Confluent · CCAC
Validates the ability to operate and manage Apache Kafka on Confluent Cloud, covering core cloud concepts, Kafka operations, streaming pipelines, data governance, and cloud resilience.
Practice Questions
630
≈ 10 practice exams
Duration
90 minutes
Passing Score
70%
Difficulty
AssociateLast Updated
Feb 2026
Use this CCAC practice exam to prepare for Confluent Cloud Certified Operator (CCAC) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 630 questions for Confluent CCAC, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to patterns in your missed answers. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The Confluent Cloud Certified Operator (CCAC) certification validates a candidate's ability to operate and manage Apache Kafka workloads on Confluent Cloud. It covers the full operational lifecycle of cloud-native Kafka deployments, including cluster provisioning, configuration, monitoring, security, stream processing, and data governance. The certification is specifically oriented toward Confluent Cloud's managed service offerings—such as fully managed connectors, Cluster Linking, Schema Registry, and ksqlDB—rather than self-managed or on-premises deployments.
The exam is structured around seven weighted domains that span core cloud concepts through resilience and disaster recovery. With 60 multiple-choice questions delivered in 90 minutes and a passing threshold of 70%, the CCAC is positioned at the associate difficulty level, making it accessible to professionals with foundational Kafka knowledge who are transitioning into or actively working within Confluent Cloud environments. The certification is valid for two years, after which recertification is required.
This certification is best suited for cloud engineers, DevOps engineers, site reliability engineers (SREs), platform engineers, and Kafka administrators who are responsible for day-to-day operations of Confluent Cloud deployments. It is particularly relevant for professionals who manage topics, partitions, connectors, access controls, and streaming pipelines within Confluent Cloud rather than self-managed Kafka clusters.
Candidates should have hands-on experience deploying and managing Confluent Cloud clusters, working with the Confluent Cloud Console and CLI, and operating streaming data infrastructure in production environments. It is also appropriate for infrastructure engineers moving from traditional Kafka administration (CCAAK) toward fully managed cloud operations.
There are no formal prerequisites required to register for the CCAC exam. However, Confluent strongly recommends that candidates have practical experience operating Kafka clusters within Confluent Cloud before attempting the exam. Familiarity with core Apache Kafka concepts—such as topics, partitions, consumer groups, producers, offsets, and replication—is assumed and will not be taught as part of exam preparation.
Candidates are encouraged to complete Confluent's official training courses available through training.confluent.io, particularly those covering Confluent Cloud administration, Stream Governance, and connector management. Hands-on practice using Confluent Cloud's free tier or a trial environment is highly recommended to reinforce operational knowledge across all seven exam domains.
The CCAC exam consists of 60 multiple-choice questions to be completed within a 90-minute time limit. The exam is proctored and can be taken either remotely (from any location meeting internet, security, and privacy requirements) or at an authorized testing center worldwide. Remote delivery requires a webcam, as a proctor monitors the candidate throughout the session. All exams are administered in English.
Candidates receive their pass/fail results immediately upon completing the exam on the testing screen. The passing score is 70%. The exam costs $150 USD. Upon passing, candidates receive a Confluent digital badge and certificate, which can be shared directly to LinkedIn. The certification remains valid for two years from the date of passing.
Earning the CCAC certification demonstrates verified expertise in operating Confluent Cloud, which is increasingly adopted by enterprises building real-time data platforms and event-driven architectures. Roles that commonly list Confluent Cloud experience as a requirement or differentiator include Senior Data Engineer, Kafka Platform Engineer, Cloud Infrastructure Engineer, and SRE. The certification complements existing cloud certifications (AWS, GCP, Azure) by validating streaming data infrastructure skills that are not covered by general cloud provider exams.
The CCAC is positioned at the associate level and serves as a natural entry point before pursuing more advanced Confluent certifications such as the Confluent Certified Developer for Apache Kafka (CCDAK) or the Confluent Certified Administrator for Apache Kafka (CCAAK). The digital badge issued upon passing can be added to LinkedIn profiles and email signatures, providing visible credentialing for job searches and salary negotiations in a market where real-time data expertise commands a premium.
