Dynatrace Professional study guide
Dynatrace Professional · Work through your exam, one topic at a time.
The Dynatrace Professional credential is a vendor certification for practitioners who design, operate, and troubleshoot the Dynatrace observability platform. It suits SREs, platform engineers, application performance and cloud operations specialists, security engineers, and consultants who work daily with distributed tracing, infrastructure telemetry, log pipelines, and automated remediation. The Dynatrace Professional study guide has 9 sections and about 3,677 words.
01AI Observability: Davis, Davis CoPilot and LLM Workloads
AI Observability is examined in two layers. The first is the AI inside the platform: Davis, the causal engine, and Davis CoPilot, the generative assistant.
453 words, about 2 min02Application Observability: Services, Traces and Code-Level Evidence
Application Observability tests whether you can take a slow or failing request and explain it from instrumented evidence: distributed traces, service and endpoint metrics, code-level detail, and topology. Expect scenarios where the top-level service looks guilty but the data proves otherwise.
403 words, about 2 min03Application Security: Runtime Vulnerabilities, Code and Posture
Application Security tests your grasp of how Dynatrace finds and prioritises risk in running applications: which libraries actually load, how first-party code is analysed, how posture findings differ from code findings, and how scope rules quietly determine what you see. Runtime Vulnerability Analytics evaluates libraries that a monitored process actually loads and executes.
394 words, about 2 min04Business Observability: Business Events, Flows and Conversion
Business Observability tests whether you can capture business events, model a multi-step business process, and answer commercial questions - conversion, drop-off, revenue, cycle time - with the same rigour as technical SLIs. Questions typically contrast business events with logs and with generic events.
422 words, about 2 min05Digital Experience: RUM, Session Replay and Synthetic Monitoring
Digital Experience tests how you measure what users actually experience: real user monitoring data, session-level evidence, synthetic checks, and the segmentation that turns a vague complaint into a specific finding. OneAgent injects the RUM JavaScript into HTML responses automatically.
395 words, about 2 min06Infrastructure Observability: Hosts, Kubernetes, Cloud and Extensions
Infrastructure Observability tests how hosts, processes, Kubernetes objects, cloud services and remote devices are brought into the same topology, and which component is responsible for each data type. OneAgent full-stack mode gives deep process and code monitoring; infrastructure-only mode (no code modules) gives host and process metrics without deep tracing.
391 words, about 2 min07Log Analytics: Ingest, Processing and DQL on Grail
Log Analytics tests the path a log line takes from a file or API into Grail, what processing can change it on the way, and how you query and summarise it afterwards. The OneAgent log module uses automatic detection rules for common paths and formats; you confirm or extend these rules per host group and technology.
409 words, about 2 min08Software Delivery: Deployment Events, Guardians and Quality Gates
Software Delivery tests how Dynatrace closes the loop with CI/CD: making deployments visible, comparing versions, and blocking or approving a release automatically using observability data. Send deployment events through the events ingest API using a custom deployment event type, scoped to the affected service or entity, with version and remediation details.
395 words, about 2 min09Threat Observability: Attack Detection, Triage and Hunting
Threat Observability tests how runtime attack detection works, how attacks are triaged against vulnerabilities, and how you hunt through security events rather than waiting for an alert. Runtime Application Protection instruments incoming requests and inspects them for attack patterns such as SQL injection, command injection, JNDI lookup abuse, XXE, SSRF and unsafe deserialisation.
415 words, about 2 min