thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Microsoft · Cybersecurity · Associate

Microsoft Azure Security Engineer Associate (SC-500 successor) exam guide

Exam SC-500 (replaced AZ-500, retired Aug 31, 2026)

SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads earns Microsoft Certified: Cloud and AI Security Engineer Associate, replacing AZ-500 (retired August 31, 2026). It validates securing identity, storage, databases, networks, compute and AI workloads across Azure and hybrid environments, and managing posture with Defender for Cloud, Sentinel and Security Copilot.

QuestionsSee official page
Time limit100 minutes
Passing score700 (1-1000 scale)
Exam fee$165 USD
Valid for1 years
DeliveryPearson VUE test center or online proctored

Format: Multiple choice, drag-and-drop, hot area, build list and case studies; may include labs (120 minutes if labs are included). Fee note: US price; varies by country. Student and Microsoft Learn challenge discounts sometimes available.

Who it's for

Security engineers with practical Azure and hybrid administration experience, strong Microsoft Entra ID knowledge and some Microsoft 365 administration exposure.

What the exam covers

Manage identity, access, and governance (20-25%)—
Secure storage, databases, and networking (25-30%)—
Secure compute (20-25%)—
Manage and monitor security posture (20-25%)—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: None

Recommended: Practical Azure and hybrid administration experience, strong familiarity with Microsoft Entra ID and some Microsoft 365 administration experience.

Keeping it active

Role-based certifications are valid 1 year. Renew free by passing an unproctored online renewal assessment on Microsoft Learn in the 180 days before expiry; no fee and no retest required.

Skills & careers

Skills it validates

  • Entra ID PIM, Conditional Access and managed/app identities
  • Key Vault secrets, keys and certificates
  • Network security with NSGs, Azure Firewall, Private Link and Virtual Network Manager
  • Securing AKS, App Service, Functions and VMs (Bastion, JIT, Defender for Servers)
  • AI workload security: Defender for AI, Foundry guardrails, AI Gateway, Entra Agent ID
  • Posture management with Defender CSPM and Microsoft Sentinel
  • Using Microsoft Security Copilot workspaces and agents

Job roles

Cloud Security EngineerAzure Security EngineerSecurity AdministratorCloud Security ArchitectDevSecOps EngineerAI Security Engineer

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Read the SC-500 study guide; deploy a lab subscription with Defender for Cloud enabled
  2. Week 2: Identity and governance - PIM, Conditional Access, managed identities, Key Vault, Azure Policy, RBAC
  3. Week 3: Storage, database and network security (largest domain) - storage firewalls, SQL auditing, Private Endpoints, Azure Firewall, NSGs
  4. Week 4: Compute and AI security - AKS, App Service, Bastion, JIT, Defender for AI, Foundry guardrails
  5. Week 5: Posture - Defender CSPM, multicloud connectors, Sentinel data connectors and automation, Security Copilot
  6. Week 6: Practice assessment and exam sandbox; repeat weak labs

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Do not study from AZ-500-only material - SC-500 adds AI security and Security Copilot objectives
  • Networking plus data protection is the heaviest domain; know Private Endpoint vs service endpoint precisely
  • Expect questions on which Defender plan protects which resource type
  • Prefer managed identities and Key Vault references over stored secrets
  • Microsoft Learn is available during the exam - use it for exact policy or setting names

Key terms for this exam

All 42 terms Study with thinQcards™

Frequently asked questions

Is AZ-500 retired?

Yes, AZ-500 retired August 31, 2026. SC-500 is its replacement.

What certification does SC-500 earn?

Microsoft Certified: Cloud and AI Security Engineer Associate.

How much does SC-500 cost?

$165 USD in the United States.

Does SC-500 count toward Cybersecurity Architect Expert?

Yes. Cloud and AI Security Engineer Associate is one of the accepted prerequisites for SC-100.

How is SC-500 different from AZ-500?

It keeps Azure platform security but adds securing AI workloads, Security Copilot and broader posture management with Defender CSPM.

Official page: learn.microsoft.com. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.