Microsoft

Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500)

Microsoft Certified: Cloud and AI Security Engineer Associate (Exam SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads)

Associate-level certification for security engineers implementing identity, network, data, compute, and AI workload protection across Azure and hybrid environments, including Defender for Cloud, Sentinel, and Security Copilot. It replaced the Azure Security Engineer Associate (AZ-500), which retired August 31, 2026.

$165120 minutes

What's on the exam

SC-500 study guide skills measured (AZ-500, its certification, and renewals retired August 31, 2026)

Manage identity, access, and governance

20–25%

Privileged Identity Management and Conditional Access · MFA and passwordless authentication · App registrations, OAuth consent, and managed identities · Azure Key Vault keys, secrets, and certificates · Azure Policy, RBAC, and regulatory compliance in Defender for Cloud

Secure storage, databases, and networking

25–30%

Storage account security and Defender for Storage · Azure SQL security, auditing, and Defender for Databases · NSGs, ASGs, and Azure Virtual Network Manager · VPN, Virtual WAN, and Microsoft Entra Private Access · Private endpoints, Private Link, and Azure Firewall

Secure compute

20–25%

Securing AI workloads (Purview DSPM, Entra Agent ID, Foundry guardrails, Defender for AI) · VM security (disk encryption, Bastion, JIT access, Azure Arc) · Defender for Servers configuration · AKS, container registry, and container apps security · App Service, Functions, WAF, and API Management protection

Manage and monitor security posture

20–25%

Defender CSPM and workload protection plans · Multicloud connectors (AWS, GCP) and Defender EASM · Microsoft Sentinel workspaces, connectors, and data collection · Sentinel automation rules and playbooks · Microsoft Security Copilot configuration

Frequently asked questions

How much does the Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500) cost?

The Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500) costs $165. US list price; varies by country.

How long is the Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500) and how many questions does it have?

40–60 items — 120 minutes.

What do you need to pass the Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500)?

700 on a scale of 1000.

Can you retake the Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500)?

24-hour wait after first fail; longer waits for subsequent attempts.

What is the best way to study for the Cloud and AI Security Engineer Associate (SC-500, formerly AZ-500)?

Start from the official outline and your primary study materials: the exam is weighted by domain (Manage identity, access, and governance 20–25%, Secure storage, databases, and networking 25–30%, Secure compute 20–25%, Manage and monitor security posture 20–25%). Once you've learned the material, spaced-repetition flashcards organized by those domains are an efficient way to retain it and refresh it before test day.

Program in development

We're building a program for this exam. Meanwhile, explore live programs across 84 exams.

Explore programs →