Download the certification brochure (Spanish): Click here

Exam Details

• Exam Name: DevSecOps Certified Associate (DSCA)
• Exam Format: Multiple choice, online with remote supervision (proctoring)
• Exam Delivery: Safe Exam Browser
• Number of Questions: 52 questions: 60% practical cases / 40% technical and conceptual
• Exam Duration: 90 minutes
• Passing Score: 70% (37 out of 52 correct answers)
• Available Languages: Spanish / English
• Attempts: Maximum 2 attempts (minimum 14 days between attempts)
• Validity: 3 years · 15 CPD credits per year

Main Subjects

• DevSecOps fundamentals and security culture (10%): CALMS model; Roles and metrics (DORA, SPACE); OWASP DevSecOps Guideline; CIS Benchmarks, NIST and ISO/IEC 27001.
• CI/CD pipeline security (25%): Security gates and fail-fast; Secret scanning and Vault; Artifact signing and SBOM; Compliance gates.
• IaC and cloud security (15%): Scanning Terraform, CloudFormation and ARM; Shared responsibility; IAM, VPC and encryption; Cloud CIS Benchmarks.
• Container and orchestration security (15%): Image hardening and scanning; seccomp, AppArmor and SELinux; RBAC and Network Policies; Pod Security Standards.
• Automated security testing (20%): SAST, DAST, SCA, IAST and RASP; SonarQube and Semgrep; OWASP ZAP and Burp Suite; OWASP Top 10.
• Compliance, risk and incident response (15%): STRIDE and PASTA; GDPR, PCI DSS and SOX; SOAR and Security as Code; SLSA and the supply chain.

Who is this certification for?

• Software developers: Who add SAST, SCA and secret scanning to their daily workflow.
• DevOps engineers and SREs: Who secure every deployment stage.
• Security analysts and platform engineers: Who automate controls and incident response.

Prerequisites

No mandatory prerequisites: no prior experience, training or certification is required. Registration is direct with CertJoin or through an authorized partner. Recommended (not mandatory): basic knowledge of development, CI/CD or system administration.