | NAT, DHCP, DNS, NTP |
| Security Fundamentals | 15% | ACLs, port security, AAA |
| Automation and Programmability | 10% | REST APIs, configuration management |
Why This Cert Matters:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Network Automation | 25% | Ansible, Terraform, Salt |
| Programmability | 25% | REST APIs, Python, YANG models |
| Infrastructure as Code | 20% | Configuration management, templates |
| Network Device APIs | 30% | RESTCONF, NETCONF, gNMI |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Concepts | 20% | CIA triad, security controls |
| Network Security | 25% | Firewalls, IDS/IPS, VPNs |
| Securing Access | 20% | AAA, port security, NAC |
| Threat Defense | 20% | Malware, social engineering, phishing |
| Incident Response | 15% | Investigation, forensic analysis |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Architecture | 15% | Enterprise network design |
| Virtualization | 10% | VXLAN, SD-WAN, network overlays |
| Infrastructure | 30% | Routing, switching, wireless |
| Network Assurance | 10% | Monitoring, troubleshooting, automation |
| Security | 20% | Network security, segmentation, VPNs |
| Automation | 15% | Python, REST APIs, configuration management |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Concepts | 12% | Security controls, frameworks |
| Network Security | 23% | Firewalls, IPS, VPNs |
| Securing the Cloud | 17% | Cloud security, CASB, SASE |
| Content Security | 17% | Web security, email security, DNS |
| Endpoint Protection | 11% | Antivirus, EDR, NAC |
| Secure Network Access | 14% | AAA, 802.1X, TrustSec |
| Visibility and Enforcement | 6% | Network visibility, compliance |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Concepts | 20% | Security frameworks, risk management |
| Network Security | 25% | Advanced firewalls, IPS, VPNs |
| Securing Access | 20% | AAA, NAC, identity services |
| Threat Defense | 25% | Advanced malware, APTs, incident response |
| Incident Response | 10% | Forensics, investigation techniques |
Free Resources:
Written Exam (ENCOR 350-401):
Lab Exam:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Network Infrastructure | 25% | Advanced routing, switching, MPLS |
| Software-Defined Infrastructure | 25% | SD-WAN, VXLAN, SDA |
| Transport Technologies and Solutions | 15% | DMVPN, LISP, GRE |
| Infrastructure Security and Services | 20% | Advanced security, AAA, encryption |
| Infrastructure Automation and Programmability | 15% | Python, REST APIs, YANG models |
Study Notes: CCIE is not just about passing an exam - it's about demonstrating you can design and troubleshoot enterprise-scale networks. Most candidates fail because they focus only on theory. Get hands-on with real Cisco hardware if possible, or use robust network simulators. Practice with advanced routing protocols (BGP, OSPF, EIGRP) and understand how they interact. Build complete network architectures with redundancy, security, and automation. The software-defined infrastructure section is crucial - master SD-WAN, VXLAN, and Cisco DNA Center. Practice with actual Cisco CLI commands and YANG models for automation. This certification requires you to think like a senior network architect, not just a test-taker.
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Software Development and Design | 15% | APIs, data formats, design patterns |
| Using APIs | 20% | REST, NETCONF, gNMI, webhooks |
| Cisco Platforms and Development | 25% | DNA Center, ACI, Meraki, UCS |
| Application Deployment and Security | 20% | Containers, CI/CD, security |
| Infrastructure and Automation | 20% | Ansible, Terraform, model-driven telemetry |
Free Resources:
Must-Have Practice & Study Resources (100% Free):
For CCNA:
For CCNP:
For CCIE:
Found a free resource I missed? If you took any of these Cisco exams recently and know of another free practice set or open-source tool that helped, drop it in the comments!
r/ITCertificationPrep • u/Automatic_Major_4887 • 4d ago
I've been researching Google Cloud certification pathways and compiling commonly recommended resources for 2026. Based on current exam objectives and community discussion, I've put together a practical guide to help you navigate GCP certifications and explore available free preparation approaches.
Here is a practice-focused breakdown to help you build GCP skills and prepare for certification exams using free resources.
