How AWS Certification Exams Work: Scoring and Renewal
AWS certification exams are proctored assessments that you book through your AWS Certification Account and take with Pearson VUE, either online or at a test centre. AWS reports your result on a scaled score from 100 to 1,000, with a passing score that depends on the exam. A certification is valid for three years, with renewal routes that depend on the credential you hold.
This guide explains the process from choosing an exam level through booking, answering questions, receiving results and renewing. It covers question formats, the questions that do not count toward your score, standard pass marks, announced exam changes and the domain outlines that should shape your preparation. Worked explanations and practice questions show how to approach the scenarios you will study along the way.
How AWS certification exams work
Keep the certification, the exam version and the exam result separate. The certification is the credential, the exam code identifies the assessment version, and the result tells you whether you met its passing standard. A version's last testing date and a credential's validity period answer different questions, so record both when planning your study.
The basic process is:
- Choose a certification whose scope matches the skills you want to demonstrate, and check its current exam code.
- Sign in to your AWS Certification Account and schedule through Pearson VUE.
- Take the proctored exam using the delivery method you selected.
- Check your Certification Account for the detailed result, then plan renewal if you pass.
AWS publishes exam guides describing the content and assessment format. Use the guide for your exact version as your study boundary: a familiar certification name won't tell you which version a course or question set covers. The AWS Certification FAQ explains the account, scheduling, delivery and results process.
The certification levels
AWS groups its technical certifications into Foundational, Associate, Professional and Specialty, with a separate Business category. These categories describe scope and target audience; they do not create mandatory entry requirements. The AWS Certification catalogue is the official starting point for checking the categories and available credentials.
Foundational includes Cloud Practitioner, CLF-C02, for broad cloud knowledge, and AI Practitioner, AIF-C01, for AI, machine learning and generative AI concepts. AWS describes both as relevant across job roles, including people who work alongside technical teams. Foundational therefore tells you about the knowledge being assessed, rather than requiring a particular job title.
Associate certifications follow roles such as architecture, development, operations, data and machine learning. Solutions Architect Associate, SAA-C03, addresses designing AWS solutions, while Data Engineer Associate, DEA-C01, addresses data engineering. Read each candidate profile separately: sharing a level does not mean the exams cover interchangeable skills or recommend the same experience.
Professional includes architecture, DevOps and generative AI development credentials. DevOps Engineer Professional, DOP-C02, targets people with experience operating AWS environments, software delivery and scripting. Specialty focuses on a technical area such as security. The Business category's AI Business Strategist exam targets people leading AI initiatives, and is in beta.
Booking: Certification Account, Pearson VUE, online or test centre
Start in your AWS Certification Account, choose the exam and continue to scheduling with Pearson VUE. Check the version code before selecting an appointment, particularly when a replacement exam has been announced. Your study materials and booking should refer to the same assessment version.
AWS offers test-centre delivery and online proctoring, with online delivery available for all AWS Certification exams. Choose the setting in which you can concentrate and meet the testing requirements. Before deciding, read the official delivery instructions linked through the FAQ and consider the practical difference between travelling to a centre and preparing your own space for an online appointment.
Standard exam prices follow the level: $100 USD for Foundational, $150 USD for Associate, and $300 USD for Professional or Specialty. Those are AWS's published prices in its before-testing policies. The AWS certification cost guide covers the financial planning in more detail.
Match your practice to the timed format
Use the format for the actual exam you plan to sit when choosing timed practice. These standard formats differ in both question count and duration:
- Foundational: 65 questions in 90 minutes / Associate: 65 questions in 130 minutes.
- Professional: 75 questions in 180 minutes / Specialty: 65 questions in 170 minutes.
Beta formats need separate attention. The AI Business Strategist beta and Machine Learning Engineer Associate MLA-C02 beta each have 85 questions in 170 minutes. Do not apply the standard Associate timing to MLA-C02 simply because Associate appears in its title.
