Certification roadmaps

Microsoft Security, Compliance, and Identity Fundamentals

• Security, compliance, and identity concepts10-15%
• Capabilities of Microsoft Entra25-30%
• Capabilities of Microsoft security solutions35-40%
• Capabilities of Microsoft compliance solutions20-25%

Microsoft Identity and Access Administrator

• Implement and manage user identities20-25%
• Implement authentication and access management25-30%
• Plan and implement workload identities20-25%
• Plan and automate identity governance20-25%

Microsoft Security Operations Analyst

• Manage a security operations environment40-45%
• Respond to security incidents35-40%
• Perform threat hunting20-25%

Implementing End-to-End Security Controls for Cloud and AI Workloads

• Manage identity, access, and governance20-25%
• Secure storage, databases, and networking25-30%
• Secure compute (incl. security for AI)20-25%
• Manage and monitor security posture20-25%

Administering Information Security in Microsoft 365

• Implement information protection30-35%
• Implement data loss prevention and retention30-35%
• Manage risks, alerts, and activities30-35%

Microsoft Cybersecurity Architect

• Design solutions aligned with security best practices20-25%
• Design SecOps, identity, and compliance capabilities25-30%
• Design security solutions for infrastructure25-30%
• Design security solutions for applications and data20-25%

Microsoft Azure Fundamentals

• Describe cloud concepts25-30%
• Describe Azure architecture and services35-40%
• Describe Azure management and governance30-35%

Microsoft Azure Administrator

• Manage Azure identities and governance20-25%
• Implement and manage storage15-20%
• Deploy and manage Azure compute resources20-25%
• Implement and manage virtual networking15-20%
• Monitor and maintain Azure resources10-15%

Designing Microsoft Azure Infrastructure Solutions

• Design identity, governance, and monitoring solutions25-30%
• Design data storage solutions20-25%
• Design business continuity solutions15-20%
• Design infrastructure solutions30-35%

Designing and Implementing Microsoft DevOps Solutions

• Design and implement processes and communications10-15%
• Design and implement a source control strategy10-15%
• Design and implement build and release pipelines50-55%
• Develop a security and compliance plan10-15%
• Implement an instrumentation strategy5-10%

Designing and Implementing Microsoft Azure Networking Solutions

• Design and implement core networking infrastructure25-30%
• Design, implement, and manage connectivity services20-25%
• Design and implement application delivery services15-20%
• Design and implement private access to Azure services10-15%
• Design and implement Azure network security services15-20%

Microsoft 365 Copilot and Agent Administration Fundamentals

• Core features and objects of Microsoft 365 services30-35%
• Data protection and governance for M365 and Copilot35-40%
• Basic administrative tasks for Copilot and agents25-30%

Managing and Securing Microsoft 365 Endpoints by using Intune

• Prepare infrastructure for devices20-25%
• Manage and maintain devices25-30%
• Protect devices15-20%
• Manage and secure applications15-20%
• Optimize endpoint ops: automation, monitoring, reporting10-15%

Microsoft 365 Administrator

• Deploy and manage a Microsoft 365 tenant25-30%
• Implement and manage Entra identity and access25-30%
• Manage security and threats with Defender XDR30-35%
• Manage compliance with Microsoft Purview10-15%

Administering Microsoft 365 and AI Services

• Configure and manage M365 tenants and workloads20-25%
• Govern and secure M365 tenants and workloads40-45%
• Manage and secure AI services in Microsoft 36535-40%

Okta Certified Professional (Performance Exam)

• Account creation and user management26%
• Application setup with OIN10%
• Attribute mapping and offboarding8%
• Security enforcement38%
• Troubleshooting12%
• +1 more domains

Okta Certified Administrator (Performance Exam)

• P1: Active Directory integration47%
• P1: Profiles, sourcing, and write-back53%
• P2: Custom application integration30%
• P2: Behavior detection30%
• P2: Device assurance20%
• +1 more domains

Okta Certified Consultant (Hands-on Configuration Exam)

• P1: Advanced sourcing8%
• P1: Advanced SSO strategies15%
• P1: Custom configuration options19%
• P1: Directory solutions13%
• P1: Inbound federation13%
• +7 more domains

Okta Certified Developer (Workforce Identity Cloud)

• P1: Administrative APIs20%
• P1: SSO and API Access Mgmt (OIDC/OAuth)18%
• P1: Design principles18%
• P1: Lifecycle management16%
• P1: Authentication9%
• +7 more domains

Auth0 Certified Developer

• P1: Authentication24%
• P1: Customization22.5%
• P1: Managing users21%
• P1: Planning and designing an implementation12.5%
• P1: Security12.5%
• +5 more domains

Okta Certified Workflows - Specialty

• P1: Workflows overview27%
• P1: Architecting flows7%
• P1: Building flows43%
• P1: Running and maintaining flows13%
• P1: Troubleshooting flows10%
• +4 more domains

Okta Certified Access Gateway - Specialty

Okta Certified Technical Architect (board defense)

