SRA logo
Focused certification exam prep
Start practice

How Hard Is the SRA Exam? Complete Difficulty Guide 2026

TL;DR
  • The current SRA route requires written exams 4A0-102, 4A0-105, 4A0-106, 4A0-107 and 4A0-115, then the 7-hour ASRA4A0 practical lab.
  • The lab is two independent 3.5-hour sections, and topics must be configured and verified, not just recognized.
  • The optional 4A0-C02 composite substitutes only for 4A0-102/105/106/107; it never replaces 4A0-115 or the lab.
  • Difficulty comes from breadth across BGP, VPLS, VPRN, QoS and EVPN, plus hands-on troubleshooting speed on 7750 SR platforms.

What "Hard" Actually Means for Nokia SRA

Asking how hard the Nokia Service Routing Architect (SRA) is has no single answer, because SRA is not a single exam. It is a multi-exam certification, distinct from NRS I and NRS II, that combines several written exams with a long hands-on practical lab. Each component is hard in a different way. The written exams test whether you understand protocol behavior, design trade-offs and configuration logic. The lab tests whether you can build, verify and repair a live service network under time pressure.

That mix is what makes SRA demanding. A candidate with strong theory but little keyboard time will struggle in the lab. A candidate who lives in the CLI but never studied why route reflectors, confederations or EVPN designated-forwarder election behave as they do may stumble on the written side. If you are still orienting yourself, start with our overview of what SRA certification is and then return here.

Be careful with single-number claims: Do not describe the whole SRA certification with one question count or one exam duration. The written exams and the practical lab are separate assessments, and the lab is a configure-and-verify task, not a multiple-choice item count. Any article that quotes one blended figure for "the SRA exam" is oversimplifying.

The Current Route: Five Written Exams Plus a Lab

Effective September 8, 2026, the current route to SRA requires written exams 4A0-102, 4A0-105, 4A0-106, 4A0-107 and 4A0-115, followed by the 7-hour practical ASRA4A0 lab. Understanding this structure is the first step in judging difficulty, because the total workload is the sum of six distinct assessments.

  • 4A0-102: BGP for Internet Routing
  • 4A0-105: Virtual Private LAN Services (VPLS)
  • 4A0-106: Virtual Private Routed Networks (VPRN)
  • 4A0-107: Quality of Service
  • 4A0-115: Ethernet VPN Services (EVPN)
  • ASRA4A0: the SRA Practical Lab

There is one shortcut worth knowing about. The optional 4A0-C02 composite substitutes for only 4A0-102, 4A0-105, 4A0-106 and 4A0-107. It does not replace 4A0-115, and it does not replace the practical lab. If the composite appeals to you, treat it as a way to consolidate four written topics, not as a way to skip the EVPN exam or the lab. For eligibility details, see our guide to SRA requirements and how to qualify.

What changed with the September 2026 update

Separate IS-IS/OSPF, MPLS and Services Architecture exams are no longer required in the current route. Their knowledge can still support your preparation, since IGP behavior underpins BGP next-hop resolution and MPLS transport underpins every VPLS and VPRN service. Multicast 4A0-108 is retired and is not a current SRA requirement. Candidates who were previously lab-eligible retain that eligibility under the announced transition. Note that the lab page itself may still display superseded prerequisite exams, so rely on the dated program update and current certification table for eligibility rather than that page alone.

Difficulty by Domain: Where Candidates Struggle

The six groups below are unweighted preparation groups, not a single weighted blueprint, so no percentage should be attached to any of them. The following notes describe where the conceptual and practical difficulty tends to concentrate, based on the published topic scope. For a full walkthrough of the content areas, see our SRA exam domains guide.

Domain 1: BGP for Internet Routing (4A0-102)

BGP difficulty comes from the interaction of many small mechanisms rather than any single hard idea.

  • BGP attributes and path selection, including how IGP metrics feed into decisions
  • Routing-policy configuration, verification and troubleshooting on SR OS
  • iBGP scalability through confederations and route reflectors
  • Advertise-external, add-paths and fast-reroute operation and verification

Domain 2: Virtual Private LAN Services (4A0-105)

VPLS rewards candidates who can reason about loops, MAC learning and resilience together.

  • SAPs, SDPs and distributed-service MTU implications
  • FDB maintenance and policy-based forwarding
  • RSTP, M-VPLS with STP, MC-LAG and active/standby pseudowire resilience
  • H-VPLS hierarchy and PBB control of excessive MAC learning at scale

Domain 3: Virtual Private Routed Networks (4A0-106)

VPRN is where MP-BGP, labels and route targets converge, and where misconfiguration is subtle.

