Confluent · CCAC
Validates the ability to operate and manage Apache Kafka on Confluent Cloud, covering core cloud concepts, Kafka operations, streaming pipelines, data governance, and cloud resilience.
Practice Questions
630
≈ 10 practice exams
Duration
90 minutes
Passing Score
70%
Difficulty
AssociateLast Updated
Feb 2026
Use this CCAC practice exam to prepare for Confluent Cloud Certified Operator (CCAC) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 630 questions for Confluent CCAC, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to patterns in your missed answers. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The Confluent Cloud Certified Operator (CCAC) certification validates a candidate's ability to operate and manage Apache Kafka workloads on Confluent Cloud. It covers the full operational lifecycle of cloud-native Kafka deployments, including cluster provisioning, configuration, monitoring, security, stream processing, and data governance. The certification is specifically oriented toward Confluent Cloud's managed service offerings—such as fully managed connectors, Cluster Linking, Schema Registry, and ksqlDB—rather than self-managed or on-premises deployments.
The exam is structured around seven weighted domains that span core cloud concepts through resilience and disaster recovery. With 60 multiple-choice questions delivered in 90 minutes and a passing threshold of 70%, the CCAC is positioned at the associate difficulty level, making it accessible to professionals with foundational Kafka knowledge who are transitioning into or actively working within Confluent Cloud environments. The certification is valid for two years, after which recertification is required.
This certification is best suited for cloud engineers, DevOps engineers, site reliability engineers (SREs), platform engineers, and Kafka administrators who are responsible for day-to-day operations of Confluent Cloud deployments. It is particularly relevant for professionals who manage topics, partitions, connectors, access controls, and streaming pipelines within Confluent Cloud rather than self-managed Kafka clusters.
Candidates should have hands-on experience deploying and managing Confluent Cloud clusters, working with the Confluent Cloud Console and CLI, and operating streaming data infrastructure in production environments. It is also appropriate for infrastructure engineers moving from traditional Kafka administration (CCAAK) toward fully managed cloud operations.
There are no formal prerequisites required to register for the CCAC exam. However, Confluent strongly recommends that candidates have practical experience operating Kafka clusters within Confluent Cloud before attempting the exam. Familiarity with core Apache Kafka concepts—such as topics, partitions, consumer groups, producers, offsets, and replication—is assumed and will not be taught as part of exam preparation.
Candidates are encouraged to complete Confluent's official training courses available through training.confluent.io, particularly those covering Confluent Cloud administration, Stream Governance, and connector management. Hands-on practice using Confluent Cloud's free tier or a trial environment is highly recommended to reinforce operational knowledge across all seven exam domains.
The CCAC exam consists of 60 multiple-choice questions to be completed within a 90-minute time limit. The exam is proctored and can be taken either remotely (from any location meeting internet, security, and privacy requirements) or at an authorized testing center worldwide. Remote delivery requires a webcam, as a proctor monitors the candidate throughout the session. All exams are administered in English.
Candidates receive their pass/fail results immediately upon completing the exam on the testing screen. The passing score is 70%. The exam costs $150 USD. Upon passing, candidates receive a Confluent digital badge and certificate, which can be shared directly to LinkedIn. The certification remains valid for two years from the date of passing.
Earning the CCAC certification demonstrates verified expertise in operating Confluent Cloud, which is increasingly adopted by enterprises building real-time data platforms and event-driven architectures. Roles that commonly list Confluent Cloud experience as a requirement or differentiator include Senior Data Engineer, Kafka Platform Engineer, Cloud Infrastructure Engineer, and SRE. The certification complements existing cloud certifications (AWS, GCP, Azure) by validating streaming data infrastructure skills that are not covered by general cloud provider exams.
The CCAC is positioned at the associate level and serves as a natural entry point before pursuing more advanced Confluent certifications such as the Confluent Certified Developer for Apache Kafka (CCDAK) or the Confluent Certified Administrator for Apache Kafka (CCAAK). The digital badge issued upon passing can be added to LinkedIn profiles and email signatures, providing visible credentialing for job searches and salary negotiations in a market where real-time data expertise commands a premium.
5 sample questions with answers and explanations. The full bank has 630 questions, enough for 10 full-length practice exams.
Preview — answers shown1. A manufacturing company configures AWS Transit Gateway connectivity to their Confluent Cloud Dedicated cluster. The networking team wants to understand the key advantages over VPC peering. Which two benefits does Transit Gateway provide? (Select two!)