5 sample questions with answers and explanations. The full bank has 630 questions, enough for 10 full-length practice exams.
Preview — answers shown1. A platform team enables BYOK encryption for a Dedicated cluster on AWS using a customer-managed KMS key. After three months, they need to rotate the encryption key to meet security compliance requirements. Which key rotation method is supported by Confluent Cloud BYOK? (Select one!)
Explanation
Confluent Cloud BYOK supports only automatic key rotation handled by the cloud provider's key management service (AWS KMS, Azure Key Vault, GCP Cloud KMS). Manual rotation by updating cluster configuration is not supported. Clusters do not need to be recreated for key rotation as automatic rotation is seamlessly handled. Confluent Cloud does not provide rotation scheduling—this is managed by the cloud provider's KMS service. Only symmetric keys are supported, and rotation must use the cloud provider's automatic rotation features.
2. A fintech company is migrating their real-time payment processing system to Confluent Cloud. They require 99.99% SLA, private networking with no CIDR overlap concerns, and the ability to handle variable traffic patterns ranging from 50 MBps to 500 MBps ingress. The solution must minimize operational overhead for scaling. Which cluster type and networking configuration should they choose? (Select one!)
Explanation
Enterprise cluster with elastic scaling and AWS PrivateLink meets all requirements. Enterprise provides 99.99% SLA with 2+ eCKU, supports automatic elastic scaling from 1-32 eCKU handling variable traffic without manual intervention, and PrivateLink provides private networking without CIDR overlap concerns. Standard clusters have lower throughput capacity per eCKU and don't scale beyond 10 eCKU. Dedicated clusters require manual CKU scaling which adds operational overhead. Freight clusters don't support exactly-once semantics needed for payment processing and have limited feature support.
3. A startup is evaluating Confluent Cloud cluster types for a new real-time analytics platform. They need exactly-once semantics, log compaction, and ksqlDB support, but have a limited budget and expect variable traffic patterns. The workload will start small but may scale to moderate production levels within 6 months. Which cluster type should they choose initially? (Select one!)
Explanation
Basic clusters support exactly-once semantics, log compaction, and ksqlDB while providing elastic scaling at the most economical cost. For a startup with variable traffic and budget constraints, Basic offers all required features and automatically scales from 1-50 eCKU based on demand. Standard cluster requires higher minimum costs without providing features needed beyond what Basic offers. Enterprise cluster is designed for private networking requirements not mentioned in the scenario. Dedicated cluster requires manual scaling and pre-allocated resources, making it cost-inefficient for variable workloads.
4. A Standard cluster experiences intermittent connection failures. Investigation reveals that client applications are caching bootstrap server IP addresses. What is the root cause of these failures? (Select one!)
Explanation
Public IP addresses for Confluent Cloud clusters are not static and can change without notice. Clients must resolve DNS names on each connection attempt rather than caching IP addresses. This ensures applications adapt to IP address changes automatically. Auto-scaling does not necessarily trigger IP address changes. There is no requirement for DNS resolution every 5 minutes specifically. The SLA does not excuse connection failures caused by IP caching issues.
5. A development team configures a cluster link with consumer.offset.sync.ms set to 30000. They notice that after promoting a mirror topic, some consumer offsets are lower than expected. What concept explains this behavior? (Select one!)
Explanation
Offset clamping occurs when consumer offset sync is enabled and a mirror topic is promoted or failed over. The consumer offsets synced from the source cluster are not allowed to exceed the log end offset of the mirror topic. If the synced offset is greater than the last offset on the mirror topic, it is clamped down to the log end offset. This prevents consumers from seeking to offsets that do not yet exist on the mirror topic. Offset translation is a different concept used in Replicator, not Cluster Linking. Offset compression is not a real Kafka concept. Network latency may affect sync timing but does not explain the clamping behavior.
$17.99
One-time access to this exam