  • PE route distribution through MP-BGP, RD/RT and VRF import/export
  • Full-mesh, hub/spoke and extranet topologies, plus Internet access options
  • Inter-AS models A, B and C: operation, configuration and diagnosis
  • Carrier-supporting-carrier VPN architecture and forwarding paths

Domain 4: Quality of Service (4A0-107)

QoS is often cited as the most detail-heavy topic because the SR OS model has many interlocking policy objects.

  • Classification, match precedence and default network policy
  • Token-bucket metering, queue shaping versus policing, and scheduling priorities
  • SAP-ingress, SAP-egress and network queues; policers; WRED slope policies
  • Queue groups, CFHP, hierarchical scheduling and egress-port scheduling
  • Marking and remarking across Layer-2, VPRN and IES services

Domain 5: Ethernet VPN Services (4A0-115)

EVPN is conceptually newer for many engineers and introduces its own route types and forwarding models.

  • ELAN route types, including IMET flooding and MAC-route FDB learning
  • IRB architecture: asymmetric, symmetric interface-less, and interface-ful forwarding
  • Ethernet segments, multihoming and designated-forwarder election
  • BUM split-horizon, aliasing, all-active versus single-active behavior
  • ELINE VPWS and interworking with traditional MPLS networks

If one group has a reputation for catching people out, it is QoS, simply because of the volume of policy objects and the precision needed to apply them correctly. EVPN is a close second for engineers coming from classic VPLS backgrounds, since the control plane works very differently. Neither claim is backed by a published failure statistic; this is an observation about conceptual load, not a measured rate. For more on outcomes data, read our SRA pass rate analysis.

The 7-Hour Practical Lab: The Real Gatekeeper

For most candidates, the ASRA4A0 lab is the hardest element of the entire route. It asks you to design and implement live 7750 SR service networks, interoperate, diagnose performance and resolve faults, using either classic CLI or MD-CLI. It is structured as two independent 3.5-hour sections, excluding a 1-hour lunch. Topics must be configured and verified, although not every topic necessarily appears in a given sitting. The issuer states that the lab content is unchanged by the 2026 update.

Why the lab feels harder than the written exams

  • Verification is part of the task. Configuring a feature is not enough; you must demonstrate that it works.
  • Cross-domain interaction. A BGP policy mistake can break a VPRN, and an MTU mismatch can silently break a VPLS pseudowire.
  • Time pressure. Seven hours sounds generous until you are chasing a fault in a service you configured two hours earlier.
  • No topic guarantee. Because not every topic necessarily appears, you cannot safely skip any area of the published scope.
Practical scope to master: The lab scope spans BGP (peering, reflectors, confederations, advertise-external, add-paths and FRR), QoS (classification, queues, policing, scheduling, CFHP and marking applied to Layer-2 and Layer-3 services), VPLS (SAP encapsulation, MTU, FDB alarms, BGP autodiscovery, STP/M-VPLS, MC-LAG and H-VPLS/PBB scale), and VPRN (RD/RT, VRF import/export, topologies, PE-CE routing and inter-AS A/B/C). Treat the written-exam topics as the minimum, and practice them at the command line.

Because the lab is a practical assessment rather than an item-count exam, preparing for it with flashcards alone is a poor fit. Build repeatable lab topologies and rehearse the full cycle of configure, verify, break and repair. Our SRA study guide covers how to structure that preparation end to end.

Difficulty Comparison Across the Six Groups

The table below is a qualitative comparison of where the effort tends to go for each component. It is not a statistical ranking, and it should not be read as a pass-rate indicator. Individual difficulty depends heavily on your background.

ComponentPrimary challengeAssessment styleBest prepared by
BGP (4A0-102)Many interacting mechanisms and policy logicWritten examBuilding small iBGP/eBGP labs with route reflectors and policies
VPLS (4A0-105)Loop prevention, MAC learning and resilience designWritten examPracticing M-VPLS, MC-LAG and H-VPLS scenarios
VPRN (4A0-106)MP-BGP label and route-target interplay, inter-AS modelsWritten examConfiguring hub/spoke, extranet and inter-AS A/B/C builds
QoS (4A0-107)Volume of policy objects and exact application pointsWritten examTracing a packet through classification, queues and scheduling
EVPN (4A0-115)New route types, multihoming and IRB forwarding modelsWritten examWalking through route types and DF election step by step
Practical Lab (ASRA4A0)Speed, verification and cross-domain troubleshooting7-hour hands-on lab, two 3.5-hour sectionsTimed full-service builds using classic CLI or MD-CLI

Who Finds It Easier, and Who Struggles

Because the certification targets people who design and operate service-provider networks, the audience skews toward working engineers. Your day job largely determines which parts feel natural.

