- The Five CDE Domains at a Glance
- Domain 1: Bootstrapping and Maintaining a Google Cloud Organization
- Domain 2: CI/CD Pipelines and Continuous Testing
- Domain 3: Site Reliability Engineering Practices
- Domain 4: Observability and Troubleshooting
- Domain 5: Optimizing Performance and Cost
- How the Domains Show Up in Exam Questions
- Mapping a Study Timeline to the Domains
- Who Actually Tests on These Domains
- Frequently Asked Questions
- CI/CD Pipelines and Observability each account for about 25% of the exam - together over half the content.
- Domain 1 (org bootstrapping) is 20%, SRE practices are 18%, and cost/performance optimization is only 12%.
- The exam has 50-60 questions in 2 hours, administered via Pearson, with no formal prerequisites.
- Registration costs $200 plus tax, and the certification stays valid for 2 years before requiring renewal.
The Five CDE Domains at a Glance
The Professional Cloud DevOps Engineer exam blueprint is built around five content areas, each carrying a different weight toward your final score. Google publishes these percentages as approximate, but they're the single best signal for allocating your prep time. If you only read one section of the CDE Study Guide 2026: How to Pass on Your First Attempt, make it the domain breakdown - it tells you exactly where the exam's gravity sits.
| Domain | Weight | Core Focus |
|---|---|---|
| 1. Bootstrapping and maintaining a Google Cloud organization | 20% | IAM, resource hierarchy, policy, provisioning infrastructure |
| 2. Building and implementing CI/CD pipelines | 25% | Continuous testing for apps, infrastructure, and ML workloads |
| 3. Applying site reliability engineering practices | 18% | SLIs/SLOs, error budgets, incident response, toil reduction |
| 4. Implementing observability practices and troubleshooting | 25% | Logging, monitoring, tracing, alerting, root-cause analysis |
| 5. Optimizing performance and cost | 12% | Right-sizing, autoscaling, cost visibility and controls |
Notice that Domains 2 and 4 are tied for the largest share. That's not a coincidence - the certification is fundamentally about the operational lifecycle: building pipelines that ship code and infrastructure safely, then observing what that code does in production. If you're still deciding whether this credential fits your career path, the domain list itself is a good gut check; compare it against the broader context in Is the CDE Certification Worth It? Complete ROI Analysis 2026.
Domain 1: Bootstrapping and Maintaining a Google Cloud Organization
This domain (20%) tests your ability to stand up and govern a Google Cloud environment from the ground up - not just click through a console once. Expect questions on organizing resources across folders and projects, applying IAM roles with least-privilege intent, and enforcing organization policies at scale.
What Candidates Must Master
You need working fluency with the resource hierarchy and the tools that let teams self-serve without breaking governance.
- Resource Manager hierarchy: organization, folders, projects
- IAM custom roles vs. predefined roles, and service account design
- Infrastructure as code patterns (Terraform, Deployment Manager equivalents) for repeatable provisioning
- Organization policy constraints and how they interact with folder-level overrides
- Shared VPC and networking setup for multi-team organizations
Scenario questions here often describe a company migrating multiple teams onto Google Cloud and ask which structure minimizes both security risk and administrative overhead. If governance and eligibility topics feel unfamiliar, review CDE Requirements 2026: Eligibility, Prerequisites & How to Qualify before diving into hands-on labs - it clarifies what baseline experience actually maps to this domain's expectations.
Domain 2: CI/CD Pipelines and Continuous Testing
At 25%, this is one of the two heaviest domains, and its scope is broader than "know Cloud Build." The official description explicitly covers continuous testing across three distinct workload types: application code, infrastructure definitions, and machine learning pipelines. That third category surprises a lot of candidates who assume the exam is purely application-centric.
Pipeline Concepts You Cannot Skip
- Build, test, and deploy stages using Cloud Build, Artifact Registry, and Cloud Deploy
- Deployment strategies: blue/green, canary, and rolling updates
- Testing infrastructure changes before promotion (policy checks, plan/apply gating)
- CI/CD for ML: retraining triggers, model versioning, and pipeline validation
- Rollback mechanisms and how they're triggered automatically from monitoring signals
Practice questions that isolate pipeline mechanics from monitoring context will underprepare you. Use full-length simulations rather than isolated flashcards to build that muscle - the practice test platform is designed specifically to blend these cross-domain scenarios the way the real exam does.
Domain 3: Applying Site Reliability Engineering Practices
This domain (18%) is where the exam separates candidates who've memorized terminology from those who've actually run production systems. You'll be tested on defining and measuring reliability, not just reciting definitions.
Core SRE Topics
- Writing meaningful SLIs and setting realistic SLOs
- Calculating and spending error budgets to balance velocity and stability
- Incident management: detection, escalation, postmortems, and blameless culture
- Reducing toil through automation and self-healing systems
- Capacity planning and demand forecasting for reliability
A common question pattern presents a service with a defined SLO and asks whether a given error budget burn rate justifies freezing releases. If SRE math and scenario logic feel shaky, that's a strong signal to slow down - many candidates underestimate exactly how conceptually dense this section is relative to its 18% weight, a nuance covered in more depth in How Hard Is the CDE Exam? Complete Difficulty Guide 2026.
Domain 4: Implementing Observability Practices and Troubleshooting Issues
Tied with CI/CD at 25%, this domain covers the full observability stack: Cloud Logging, Cloud Monitoring, Cloud Trace, and the diagnostic reasoning needed to connect symptoms to root causes under time pressure.
