Certification guide

DOP-C02

AWS Certified DevOps Engineer - Professional: the honest guide

DevOps Engineer Professional is a three-hour exam of 75 questions, and its defining feature is the flat weighting: six domains between 14 and 22 percent, with nothing dominant and nothing safe to skip.

The questions are long multi-service scenarios set in estates rather than projects. Most describe several accounts, an existing pipeline and a constraint, and ask what to change.

Who DevOps Engineer Professional is for

A good fit if

  • You run delivery pipelines and production operations on AWS across more than one account.
  • You hold an AWS associate certification and the professional level is the next credible step.
  • You work in a platform or SRE role where incident response and infrastructure as code are both yours.
  • Your organization needs professional-level certified staff for an AWS partner tier.

Probably not, if

  • You have not worked with AWS at scale. The exam assumes an estate, and a candidate whose experience is one account will be reasoning about a structure they have never seen.
  • You want to learn CI/CD. This exam tests operating and securing pipelines rather than building your first one.
  • You are looking for the cheapest AWS credential. At $300 it is the most expensive on the associate and professional range, and the retake is another $300.

Is DevOps Engineer Professional worth it?

For an engineer already operating AWS at scale, it is one of the more respected professional certifications, and the multi-account scenarios are the part that maps most directly onto real work.

It is expensive in both directions: $300 to sit, $300 to retake, and no shortcut. That argues for preparing until you are genuinely ready rather than sitting to see the format.

It is a poor exam to attempt early. The compensatory scoring at 750 rewards even coverage, and six domains between 14 and 22 percent mean there is no strong area large enough to carry a weak one.

What the exam actually asks you to do

Multiple choice and multiple response only. No simulations, no labs, and nothing to configure.

Item formats

  • Multiple choice
  • Multiple response

Nothing here needs a lab. Reading carefully and eliminating options is the whole skill. AWS, DevOps Engineer Professional exam guide ↗

Domain breakdown and official weightings

From the official AWS exam guides. SDLC Automation is the heaviest domain at 22 percent, followed by Configuration Management and IaC at 17 percent.

  • SDLC Automation22%
  • Configuration Management and IaC17%
  • Resilient Cloud Solutions15%
  • Monitoring and Logging15%
  • Incident and Event Response14%
  • Security and Compliance17%

Amazon Web Services (AWS): AWS exam guides ↗

Study plans by experience level

Running AWS pipelines at work

8 to 10 weeksat 8 hours

  1. 1Weeks 1 to 2: the multi-account picture. Organizations, service control policies, delegated administration and cross-account roles, built even if your estate already has them.
  2. 2Weeks 3 to 5: SDLC automation at 22 percent and configuration management at 17 percent, including deployment strategies you have not personally run.
  3. 3Weeks 6 to 7: monitoring, logging and incident response, which are 29 percent between them and where the scenario questions concentrate.
  4. 4Weeks 8 to 10: resilience and security, then AWS's official practice exam as calibration rather than as revision.

Associate certified, moving up

12 to 16 weeksat 8 hours

  1. 1Weeks 1 to 3: close the estate gap first. If you have only worked in one account, everything else on this exam will read as abstract.
  2. 2Weeks 4 to 8: the six domains in order, treating none as optional, because the weighting does not allow it.
  3. 3Weeks 9 to 12: scenario practice specifically: long questions, several workable options, one constraint that decides it.
  4. 4Weeks 13 to 16: the official practice exam, then a second pass over whichever domains it exposed.

SRE or platform engineer from another cloud

12 to 14 weeksat 8 hours

  1. 1Weeks 1 to 3: AWS's service equivalents honestly rather than by analogy, particularly IAM, which has no close counterpart elsewhere.
  2. 2Weeks 4 to 7: pipelines and infrastructure as code the AWS way, including CloudFormation behavior that surprises people who arrived on Terraform.
  3. 3Weeks 8 to 11: monitoring, event response and resilience, where your existing practice transfers and the tooling does not.
  4. 4Weeks 12 to 14: security and compliance, then the practice exam.

Common mistakes

Preparing for six domains as though one matters most
The weighting runs from 14 to 22 percent with nothing dominant, so a candidate who is strong in automation and thin in incident response has no domain large enough to carry the gap. Even coverage is the strategy this exam rewards.
Studying in a single account
Most scenarios assume AWS Organizations, cross-account roles and centralized logging. Building that structure costs nothing and is the fastest way to make the questions read as familiar rather than theoretical.
Reading the options before the constraint
Professional questions are long and several answers work. The one that scores satisfies a constraint stated earlier in the scenario, so the discipline that moves marks is extracting the requirement first and only then reading the options.
Assuming a specialty renews it
Recertification requires the current version of this exam or a higher-level one, and at professional level there is nothing higher. Passing a specialty certification does not renew it, which is a surprise best had now rather than in year three.

What comes after passing

Valid for three years. Recertification means this exam again, since there is no higher AWS tier to pass instead.

The benefit voucher AWS issues after a pass applies to the next attempt, and on a $300 exam it is the most valuable voucher in the program.

The Solutions Architect Professional exam is the natural companion, and the two share enough ground that taking them within a few months of each other is efficient.

The durable skill is estate-level thinking: assuming several accounts, centralized logging and a blast radius, which is how the exam frames every question and how production actually looks.

Costs across the full renewal cycle are on the DevOps Engineer Professional cost page.

Frequently asked questions

Do I need an associate certification first?

AWS no longer requires one, and in practice the exam assumes associate-level knowledge across compute, networking, storage and IAM. Sitting it without that background means learning the platform and the professional-level reasoning at the same time, which is a long road at $300 an attempt.

What is the passing score?

750 on a scaled range of 100 to 1,000, higher than the 720 the associate exams use, and it is compensatory: strength in one domain can offset weakness in another. With six domains between 14 and 22 percent, though, there is no domain large enough to carry a serious gap.

How is it different from the Google or Azure DevOps exams?

It is longer and more scenario-heavy than either. Google's DevOps exam weights site reliability practice explicitly and Microsoft's AZ-400 splits its attention across two platforms; this one concentrates on operating AWS estates, with multi-account structure assumed throughout.

How long is it valid?

Three years, renewed by passing the current version of the exam. There is no continuing education route and no annual fee, so the cost of holding it for six years is two exams less whatever the benefit voucher covers.

Keep reading

Every guide and cost breakdown, by vendor

Practice DevOps Engineer Professional for free while you decide

Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.

Start free DevOps Engineer Professional questions