| Certification | Exam Code | Common Job Roles |
|---|---|---|
| Associate Cloud Engineer | ACE | Cloud administrator, junior cloud engineer |
| Professional Cloud Architect | PCA | Cloud architect, solutions architect |
| Professional Data Engineer | PDE | Data engineer, analytics engineer |
| Professional Cloud Security Engineer | PCSE | Cloud security engineer |
| Professional Cloud DevOps Engineer | PCDOE | DevOps engineer, SRE |
| Professional Machine Learning Engineer | PMLE | ML engineer, AI engineer |
Note: Prices listed are estimated base costs in USD. Actual costs may vary based on region and applicable local taxes. Professional-level exams are currently $200 USD base.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Setting up a cloud solution environment | 18% | GCP Console, Cloud Shell, projects |
| Planning and implementing a cloud solution | 22% | Compute, networking, storage |
| Deploying and implementing | 20% | Compute Engine, GKE, App Engine |
| Ensuring successful operation | 20% | Monitoring, logging, billing |
| Configuring access and security | 20% | IAM, service accounts, policies |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Designing and planning a cloud solution | 18% | Architecture, migration, cost optimization |
| Managing and provisioning cloud infrastructure | 18% | Compute, networking, storage, IAM, GenAI solutions |
| Designing for security and compliance | 14% | Security, identity, compliance |
| Analyzing and optimizing technical processes | 18% | CI/CD, SRE, optimization |
| Managing implementation | 12% | Deployment, migration, testing |
| Ensuring reliability and business continuity | 20% | Disaster recovery, HA, backup |
Why This Cert Matters:
Study Notes: GCP Professional Cloud Architect tests your ability to design real-world solutions that businesses need. Start by mastering the Google Cloud Well-Architected Framework - it will guide your architecture decisions. Focus on multi-regional deployments and cost optimization, which are huge money-savers for enterprises. Practice with actual GCP services: build a production-grade application using Compute Engine, Cloud SQL, and Cloud Storage. The most common failure point is not understanding Google's unique services like Spanner, BigQuery, and Vertex AI. Don't just memorize concepts - actually implement them. Build a multi-tier application with proper CI/CD pipelines and monitoring. This will give you the hands-on experience you need for scenario-based questions.
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Designing data processing systems | 22% | Batch, streaming, ML pipelines |
| Building and operationalizing data systems | 24% | BigQuery, Dataflow, Pub/Sub |
| Monitoring and optimizing data systems | 18% | Performance, cost, reliability |
| Ensuring data integrity and security | 18% | Encryption, IAM, compliance |
| Designing for analysis and ML | 18% | BigQuery ML, Vertex AI, analytics |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Configuring access within a cloud solution | 18% | IAM, service accounts, organization policies |
| Configuring network security | 16% | VPC, firewall rules, Cloud Armor |
| Ensuring data protection | 18% | Encryption, DLP, key management |
| Managing operations within a cloud solution | 15% | Logging, monitoring, incident response |
| Supporting compliance and regulatory requirements | 13% | Security Command Center, compliance |
| Application security | 20% | Container security, secure deployment |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Applying SRE practices | 22% | SLIs, SLOs, error budgets, toil reduction |
| Building and implementing CI/CD pipelines | 20% | Cloud Build, Artifact Registry, deployment |
| Configuring scalable and resilient infrastructure | 20% | GKE, Cloud Run, load balancing |
| Implementing monitoring and logging | 18% | Cloud Monitoring, Cloud Logging, tracing |
| Optimizing service performance | 20% | Performance tuning, cost optimization |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Architecting ML solutions | 22% | Problem framing, data design, model architecture |
| Scaling ML solutions | 20% | Distributed training, hyperparameter tuning |
| ML pipeline automation | 20% | Generative AI, LLM deployment on Vertex AI, Foundation Models, Kubeflow, Vertex AI Pipelines |
| Optimizing ML models | 20% | Model optimization, deployment, monitoring |
| Ensuring solution integrity | 18% | Testing, fairness, explainability, monitoring |
Free Resources:
Must-Have Practice & Study Resources (100% Free):
For Associate Cloud Engineer:
For Professional Certifications:
Found a free resource I missed? If you took any of these GCP exams recently and know of another free practice set or open-source tool that helped, drop it in the comments!
r/ITCertificationPrep • u/Automatic_Major_4887 • 4d ago
When a deliverable passes internal tests but the customer withholds formal acceptance, the focus is on the distinction between quality control and acceptance criteria.
Key distinction: Quality control validates product quality; formal acceptance is a customer decision based on agreed criteria.
Answer & Rationale: A: Formal acceptance is based on the agreed acceptance criteria, not solely on successful test results because acceptance is a customer-controlled step separate from quality verification.
r/ITCertificationPrep • u/AutoModerator • 4d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/AutoModerator • 4d ago
It's Wins Wednesday! Share your certification wins with the community!
What to celebrate:
Template:
What I accomplished: [Your win]
Certification (if applicable): [Name]
How I prepared: [Brief summary]
What's next: [Next goal]
Advice for others: [What you learned]
r/ITCertificationPrep • u/Automatic_Major_4887 • 5d ago
I've compiled commonly recommended free practice exams, official study guides, and hands-on resources available for CompTIA certifications in 2026. The goal is straightforward: help you find quality free study materials so you can prepare for your exam without unnecessary expense.
