AZ-500 is the Azure Security Engineer Associate exam: identity, network/compute hardening, security operations, and data/application protection on Azure.
Start practicing: AZ-500 practice →
Take AZ-104 first unless you already administer subscriptions. Path: Microsoft security certifications.
Exam overview
| Detail | Info |
|---|---|
| Exam | AZ-500 |
| Duration | ~120 minutes |
| Pass | 700 / 1000 |
| Cost | ~$165 USD |
Official: AZ-500 skills.
Domains
- Identity and access — Entra, Conditional Access, PIM, managed identities, Key Vault access.
- Platform protection — NSGs, Azure Firewall, WAF, DDoS, disk/storage encryption, just-in-time VM access.
- Security operations — Microsoft Defender for Cloud, Microsoft Sentinel at engineer depth, logging, just-enough-admin.
- Data and applications — storage firewalls, SQL security, App Service auth, Key Vault, confidential computing at a recognition level.
6-week labs
| Week | Lab |
|---|---|
| 1 | Conditional Access + PIM |
| 2 | Hub-spoke NSG/Firewall |
| 3 | Defender for Cloud recommendations |
| 4 | Key Vault + storage encryption |
| 5 | Sentinel analytics (recognition + one playbook) |
| 6 | Timed exams |
- Practice · Flashcards · Notes · Exams
Ready to Pass Your Azure AZ-500 Exam?
Get 300+ practice questions with detailed explanations, flashcards, and full-length practice exams. Try 10 free practice questions. Unlock 300+ questions and timed exams when you are ready.
✓ Plans from $19.99/mo • ✓ Cancel anytime • ✓ 91 certifications