Question types
Question types can include multiple choice, multiple response, ordering and matching, depending on the exam. Do not assume every exam includes every format, or that every exam has both multiple-choice and multiple-response items. Check the response formats in the relevant guide, such as the AI Practitioner exam guide.
The distinctions are straightforward, but they change what you must do:
- Multiple choice: select an answer / Multiple response: select the responses requested by the item.
- Ordering: place items in the required sequence / Matching: connect items with their corresponding descriptions or categories.
Read the requested task before evaluating the options. A scenario may ask you to recognise a service, choose a design or identify a change that meets several constraints. In your practice, explain how the selected answer satisfies the whole request, then identify the requirement each alternative misses.
Unscored questions
Some questions appear in the exam but do not affect your score. Standard Foundational, Associate and Specialty examples have 50 scored questions and 15 unscored questions. Current Professional exams have 65 scored questions and 10 unscored questions. AWS does not identify the unscored items while you take the assessment.
For example, the Cloud Practitioner exam guide describes its scored and unscored questions, while the DevOps Engineer Professional guide describes the Professional split. The total questions you answer therefore differs from the number contributing to the result. Treat an unfamiliar question as something to work through, since you cannot know whether it counts.
Do not spend exam time trying to detect unscored questions from their wording or apparent difficulty. That would substitute a guess about the assessment for the technical reasoning the question asks of you. During preparation, practise returning to the stated requirements whenever an item feels unfamiliar.
Scaled scores and pass marks
AWS reports exam results on a 100–1,000 scale. The published pass marks for standard exams are 700 for Foundational, 720 for Associate, and 750 for Professional and Specialty. For example, the Solutions Architect Associate guide specifies its scaled score and passing standard.
Read those figures as scaled scores. Do not treat the pass mark as a raw percentage, or use the total displayed question count to calculate how many answers you can afford to miss. The scale, the pass mark and the presence of unscored questions do not provide a raw-answer formula.
Keep practice results in their proper context too. A practice percentage helps you identify topics that need work, but it should not be presented as an AWS scaled score. Review whether you can explain your answers, including the tempting alternatives, before using a strong practice result as a reason to book.
Beta status can change how the published scoring information applies. In particular, the MLA-C02 beta has no pass/fail designation; do not assign it the standard Associate pass mark. Check the MLA-C02 exam guide for the distinction between beta and general-availability information.
Results
For most exams, you should not expect an immediate pass/fail result when the session ends. AWS says detailed results reach your Certification Account within five business days. An absent immediate result is therefore not evidence that you failed.
Use the result AWS provides in the account when deciding what to do next. If you pass, check the credential's validity and renewal options; if you need more preparation, return to the exam's domain outline and the topics you could not explain confidently. Keep study notes about concepts and reasoning rather than trying to reconstruct exam questions.
Validity and recertification
AWS certifications are valid for three years. Passing the latest exam is a recertification route and typically adds three years from completion. AWS also lists particular higher-exam renewal routes and Skill Builder maintenance options, so start with the official recertification page for the credential you already hold.
Passing a higher exam renews only the listed credentials
The renewal relationship is specific to the certifications involved. AWS lists these pairings:
- Cloud Practitioner: passing any Associate or Professional exam renews it.
- AI Practitioner: passing Machine Learning Engineer Associate or Generative AI Developer Professional renews it.
- Solutions Architect Associate: passing Solutions Architect Professional renews it.
- Developer Associate and CloudOps Engineer Associate: passing DevOps Engineer Professional renews them.
- Data Engineer Associate and Machine Learning Engineer Associate: passing Generative AI Developer Professional renews them.
Use this list when planning a next exam around an approaching renewal. For example, DevOps Professional has a stated renewal relationship with Developer and CloudOps, while Solutions Architect Professional has one with Solutions Architect Associate. A higher-level exam doesn't automatically renew every credential below it.
