Microsoft Azure Security Engineer Associate AZ-500
Follow a topic roadmap built from the published exam blueprint, with lessons, practice exercises and practice exams.
Validates your ability to implement, manage, and monitor security for resources in Azure, multi-cloud, and hybrid environments.
What you'll learn
Every objective AZ-500 publishes, and what it asks you to be able to do.
- Secure identity and accessManage security controls for identity and access. Manage Microsoft Entra application access and managed identities.
- Secure networkingPlan and implement security for virtual networks. Plan and implement security for private access to Azure resources. Plan and implement security for public access to Azure resources.
- Secure compute, storage, and databasesPlan and implement advanced security for compute. Plan and implement security for storage. Plan and implement security for Azure SQL Database and Azure SQL Managed Instance.
- Secure Azure using Microsoft Defender for Cloud and Microsoft SentinelImplement and manage enforcement of cloud governance policies. Manage security posture by using Microsoft Defender for Cloud. Configure and manage threat protection by using Microsoft Defender for Cloud. Configure and manage security monitoring and automation solutions.
The exam at a glance
- Length
- 100 minutes
- Validity
- 1 year
- Style
- Style on Microsoft's site
40-60 questions. Based on AZ-500. Pass mark is 700.
Sitting the exam
The part nobody publishes in a syllabus. For AZ-500 the logistics are study strategy: what you are allowed to read while the clock runs changes how you should practise, and what a second attempt costs changes when you should book.
Where you sit it
- You can explore the exam environment by visiting the exam sandbox.
Read off the official exam page on 10 September 2026. Rules change without notice, so confirm anything you are about to spend money on.
What the exam covers
Microsoft publishes the objectives but not a weight for each one, so treat these as equally likely to come up.
Course content
17 topics
1. Azure Fundamentals and Core Services
Understanding Azure subscriptions, resource groups, regions, and the Azure portal for managing cloud resources.
2. Identity and Access Management Foundations
Core concepts of Microsoft Entra ID including users, groups, roles, and authentication methods.
3. Manage Security Controls for Identity and Access
- Manage security controls for identity and access
4. Manage Application Access and Managed Identities
- Manage Microsoft Entra application access and managed identities
5. Azure Networking Fundamentals
Virtual networks, subnets, IP addressing, network security groups, and basic connectivity concepts.
6. Plan and Implement Security for Virtual Networks
- Plan and implement security for virtual networks
7. Plan and Implement Security for Private Access
- Plan and implement security for private access to Azure resources
8. Plan and Implement Security for Public Access
- Plan and implement security for public access to Azure resources
9. Compute and Storage Security Foundations
Understanding Azure VMs, containers, storage accounts, encryption basics, and database fundamentals.
10. Plan and Implement Advanced Security for Compute
- Plan and implement advanced security for compute
11. Plan and Implement Security for Storage
- Plan and implement security for storage
12. Plan and Implement Security for Azure SQL
- Plan and implement security for Azure SQL Database and Azure SQL Managed Instance
13. Cloud Governance and Policy Foundations
Understanding Azure Policy, management groups, compliance frameworks, and governance hierarchy.
14. Implement and Manage Cloud Governance Policies
- Implement and manage enforcement of cloud governance policies
15. Manage Security Posture with Microsoft Defender for Cloud
- Manage security posture by using Microsoft Defender for Cloud
16. Configure Threat Protection with Microsoft Defender for Cloud
- Configure and manage threat protection by using Microsoft Defender for Cloud
17. Configure Security Monitoring and Automation
- Configure and manage security monitoring and automation solutions
What to know before you start
- Practical experience in administration of Microsoft Azure and hybrid environments
- Strong familiarity with Microsoft Entra ID, as well as compute, network, and storage in Azure
Other Microsoft certifications
All Microsoft certificationsFrequently asked questions
How much does the AZ-500 exam cost?
Fee on Microsoft's site, and worth checking there before you book.
How long is the AZ-500 exam?
100 minutes. 40-60 questions.
How many questions are on the AZ-500 exam?
40-60 questions. The sitting is 100 minutes long. Check the current count with Microsoft before you book.
How long is AZ-500 valid?
1 year. Check Microsoft's recertification route before it lapses.
Is the AZ-500 exam hands-on?
Microsoft decides that at the sitting rather than publishing it per exam, so prepare as if it is: a live environment and a command line, marked on what you actually do.
What is on the AZ-500 exam?
4 objectives: Secure identity and access, Secure networking, Secure compute, storage, and databases, Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel. Microsoft does not publish a weight per objective.
What should I know before starting AZ-500?
Practical experience in administration of Microsoft Azure and hybrid environments. Strong familiarity with Microsoft Entra ID, as well as compute, network, and storage in Azure.
Exam details from Microsoft, checked August 2026. Always confirm on their page before booking.
What learners say about Acelro
About Acelro rather than the AZ-500 exam: what learners made of the gap analysis, the roadmap and the projects.
“The roadmap makes me focus on a learning curve, no matter the length.”
“Acelro has been really great for me, an inspiring experience. I've gained a lot of confidence doing projects I thought were rocket science.”
“The gap analysis maps your actual skills against what the current job market is asking for. Nobody else made it that clear where I stood.”