Microsoft AZ-500 Exam Details & Actual Exam Questions

Exam Code/Number: AZ-500
Exam Name/Title: Microsoft Azure Security Technologies
Certification Provider: Microsoft
Corresponding Certification: Microsoft Azure Security Engineer Associate

Exam Questions: 517
Updated On: Jul,20 2026
Certification Level: Associate

Microsoft Azure Security Technologies Exam Questions

View AZ-500 actual exam questions, answers and explanations for free.

Go To AZ-500 Questions

95% student found the test questions almost same

All the information you need to pass Microsoft Azure Security Technologies AZ-500 exam and free practice exam verified by EduDump exam experts.

Said the test questions were almost same

Passed the exams with the material

Found the study quides effective and helpful

(22 Up Votes)

Microsoft AZ-500 Exam Overview:

Certification Vendor:	Microsoft
Exam Name:	Microsoft Azure Security Technologies
Exam Number:	AZ-500
Passing Score:	700
Certificate Validity Period:	12 months (renewable)
Exam Duration:	100-150
Exam Format:	Multiple-choice, Case studies, Scenario-based, Lab simulations
Real Exam Qty:	40-60
Available Languages:	English, Japanese, Korean, Chinese (Simplified)
Related Certifications:	Microsoft Certified: Azure Security Engineer Associate
Exam Price:	$165 USD
Sample Questions:	Microsoft AZ-500 Sample Questions
Exam Way:	Online proctored or in-person at a testing center
Pre Condition:	No mandatory prerequisites, but practical experience in administration of Azure and hybrid environments is recommended. Strong familiarity with Azure compute, network, and storage, deep understanding of Microsoft Entra ID, and experience with security operations are highly suggested.
Official Syllabus URL:	https://learn.microsoft.com/en-us/credentials/certifications/exams/az-500/

Microsoft AZ-500 Exam Syllabus Topics:

Section	Weight	Objectives
Manage identity and access (15–20%)	15-20%	- Manage Microsoft Entra authorization 1. Configure custom roles 2. Configure Azure role-based access control (RBAC) 3. Interpret access assignments 4. Configure Microsoft Entra Permissions Management - Manage Microsoft Entra ID identities 1. Create and manage users and groups 2. Configure self-service password reset (SSPR) 3. Manage guest and external accounts 4. Manage Microsoft Entra ID bulk operations - Manage Azure AD Governance 1. Configure and manage privileged identity management (PIM) 2. Implement and manage access reviews 3. Implement and manage entitlement management - Manage Microsoft Entra authentication 1. Configure Microsoft Entra MFA 2. Configure and manage authentication methods 3. Configure Microsoft Entra Verified ID 4. Implement and manage Microsoft Entra ID Protection
Secure networking (20–25%)	20-25%	- Plan and implement security for private access to Azure resources 1. Plan and implement service endpoints 2. Plan and implement private endpoints 3. Plan and implement private link services - Implement and manage network security 1. Implement and manage network segmentation 2. Implement and manage Azure Firewall Manager 3. Implement and manage Azure Firewall 4. Configure Azure DDoS protection - Plan and implement security for public access to Azure resources 1. Plan and implement Azure Application Gateway 2. Plan and implement Web Application Firewall (WAF) 3. Plan and implement Azure Front Door 4. Configure firewall settings on PaaS resources - Plan and implement security for virtual networks 1. Implement Azure Bastion and Just-in-Time (JIT) access 2. Plan and implement user-defined routes (UDR) 3. Secure private and public access to Azure services 4. Plan and implement Network Security Groups (NSG) and Application Security Groups (ASG)
Manage security operations using Microsoft Defender for Cloud and Microsoft Sentinel (30–35%)	30-35%	- Implement and manage Microsoft Defender for Cloud 1. Implement and manage Defender for Servers and Defender for Endpoint integration 2. Evaluate and remediate security posture 3. Configure and manage Defender for Cloud policies and plans 4. Configure workflow automation using Defender for Cloud 5. Configure and manage regulatory compliance - Implement and manage Microsoft Sentinel 1. Configure and manage Microsoft Sentinel data connectors 2. Manage Microsoft Sentinel analytics rules 3. Configure and manage automation rules and playbooks 4. Configure workbooks and dashboards 5. Plan and implement Microsoft Sentinel workspace architecture 6. Investigate, hunt, and respond to incidents using Microsoft Sentinel - Configure and manage Microsoft Defender for various resources 1. Configure Microsoft Defender for Resource Manager 2. Configure Microsoft Defender for DNS 3. Configure Microsoft Defender for Storage 4. Configure Microsoft Defender for Key Vault 5. Configure Microsoft Defender for Containers
Secure compute, storage, and databases (20–25%)	20-25%	- Plan and implement security for Azure SQL 1. Configure and manage Microsoft Purview for sensitive data 2. Implement and manage transparent data encryption (TDE) 3. Configure and manage dynamic data masking and data classification 4. Configure and manage Azure SQL firewall rules 5. Implement and manage SQL database security 6. Configure Microsoft Defender for SQL - Plan and implement security for storage 1. Implement and manage Azure File Shares security 2. Configure and manage storage shared access signatures (SAS) 3. Configure and manage Azure Storage encryption 4. Implement Azure Data Lake Storage security 5. Configure access control for storage accounts 6. Configure storage account firewall and virtual networks - Plan and implement advanced security for compute 1. Plan and implement security for Azure Container Registry 2. Configure and manage server-side encryption 3. Plan and implement security for Azure Container Instances and Azure Container Apps 4. Plan and implement security for Azure Kubernetes Service 5. Configure and manage Azure Disk Encryption 6. Plan and implement security for Azure virtual machines