  • Engineers already running Nokia 7750 SR networks usually find the CLI and service constructs familiar, and the lab feels like an extension of daily work. Their gap is often breadth, since a given role may never touch EVPN or carrier-supporting-carrier designs.
  • Engineers from other vendors often understand BGP and MPLS concepts but must learn SR OS syntax, the service model and the QoS policy structure from scratch, which adds meaningful time before the lab.
  • Data-center focused engineers may be comfortable with EVPN and VXLAN but weaker on inter-AS VPRN models and detailed hierarchical QoS.
  • Service-provider generalists tend to be strong on BGP and VPRN and need the most work on EVPN multihoming and IRB variants.

Key Takeaway

Audit yourself against the six groups before you begin. Identify your weakest group, not your strongest, and schedule hands-on lab time there first. The lab will expose a weak area faster than any written exam will.

If you want to understand the career side of that investment, our analysis of whether the certification is worthwhile is in Is the SRA certification worth it?, and we cover typical employers in SRA jobs.

Sequencing Your Preparation by Difficulty

Generic study methods matter less here than ordering the material sensibly. The topics build on one another: BGP and IGP knowledge underpins VPRN, MPLS transport underpins VPLS and VPRN, and QoS applies across all of them. A sensible order front-loads the foundations and saves the cross-cutting material for last. Training courses are preparation recommendations, not additional current examination requirements, and training is not mandatory to attempt the exams. For training options, see our page on SRA training.

Weeks 1-2

BGP foundations and policy

  • Route reflectors, confederations, advertise-external, add-paths and FRR
  • Routing-policy construction and verification on SR OS
Weeks 3-4

VPRN and VPLS service builds

  • MP-BGP VPRN with RD/RT, hub/spoke and extranet, then inter-AS A/B/C
  • VPLS with SAPs/SDPs, M-VPLS, MC-LAG and H-VPLS
Weeks 5-6

QoS and EVPN

  • Classification through hierarchical and egress scheduling, plus marking across services
  • EVPN route types, IRB variants, multihoming and DF election
Weeks 7-8

Integrated lab rehearsal

  • Timed builds that combine BGP, VPRN, VPLS and QoS in one topology
  • Fault-injection drills: break a service, then diagnose and repair it

This eight-week layout is a template, not a promise; stretch it if you are new to SR OS. Use a practice test to check conceptual recall on the written topics, and rely on your own lab environment for the hands-on skills. For quick revision of facts you must not forget, our SRA cheat sheet is a useful companion.

What We Cannot Tell You About Difficulty

Honest difficulty guidance includes naming the gaps. The following items are not established in the sources reviewed for this article, and you should be skeptical of anyone who states them confidently:

  • A current pass rate for any SRA component.
  • A scored-versus-unscored item split for the written exams.
  • A single overall exam fee for the whole route. Costs accrue across multiple components, so see SRA certification cost for how to budget.
  • Any additional examination-domain weighting. The six groups are unweighted preparation groups, and no topic percentages are established.
  • Specific passing scores, which you should confirm against issuer materials rather than third-party figures; see our note on the SRA passing score.

Also keep the scope boundaries straight. Changes announced for NRS I in March 2027 do not apply to the SRA scope described here, and scheduling details should be confirmed through the issuer; our SRA exam dates guide explains how to track them. This article reflects sources reviewed on October 11, 2026, and practice material from this site is original supplemental content that is not endorsed by Nokia and cannot guarantee results.

Frequently Asked Questions

Is the Nokia SRA a single exam?

No. SRA is a multi-exam certification. The current route requires written exams 4A0-102, 4A0-105, 4A0-106, 4A0-107 and 4A0-115, followed by the 7-hour ASRA4A0 practical lab. It is distinct from NRS I and NRS II, so no single question count or duration describes the whole certification.

What is the hardest part of the SRA route?

For most candidates it is the practical lab. It consists of two independent 3.5-hour sections where topics must be configured and verified on live 7750 SR networks, using classic CLI or MD-CLI. Among the written exams, QoS and EVPN tend to carry the heaviest conceptual load, though no failure statistics are published here.

Can the composite exam let me skip the lab or EVPN?

No. The optional 4A0-C02 composite substitutes for only 4A0-102, 4A0-105, 4A0-106 and 4A0-107. It does not replace 4A0-115 or the practical lab, so you still need the EVPN written exam and the full lab.

Do I have to take a training course first?

No. Course prerequisites are preparation recommendations, not additional current SRA examination requirements, and training is not mandatory to attempt the examinations. Courses can still help, particularly if you are new to SR OS or to a topic like EVPN.

Are separate IS-IS/OSPF, MPLS and Services Architecture exams still required?

Not under the current route effective September 8, 2026. That knowledge still supports your preparation, since IGP and MPLS fundamentals underpin BGP, VPLS and VPRN. Multicast 4A0-108 is retired and is not a current SRA requirement. Always confirm against the dated program update rather than the lab page's older prerequisite display.

Ready to pass your SRA exam?

Put this into practice with free SRA questions across every exam domain.