Specialty · Specialty exam · AIN
AI & Cloud Infrastructure Specialist
Validates that you can design, build and secure the infrastructure that backs AI and web services—from managed platforms (Vercel, Supabase) and infrastructure as code (Terraform) to edge and DNS (Route 53, Cloudflare), zero-trust internal networks (ZTNA, VPN) and operational reliability.
Daily practice · Free
10 questions · 25 min · No sign-up needed
Specialty exam · Proctored
35 questions · 60 min · Raw score of 75 or more · $3.99 / one attempt
Specialty exam detailsExam overview
- Questions
- 35
- Time
- 60 min
- Pass mark
- 75 pts
- Recommended experience
- Blue Belt (AI App Builder) or Red Belt (LLM API Developer) level, plus basic knowledge of cloud deployment, Linux and networking
Every question has five choices and is marked on an OMR answer sheet. Multiple-choice and true-or-false questions ask for the right combination from a box; ordering and matching questions ask for the right arrangement. Judgment questions (L3) are worth 3 points and all others 2; the raw score is converted to a 100-point scale and graded 1 to 9.
Exam domains
1. Managed app and data platforms (Foundations: Vercel & Supabase)20%
2. Infrastructure as Code and deployment automation (Intermediate: Terraform & IaC)20%
3. Global DNS and edge networking (Advanced: Route 53 & Cloudflare)25%
4. Corporate network security and remote access (Enterprise: ZTNA & VPN rollout)20%
5. Infrastructure reliability, secret management and incident response15%
Weights follow the Specialty exam. Practice and mock exams may mix domains differently.
What this exam verifies
- Configure environment separation, connection pooling, RLS and storage permissions safely on Vercel and Supabase
- Manage infrastructure as code with Terraform state locking, modules, drift detection and OIDC CI/CD pipelines
- Design DNS routing, proxy and WAF rules, caching, Workers and AI Gateway with Route 53 and Cloudflare
- Plan and deploy ZTNA and corporate VPNs (WireGuard, Tailscale, Cloudflare Tunnel) with split tunneling and device posture checks
- Operate zero-downtime secret rotation, backup and point-in-time recovery (PITR), expand-contract migrations and incident runbooks
Who it is for
- Full-stack and platform engineers who deploy and operate AI and web services
- Infrastructure and security engineers rolling out internal AI tools and corporate networks (ZTNA, VPN)
- DevOps engineers managing multi-environment infrastructure as code
Does not cover repairing physical on-premises server hardware or laying optical fiber.
Domain details
Domain 1. Managed app and data platforms (Foundations: Vercel & Supabase)
- Knowledge: Vercel environment separation and deployment protection, Function regions, execution limits and streaming, Supabase Postgres and Supavisor pooling, Row Level Security (RLS) and key separation, Auth callbacks and Storage access control
- Skills: Choose between transaction pooler and session mode, Prevent service-role key exposure and design RLS policies
Domain 2. Infrastructure as Code and deployment automation (Intermediate: Terraform & IaC)
- Knowledge: Remote state and state locking, Modules and environment separation, Plan/apply review and drift recovery, Sensitive variables and state-file security, CI/CD OIDC federation
- Skills: Spot destructive changes (replace or destroy) before apply, Build Terraform pipelines without long-lived credentials
Domain 3. Global DNS and edge networking (Advanced: Route 53 & Cloudflare)
- Knowledge: Route 53 record types (A, AAAA, CNAME, Alias) and routing policies, Health checks and TTL transition planning, Cloudflare proxy and SSL/TLS modes (Full Strict), WAF, rate limiting, bot controls and cache rules, Workers, Queues, AI Gateway and origin protection
- Skills: Design zero-downtime domain migrations and failover routing, Prevent cache poisoning on dynamic APIs and streaming responses
Domain 4. Corporate network security and remote access (Enterprise: ZTNA & VPN rollout)
- Knowledge: Trust-boundary differences between traditional VPN and ZTNA, Outbound connectors (Cloudflare Tunnel) and removing inbound ports, Mesh VPN (WireGuard, Tailscale) subnet routers and ACLs, Split tunneling and internal split-horizon DNS, IdP (SSO, MFA), device posture and client certificate rollout
- Skills: Connect internal resources without opening inbound firewall ports, Resolve split-tunnel and DNS conflicts during company-wide rollout
Domain 5. Infrastructure reliability, secret management and incident response
- Knowledge: Zero-downtime secret and certificate rotation, Point-in-time recovery (PITR) and backup verification, Expand-contract schema migrations, Observability (logs, metrics, traces) and cost alerts, Fault isolation and rollback runbooks
- Skills: Establish zero-downtime key rotation procedures after a leak, Design backward-compatible database migrations
Official documentation
Vercel
Supabase
Cloudflare
Specialty Course · AI & Cloud Infrastructure Specialist
Practice, mock exams and every course book are free. Pay only when you take an official test.