Skills Tested in This Domain
- Structured logging, log-based metrics, and log routing/sinks
- Building dashboards and alerting policies that reduce noise, not just capture data
- Distributed tracing to isolate latency across microservices
- Correlating metrics, logs, and traces during an active incident
- Setting up uptime checks and synthetic monitoring for external-facing services
Key Takeaway
Because this domain matches CI/CD's 25% weight, treat observability tooling as a first-class exam topic, not a supplement to pipeline questions - dedicate standalone practice time to alerting policy design and trace analysis.
Troubleshooting scenarios are often multi-step: a deployment succeeds, an alert fires minutes later, and you must pick the log query or dashboard view that isolates the cause fastest. This is also the domain most likely to include multiple-select questions, since real troubleshooting rarely has one correct action.
Domain 5: Optimizing Performance and Cost
At 12%, this is the smallest domain, but it's not one to skip - a handful of missed questions here can matter given the exam's relatively tight question count. Expect topics on rightsizing compute resources, autoscaling configuration, and interpreting billing data to recommend cost controls.
What to Review
- Machine type selection and rightsizing recommendations
- Autoscaling policies for Compute Engine, GKE, and managed services
- Committed use discounts, budgets, and billing export analysis
- Performance testing to validate that cost cuts don't degrade SLOs
Because this domain is smaller, some candidates deprioritize it entirely - a mistake. Given the exam's passing threshold, a weak domain 5 performance can still tip a borderline score. For specifics on what score you actually need across all five domains combined, see CDE Passing Score 2026: Exactly What You Need to Pass.
How the Domains Show Up in Exam Questions
The exam consists of 50-60 multiple-choice and multiple-select questions delivered in a 2-hour window, proctored either online or onsite through Pearson. There's no domain-by-domain breakdown shown to you during the test and no section timers - questions from all five domains are interleaved throughout.
- Scenario-first framing: Most questions open with a company or team situation before asking what action to take, meaning you're applying domain knowledge to context, not answering trivia.
- Cross-domain blending: As noted above, CI/CD and observability questions frequently overlap; SRE and cost-optimization questions sometimes do too (e.g., "is this reliability investment worth the cost?").
- No prerequisites, but real experience matters: Google sets no formal prerequisite, but recommends 3+ years of industry experience with at least 1 year managing production systems on Google Cloud - and the question style reflects that expectation.
Registration costs $200 plus applicable tax, and once you pass, the credential is valid for 2 years, with a renewal window that opens 60 days before expiration. Renewal currently requires retaking the standard exam, so treat your domain notes as a reusable asset, not a one-time cram sheet. Full logistics - scheduling, rescheduling, and testing windows - are covered in CDE Exam Dates 2026: Testing Windows, Deadlines & Scheduling, and total cost planning (exam fee plus retakes or training) is broken down in CDE Certification Cost 2026: Complete Pricing Breakdown.
Mapping a Study Timeline to the Domains
Rather than studying domains in the order Google lists them, sequence your prep by weight and by how much they depend on each other. CI/CD and observability reinforce one another, so studying them back-to-back builds the cross-domain reasoning the exam actually tests.
Domain 1 - Organization Foundations
- Build a test org with folders, projects, and IAM roles
- Practice organization policy constraints hands-on
Domain 2 - CI/CD Pipelines
- Build a pipeline covering app, infra, and one ML retraining trigger
- Practice canary and rollback configurations
Domain 4 - Observability
- Wire alerting policies to the pipeline built in weeks 2-3
- Practice tracing a simulated latency incident end to end
Domain 3 - SRE Practices
- Define SLOs for the same sample service
- Run through error-budget math and incident postmortem scenarios
Domain 5 + Full Review
- Cover rightsizing, autoscaling, and billing analysis
- Take full-length timed practice exams mixing all five domains
Notice this timeline deliberately reuses the same sample service across weeks 2 through 5 - the same pipeline you build in week 2 gets monitored in week 4 and given SLOs in week 5. That continuity mirrors how the real exam blends domains instead of testing them in isolation. For a more exhaustive week-by-week plan with additional resources, pair this timeline with the CDE Study Guide 2026: How to Pass on Your First Attempt.
Who Actually Tests on These Domains
The domain weighting reflects real hiring patterns. Organizations bringing on DevOps engineers, SRE specialists, and platform engineers use this exact blueprint as a proxy for job-readiness - which is why the certification shows up so often in job postings for roles spanning CI/CD ownership, production reliability, and cloud platform management. If you're weighing how this maps to compensation and title expectations, CDE Salary Guide 2026: Complete Earnings Analysis breaks down how these domains connect to real-world responsibilities, and CDE Jobs outlines the roles that most frequently list this credential.
Before you register, it's worth confirming the terminology and scope aren't being confused with unrelated uses of the same acronym in other industries - see What Is CDE? and CDE Meaning for quick disambiguation if you found this page through a general search. Once you're confident this is the right credential, run a few timed sets on the CDE practice test platform against each domain individually before attempting a full simulation.
Frequently Asked Questions
Start with Domain 1 (organization bootstrapping) since it's foundational to everything else, then move into Domain 2 (CI/CD) and Domain 4 (observability) together, since they're both weighted at 25% and reinforce each other.
Google describes the published weightings as approximate. Use them as a strong directional guide for prioritizing study time rather than an exact question count per domain.
Yes. Domain 2 explicitly covers continuous testing for application, infrastructure, and machine learning workloads, so candidates should have at least a working understanding of ML pipeline validation and retraining triggers.
The exam doesn't reveal a per-domain question count. With 50-60 total questions across five domains, expect the two 25% domains to appear noticeably more often than the 12% cost-optimization domain.
Yes. Renewal currently requires retaking the standard exam, and the renewal window opens 60 days before your 2-year certification expires, so all five domains remain in scope for recertification.