Confluent CCAC exam guide covering resource boundaries, RBAC, networking, connectors, and cluster linking decisions.
This guide targets the current Confluent Cloud Certified Operator (CCAC) exam. As of April 14, 2026, Confluent’s live certification page still described CCAC as the certification for people with a strong working knowledge of Confluent Cloud, validating expertise in managing multi-cloud and global Apache Kafka architectures using features such as Cluster Linking, Stream Governance, fully managed connectors, stream processing, and more. Confluent’s current certification FAQ also still says Confluent exams are 90 minute proctored exams, that question types vary across multiple-choice, matching, and list order, that all exams are in English, and that certifications expire after two years.
Environment: Primary Confluent Cloud blast-radius and resource-grouping boundary for clusters, identities, networking, and governance configuration.
Cluster Linking: Native Confluent capability for replicating topics across Kafka clusters without building a custom consumer-producer bridge.
| Item | Current Confluent signal |
|---|---|
| Official exam name | Confluent Cloud Certified Operator |
| Exam code | CCAC |
| Public role framing | operators managing Confluent Cloud platforms and global Kafka architectures |
| Current exam style signal | 90 minute proctored exam |
| Question types | multiple-choice, matching, list order |
| Language | English |
| Certification validity | 2 years |
| Guide model | 5 chapters -> 10 section lessons |
CCAC is not a Kafka developer exam and it is not a self-managed broker-admin exam. Confluent is testing whether you can operate Confluent Cloud safely: choose the right environment and cluster boundaries, control service-account and API-key usage, make the right public or private connectivity decision, reason through managed connector and governance failures, and keep multi-cluster movement and incident response under control.
Confluent’s public certification page does not publish a clean weighted domain table for CCAC, so this guide organizes the live operator scope into five practical chapters that match the capabilities Confluent publicly says the exam covers.
Read CCAC stems in this order:
flowchart LR
S["Study Plan"] --> D["5 operator chapters"]
D --> L["10 scenario-first lessons"]
L --> C["Cheat Sheet and Glossary"]
C --> M["Mixed operations review"]
M --> R["Resources and final fact check"]
Use the guide in this order:
| Chapter | Lesson count | Focus |
|---|---|---|
| 1. Boundaries | 2 | organizations, environments, clusters, dedicated vs lower-isolation choices, limits, and resource placement logic |
| 2. Access | 2 | service accounts, API keys, RBAC scopes, least privilege, and access troubleshooting |
| 3. Networking | 2 | public vs private connectivity, allowlists, DNS, routing, and client-path failures |
| 4. Integrations | 2 | managed connectors, auth and network triage, Stream Governance, Schema Registry, and platform-capability boundaries |
| 5. Multi-Cluster | 2 | Cluster Linking, source-of-truth logic, monitoring, incidents, limits, and cost-aware operations |
Use these tie-breakers:
| If the close answers differ on… | Lean toward… |
|---|---|
| broad convenience vs tighter blast radius | the answer that preserves the cleaner environment, scope, or cluster boundary |
| public simplicity vs private control | the answer that matches the actual requirement instead of assuming all traffic must be private |
| connector mystery vs methodical diagnosis | the answer that checks auth, network, and schema in order |
| replication presence vs failover readiness | the answer that defines the authoritative cluster and the cutover path |