Multiple correct answersExplanation
Transit Gateway provides two critical advantages over VPC peering: it supports overlapping CIDR blocks, which VPC peering cannot handle, and it enables transitive routing, allowing VPCs to communicate with each other through the Transit Gateway as a hub. VPC peering has non-transitive routing limitations. Transit Gateway does not eliminate data transfer charges; it actually has higher per-gigabyte data transfer costs than peering. While Transit Gateway offers connectivity features, initial setup is more complex than simple VPC peering, requiring coordination with AWS. Both solutions support connectivity, but Transit Gateway's value lies in handling complex multi-VPC architectures with overlapping IP ranges.
2. A logistics company connects their AWS infrastructure to a Confluent Cloud Enterprise cluster using Private Network Interface (PNI) networking. They produce and consume messages from EC2 instances running in the same availability zone as the Confluent Cloud cluster resources. They notice unexpected data transfer charges on their AWS bill. What is the explanation? (Select one!)
Explanation
Private Network Interface networking provides zero data transfer costs specifically when produce and consume operations occur in the same availability zone. If the EC2 instances and Confluent Cloud cluster resources are not perfectly aligned by availability zone, cross-zone data transfer charges will apply. The unexpected charges indicate that some operations are crossing availability zone boundaries, possibly due to Kafka partition leader replicas being in different zones than the client instances, or the client connecting to brokers in different zones. PNI does eliminate data transfer costs for same-zone operations, making it a cost-effective solution when properly architected. There are no minimum data transfer fees with PNI—the charges are strictly usage-based. The company should verify their EC2 instance placement matches the availability zones of the Confluent Cloud cluster leaders and adjust client configurations or instance placement accordingly.
3. A retail company implements Cluster Linking for disaster recovery between their primary us-east-1 cluster and secondary us-west-2 cluster. They configure consumer.offset.sync.enable=true with consumer.offset.sync.ms=5000. During testing, they observe that after a simulated failover, consumers processed approximately 15 messages that had already been processed before the outage. What is the most likely explanation for this behavior? (Select one!)
Explanation
Consumer offset synchronization in Cluster Linking operates asynchronously with offsets replicated at intervals defined by consumer.offset.sync.ms. This creates a replication lag window where the most recent offset commits on the source cluster may not yet have reached the destination cluster before an outage. When consumers reconnect to the DR cluster after failover, they resume from the last successfully synchronized offset, which may be several seconds behind their actual progress, resulting in reprocessing of recent messages. This is expected behavior requiring consumer applications to implement idempotent processing. The synchronization process itself is working correctly when this occurs. Consumer group metadata is properly synchronized through Cluster Linking. Mirror topic operations do not automatically rewind offsets.
4. A financial services company provisions an Enterprise cluster on AWS with PrivateLink networking. They initially configure 6 eCKUs but experience increased traffic and need to scale to 15 eCKUs. After attempting to scale through the Cloud Console, the operation fails. What is preventing the scale operation? (Select one!)
Explanation
Enterprise clusters using PrivateLink networking on AWS face a hard limit of 10 eCKUs maximum capacity. This is a specific constraint of the PrivateLink networking type on Enterprise clusters. To scale beyond 10 eCKUs, the organization would need to use Private Network Interface (PNI) networking instead, which supports up to 32 eCKUs on AWS. Enterprise clusters do support automatic elastic scaling, but the PrivateLink networking type imposes this ceiling. PrivateLink networking fully supports elastic scaling operations up to its 10 eCKU limit. Converting cluster types after creation is not supported—networking and cluster type cannot be changed once the cluster is provisioned. The company would need to create a new Enterprise cluster with PNI networking and migrate their workloads.
5. A financial services company uses VPC peering to connect their AWS VPC to a Confluent Cloud Enterprise cluster. Their security team requires accessing resources in a second AWS account through transitive routing via their primary VPC. What limitation will they encounter? (Select one!)
Explanation
VPC peering connections are non-transitive by design. If Network A peers with Confluent Cloud and Network A peers with Network B, resources in Network B cannot access Confluent Cloud through Network A. Each network requiring Confluent Cloud access needs its own direct peering connection. Enterprise clusters support both VPC peering and PrivateLink. VPC peering requires a /16 CIDR block, not /24. Cross-account VPC peering is supported in Confluent Cloud.
$17.99
One-time access to this exam