USA

Microsoft Certified: Azure Security Engineer Associate (AZ-500) Examination

600 questions

About this exam

The Microsoft Certified: Azure Security Engineer Associate (AZ-500) Examination was designed to assess whether candidates can secure Azure environments in a hands-on security role. Its intended audience included Azure security engineers and administrators responsible for protecting cloud resources. Key areas included Microsoft Entra ID identity security, role-based access control and scope design, privileged identity management, just-in-time access, Conditional Access, authentication protection, networking, compute, storage, databases, and security operations. Microsoft lists the exam and associated certification as retired on August 31, 2026, so they are not a current certification route for 2027–2028.

Historically, AZ-500 was a timed, computer-based Microsoft certification exam, with question formats and coverage subject to change. There was no formal prerequisite, although practical Azure administration and security experience helped candidates apply the concepts to realistic scenarios. Anyone researching the exam now should distinguish archived AZ-500 study material from credentials currently available: check Microsoft Learn for the latest certification options and exam outlines before choosing a study plan. Reviewing sample questions can help reveal weak areas, but candidates should prioritize understanding security decisions and their effects across an Azure environment.

How to review Azure security topics and plan your study

  1. Use the AZ-500 skills outline as a checklist for identity and access, networking, compute and data protection, and security operations; compare it with Microsoft Learn’s current certification guidance because AZ-500 has retired.
  2. Review practical identity scenarios involving Entra ID, RBAC scopes, PIM, just-in-time access, Conditional Access, and authentication protection. Explain why a control fits each scenario rather than memorizing isolated definitions.
  3. Use timed question practice to identify gaps, then revisit the relevant Microsoft Learn documentation and Azure security guidance. Track repeated mistakes by topic and confirm that any exam you plan to take is still offered.

FAQ

Who was eligible to take the AZ-500 exam?

Microsoft did not require a formal prerequisite for AZ-500. It was intended for people working with Azure security, and practical experience administering Azure environments was useful. The exam retired on August 31, 2026, so candidates planning for 2027–2028 should check Microsoft Learn for current credentials.

What was the AZ-500 exam format?

AZ-500 was a timed, computer-based Microsoft certification exam. The question mix and exam experience could vary, so candidates were advised to consult the official exam page and skills outline. Since the exam has retired, use Microsoft Learn to confirm the format of any current alternative.

What subjects did the AZ-500 exam cover?

Its skills included identity and access management, Azure networking security, protection for compute, storage and databases, and security operations. Identity topics included Microsoft Entra ID, RBAC, PIM, just-in-time access, Conditional Access, and authentication protection. Check current Microsoft exam outlines before preparing for a replacement credential.