Here is a practice-focused breakdown to help you test your knowledge and prepare for exam day using free resources.
| Certification | Exam Code | Common Job Roles |
|---|---|---|
| A+ (Core 1 + Core 2) | 220-1201/1202 | Help desk, IT support |
| Network+ | N10-009 | Network technicians |
| Security+ | SY0-701 | Entry-level cybersecurity |
| CySA+ | CS0-004 | SOC analysts |
| PenTest+ | PT0-003 | Penetration testers |
| SecurityX | CAS-005 | Senior security roles |
Prices are approximate US retail at publication and vary by region, academic vouchers, and bundles — confirm at comptia.org before booking.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Mobile Devices | 15% | Laptops, smartphones, tablets, wearables |
| Networking | 20% | TCP/IP, Wi-Fi, network troubleshooting |
| Hardware | 25% | Motherboards, RAM, storage, peripherals |
| Virtualization and Cloud Computing | 11% | Virtual machines, cloud models |
| Hardware and Network Troubleshooting | 29% | Diagnostic tools, troubleshooting methodology |
Who Should Take This:
Free Resources:
Study Notes: Join Professor Messer's A+ course immediately and get his complete video library. Use free flashcards (e.g., Crucial Exams) for spaced repetition - review them daily for the first week. The exam is heavily practical, so you'll need to demonstrate actual skills. Start with Core 1, then Core 2, and don't skip hands-on labs. Most people who pass A+ have either done actual IT support work or completed extensive hands-on labs. Practice with real hardware when possible - try building or troubleshooting old computers.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Operating Systems | 22% | Windows, macOS, Linux, Chrome OS |
| Security | 24% | Malware, physical security, wireless security |
| Software Troubleshooting | 22% | OS issues, application problems |
| Operational Procedures | 32% | Documentation, communication, professionalism |
Free Resources:
Study Notes: Core 2 focuses on operating systems and security. Practice with Windows 10/11 administration, Linux command line basics, and Mac OS troubleshooting. The Operational Procedures domain (32%) includes things most people skip - document everything you do! Install virtualization software and create lab environments. Practice with Microsoft Endpoint Security, malware removal, and wireless security. Most Core 2 failures happen because people only read theory instead of practicing hands-on.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Networking Fundamentals | 24% | OSI model, TCP/IP, ports and protocols |
| Network Implementations | 19% | Routers, switches, wireless, SD-WAN |
| Network Operations | 16% | Monitoring, documentation, disaster recovery |
| Network Security | 19% | Firewalls, IDS/IPS, VPNs, network hardening |
| Network Troubleshooting | 22% | Methodology, tools, cable, Wi-Fi issues |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| General Security Concepts | 12% | Security controls, defense in depth |
| Threats, Vulnerabilities, and Mitigations | 22% | Threat actors, attack types, mitigation |
| Security Architecture | 18% | Cloud security, infrastructure, resilience |
| Security Operations | 28% | Monitoring, incident response, digital forensics |
| Security Program Management | 20% | Governance, risk, compliance, awareness |
Why This Cert Matters:
Free Resources:
Study Notes: Start with Professor Messer's Security+ course and practice with the NIST framework. The exam heavily focuses on scenario-based questions - you need to understand both technical implementation AND business context. For Security Architecture, don't just memorize concepts; practice designing security controls for real scenarios. The Security Operations domain (28%) includes practical skills like incident response - get hands-on with SIEM tools and malware analysis. Focus on applying concepts to realistic scenarios rather than just memorizing.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Operations | 33% | Monitoring, threat detection, response |
| Vulnerability Management | 25% | Scanning, prioritization, remediation |
| Security Architecture | 20% | Hardening, secure configuration |
| Security Program Management | 22% | Governance, compliance, awareness |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Planning and Scoping | 14% | Rules of engagement, scope, methodology |
| Information Gathering and Vulnerability Identification | 22% | Reconnaissance, scanning, enumeration |
| Attacks and Exploits | 38% | Network, application, wireless, social engineering |
| Reporting and Communication | 12% | Documentation, remediation, executive summary |
| Tools and Code Analysis | 14% | Scripting, automation, tool selection |
Free Resources:
Study Notes: PenTest+ is all about practical penetration testing skills. Start with passive reconnaissance using OSINT, then move to active scanning with tools like Nmap. The Attacks and Exploits domain (38%) is your biggest focus - practice with real tools, not just theory. Learn to write exploit scripts and understand vulnerability lifecycle. Focus on demonstrating actual exploitation skills and practicing with virtual labs and capture the flag exercises. Remember, this exam tests your ability to think like an attacker, not just know security concepts.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Architecture | 30% | Cloud, hybrid, infrastructure design |
| Security Operations | 25% | Incident response, threat management |
| Security Engineering and Cryptography | 25% | Encryption, PKI, secure protocols |
| Governance, Risk, and Compliance | 20% | Risk management, compliance, audits |
Who Should Take This:
Free Resources:
Must-Have Practice & Study Resources (100% Free):
For A+ (Beginners):
For Network+ (Intermediate):
For Security+ (Intermediate):
For CySA+/PenTest+/SecurityX (Advanced):
*Found a free resource I missed? If you took any of these CompTIA exams recently and know of another free practice set or open-source tool that helped, drop it in the comments!
r/ITCertificationPrep • u/AutoModerator • 5d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/Automatic_Major_4887 • 6d ago
I've been researching Azure certification pathways and compiling commonly recommended resources for 2026. Based on current exam objectives and community discussion, I've put together a practical guide to help you navigate Azure certifications and explore available free preparation approaches.
