100+ Free ACP-520 Practice Questions

Pass your Atlassian Certified Professional - Atlassian Cloud Organization Admin (ACP-520) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

~60-70% Pass Rate

100+ Questions

100% Free

1 / 10

Question 1

Score: 0/0

In Atlassian Cloud, what is the difference between an organization and a site?

Identical concepts

An organization is the top-level container holding billing, users, identity, and security policies; a site is an instance of Atlassian products (e.g., acme.atlassian.net) where projects/spaces/issues live

Sites contain organizations

Organizations are paid; sites are free

to track

2026 Statistics

Key Facts: ACP-520 Exam

Exam Questions

Atlassian

75%

Passing Score

Atlassian

75 min

Exam Duration

Atlassian

$250

Exam Fee

Atlassian

~25%

Users & Managed Accounts

Largest domain

2 years

Validity

Atlassian

ACP-520 has up to 65 multiple-choice items in 75 minutes with a passing score of approximately 75% (some forms cite 62%). Domains: Users/Groups/Managed Accounts (~25%), Org Structure & Sites (~20%), Authentication & Identity (~20%), Security & Compliance (~15%), Billing & Licensing (~10%), Admin Roles (~10%). Atlassian recommends experience as an organization admin across multiple sites. Certification valid 2 years. Exam fee $250 USD via Kryterion Webassessor.

Sample ACP-520 Practice Questions

Try these sample questions to test your ACP-520 exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In Atlassian Cloud, what is the difference between an organization and a site?

A.Identical concepts

B.An organization is the top-level container holding billing, users, identity, and security policies; a site is an instance of Atlassian products (e.g., acme.atlassian.net) where projects/spaces/issues live

C.Sites contain organizations

D.Organizations are paid; sites are free

Explanation: Organizations sit above sites and are managed at admin.atlassian.com. They centralize users, identity providers, authentication policies, billing, and audit logs. A site (instance) hosts the actual products - Jira projects, Confluence spaces, JSM service projects. One organization can contain multiple sites.

2Where do organization admins manage their organization?

A.jira.atlassian.net

B.admin.atlassian.com

C.atlassian.atlassian.com

D.docs.atlassian.com

Explanation: admin.atlassian.com is the central organization admin console. It contains Members, Groups, Sites, Products, Security, Apps, Billing, and Settings. Site-level admin (e.g., per-Jira admin) is at the site URL, but org-level cross-cutting decisions live at admin.atlassian.com.

3What is a sandbox in Atlassian Cloud?

A.A free version

B.An isolated copy of a production site (Premium/Enterprise feature) for testing app installs, scheme changes, and other config without affecting production

C.A type of subscription

D.A backup

Explanation: Sandboxes are non-production sites that mirror production. Available with Jira Premium/Enterprise (and Confluence Premium/Enterprise). Use them to safely test app installs, automation rules, scheme changes, and integrations. Changes can be promoted to production via release tracks or replicated manually.

4What are 'release tracks' for in Atlassian Cloud?

A.Music streaming

B.Enterprise feature that delays Atlassian feature rollouts on production by ~2 weeks, with new features arriving in sandbox first

C.CI/CD

D.Audit log filter

Explanation: Release tracks (Enterprise) buffer your production environment from new Atlassian feature rollouts by ~2 weeks. New features ship to your sandbox first, giving admins time to test, train users, or update integrations before production receives them. Useful for risk-averse enterprises.

5How can an organization control which geographic region certain product data is stored in?

A.Cannot - data is randomly placed

B.Use data residency: configure in admin.atlassian.com which region (US, EU, Germany, AU, etc.) holds in-scope data for products like Jira Software, Confluence, and JSM

C.Pay extra per server

D.Move servers manually

Explanation: Data residency lets organizations pin in-scope product data to a specific region. Useful for GDPR (EU), German banking regulations, Australian government, and similar compliance needs. The set of in-scope data varies per product and is documented by Atlassian. Some data (e.g., user identities) remain global.

6Multiple sites under the same organization - which capability is shared at the organization level?

A.Per-site separate users

B.Identity providers, authentication policies, organization audit log, and billing/products are managed at the org level

C.Per-site separate billing

D.Workflows

Explanation: Organization-level: users (managed accounts), groups, identity providers, SSO/SAML, SCIM, authentication policies, security policies (IP allowlist, mobile), billing, audit log. Site-level: products, projects/spaces, schemes, workflows. Cross-site collaboration between Jira and Confluence happens within the same organization.

7How do you create a new site under an existing organization?

A.Sites cannot be added

B.admin.atlassian.com -> Sites -> Add site (or buy a new product, which creates a site if needed)

C.Email Atlassian

D.Move servers

Explanation: Org admins can create new sites in the admin console. Each site has a unique subdomain (e.g., acme.atlassian.net). Often a single site holds all products; sometimes orgs separate by purpose (production vs internal-tools, US vs EU sites). Each site is licensed per-product.

8What governs whether a user is a 'managed account' in an Atlassian organization?

A.Their group membership

B.Whether the email domain of their Atlassian account is verified and claimed by the organization

C.Their role

D.Their license

Explanation: When an org claims a domain (e.g., acme.com), all Atlassian accounts using that email become managed by the organization. Managed accounts can be governed by authentication policies, password rules, deactivation, etc. Unmanaged accounts (different email domains) are not subject to org policies.

9Which methods can be used to verify domain ownership in Atlassian Cloud?

