Baitaphish
Security intelligence
SearchLatest briefing
SAP-C02 learning path

Choose intensity from evidence.

Day 0 checks prerequisites and diagnostic performance. The recommended route is always overridable, and every day combines learning, application, recall, assessment, and remediation.
61 core hours7, 14, or 30 daysProgress stays on this device

Routing rules

7-day intensive

Overall at least 75%, every domain at least 60%, and prerequisites met.

14-day balanced

Overall 60–74% or materially inconsistent domain results.

30-day foundation

Overall below 60%, a domain below 45%, or missing foundations.

These are Baitaphish recommendations, not provider rules or pass guarantees.

Choose your path

Experienced practitioners who meet prerequisites, score at least 75% overall, and have no domain below 60%.

  1. Day 18h

    Organizations, governance, and connectivity

    Objectives
    1.1, 1.2, 1.3, 1.4, 1.5
    Lesson
    Design account, identity, network, resilience, security, and cost boundaries across a complex organization.
    Decision matrix
    Complete organization and connectivity matrices.
    Application
    Run SAP-L01 and SAP-L02 architecture workshops.
    Recall
    Complete D1 cards.
    Check
    Take the D1 check and defend each boundary.
    Remediation
    Below 70%: redraw the organization and traffic paths with named owners and failure domains.
  2. Day 29h

    New solutions: deployment, continuity, reliability

    Objectives
    2.1, 2.2, 2.4
    Lesson
    Translate release, RTO/RPO, dependency, scaling, quota, and failure constraints into architecture.
    Decision matrix
    Complete integration and DR matrices.
    Application
    Run SAP-L03 and SAP-L04.
    Recall
    Complete cards for 2.1, 2.2, and 2.4.
    Check
    Test three failures and one rollback on paper.
    Remediation
    If RTO/RPO cannot be proven, revise the recovery design before continuing.
  3. Day 39h

    New solutions: security, performance, and cost

    Objectives
    2.3, 2.5, 2.6
    Lesson
    Select controls and services from workload evidence, not memorized service slogans.
    Decision matrix
    Complete data-service and improvement matrices.
    Application
    Run SAP-L05 and the security portion of SAP-L01.
    Recall
    Complete remaining D2 cards.
    Check
    Take the D2 check and defend rejected alternatives.
    Remediation
    Below 70%: repeat one architecture with different demand, consistency, and cost constraints.
  4. Day 49h

    Continuous improvement

    Objectives
    3.1, 3.2, 3.3, 3.4, 3.5
    Lesson
    Use incidents, telemetry, cost, ownership, experiments, and safe change to improve existing systems.
    Decision matrix
    Complete the improvement-prioritization matrix.
    Application
    Run SAP-L07.
    Recall
    Complete D3 cards.
    Check
    Take the D3 check and produce a ranked improvement backlog.
    Remediation
    Any change without baseline, owner, success measure, and rollback is incomplete.
  5. Day 58h

    Migration and modernization

    Objectives
    4.1, 4.2, 4.3, 4.4
    Lesson
    Assess portfolios, select strategies, sequence waves, design targets, cut over reversibly, and modernize for explicit value.
    Decision matrix
    Complete the migration-strategy matrix.
    Application
    Run SAP-L06 and SAP-L08.
    Recall
    Complete D4 and mixed cards.
    Check
    Take D4 plus a cumulative architecture check.
    Remediation
    Any domain below 70% becomes the first Day 6 remediation block.
  6. Day 69h

    Practice A and architecture repair

    Objectives
    1.1, 1.2, 1.3, 1.4, 1.5, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 3.1, 3.2, 3.3, 3.4, 3.5, 4.1, 4.2, 4.3, 4.4
    Lesson
    Review only missed objectives after the assessment.
    Decision matrix
    Rebuild the weakest two matrices.
    Application
    Repeat the failed validation from one critical workshop.
    Recall
    Use error-log cards only.
    Check
    Complete fresh timed Practice A.
    Remediation
    Below 80% or a domain below 70%: move to the 14-day extension before Practice B.
  7. Day 79h

    Practice B and final review

    Objectives
    1.1, 1.2, 1.3, 1.4, 1.5, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 3.1, 3.2, 3.3, 3.4, 3.5, 4.1, 4.2, 4.3, 4.4
    Lesson
    Close repeated misses and rehearse constraint-first architecture decisions.
    Decision matrix
    Complete every matrix from a blank copy.
    Application
    Explain three workshop decisions and rejected alternatives without notes.
    Recall
    Final mixed recall.
    Check
    Complete fresh timed Practice B and all readiness gates.
    Remediation
    If any hard gate fails, continue focused remediation; do not label exam-ready.