Skill Builder maintenance adds a year
AWS lists Skill Builder maintenance for Solutions Architect Associate, Developer Associate, CloudOps Engineer Associate, Data Engineer Associate, Machine Learning Engineer Associate, Solutions Architect Professional, DevOps Engineer Professional, Security Specialty and Advanced Networking Specialty. This option requires a Skill Builder subscription, must be completed within 90 days of expiry, and adds one year. Plan around that window instead of assuming you can complete maintenance whenever it suits your study schedule.
Cloud Practitioner also has a Cloud Quest Recertify option. AI Practitioner and Generative AI Developer Professional have no listed Skill Builder maintenance option. Check the route for your exact certification before buying a subscription for renewal purposes.
AWS offers a 50% discount voucher for future exams when you recertify or upgrade, available in the Certification Account's Benefits section. Check the benefit there when planning your next booking. Keep the voucher and the renewal route as separate planning decisions: the discount doesn't change which credentials an exam renews.
What is changing before 2027
Exam codes and last testing dates matter when you choose preparation material. The announced changes include the following dates; use the linked AWS pages to check the version you intend to book:
- Solutions Architect Professional SAP-C02: last exam day 2026-11-16. SAP-C03 registration opened on 2026-10-27, and delivery starts 2026-11-17, according to AWS's September 2026 announcement.
- Developer Associate DVA-C02: last exam day 2026-11-30. DVA-C03 general-availability delivery starts 2026-12-01, according to the same announcement.
- Advanced Networking Specialty ANS-C01: last exam day 2026-12-31. AWS names no successor on its retirement page.
There are also naming and beta distinctions to watch. CloudOps Engineer Associate replaces the SysOps Administrator name, but the CloudOps title applies to SOA-C03 passers; existing SysOps holders retain their original title. The CloudOps certification page explains that distinction.
MLA-C02 remains a beta, with general-availability dates still to be determined, and the English MLA-C01 exam retired on 2026-09-28. Machine Learning Specialty MLS-C01 retired on 2026-03-31. These statuses matter when reviewing an older roadmap: neither a familiar name nor an old exam code proves an assessment is an available English-language choice.
Exam domains and the kind of question to expect
An exam guide divides the content into domains, with published percentage weights. Use those weights to organise coverage, then practise the decisions within each domain. A domain outline gives you a study structure; it does not replace learning why a particular answer meets a scenario's requirements.
Cloud Practitioner's CLF-C02 domains are:
- Cloud Technology and Services: 34%.
- Security and Compliance: 30%.
- Cloud Concepts: 24%.
- Billing, Pricing and Support: 12%.
Service recognition is therefore only part of Cloud Practitioner preparation. Security, concepts and billing deserve deliberate study too. The Cloud Practitioner exam guide explains the assessment in more detail, and the CLF-C02 practice questions let you apply those topics to scenarios.
For AI Practitioner, Applications of Foundation Models is 28% and Fundamentals of Generative AI is 24%. Use the AIF-C01 question bank to practise recognising the approach a business requirement calls for. Pay attention to whether the task is asking about concepts, an application or a governance concern.
Solutions Architect Associate assigns 30% to secure architectures, 26% to resilient architectures, 24% to high-performing architectures and 20% to cost-optimized architectures. In the SAA-C03 questions, read security, resilience, performance and cost requirements together. A design can address part of a scenario while missing the constraint that determines the answer.
Data Engineer Associate weights Data Ingestion and Transformation at 34%, Data Store Management at 26%, Data Operations and Support at 22%, and Data Security and Governance at 18%. The DEA-C01 exam guide defines those areas. Use the DEA-C01 practice questions to explain which part of a data workflow needs changing and why.
DevOps Engineer Professional includes SDLC Automation at 22% and Configuration Management and Infrastructure as Code at 17%, alongside resilience, monitoring, response and security domains. The DOP-C02 question bank gives you scenarios in which automation requirements affect the answer. Check whether a proposed action actually supplies the requested operational behaviour.
Which exam to take
AWS certification exams have no formal certification prerequisites. Recommended experience is guidance, and Cloud Practitioner is optional for people with IT or STEM backgrounds. Choose according to the work you want to demonstrate and the candidate profile you can reasonably prepare for. The which AWS certification should I get guide covers that choice and the role paths in more detail.
