Microsoft
Azure Security Engineer Associate (AZ-500)
Microsoft Certified: Azure Security Engineer Associate (Exam AZ-500)
Associate-level certification for security engineers implementing identity, network, compute, and data protection on Microsoft Azure, including Microsoft Defender for Cloud and Sentinel. Valued for cloud security roles.
What's on the exam
AZ-500 Skills Measured (as of January 22, 2026)
Manage identity and access
15–20%Microsoft Entra ID identities · Conditional access policies · Privileged Identity Management · External and B2B identities · Application access management
Secure networking
20–25%Virtual network security · Network security groups and firewalls · Private endpoints and service endpoints · DDoS protection · Secure connectivity (VPN, ExpressRoute)
Secure compute, storage, and databases
20–25%Compute and container security · Key Vault and encryption · Storage account security · Database security controls · Backup and recovery security
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
30–35%Microsoft Defender for Cloud · Microsoft Sentinel · Cloud governance and Azure Policy · Threat detection and response · Monitoring, alerts, and automation
Frequently asked questions
How much does the Azure Security Engineer Associate (AZ-500) cost?
The Azure Security Engineer Associate (AZ-500) costs $165. US list price; varies by country.
How long is the Azure Security Engineer Associate (AZ-500) and how many questions does it have?
40–60 items — Approximately 100 minutes.
What do you need to pass the Azure Security Engineer Associate (AZ-500)?
700 on a scale of 1000.
Can you retake the Azure Security Engineer Associate (AZ-500)?
24-hour wait after first fail; longer waits for subsequent attempts.
What is the best way to study for the Azure Security Engineer Associate (AZ-500)?
Study the official blueprint, not random material: the exam is weighted by domain (Manage identity and access 15–20%, Secure networking 20–25%, Secure compute, storage, and databases 20–25%, Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel 30–35%). Spaced-repetition flashcards built domain-by-domain against that blueprint are the most time-efficient way to cover everything the exam tests.
Program in development
We're building a blueprint-complete program for this exam. Meanwhile, explore live programs across 11 exam.
Explore programs →