AWS Certified Cloud Practitioner

• Cloud Concepts24%
• Security and Compliance30%
• Cloud Technology and Services34%
• Billing, Pricing, and Support12%

AWS Certified Solutions Architect - Associate

• Design Secure Architectures30%
• Design Resilient Architectures26%
• Design High-Performing Architectures24%
• Design Cost-Optimized Architectures20%

AWS Certified CloudOps Engineer - Associate

• Monitoring, logging, analysis, remediation, performance22%
• Reliability and Business Continuity22%
• Deployment, Provisioning, and Automation22%
• Security and Compliance16%
• Networking and Content Delivery18%

AWS Certified Security - Specialty

• Detection16%
• Incident Response14%
• Infrastructure Security18%
• Identity and Access Management20%
• Data Protection18%
• +1 more domains

AWS Certified Solutions Architect - Professional

• Design Solutions for Organizational Complexity26%
• Design for New Solutions29%
• Continuous Improvement for Existing Solutions25%
• Accelerate Workload Migration and Modernization20%

CompTIA Security+ (V7)

• General security concepts12%
• Threats, vulnerabilities, and mitigations22%
• Security architecture18%
• Security operations28%
• Security program management and oversight20%

CompTIA Security+ (V8)

• General Security Concepts16%
• Threats, Vulnerabilities, and Attacks24%
• Security Architecture19%
• Security Operations27%
• Security Program Management and Oversight14%

Certified Information Systems Security Professional

• Security and Risk Management16%
• Asset Security10%
• Security Architecture and Engineering13%
• Communication and Network Security13%
• Identity and Access Management (IAM)13%
• +3 more domains

Certified Cloud Security Professional

• Cloud Concepts, Architecture and Design17% (unverified)
• Cloud Data Security20% (unverified)
• Cloud Platform and Infrastructure Security17% (unverified)
• Cloud Application Security16% (unverified)
• Cloud Security Operations17% (unverified)
• +1 more domains

CyberArk Defender - Access

CyberArk Defender - PAM

• Account onboarding
• Application management
• Ongoing maintenance
• Password management (CPM rotation/reconciliation)
• Security and audit
• +2 more domains

CyberArk Defender - EPM

CyberArk Sentry - PAM

CyberArk Sentry - Privilege Cloud

CyberArk Sentry - Secrets Manager

CyberArk Certified Delivery Engineer

CyberArk Guardian

SailPoint Identity Security Leader

SailPoint Identity Security Professional

• Set Up and Administer Identity Security Cloud
• Search Identity Security Cloud
• Access Modeling in Identity Security Cloud
• Manage Compliance with Identity Security Cloud
• Leverage Identity Security Cloud Data
• +1 more domains

SailPoint Certified Identity Security Administrator

• Platform
• Virtual Appliances
• Identity and Lifecycle Management
• Provisioning
• Access Management
• +3 more domains

SailPoint Certified Identity Security Engineer

• Identity and Lifecycle Management
• Provisioning
• Access Management
• Virtual Appliances (VA)
• Sources
• +5 more domains

SailPoint Identity Security Expert

• Extend Identity Security Cloud
• Design and Build Identity Security Cloud Workflows
• Design and Build Rules for Identity Security Cloud
• Configure and Extend Connectors for Identity Security Cloud

SailPoint Certified IdentityIQ Associate

• Foundational Concepts
• Applications
• Identity Modeling
• Access Modeling
• Governance
• +2 more domains

SailPoint Certified IdentityIQ Engineer

• IdentityIQ installation, build, and deployment
• IdentityIQ Lifecycle Manager
• IdentityIQ Identity Governance
• IdentityIQ development
• IdentityIQ application onboarding
• +2 more domains

Cloud Digital Leader

• Digital Transformation with Google Cloud~17%
• Exploring Data Transformation with Google Cloud~16%
• Innovating with Google Cloud Artificial Intelligence~16%
• Modernize Infrastructure and Applications with Google Cloud~17%
• Trust and Security with Google Cloud~17%
• +1 more domains

Associate Cloud Engineer

• Setting up a cloud solution environment~20%
• Planning and implementing a cloud solution~30%
• Ensuring the successful operation of a cloud solution~30%
• Configuring access and security~20%

Associate Google Workspace Administrator

• Managing user accounts, domains, and Directory~20%
• Managing core Workspace services~23%
• Managing data governance and compliance~15%
• Managing security policies and access controls~20%
• Managing browsers and endpoints~10%
• +1 more domains

Professional Cloud Security Engineer

• Configuring access~25%
• Securing communications and establishing boundary protection~22%
• Ensuring data protection~23%
• Managing operations~19%
• Supporting compliance requirements~11%

Professional Cloud Architect

• Designing and planning a cloud solution architecture~25%
• Managing and provisioning a cloud solution infrastructure~17.5%
• Designing for security and compliance~17.5%
• Analyzing and optimizing technical and business processes~15%
• Managing implementation~12.5%
• +1 more domains