The smartest certification exam paths for 2026 pair one broad infrastructure credential with one specialist cloud or security credential: CompTIA A+ for support foundations, Cisco CCNA for networking, AWS or Microsoft Azure for cloud roles, and Fortinet for network security operations. Vendor programs keep moving, so the version you sit, the format you face and the renewal clock you inherit all matter before you book anything. CompTIA A+ Core 1 (exam code 220-1201, launched March 25, 2025) caps the exam at 90 questions in 90 minutes, with a passing score of 675 on a 900-point scale. Cisco is about to swap its CCNA blueprint, and Microsoft stands alone in renewing eligible credentials at no cost every year. This guide compares the official routes, flags the exam changes landing through 2027, and closes with a selection procedure you can act on this week.
CompTIA A+ exam path
CompTIA A+ remains the default entry credential for help desk and IT support roles, and the current series is the one to target. The certification requires two exams, Core 1 and Core 2, and CompTIA enforces a strict matching rule: both exams must come from the same version, with no mixing between generations. Core 1 covers mobile devices, networking, hardware, virtualization and cloud concepts, and troubleshooting, with hardware and network troubleshooting carrying the heaviest domain weight. Core 2 extends into operating systems, security and operational procedure.
CompTIA recommends twelve months of hands-on support experience before attempting either exam, though motivated career changers routinely pass earlier with structured study. Question formats mix multiple choice, multiple response, drag-and-drop and performance-based items, so passive reading is a weak strategy. Build a timed rehearsal habit instead: work through scenario-driven question sets such as the 220-1201 practice exam drills until the performance-based format feels routine, and refresh with the earlier Core 1 practice set for domain gaps. After A+, the natural ladder runs to Network+ and then Security+, which many employers treat as the baseline security screening credential.
Cisco CCNA exam path
Cisco’s associate credential is the reference point for network engineering roles, and it carries the most urgent calendar risk of any exam in this guide. The 200-301 CCNA v1.1 exam accepts its last testers on February 2, 2027, and the v2.0 blueprint takes over on February 3, 2027. Anyone starting preparation late in 2026 must decide deliberately: either accelerate to finish on v1.1, whose objectives and study materials are mature, or begin directly on v2.0 content once Cisco publishes the new topic list. Splitting your study across the switch point is the worst option, since retired-version objectives waste prep hours.
The blueprint spans network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability, with IP connectivity weighted heaviest. That automation domain is not decorative: REST-based APIs, controller-based networking and configuration management tools now appear as examinable objectives, not trivia. The exam mixes multiple choice, drag-and-drop and performance-based questions, results post online quickly, and the credential can also serve toward recertification requirements of higher Cisco certifications. Pair CCNA study with lab time on real or simulated switching and routing, because performance-based items reward configuration fluency over memorization.
AWS certification exam path
For cloud roles, AWS offers the most recognizable associate-level credential in the market. On its official exam page, AWS lists a 130-minute session with 65 questions and a list price of 150 USD. The exam blends multiple choice and multiple response questions across a broad service scope, and AWS recommends at least a year of hands-on solution design experience before booking, while noting that candidates with one to three years of general IT experience have succeeded by treating the Associate exam as their entry point. Candidates with no IT background should start one tier lower with the foundational cloud practitioner credential and then step up.
Validity is generous but finite. AWS Certified Solutions Architect – Associate remains valid for 3 years, and you can recertify by passing the latest version of the exam or by earning the Solutions Architect – Professional certification. AWS also publishes a four-step preparation plan built around its official practice question sets, digital courses and labs, and it rewards repeat candidates with a discount voucher toward a subsequent exam once you hold any active AWS certification. Treat the associate credential as a platform decision rather than a terminal goal: it feeds naturally into the professional architect tier or into specialty security and data exams as your role narrows.
Microsoft Azure certification path
Microsoft organizes its program around job roles rather than products, which makes the Azure path the easiest to align with a target job description. Credentials climb from Fundamentals through Associate to Expert, with Azure-focused options at every tier for administrators, solution architects and security engineers. Scenario-based Applied Skills credentials sit alongside the role-based certifications as shorter, lab-verified validations of specific tasks, useful for proving narrow competencies without committing to a full certification track.
The renewal model is the decisive advantage. Microsoft renews eligible role-based certifications annually at no cost when you complete a short online assessment on Microsoft Learn. Instead of repurchasing exams on a three-year treadmill, you keep credentials active with periodic free check-ins, which compounds nicely across a multi-certification portfolio. The trade-off is that Azure exams demand fluency in Microsoft’s service naming and portal workflows, so lab-heavy preparation on the actual platform matters more than vendor-neutral theory. For job seekers targeting European enterprise environments, Azure and AWS experience together cover the majority of cloud job postings.
Fortinet security certification path
Fortinet anchors the security-operations branch of this comparison. Its program is organized into professional, expert and trainer levels, with the professional tier centered on FortiGate next-generation firewall administration: policy configuration, routing, VPNs and security profile tuning. Because so many enterprise and service-provider networks standardize on Fortinet hardware, the professional credential converts directly into firewall engineering and SOC-adjacent work in a way general security certifications do not.
The pragmatic sequencing question is whether Fortinet comes before or after a broader networking base. For most candidates the efficient order is a networking credential first, then Fortinet’s professional track to specialize, because firewall work assumes comfort with routing and switching concepts. The same logic applies to other specialist platforms: niche credentials such as the Red Hat OpenShift AI specialist exam reward professionals who already hold a generalist base and want a differentiated, product-specific proof of skill.
Choosing your 2026 path
Use this comparison to match vendor programs to your target role before spending on vouchers.
| Vendor | Path exam | Format and cost | Validity model |
|---|---|---|---|
| CompTIA | A+ Core 1 + Core 2 (220-1201 series) | Up to 90 questions, 90 minutes, mixed formats | Renew through continuing education |
| Cisco | CCNA 200-301 v1.1 (until Feb 2, 2027) | 120-minute exam, US$300 list price | Recertify by exam or continuing credits |
| AWS | Solutions Architect – Associate | 130 minutes, 65 questions, 150 USD | 3 years, renewable by exam or higher tier |
| Microsoft | Azure role-based certifications | Exam-based or lab-based assessments | Free annual online renewal |
| Fortinet | Professional tier, FortiGate focus | Proctored, product-specific | Maintain through Fortinet training |
Once the direction is clear, execute in this order:
- Pick the job title you want in twelve months and identify the single credential that appears most often in those postings.
- Verify the current exam version on the vendor’s official page and note every version switch date that falls inside your study window.
- Book the exam date first, then fit a study plan of official objectives, labs and timed practice backward from that date.
- Schedule one full-length rehearsal under exam conditions two weeks out and patch the weakest domain only.
- After passing, diarize the renewal rule immediately, whether that is Microsoft’s free annual assessment or AWS and Cisco recertification windows.
The common failure pattern in 2026 will be timing, not talent: candidates who start Cisco study without checking the v2.0 transition, or who let renewal deadlines lapse because they never recorded them. A one-vendor credential plus one specialist add-on, each with the renewal rule logged, beats a folder of expired exam passes.