IT Certifications
Vendor exams do not form one ladder. They form nine that stand side by side and do not interchange, and most of the money wasted on certification is spent climbing the wrong one.
14 concepts · 3 courses · 37 certification exams · 3 related fields
Ask whether IT certifications are worth it and the answers conflict, because the people answering are not describing the same object. Nothing in our data supports the idea of a single ladder running from beginner to expert. The 55 exams we track across 20 vendors form roughly nine ladders standing next to each other, and the rungs do not interchange. AZ-900 moves you one step up the cloud ladder and no distance at all up the security one. CCNA is not a cheaper route to the CKA. ITIL Foundation and PSM I resemble each other in effort and in the promise made about them, while certifying two different institutions' vocabulary to two different buyers. Almost all the money wasted on exams goes one of two ways: a candidate climbs a ladder nobody within commuting distance is hiring from, or a candidate collects a first rung on four separate ladders and presents the result as a portfolio. The second is the costlier mistake, because it feels like progress while it is happening. Four foundational certificates read to a hiring manager as four abandoned starts. Two rungs on one ladder read as a direction. It helps to be blunt about what the certificate does, since the marketing never is. It does not prove competence, and no interviewer who has held the job treats it as proof. What it does is survive a filter. Confronted with several hundred applications and no means of judging them individually, a screener must sort on something unambiguous, and a credential is one of the few lines on a CV that is simply present or absent. That mechanism explains the value and the limit together. The value is real: a filter you do not pass is a conversation you never get to have. The limit is that passing it buys the conversation and nothing more, and the conversation turns on outages you have caused and then repaired. It also explains why the badge loses force the moment a reader can verify you some other way, which leads to the first position here worth disputing. For anyone already employed in IT, a foundational exam is rarely worth its fee on its own. Colleagues can see your work; the certificate tells them nothing they do not already know. It earns its money in three situations. A career changer has no other evidence and needs one. An employer pays, in which case the argument is over. Or the exam unlocks something concrete, the way ServiceNow's CSA sits behind a free course that also makes you eligible for the exam. Outside those three, the fee is better spent on the associate exam one rung higher, because that is the rung job postings actually name.
Nine ladders, side by side
| Ladder | Who it is genuinely for | Where it starts | What it does not prove |
|---|---|---|---|
| Cloud (Microsoft, AWS, Google Cloud) | People already working near one platform's monthly bill | A fundamentals exam, then the associate administrator or architect | That you could do the same on the other two platforms |
| Security (CompTIA, ISC2, ISACA, EC-Council) | Administrators moving into defensive work; anyone facing a tender requirement | Security+; the expert tier expects documented years | Hands-on incident work. The expert tier certifies governance vocabulary |
| Networking (Cisco, CompTIA) | Anyone whose employer owns switches, routers or a campus network | Network+ for neutrality, CCNA where Cisco kit is installed | Cloud networking, which uses different names for different things |
| Linux and systems (Red Hat, LPI, CompTIA) | Anyone whose servers boot without a graphical interface | RHCSA where the fleet runs RHEL, otherwise LPIC-1 | Orchestration or automation at scale |
| Project management and agile (PMI, PeopleCert, Scrum.org, GPM) | People who already lead projects and need the credential their market names | PRINCE2 or PSM I; PMP demands documented leadership hours first | That your organisation will follow the method you were taught |
| Service management (PeopleCert ITIL, ServiceNow) | Staff inside an IT function already built on the framework or the platform | ITIL Foundation, or ServiceNow CSA after its free course | Engineering skill, and little of it transfers to another employer's stack |
| Data and AI (Microsoft, AWS, Databricks) | Analysts and engineers with a pipeline already in production | A data fundamentals exam, then the Fabric or Databricks associate | Statistics, modelling judgement, or that the numbers are right |
| Testing (ISTQB) | QA staff in regulated, contract or agency software work, mostly in Europe | CTFL, which nearly every posting means by 'ISTQB' | Coding ability; automation is a separate advanced module |
| Development (GitHub, CNCF, Salesforce) | Developers who need a named platform on the CV rather than a language | GitHub Foundations, then CKA or the Salesforce administrator track | That you can ship maintainable software. A repository does that |
What it costs to stay certified
Every fee on an exam page is a starting price, and reading it as a purchase is the mistake that catches otherwise careful people. Validity across our records runs from one year to five, and beyond that sits a genuine lifetime tier. Microsoft's associate and expert certificates expire after a single year and renew free through an assessment on Microsoft Learn, which is generous and also an annual obligation you will forget. AWS and Cisco run three years and renew by examination: retake the current version, or pass something higher. Red Hat works the same way and calls a lapsed certificate non-current rather than expired. CNCF gives the CKA a two-year life and offers no credit-based way out, so the only route is another sitting. LPI runs five years and accepts a membership with development units instead of a retake. The security and management bodies are a different animal: CISSP, CISA, CISM, CEH and PMP each combine continuing-education credits across a three-year cycle with a maintenance or renewal fee payable whether or not you learn anything, and EC-Council revokes a lapsed CEH rather than suspending it. Salesforce charges nothing but requires a release module every year. ServiceNow added an annual maintenance fee for its mainline certifications in 2026, on top of the per-release delta exam. Only ISTQB, Scrum.org, GitHub Foundations, Microsoft's fundamentals and CompTIA Tech+ genuinely stop asking. Add the cycles up over a working life and a credential kept current for decades can cost more than it did to earn in the first place. Almost no preparation course mentions this, and it is the strongest argument for holding fewer certificates than you are capable of passing: let the ones nobody ever asks about lapse. So when does a certificate genuinely beat experience? When the experience cannot be checked. Self-taught projects, freelance work and jobs at employers a recruiter has never heard of are invisible to a filter, and a vendor exam makes them legible. When a contract or a public tender names the credential, in which case there is nothing to argue about. And at the moment you change platform, because years of on-premise administration say nothing about whether you can be trusted with somebody's cloud spend. Everywhere else experience wins, and it should. Two notes on how this site is paid, since they bear on the advice. The vendors' own learning paths are free, and every exam page links them without commission, because for a good share of readers they are sufficient. Course and practice-test links are affiliate links. Fees, durations and retirement dates belong on the individual exam pages with the date we read them from the vendor, not here, where they would quietly go stale. Start at the certifications directory if you already know your ladder, or the IT, cloud and security path if you have yet to work out where on that sequence you currently sit.