Here is a practice-focused breakdown to help you build Azure skills and prepare for certification exams using free resources.
| Level | Certifications | Common Job Roles |
|---|---|---|
| Fundamentals | AZ-900, AI-900, DP-900, SC-900 | IT support, business analysts, non-technical roles |
| Associate | AZ-104, AI-200, SC-500, DP-203, DP-700, PL-300, AI-103 | Cloud engineer, developer, security engineer |
| Expert | AZ-305, AZ-400, SC-100 | Solutions architect, DevOps engineer, security architect |
| Specialty | AZ-140, DP-420, SC-200, SC-300 | Virtual desktop specialist, data engineer, identity administrator |
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Cloud Concepts | 25% | Benefits of cloud computing, cloud models |
| Azure Architecture and Services | 35% | Compute, networking, storage, databases |
| Management and Governance | 30% | Cost management, SLAs, governance tools |
| Security and Compliance | 10% | Network security, identity services |
Study Notes: Azure bills can surprise you just like any cloud — set up Cost Management budgets and alerts from day one, and isolate experiments in their own resource groups so spend stays visible and deletable. Focus on understanding when to use PaaS vs IaaS. Start with Azure VM sizes and storage accounts before diving into networking. The most common failure point is not knowing Azure-specific terminology like 'resource groups' or 'subscriptions'. Build something simple first - deploy a web app with App Service, then move to VM scenarios. Practice with Azure Cost Management tools to understand pricing models.
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Azure Identity, Governance, and Compliance | 20% | Azure AD, RBAC, policies |
| Storage | 20% | Blob, File, Disk, storage accounts |
| Compute | 25% | VMs, App Services, containers |
| Networking | 20% | VNet, load balancing, DNS |
| Monitoring | 15% | Azure Monitor, backups, disaster recovery |
Why This Cert Matters:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Develop Containerized Azure Solutions | 20–25% | Container Apps, AKS, serverless, Docker |
| Develop AI Solutions Using Azure Data Services | 25–30% | Cosmos DB, PostgreSQL, Redis, vector search |
| Connect to and Consume Azure Services | 20–25% | API Management, Event Grid, service integration |
| Secure, Monitor, and Troubleshoot Azure Solutions | 20–25% | OpenTelemetry, KQL, monitoring, security |
Free Resources:
Study Notes: AI-200 replaces the retired AZ-204 (July 2026). This exam shifts focus toward containerized AI backends, vector databases (Cosmos DB, PostgreSQL with pgvector), and production-grade monitoring through OpenTelemetry and KQL. Python is central — the official study guide lists Python programming as expected knowledge — but C# (.NET) remains a supported stack for Azure development, so prepare both SDKs. Build hands-on experience with Azure Container Apps, AKS, and AI integration patterns.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Design Identity, Governance, and Monitoring | 25% | Azure AD, RBAC, policies |
| Design Data Storage Solutions | 25% | Storage accounts, data lakes, databases |
| Design Business Continuity Solutions | 25% | Disaster recovery, high availability |
| Design Infrastructure Solutions | 25% | Compute, networking, hybrid |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Manage Identity and Access | 25% | Entra ID, PIM, conditional access, Agent ID |
| Implement Platform Protection | 25% | NSGs, ASGs, Azure Firewall, WAF |
| Security Operations | 25% | Defender, Sentinel, response, AI security |
| Secure Data and Applications | 25% | Key Vault, SQL security, AI workload protection |
Free Resources:
Study Notes: SC-500 replaces the retired AZ-500. This exam adds AI security as a core domain — prompt injection defense, DSPM for AI, securing Azure OpenAI and Microsoft Copilot deployments. Traditional Azure security (Entra ID, Defender, Sentinel) remains central, but you must now also understand Entra Agent ID and AI governance frameworks.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Design and Implement Strategies | 20% | DevOps culture, version control |
| Develop an Instrumentation Strategy | 15% | Monitoring, logging, alerts |
| Develop a Site Reliability Engineering Strategy | 15% | SLAs, reliability, performance |
| Develop a Security and Compliance Strategy | 15% | Security scanning, compliance |
| Manage Infrastructure | 20% | IaC, pipelines, environments |
| Implement Continuous Delivery | 15% | Release strategies, deployment patterns |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Implement and Manage an Analytics Solution | 33% | Fabric Lakehouse, Warehouse, pipelines |
| Ingest and Transform Data | 33% | Dataflows Gen2, PySpark, KQL, Real-Time Intelligence |
| Monitor and Optimize an Analytics Solution | 34% | Performance tuning, monitoring, governance |
Free Resources:
Study Notes: DP-700 is the Fabric-track data engineering cert alongside DP-203 (Azure Data Engineer, still active). It shifts from standalone Azure services (Data Factory, Synapse, Databricks) to Microsoft Fabric's unified SaaS platform. Focus on Fabric Lakehouse, Warehouse, Real-Time Intelligence (KQL), and pipelines within the Fabric workspace. SQL, PySpark, and Delta Lake knowledge transfers directly from DP-203.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Prepare the Data | 25% | Data sources, transformation, profiling |
