Skip to content

Exam blueprint

The SpatiumDDI Certified Operator credential shows that you can run SpatiumDDI day to day. You can build and maintain an address plan, DNS zones, DHCP scopes and reservations, administer who can do what, and keep the platform monitored, backed up and upgraded. This blueprint lists what the exam covers and how it’s weighted. Plan your study with it, and use it as a checklist before you sit the exam.

The exam is for the people who operate SpatiumDDI:

  • NOC technicians and help-desk leads who allocate addresses, publish records and answer “why doesn’t this resolve?”
  • LAN and network engineers who own the address plan, the zones and the scopes
  • System administrators who run the platform: access control, sign-in, backups and upgrades
  • MSP engineers who run SpatiumDDI for client networks

It assumes working networking knowledge, such as CIDR and subnetting, what DNS records and zones are, and how DHCP leases and options work. It doesn’t assume any knowledge of Kubernetes.

Preparation Why
Part 1 · Foundations and its labs Domains 1–4: the operator skills, built on the Ridgeline College network
Part 2 · Administration and its labs Domain 5: access, API, safety nets, monitoring, backups and upgrades
Part 3 · Architecture & operations Domain 6: how SpatiumDDI works underneath, HA, hardening and migration
Your own lab The exam is scenario-based, so hands-on time is the best preparation
Item Detail
Questions 50
Time 75 minutes
Pass mark 80% (40 of 50 correct)
Question types Single-select and multiple-select; a multiple-select question says so in the stem
Style Mostly scenarios set on a single-campus network like Ridgeline College
Delivery Online and proctored, closed-book on product specifics
Product version SpatiumDDI 1.0.0-beta.3

“Closed-book on product specifics” means that during the exam you can’t use the SpatiumDDI docs, the UI, a lab, or this Academy. Questions test what an operator should know without looking it up: which setting controls what, what happens next, and what to check first.

Domain Weight Questions per form Where to study
D1 · DDI concepts & platform navigation 10% 5 Modules 1.1–1.3
D2 · DNS 20% 10 Modules 1.4, 1.5; 3.2
D3 · IPAM 20% 10 Modules 1.5, 1.8
D4 · DHCP & addresses 20% 10 Modules 1.6, 1.7
D5 · Administration: access, API, safety, monitoring, backups & upgrades 20% 10 Modules 2.1–2.6
D6 · Architecture, HA, security & migration 10% 5 Modules 3.1–3.6

The practice exam uses the same weights, scaled down to 30 questions.

Each objective starts with what you should be able to do. The last column links the module that teaches it.

D1 · DDI concepts & platform navigation (10%)

Section titled “D1 · DDI concepts & platform navigation (10%)”
Code Objective Module
D1.1 Explain what IPAM, DNS and DHCP each do, and why one source of truth stops them drifting apart 1.1
D1.2 Tell the control plane from the data plane, and predict what keeps working when the control plane is down 1.1
D1.3 Describe the IPAM hierarchy and the group-centric DNS and DHCP model 1.1
D1.4 Apply the recommended setup order to a new deployment 1.1
D1.5 Complete the first sign-in and set platform settings: External URL, DNS and DHCP defaults, the release check 1.2
D1.6 Find your way with the dashboard tabs, sidebar, command palette, shortcuts, feature modules and API docs 1.3
Code Objective Module
D2.1 Choose a DNS engine per server, keep groups single-driver, and know which features are engine-specific 1.4, 3.2
D2.2 Explain how agents auto-register into a group, and move a server between groups 1.4
D2.3 Create forward and reverse zones and their records, and predict which reverse zones SpatiumDDI creates for a subnet (one per /24 it spans, whether its DNS is its own or inherited) and when you must create one yourself 1.4, 1.5
D2.4 Explain how record changes reach the servers without a restart (an RFC 2136 update in a group without views, a zone re-render in a group with views), and verify them with dig 1.4
D2.5 Detect and reconcile drift with the Drift tab, Sync with Servers and subnet DNS sync 1.4
D2.6 Troubleshoot a record that never appeared, and enable query logging and dynamic-update ACLs 1.4
Code Objective Module
D3.1 Model separate address domains with IP spaces, and know when overlap is allowed 1.5
D3.2 Build blocks and subnets, and control how DNS and DHCP settings inherit 1.5
D3.3 Find free space and split, merge or resize subnets safely 1.8
D3.4 Bulk-allocate with hostname templates, and import or export address data 1.8
D3.5 Use custom fields, tags, global search, the Subnet Planner and the Stale IPs report 1.8
Code Objective Module
D4.1 Create DHCP server groups and choose a mode: Standalone, Hot Standby or Load Balancing 1.6
D4.2 Bind scopes to subnets, and use dynamic, excluded and reserved pools and scope options 1.6
D4.3 Explain how configuration reaches Kea, and read the lease views 1.6
D4.4 Allocate addresses so that A/AAAA and PTR records follow, and read the DNS sync state 1.7
D4.5 Create reservations with static_dhcp, and troubleshoot reservations that don’t take effect 1.7
D4.6 Use address statuses correctly, and choose between deleting and orphaning 1.7

D5 · Administration: access, API, safety, monitoring, backups & upgrades (20%)

Section titled “D5 · Administration: access, API, safety, monitoring, backups & upgrades (20%)”
Code Objective Module
D5.1 Design access with users, groups, roles and scoped permission entries 2.1
D5.2 Configure password policy, lockout, MFA, sessions and external sign-in providers 2.2
D5.3 Automate through the REST API with scoped, expiring API tokens 2.3
D5.4 Use the audit log and its hash chain, Trash, typed confirmations and two-person approvals 2.4
D5.5 Monitor with dashboards, health endpoints, logs, alert rules and Prometheus /metrics with a scrape token 2.5
D5.6 Back up, restore, drill and upgrade safely, including the path from a CalVer release through the bridge release 2026.10.02-1 2.6

D6 · Architecture, HA, security & migration (10%)

Section titled “D6 · Architecture, HA, security & migration (10%)”
Code Objective Module
D6.1 Explain how configuration flows from the control plane to agents, and why agents survive an outage 3.1
D6.2 Choose DNS and DHCP engines for a scenario 3.2
D6.3 Pick a deployment topology, and know which components scale out and which stay single 3.3
D6.4 Explain HA for DNS server groups, Kea pairs and the appliance control plane 3.4
D6.5 Apply security basics: secrets at rest, internal-only data stores, MFA, no demo mode in production 3.5
D6.6 Plan a low-risk migration: import, observe, prove, then cut over 3.6
  1. Work through Parts 1 and 2 with their labs. The labs build the Ridgeline College network that the exam scenarios are modeled on.
  2. Pass every knowledge check at 80% or better. Read each explanation, including for the questions you got right, and follow the module’s Go deeper links to the docs behind it.
  3. Rebuild without the lab steps. In a fresh lab, set up a space, block and subnet, a zone, a DHCP scope with pools, a reservation, a scoped API token and a backup, and then restore something from Trash.
  4. Read Part 3 for Domain 6, even if you only operate the platform.
  5. Take the practice exam several times. Each attempt draws a different set. Aim for 80% or more consistently, and revisit any domain below 80% in the per-domain results.
  6. Keep the Field guide handy while you study. The troubleshooting playbook and quick reference cover the situations scenario questions describe.
  • The credential is valid for 2 years from the date you pass.
  • To recertify, pass the current version of the exam. It targets a newer SpatiumDDI release, so recertifying also confirms that you’ve kept up with the product.
  • Each exam version names the release it targets. This blueprint targets SpatiumDDI 1.0.0-beta.3.