Skip to content
Getting Digital

IT Certifications

Vendor exams do not form one ladder. They form nine that stand side by side and do not interchange, and most of the money wasted on certification is spent climbing the wrong one.

14 concepts · 3 courses · 37 certification exams · 3 related fields

Ask whether IT certifications are worth it and the answers conflict, because the people answering are not describing the same object. Nothing in our data supports the idea of a single ladder running from beginner to expert. The 55 exams we track across 20 vendors form roughly nine ladders standing next to each other, and the rungs do not interchange. AZ-900 moves you one step up the cloud ladder and no distance at all up the security one. CCNA is not a cheaper route to the CKA. ITIL Foundation and PSM I resemble each other in effort and in the promise made about them, while certifying two different institutions' vocabulary to two different buyers. Almost all the money wasted on exams goes one of two ways: a candidate climbs a ladder nobody within commuting distance is hiring from, or a candidate collects a first rung on four separate ladders and presents the result as a portfolio. The second is the costlier mistake, because it feels like progress while it is happening. Four foundational certificates read to a hiring manager as four abandoned starts. Two rungs on one ladder read as a direction. It helps to be blunt about what the certificate does, since the marketing never is. It does not prove competence, and no interviewer who has held the job treats it as proof. What it does is survive a filter. Confronted with several hundred applications and no means of judging them individually, a screener must sort on something unambiguous, and a credential is one of the few lines on a CV that is simply present or absent. That mechanism explains the value and the limit together. The value is real: a filter you do not pass is a conversation you never get to have. The limit is that passing it buys the conversation and nothing more, and the conversation turns on outages you have caused and then repaired. It also explains why the badge loses force the moment a reader can verify you some other way, which leads to the first position here worth disputing. For anyone already employed in IT, a foundational exam is rarely worth its fee on its own. Colleagues can see your work; the certificate tells them nothing they do not already know. It earns its money in three situations. A career changer has no other evidence and needs one. An employer pays, in which case the argument is over. Or the exam unlocks something concrete, the way ServiceNow's CSA sits behind a free course that also makes you eligible for the exam. Outside those three, the fee is better spent on the associate exam one rung higher, because that is the rung job postings actually name.

Nine ladders, side by side

LadderWho it is genuinely forWhere it startsWhat it does not prove
Cloud (Microsoft, AWS, Google Cloud)People already working near one platform's monthly billA fundamentals exam, then the associate administrator or architectThat you could do the same on the other two platforms
Security (CompTIA, ISC2, ISACA, EC-Council)Administrators moving into defensive work; anyone facing a tender requirementSecurity+; the expert tier expects documented yearsHands-on incident work. The expert tier certifies governance vocabulary
Networking (Cisco, CompTIA)Anyone whose employer owns switches, routers or a campus networkNetwork+ for neutrality, CCNA where Cisco kit is installedCloud networking, which uses different names for different things
Linux and systems (Red Hat, LPI, CompTIA)Anyone whose servers boot without a graphical interfaceRHCSA where the fleet runs RHEL, otherwise LPIC-1Orchestration or automation at scale
Project management and agile (PMI, PeopleCert, Scrum.org, GPM)People who already lead projects and need the credential their market namesPRINCE2 or PSM I; PMP demands documented leadership hours firstThat your organisation will follow the method you were taught
Service management (PeopleCert ITIL, ServiceNow)Staff inside an IT function already built on the framework or the platformITIL Foundation, or ServiceNow CSA after its free courseEngineering skill, and little of it transfers to another employer's stack
Data and AI (Microsoft, AWS, Databricks)Analysts and engineers with a pipeline already in productionA data fundamentals exam, then the Fabric or Databricks associateStatistics, modelling judgement, or that the numbers are right
Testing (ISTQB)QA staff in regulated, contract or agency software work, mostly in EuropeCTFL, which nearly every posting means by 'ISTQB'Coding ability; automation is a separate advanced module
Development (GitHub, CNCF, Salesforce)Developers who need a named platform on the CV rather than a languageGitHub Foundations, then CKA or the Salesforce administrator trackThat you can ship maintainable software. A repository does that