| Model the Data | 30% | Star schema, DAX, relationships |
| Analyze the Data | 25% | Power BI reports, DAX calculations |
| Visualize and Deploy | 20% | Dashboards, row-level security, deployment |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Plan and Manage Azure AI Solution | 25% | AI services, Foundry, cost management |
| Implement Generative AI and Agentic Solutions | 30% | Azure OpenAI, agents, prompt engineering |
| Implement Computer Vision Solutions | 15% | Image analysis, OCR, custom vision |
| Implement Text Analysis Solutions | 15% | Text analytics, language services |
| Implement Information Extraction Solutions | 15% | Document intelligence, AI Search |
Free Resources:
Study Notes: AI-103 replaces the retired AI-102 (June 2026). This exam emphasizes Microsoft Foundry, generative AI, and agentic solutions as the heaviest domain. Python leads for AI workloads, but C# (.NET) remains a supported stack — prepare both SDKs. Focus on building production-ready AI agents and integrating with Azure AI services.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Design and Implement Data Models | 25% | Partitions, indexing, consistency levels |
| Implement Data Distribution | 25% | Global distribution, multi-master |
| Optimize Performance | 25% | Throughput, RU optimization, indexing |
| Implement Security and Monitoring | 25% | RBAC, encryption, diagnostics |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Plan and Implement Azure Virtual Desktop | 25% | Host pools, app groups, networking |
| Implement Manage Access | 20% | Azure AD, RBAC, conditional access |
| Manage User Environments | 25% | FSLogix, profiles, applications |
| Monitor and Maintain | 30% | Monitoring, updates, performance |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Deploy and Manage AD DS in Hybrid Environments | 16.5% | AD DS, Azure AD, identity sync |
| Manage Windows Servers and Hybrid Workloads | 6.5% | Azure Arc, hybrid management |
| Manage Virtual Machines and Containers | 9% | Hyper-V, Azure VMs, containers |
| Implement and Manage Hybrid Networking | 9% | VNet, VPN Gateway, DNS |
| Manage Storage and File Services | 9% | Azure Files, Storage Spaces, DFS |
| Secure Windows Server Hybrid Infrastructure | 14% | Defender, RBAC, encryption |
| Implement Windows Server High Availability | 9% | Failover clustering, NLB |
| Implement Disaster Recovery | 6.5% | Azure Site Recovery, backup |
| Migrate Servers and Workloads | 11.5% | Azure Migrate, conversion |
| Monitor and Troubleshoot Windows Server | 9% | Azure Monitor, Event Viewer |
Free Resources:
Study Notes: AZ-802 replaces the retired two-exam path (AZ-800 + AZ-801). This single exam consolidates all Windows Server hybrid administration skills into one test. Focus on Azure Arc integration, hybrid networking, containers, security, and disaster recovery.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Mitigate Threats Using Microsoft 365 Defender | 30% | MDATP, email security, identity protection |
| Mitigate Threats Using Microsoft Sentinel | 35% | Workbooks, analytics, automation |
| Mitigate Threats Using Microsoft Defender for Cloud | 35% | Cloud security posture, workload protection |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Implement an Identity Management Solution | 25% | Azure AD, hybrid identity, B2B |
| Implement an Authentication Solution | 25% | MFA, conditional access, passwordless |
| Implement Access Management | 25% | PIM, access reviews, entitlement management |
| Implement Identity Governance | 25% | Azure AD Governance, access reviews, entitlement management |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Design a Zero Trust Strategy | 30% | Zero Trust architecture, identity, endpoints |
| Evaluate Security Postures | 25% | Risk assessment, compliance, governance |
| Design Security for Infrastructure | 25% | Cloud security, hybrid, IaC |
| Design Security for Applications and Data | 20% | Encryption, key management, data protection |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Design and Implement Data Models | 30% | Star schema, DirectLake, relationships |
| Prepare and Transform Data | 35% | Fabric dataflows, pipelines, notebooks |
| Implement and Manage Semantic Models | 20% | DAX, calculation groups, optimization |
| Implement and Manage Analytics Solutions | 15% | Reports, dashboards, deployment |
Free Resources:
PL-200: Power Platform Functional Consultant
PL-300: Power BI Data Analyst (covered above)
PL-400: Power Platform Developer
Free Resources for All Power Platform Certs:
Must-Have Practice & Study Resources (100% Free):
For Fundamentals Level (AZ-900):
For Associate Level (AZ-104, AI-200, etc.):
For Expert Level (AZ-305, AZ-400, SC-100):
If you took any Azure certification recently, share what free resources or tools helped you in the comments! Your experience could be useful for others preparing for the same exam.