For preparation, AWS Skill Builder offers free official 20-question sets, two-hour Exam Prep courses and AWS Cloud Quest. Full Official Practice Exams and enhanced preparation require a subscription, as described on the AWS certification preparation page. Use the domain outline to choose what to study and practice explanations to check whether you understand it.
Exam traps: read the constraint that changes the answer
Practise identifying the requirement that separates plausible options. The examples below are practice scenarios, and their value is in the reasoning you can carry into a different problem. Read each linked question before its explanation, then describe why the other approaches fall short.
A broad allow does not defeat an explicit deny
The Cloud Practitioner practice question on explicit deny evaluation tests a conflict between permissions. The decisive rule is that an applicable explicit deny overrides an allow, even when the allow is broad. Policies attached to a user and inherited through a group do not have a group-over-user priority rule.
Work through the action being requested rather than treating every permission as one undivided grant. A deny for s3:DeleteObject prevents the denied deletion; it does not itself deny reading or uploading. The IAM policy evaluation documentation supports the distinction between combining permissions and applying explicit denies.
Meeting a connectivity requirement is not enough
The architecture practice question on an S3 gateway VPC endpoint combines private connectivity and cost requirements. An answer must meet both. AWS documents that gateway endpoints reach S3 without a NAT device or internet gateway, use selected route tables, and have no additional charge; those details explain the choice.
Availability and read scaling answer different needs
In the practice question on RDS Multi-AZ failover, focus on the recovery requirements rather than choosing an option because it creates another database copy. AWS's Multi-AZ DB instance documentation describes a synchronous standby in another Availability Zone. That standby is not a read replica, so keep the availability purpose separate from read scaling.
Changing knowledge does not automatically call for retraining
The AI Practitioner practice question on answering from changing internal documents asks you to reason about fresh information and source attribution. Retrieval-augmented generation supplies relevant retrieved passages as context for the answer. Explain how that meets the requirement before choosing model training simply because training is a familiar AI term.
Metadata discovery and processing progress are different
The data engineering practice question on Glue job bookmarks and incremental processing concerns repeated processing of previously consumed files. Job bookmarks track processing progress, while a crawler concerns catalogue metadata. Identify which state the workflow needs before adding another component.
Gradual traffic shifting is not automatic rollback
The DevOps practice question on Lambda canary deployment and rollback requires both a gradual release and an automatic response to errors. Check the deployment configuration, alarm and rollback behaviour together. An option that shifts traffic gradually still falls short if it does not provide the required automatic recovery.
Frequently asked questions
What is the passing score for an AWS certification exam?
For standard exams, the scaled pass mark is 700 for Foundational, 720 for Associate, and 750 for Professional and Specialty, on a 100–1,000 scale. Check the exact exam guide, especially for a beta, and do not read these values as raw percentages.
Do all AWS exam questions count toward the score?
No: standard Foundational, Associate and Specialty examples contain 15 unscored questions, and current Professional exams contain 10. AWS does not identify them, so approach every question as though it contributes to your result.
Can I take an AWS certification exam online?
Yes, online proctoring is available for all AWS Certification exams. You can instead choose a Pearson VUE test centre when scheduling through your Certification Account.
When will I receive my AWS exam results?
AWS says detailed results arrive in your Certification Account within five business days. Most exams do not provide an immediate pass/fail result at the end of the session.
How long does an AWS certification last, and how do I renew it?
An AWS certification is valid for three years. Renewal options include passing the latest exam, passing a specifically listed higher exam, or using an eligible maintenance route; the Skill Builder maintenance option adds one year and has subscription and timing requirements.
Watch the whiteboard video
The video draws the certification levels and role paths as a connected map, then marks the exam changes on a timeline so you can see how they fit together. It also works through the permission conflict visually, showing the allow and explicit deny beside the action they affect: Which AWS Certification Should You Get First in 2026? on YouTube.