A.Phone call only

B.TXT record (DNS), HTTPS file upload, or CNAME record (DNS) - any one suffices

C.FTP upload

D.Cannot verify domains

Explanation: Three verification methods: (1) Add a TXT record to your DNS, (2) Upload a verification HTML file to your domain root, (3) Add a CNAME record. Verifying proves ownership but does NOT yet claim the domain. After verification, separately enable claim to start managing accounts.

10What is 'account capture' in Atlassian Cloud?

A.A photo feature

B.After claiming a domain, account capture forces all existing Atlassian accounts using that domain to become managed by your organization

C.A backup process

D.A bug

Explanation: After verifying and claiming a domain, account capture is the process that converts unmanaged accounts (using your domain) into managed accounts. Users may need to verify they want to be managed (via email). Account capture lets you bring shadow IT under governance.

About the ACP-520 Exam

The ACP-520 Atlassian Cloud Organization Admin exam validates that you can configure and secure Atlassian Cloud at the organization level - across multiple sites and products (Jira, Confluence, JSM, Bitbucket). It covers organization vs site structure, managed accounts, domain claiming, identity providers (SAML SSO, SCIM provisioning, JIT), authentication policies, security controls (IP allowlisting, mobile/data export policies, audit log), billing and licensing, and Atlassian Guard / Atlassian Access subscriptions.

Questions

65 scored questions

Time Limit

75 minutes

Passing Score

75%

Exam Fee

$250 USD (Atlassian / Kryterion Webassessor)

ACP-520 Exam Content Outline

~20%

Organization Structure and Sites

Atlassian organization vs site, creating and renaming sites, sandbox and release tracks, product subscriptions, data residency selection, and mapping company structure to organization layout

~25%

Users, Groups, and Managed Accounts

Managed vs unmanaged accounts, domain verification (TXT/HTTPS/CNAME), domain claiming, account capture, user provisioning (manual, SCIM, JIT), group sync, default groups per product, and bulk user actions

~20%

Authentication and Identity Providers

SAML SSO with Okta/Microsoft Entra ID/Google Workspace, SCIM provisioning, just-in-time provisioning, authentication policies (per-user-group), enforced two-step verification, password policies, session duration, and idle timeout

~15%

Security and Compliance

IP allowlisting, mobile app policies, data export controls, API token management, audit log scopes and retention, content classification, data security policies, and Atlassian Guard Premium features (DLP, user activity insights)

~10%

Billing and Licensing

Bill estimates, free vs Standard vs Premium vs Enterprise plans, user-tier pricing, billing contacts, invoices, payment methods, Atlassian Access/Guard subscription, and managing seats across multiple sites

~10%

Admin Roles and Delegation

Organization admin vs site admin vs product admin vs project/space admin, granting and removing admin access, principle of least privilege, and audit-log visibility into admin actions

How to Pass the ACP-520 Exam

What You Need to Know

Passing score: 75%
Exam length: 65 questions
Time limit: 75 minutes
Exam fee: $250 USD

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

ACP-520 Study Tips from Top Performers

1Master the organization vs site distinction - organizations contain users, billing, and security policies; sites contain products, projects, and content

2Know the domain verification methods (TXT, HTML file, CNAME) and what claiming a domain unlocks: account capture, managed accounts, SSO enforcement

3Understand authentication policies - they apply to user groups (not products), and you can have multiple policies with different SSO/2FA/idle settings

4Study Atlassian Guard (formerly Atlassian Access) tiers: Standard (SSO, SCIM, audit) vs Premium (DLP, user activity insights, content scanning)

5Practice the SAML SSO + SCIM setup with Okta or Microsoft Entra ID - know which attributes are required and how JIT provisioning fits in

6Understand audit log scopes (organization vs product) and retention by plan; know what events get logged and how to export them

7Review billing nuances: per-product seat pricing, billing contacts vs admins, monthly vs annual, and how Atlassian Guard is licensed

Frequently Asked Questions

What is the ACP-520 exam?

ACP-520 is the Atlassian Certified Professional - Atlassian Cloud Organization Admin exam. It validates expertise in administering Atlassian Cloud at the organization level - the layer above individual Jira/Confluence/JSM sites that controls users, identity, security policies, and billing across multiple sites.

How many questions are on the ACP-520 exam?

ACP-520 delivers up to 65 multiple-choice and multiple-response items in 75 minutes (some legacy forms use up to 65 questions in 180 minutes). The passing threshold is approximately 75% (community-reported as 62% on some delivery forms). Exams are taken online-proctored or at a Kryterion test center.

Are there prerequisites for the ACP-520 exam?

There are no formal prerequisites, but Atlassian expects organization-admin experience across multiple sites - including managing identity providers, configuring SAML SSO and SCIM, setting authentication policies, and handling cross-site billing. Hands-on experience with Atlassian Access or Atlassian Guard is strongly recommended.

What is the largest domain on the ACP-520 exam?

Users, Groups, and Managed Accounts is the largest domain at roughly 25% of the exam, followed closely by Organization Structure (~20%) and Authentication (~20%). Many candidates underestimate domain claiming and account capture - know exactly what changes when an unmanaged account becomes managed.

How should I prepare for the ACP-520 exam?

Plan for 30-50 hours over 4-6 weeks. Use the free Atlassian University ACP-520 Exam Success course, set up a free Atlassian Cloud organization (with Atlassian Guard trial if possible), practice domain verification, configure a SAML SSO connection in a test IdP, write authentication policies, and complete 100+ practice questions before scheduling.

How long is the ACP-520 certification valid?

ACP-520 is valid for 2 years from the pass date. You can recertify by retaking the current exam or completing the Atlassian University renewal assessment before your expiration date.