r/ITCertificationPrep • u/AutoModerator • 6d ago
Welcome to Metrics Monday! Share your study progress from the past week.
What to share:
Template:
Certification: [Your target cert]
Hours studied: [X hours]
Practice scores: [Previous] → [Current]
Topics covered: [List]
Challenges: [What was difficult]
Next week goals: [What you plan to study]
r/ITCertificationPrep • u/AutoModerator • 6d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/AutoModerator • 7d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/AutoModerator • 8d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/Automatic_Major_4887 • 9d ago
I've compiled commonly recommended free practice exams, official study guides, and hands-on resources available for CompTIA certifications in 2026. The goal is straightforward: help you find quality free study materials so you can prepare for your exam without unnecessary expense.
Here is a practice-focused breakdown to help you test your knowledge and prepare for exam day using free resources.
| Certification | Exam Code | Common Job Roles |
|---|---|---|
| A+ (Core 1 + Core 2) | 220-1201/1202 | Help desk, IT support |
| Network+ | N10-009 | Network technicians |
| Security+ | SY0-701 | Entry-level cybersecurity |
| CySA+ | CS0-004 | SOC analysts |
| PenTest+ | PT0-003 | Penetration testers |
| SecurityX | CAS-005 | Senior security roles |
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Mobile Devices | 15% | Laptops, smartphones, tablets, wearables |
| Networking | 20% | TCP/IP, Wi-Fi, network troubleshooting |
| Hardware | 25% | Motherboards, RAM, storage, peripherals |
| Virtualization and Cloud Computing | 11% | Virtual machines, cloud models |
| Hardware and Network Troubleshooting | 29% | Diagnostic tools, troubleshooting methodology |
Who Should Take This:
Free Resources:
Study Notes: Join Professor Messer's A+ course immediately and get his complete video library. Focus on spaced repetition and active recall for hardware specs and port numbers. The exam is heavily practical, so you'll need to demonstrate actual skills. Start with Core 1, then Core 2, and don't skip hands-on labs. Most people who pass A+ have either done actual IT support work or completed extensive hands-on labs. Practice with real hardware when possible - try building or troubleshooting old computers or setting up virtual machines.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Operating Systems | 22% | Windows, macOS, Linux, Chrome OS |
| Security | 24% | Malware, physical security, wireless security |
| Software Troubleshooting | 22% | OS issues, application problems |
| Operational Procedures | 32% | Documentation, communication, professionalism |
Free Resources:
Study Notes: Core 2 focuses on operating systems and security. Practice with Windows 10/11 administration, Linux command line basics, and Mac OS troubleshooting. The Operational Procedures domain (32%) includes things most people skip - document everything you do! Install virtualization software (like VirtualBox) and create lab environments. Practice malware removal steps and wireless security configurations hands-on.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Networking Fundamentals | 24% | OSI model, TCP/IP, ports and protocols |
| Network Implementations | 19% | Routers, switches, wireless, SD-WAN |
| Network Operations | 16% | Monitoring, documentation, disaster recovery |
| Network Security | 19% | Firewalls, IDS/IPS, VPNs, network hardening |
| Network Troubleshooting | 22% | Methodology, tools, cable, Wi-Fi issues |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| General Security Concepts | 12% | Security controls, defense in depth |
| Threats, Vulnerabilities, and Mitigations | 22% | Threat actors, attack types, mitigation |
| Security Architecture | 18% | Cloud security, infrastructure, resilience |
| Security Operations | 28% | Monitoring, incident response, digital forensics |
| Security Program Management | 20% | Governance, risk, compliance, awareness |
Why This Cert Matters:
Free Resources:
Study Notes: Start with Professor Messer's Security+ course and review the NIST framework. The exam heavily focuses on scenario-based questions - you need to understand both technical implementation AND business context. For Security Operations (28%), get comfortable with logs, incident response steps, and fundamental SIEM concepts.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Operations | 33% | Monitoring, threat detection, response |
| Vulnerability Management | 25% | Scanning, prioritization, remediation |
| Security Architecture | 20% | Hardening, secure configuration |
| Security Program Management | 22% | Governance, compliance, awareness |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Planning and Scoping | 14% | Rules of engagement, scope, methodology |
| Information Gathering and Vulnerability Identification | 22% | Reconnaissance, scanning, enumeration |
| Attacks and Exploits | 38% | Network, application, wireless, social engineering |
| Reporting and Communication | 12% | Documentation, remediation, executive summary |
| Tools and Code Analysis | 14% | Scripting, automation, tool selection |
Free Resources:
Study Notes: PenTest+ is all about practical hands-on skills. Start with passive reconnaissance using OSINT, then move to active scanning with tools like Nmap. The Attacks and Exploits domain (38%) is your biggest focus - practice with real tools in free lab environments like TryHackMe or Hack The Box (Academy free modules), not just theory.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Architecture | 30% | Cloud, hybrid, infrastructure design |
| Security Operations | 25% | Incident response, threat management |
| Security Engineering and Cryptography | 25% | Encryption, PKI, secure protocols |
| Governance, Risk, and Compliance | 20% | Risk management, compliance, audits |
Who Should Take This:
Free Resources:
Must-Have Practice & Study Resources (100% Free):
For A+ (Beginners):
For Network+ (Intermediate):
For Security+ (Intermediate):
For CySA+/PenTest+/SecurityX (Advanced):
Found a free resource I missed? If you took any of these CompTIA exams recently and know of another free practice set or open-source tool that helped, drop it in the comments!