Concepts
Cloud Hosting
Cloud hosting is the model in which servers, storage and databases are created on demand through an API from a provider's pooled hardware and billed for the time they exist, rather than rented as a fixed box by the month.
IaaS (Infrastructure as a Service)
IaaS is the layer of cloud computing where you rent raw infrastructure through an API, meaning virtual machines, disks and networks, and take responsibility for the operating system and everything you install above it.
PaaS (Platform as a Service)
PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.
Serverless Computing
Serverless computing runs your code only while an event is calling it: the provider conjures an execution environment on demand, throws it away afterwards, and charges for work performed instead of for capacity sitting idle.
Object Storage
Object storage keeps every file as a self-contained object (the bytes, a unique key and some metadata) inside a flat bucket you read and write over HTTP, with no drive to mount and no directory tree underneath it.
Containers
A container is an application packaged together with the libraries and configuration it needs, run as an isolated process on a host that is already switched on, so the same package behaves the same way on a laptop, in a build pipeline and in production.
Load Balancing
Load balancing is the practice of putting one entry point in front of several interchangeable servers and distributing incoming requests among them by a chosen policy, so that no single machine carries the traffic and no single machine's failure takes the service down.
SSL/TLS
SSL/TLS is the protocol that encrypts the connection between a browser and a server and, by way of a certificate signed by a certificate authority, proves the server is entitled to answer for the domain in the address bar.
DNS (Domain Name System)
DNS is the distributed lookup system that turns a hostname such as getting-digital.net into the IP address a browser can connect to, by walking a chain of nameservers whose answers are then cached for a lifetime the domain's owner publishes.
VPS (Virtual Private Server)
A VPS is a software-defined slice of one physical machine that behaves as a server in its own right, with its own operating system, reserved CPU, memory and disk, and administrative access down to the kernel.
Data Engineering
Data engineering is the discipline of moving records from the systems that produce them into a store where they can be queried, and of keeping that supply correct while the sources underneath keep changing.
Python
Python is a general-purpose programming language that became the standard interface for driving numerical and machine-learning code written in other languages.
Scope Creep
Scope creep is the quiet expansion of a priced piece of client work through additions that each look too minor to renegotiate, until what gets delivered is substantially larger than what was sold.
Statement of Work (SoW)
A statement of work is the document that commits one bounded piece of work to paper: what gets built, on which assumptions, to what deadline, for what money, and what sits outside it.
Courses in this topic
AI Programming with Python
Closes the gap most aspiring AI engineers hit first — they can write a little code, but not the programming-and-maths groundwork that machine-learning material takes for granted. It walks from language basics to a working model in PyTorch, with data libraries in between.
About 52 hours
Data Analyst
Walks the full investigative loop on real, untidy datasets — pose a question, gather and clean the data, explore it, then turn the result into a visual story an audience can act on. Each project lets you choose the dataset, so the work doubles as portfolio material.
About 43 hours
AI and Data Engineering
An advanced, four-course ExpertTrack about the unglamorous half of AI: the plumbing. It covers feeding models with well-built pipelines and warehouses, grounding them in organisational knowledge through retrieval, running them reliably at scale, and orchestrating agents that act on their own.
About 8 weeks
Related fields
- Hosting & Cloud
The cloud and Linux exams certify exactly the operating skills this field describes.
- Artificial Intelligence & Machine Learning
AI-901, AIF-C01 and the AI-flavoured versions of older exams test this vocabulary.
- Data & Analytics
The data-engineering exams (DP-700, DEA-C01, Databricks) sit on these concepts.
FAQ
- Does a certificate I already hold carry over to another ladder?
- Rarely. What transfers is the understanding, not the credential: networking knowledge makes cloud and security exams easier without shortening either one. The partial exception is CompTIA, whose vendor-neutral certificates count as continuing education towards other CompTIA renewals and are accepted across employers rather than for one platform.
- Is there a ladder you would tell people to skip?
- The agile foundation tier, unless a posting names it. The Scrum Guide is free and short enough to read in an evening, and PSM I certifies that you have read it. That is worth paying for when a recruiter filters on the letters, and close to worthless otherwise. The project management ladder proper, PMP or IPMA, is a different proposition.
- What happens if I let one lapse?
- It depends entirely on the vendor, which is why each exam page states it. Cisco, AWS and Red Hat want you to sit an exam again. EC-Council revokes the CEH outright. Salesforce and ServiceNow lapse you for missing a release module. ISTQB and Scrum.org never expire, so nothing happens at all.
Last reviewed 8 August 2026 · Getting Digital
