Microsoft AZ-500 Study Guide (Retired Exam)

This guide was written while the AZ-500 exam was current. It is kept for reference and no longer describes an exam you can take.

Exam Overview (Historical)

• Certification: Microsoft AZ-500
• Exam Code: AZ-500
• Vendor: Microsoft
• Status: Retired
• Passing Score: 700 out of 1000

Domain Breakdown (Historical)

These domains and weights describe the retired AZ-500 exam as last documented on this site. For a current exam, use the outline on Microsoft Learn.

Domain 1: Manage Identity and Access (25-30%)

• 1.1 Manage Microsoft Entra identities
• 1.2 Manage Microsoft Entra authentication
• 1.3 Manage Microsoft Entra authorization
• 1.4 Manage Microsoft Entra application access

Key concepts: Microsoft Entra ID, Conditional Access Policies, Privileged Identity Management, Multi-Factor Authentication, Managed Identities, Service Principals, App Registrations, Identity Protection

Domain 2: Secure Networking (20-25%)

• 2.1 Plan and implement security for virtual networks
• 2.2 Plan and implement security for private access to Azure resources
• 2.3 Plan and implement security for public access to Azure resources

Key concepts: Network Security Groups, Application Security Groups, Azure Firewall, Web Application Firewall, Azure DDoS Protection, Private Endpoints, Service Endpoints, Azure Front Door

Domain 3: Secure Compute, Storage, and Databases (20-25%)

• 3.1 Plan and implement advanced security for compute
• 3.2 Plan and implement security for storage
• 3.3 Plan and implement security for Azure SQL Database and Azure SQL Managed Instance

Key concepts: Azure Disk Encryption, Azure Key Vault, Storage Service Encryption, Shared Access Signatures, Azure SQL TDE, Dynamic Data Masking, Always Encrypted, Container Security

Domain 4: Manage Security Operations (25-30%)

• 4.1 Plan and implement security monitoring and automation
• 4.2 Plan and implement Microsoft Defender for Cloud
• 4.3 Configure and manage threat protection using Microsoft Sentinel
• 4.4 Plan and implement data governance and compliance

Key concepts: Microsoft Defender for Cloud, Microsoft Sentinel, Secure Score, Security Alerts, KQL Queries, Workbooks and Playbooks, Azure Policy, Regulatory Compliance

Practice Resources (Legacy)

Test your knowledge with our free tools:

Take our archived Microsoft AZ-500 practice quiz

• CVSS Calculator: Practice scoring vulnerabilities
• Password Strength Checker: Test password security

What to Study Instead

Microsoft Learn lists the current security engineer certifications: browse security engineer certifications.

This guide is independently created for educational purposes. Microsoft trademarks belong to their respective owners. FixTheVuln is not affiliated with or endorsed by Microsoft.