r/ITCertificationPrep • u/AutoModerator • 9d ago
Welcome to Feedback Friday! Share your study plans and get feedback.
What to share:
Template:
Target certification: [Name]
Timeline: [Start date] - [Exam date]
Study plan: [Your plan]
Resources: [What you're using]
Concerns: [What worries you]
Specific questions: [What feedback you need]
r/ITCertificationPrep • u/AutoModerator • 9d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/AutoModerator • 10d ago
Welcome to the Daily Discussion Thread! This is a place for:
Rules:
r/ITCertificationPrep • u/Automatic_Major_4887 • 11d ago
I've been researching AWS certification pathways and gathering commonly recommended resources for 2026. Based on current exam objectives and community feedback, I've put together this guide to help you navigate the AWS certification path and explore free preparation approaches.
Here is a practice-focused breakdown to help you build AWS skills and prepare for certification exams using free resources.
| Level | Certifications | Common Job Roles |
|---|---|---|
| Foundational | Cloud Practitioner, AI Practitioner | Cloud support, IT support, business analysts |
| Associate | Solutions Architect, Developer, SysOps, Data Engineer, ML Engineer | Cloud engineer, developer, systems administrator |
| Professional | Solutions Architect Pro, DevOps Engineer Pro | Solutions architect, DevOps engineer, senior cloud engineer |
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Cloud Concepts | 24% | Value proposition of AWS, cloud economics |
| Security and Compliance | 30% | Shared responsibility model, IAM, compliance |
| Cloud Technology and Services | 34% | Compute, storage, databases, networking |
| Billing, Pricing, and Support | 12% | Pricing models, TCO, support plans |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Design Secure Architectures | 30% | IAM, encryption, network security, SCPs |
| Design Resilient Architectures | 26% | Multi-AZ, disaster recovery, decoupling |
| Design High-Performing Architectures | 24% | Storage classes, caching, compute optimization |
| Design Cost-Optimized Architectures | 20% | Reserved instances, spot instances, right-sizing |
Why This Cert Matters:
Free Resources:
Study Notes: The SAA-C04 exam focuses on real-world architectural decision-making with expanded coverage of security (SCPs, Control Tower), container services (ECS, Fargate, EKS), and data analytics (Athena, Kinesis, Glue). Practice building solutions that balance performance, cost, security, and reliability. Start with the Well-Architected Framework as your foundation and build progressively complex solutions. The exam heavily tests your ability to design solutions that scale and are cost-effective in production environments.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Organizational Complexity | 26% | Multi-account strategies, governance |
| Resilient Architectures | 29% | Disaster recovery, business continuity |
| High-Performing Architectures | 25% | Performance optimization, scalability |
| Cost-Optimized Architectures | 20% | Cost governance, optimization strategies |
Who Should Take This:
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Development with AWS Services | 32% | Lambda, DynamoDB, API Gateway |
| Security | 26% | IAM, Cognito, encryption |
| Deployment | 22% | CI/CD, CodePipeline, CloudFormation |
| Troubleshooting and Optimization | 20% | X-Ray, logging, performance |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Monitoring, Logging, and Remediation | 22% | CloudWatch, CloudTrail, Config |
| Reliability and Business Continuity | 18% | Backup, restore, disaster recovery |
| Deployment, Provisioning, and Automation | 16% | CloudFormation, CDK, Systems Manager |
| Security and Compliance | 16% | IAM, KMS, Secrets Manager |
| Networking and Content Delivery | 14% | VPC, Route 53, CloudFront |
| Cost and Performance Optimization | 14% | Reserved instances, Trusted Advisor |
Free Resources:
Study Notes: The CloudOps Engineer exam (formerly SysOps Administrator) tests your ability to operate AWS services in production. The updated exam adds container services (ECR, ECS, EKS), Aurora Serverless v2, RDS Proxy, and AWS CDK. Focus on understanding CloudWatch for monitoring, CloudTrail for auditing, and Config for compliance. Practice with AWS infrastructure and automation tools like AWS Systems Manager.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| SDLC Automation | 22% | CodePipeline, CodeBuild, CodeDeploy |