What it costs to stay certified

Every fee on an exam page is a starting price, and reading it as a purchase is the mistake that catches otherwise careful people. Validity across our records runs from one year to five, and beyond that sits a genuine lifetime tier. Microsoft's associate and expert certificates expire after a single year and renew free through an assessment on Microsoft Learn, which is generous and also an annual obligation you will forget. AWS and Cisco run three years and renew by examination: retake the current version, or pass something higher. Red Hat works the same way and calls a lapsed certificate non-current rather than expired. CNCF gives the CKA a two-year life and offers no credit-based way out, so the only route is another sitting. LPI runs five years and accepts a membership with development units instead of a retake. The security and management bodies are a different animal: CISSP, CISA, CISM, CEH and PMP each combine continuing-education credits across a three-year cycle with a maintenance or renewal fee payable whether or not you learn anything, and EC-Council revokes a lapsed CEH rather than suspending it. Salesforce charges nothing but requires a release module every year. ServiceNow added an annual maintenance fee for its mainline certifications in 2026, on top of the per-release delta exam. Only ISTQB, Scrum.org, GitHub Foundations, Microsoft's fundamentals and CompTIA Tech+ genuinely stop asking. Add the cycles up over a working life and a credential kept current for decades can cost more than it did to earn in the first place. Almost no preparation course mentions this, and it is the strongest argument for holding fewer certificates than you are capable of passing: let the ones nobody ever asks about lapse. So when does a certificate genuinely beat experience? When the experience cannot be checked. Self-taught projects, freelance work and jobs at employers a recruiter has never heard of are invisible to a filter, and a vendor exam makes them legible. When a contract or a public tender names the credential, in which case there is nothing to argue about. And at the moment you change platform, because years of on-premise administration say nothing about whether you can be trusted with somebody's cloud spend. Everywhere else experience wins, and it should. Two notes on how this site is paid, since they bear on the advice. The vendors' own learning paths are free, and every exam page links them without commission, because for a good share of readers they are sufficient. Course and practice-test links are affiliate links. Fees, durations and retirement dates belong on the individual exam pages with the date we read them from the vendor, not here, where they would quietly go stale. Start at the certifications directory if you already know your ladder, or the IT, cloud and security path if you have yet to work out where on that sequence you currently sit.

Concepts

Hosting & Cloud

Cloud Hosting

Cloud hosting is the model in which servers, storage and databases are created on demand through an API from a provider's pooled hardware and billed for the time they exist, rather than rented as a fixed box by the month.

Hosting & Cloud

IaaS (Infrastructure as a Service)

IaaS is the layer of cloud computing where you rent raw infrastructure through an API, meaning virtual machines, disks and networks, and take responsibility for the operating system and everything you install above it.

Hosting & Cloud

PaaS (Platform as a Service)

PaaS is a hosting layer that takes your source code and turns it into a running application for you, owning the machines, the runtime, the build, the routing, the certificates and the restarts, so that shipping becomes a push rather than a project.

Hosting & Cloud

Serverless Computing

Serverless computing runs your code only while an event is calling it: the provider conjures an execution environment on demand, throws it away afterwards, and charges for work performed instead of for capacity sitting idle.

Hosting & Cloud

Object Storage

Object storage keeps every file as a self-contained object (the bytes, a unique key and some metadata) inside a flat bucket you read and write over HTTP, with no drive to mount and no directory tree underneath it.

Hosting & Cloud

Containers

A container is an application packaged together with the libraries and configuration it needs, run as an isolated process on a host that is already switched on, so the same package behaves the same way on a laptop, in a build pipeline and in production.

Hosting & Cloud

Load Balancing

Load balancing is the practice of putting one entry point in front of several interchangeable servers and distributing incoming requests among them by a chosen policy, so that no single machine carries the traffic and no single machine's failure takes the service down.

Hosting & Cloud

SSL/TLS

SSL/TLS is the protocol that encrypts the connection between a browser and a server and, by way of a certificate signed by a certificate authority, proves the server is entitled to answer for the domain in the address bar.

Hosting & Cloud

DNS (Domain Name System)

DNS is the distributed lookup system that turns a hostname such as getting-digital.net into the IP address a browser can connect to, by walking a chain of nameservers whose answers are then cached for a lifetime the domain's owner publishes.

Hosting & Cloud

VPS (Virtual Private Server)

A VPS is a software-defined slice of one physical machine that behaves as a server in its own right, with its own operating system, reserved CPU, memory and disk, and administrative access down to the kernel.

Data & Analytics

Data Engineering

Data engineering is the discipline of moving records from the systems that produce them into a store where they can be queried, and of keeping that supply correct while the sources underneath keep changing.

Programming & Web Development

Python

Python is a general-purpose programming language that became the standard interface for driving numerical and machine-learning code written in other languages.

Freelance Work

Scope Creep

Scope creep is the quiet expansion of a priced piece of client work through additions that each look too minor to renegotiate, until what gets delivered is substantially larger than what was sold.

Freelance Work

Statement of Work (SoW)

A statement of work is the document that commits one bounded piece of work to paper: what gets built, on which assumptions, to what deadline, for what money, and what sits outside it.

Courses in this topic

Related fields

FAQ

Does a certificate I already hold carry over to another ladder?
Rarely. What transfers is the understanding, not the credential: networking knowledge makes cloud and security exams easier without shortening either one. The partial exception is CompTIA, whose vendor-neutral certificates count as continuing education towards other CompTIA renewals and are accepted across employers rather than for one platform.
Is there a ladder you would tell people to skip?
The agile foundation tier, unless a posting names it. The Scrum Guide is free and short enough to read in an evening, and PSM I certifies that you have read it. That is worth paying for when a recruiter filters on the letters, and close to worthless otherwise. The project management ladder proper, PMP or IPMA, is a different proposition.
What happens if I let one lapse?
It depends entirely on the vendor, which is why each exam page states it. Cisco, AWS and Red Hat want you to sit an exam again. EC-Council revokes the CEH outright. Salesforce and ServiceNow lapse you for missing a release module. ISTQB and Scrum.org never expire, so nothing happens at all.

Last reviewed 8 August 2026 · Getting Digital