Search...
Master key concepts with interactive flashcards
What is Azure RBAC and what are the three key components of a role assignment?
Click to reveal answer
Azure Role-Based Access Control (RBAC) is the authorization system for managing access to Azure resources. The three components of a role assignment are: (1) Security principal (who) — user, group, service principal, or managed identity; (2) Role definition (what) — set of allowed operations like Reader, Contributor, Owner; (3) Scope (where) — management group, subscription, resource group, or resource.
Click to show question
Azure Security Technologies (AZ-500) is a Microsoft certification. These facts come from the current exam guide and are the numbers to plan around.
| Domain | Weight | What to focus on |
|---|---|---|
| Manage identity and access | 28% | Microsoft Entra ID configuration, Microsoft Entra ID Governance, Privileged Identity Management (PIM) |
| Manage security operations | 26% | Microsoft Defender for Cloud (CSPM and CWPP), Microsoft Defender for Cloud security policies, Microsoft Sentinel (SIEM/SOAR) |
| Secure networking | 23% | Azure Virtual Network security, Network Security Groups (NSGs), Azure Firewall and Azure Firewall Manager |
| Secure compute, storage, and databases | 23% |
| Azure Key Vault, Azure Disk Encryption, Just-in-time (JIT) VM access |
Yes. You can start AZ-500 practice and flashcards free without creating an account. A free account keeps your progress, and the full bank (300+ questions) unlocks with a subscription.
They cover all 4 domains of the AZ-500 exam: Manage identity and access (28%), Manage security operations (26%), Secure networking (23%), Secure compute, storage, and databases (23%). Each section is weighted in the same proportion as the real exam, so nothing high-value is buried.
The AZ-500 exam has approximately 50 questions in 150 minutes, with a passing score of 700. Use the practice questions to confirm you are consistently above that line before booking the real exam.
Study in short, spaced sessions: a card you have not seen for two days is worth more than a card you reread immediately. Filter by Manage identity and access first, then mix domains so you practise identifying the topic before recalling the definition.
They are the recall half of preparation. Pair the cards with practice questions and at least one timed practice exam — candidates who only review cards usually recognise terms but miss scenario questions.