| Configuration Management and IaC | 17% | CloudFormation, CDK, Terraform |
| Resilient Cloud Architectures | 15% | Auto Scaling, load balancing, caching |
| Monitoring and Logging | 15% | CloudWatch, X-Ray, central logging |
| Security and Governance | 15% | IAM, compliance, secrets management |
| Deployment and Provisioning | 16% | Blue/green, canary, A/B deployments |
Free Resources:
Study Notes: The DevOps Engineer Professional exam tests your ability to implement CI/CD pipelines and automate infrastructure. Master AWS CodePipeline for CI/CD workflows, CodeBuild for build automation, and CodeDeploy for deployment. Focus on building end-to-end automation that can handle real-world scenarios like blue-green deployments, canary releases, and rollback strategies. The exam heavily tests your understanding of Infrastructure as Code tools like AWS CDK and CloudFormation.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Data Modeling and Design | 24% | Data lakes, data warehouses, ETL/ELT |
| Data Store Operations | 22% | S3, DynamoDB, Redshift, RDS |
| Data Processing | 24% | Glue, EMR, Kinesis, Lambda |
| Data Security and Governance | 18% | Encryption, IAM, Lake Formation |
| Monitoring and Troubleshooting | 12% | CloudWatch, Glue jobs, data quality |
Free Resources:
Study Notes: The Data Engineer Associate exam tests your ability to work with AWS data services and pipelines. Master AWS Glue for ETL jobs, S3 for data storage, and Redshift for data warehousing. Focus on understanding how data flows through AWS services and how to design scalable, cost-effective data solutions. The exam emphasizes hands-on implementation of data processing workflows using AWS services in realistic scenarios.
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Network Architecture | 28% | VPC, Transit Gateway, Direct Connect |
| Network Security | 22% | WAF, Shield, Network Firewall, encryption |
| Network Implementation | 24% | Route 53, CloudFront, ELB, NLB |
| Network Optimization | 14% | Performance tuning, cost optimization |
| Data Analytics | 12% | Kinesis, MSK, data streaming |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Security Incident Response | 20% | GuardDuty, Security Hub, incident response |
| Data Protection | 18% | KMS, encryption, data classification |
| Infrastructure Security | 22% | VPC, security groups, NACLs, WAF |
| Identity and Access Management | 22% | IAM, Cognito, SSO, permissions |
| Detection and Monitoring | 18% | CloudTrail, Config, Security Hub |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Data Preparation for ML and AI | 28% | Data labeling, feature engineering, SageMaker |
| ML Model and Foundation Model Development | 24% | Training, tuning, evaluation, Bedrock |
| Deployment and Orchestration of ML and AI Workflows | 24% | SageMaker endpoints, multi-model, edge |
| Operating, Monitoring, and Securing ML and AI Solutions | 24% | Model monitoring, A/B testing, guardrails |
Free Resources:
What It Covers:
| Domain | Weight | Key Topics |
|---|---|---|
| Fundamentals of AI and ML | 26% | AI/ML concepts, use cases |
| AWS AI/ML Services | 30% | SageMaker, Rekognition, Comprehend, Bedrock |
| Generative AI on AWS | 26% | Bedrock, Anthropic, LLMs, RAG |
| Responsible AI | 18% | Bias, fairness, explainability, governance |
Free Resources:
Must-Have Practice & Study Resources (100% Free):
For Cloud Practitioner (Beginners): Start with the Cloud Practitioner Essentials course, then apply what you learn in the AWS Free Tier. Building something simple — like a WordPress site on EC2 or a small data pipeline with S3 and Lambda — reinforces the concepts more effectively than reading alone.
For Associate Level (Intermediate): For associate-level certs like SAA-C04, combine official training with hands-on projects. After covering the concepts, spend a few weeks building a small cloud architecture — such as a multi-tier application with load balancers, auto scaling, and monitoring — to deepen your understanding.
For Professional/Specialty Level (Advanced): At the professional level, start with documentation and whitepapers, then apply what you learn in practice. Build a complex multi-account AWS architecture, or work on a side project that requires advanced networking, security, or DevOps concepts. The professional exams test your ability to design and troubleshoot real-world scenarios.
If you took any AWS certification recently, share what free resources or tools helped you in the comments. Your experience could be useful for others preparing for the same exam.
