← All Certifications
Microsoft

Azure Security Engineer Certification

AZ-500 · 4 domains

Last updated: March 31, 2026

Exam Syllabus & Domains

The Azure Security Engineer certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 25-30%

Manage Identity and Access

  • 1.1 Manage Microsoft Entra identities
  • 1.2 Manage Microsoft Entra authentication
  • 1.3 Manage Microsoft Entra authorization
  • 1.4 Manage Microsoft Entra application access
Microsoft Entra IDConditional Access PoliciesPrivileged Identity ManagementMulti-Factor AuthenticationManaged IdentitiesService PrincipalsApp RegistrationsIdentity ProtectionAccess ReviewsPasswordless Authentication
Domain 2 20-25%

Secure Networking

  • 2.1 Plan and implement security for virtual networks
  • 2.2 Plan and implement security for private access to Azure resources
  • 2.3 Plan and implement security for public access to Azure resources
Network Security GroupsApplication Security GroupsAzure FirewallWeb Application FirewallAzure DDoS ProtectionPrivate EndpointsService EndpointsAzure Front DoorAzure BastionNetwork Segmentation
Domain 3 20-25%

Secure Compute, Storage, and Databases

  • 3.1 Plan and implement advanced security for compute
  • 3.2 Plan and implement security for storage
  • 3.3 Plan and implement security for Azure SQL Database and Azure SQL Managed Instance
Azure Disk EncryptionAzure Key VaultStorage Service EncryptionShared Access SignaturesAzure SQL TDEDynamic Data MaskingAlways EncryptedContainer SecurityAKS Network PoliciesMicrosoft Defender for Containers
Domain 4 25-30%

Manage Security Operations

  • 4.1 Plan and implement security monitoring and automation
  • 4.2 Plan and implement Microsoft Defender for Cloud
  • 4.3 Configure and manage threat protection using Microsoft Sentinel
  • 4.4 Plan and implement data governance and compliance
Microsoft Defender for CloudMicrosoft SentinelSecure ScoreSecurity AlertsKQL QueriesWorkbooks and PlaybooksAzure PolicyRegulatory ComplianceAzure MonitorLog Analytics Workspace

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Manage Identity and Access
25-30%
D2 Secure Networking
20-25%
D3 Secure Compute, Storage, and Databases
20-25%
D4 Manage Security Operations
25-30%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the Azure Security Engineer Practice Quiz

Related Comparisons

Not sure if Azure Security Engineer is the right choice? Compare it with similar certifications:

Azure AZ-500 vs Security+ AZ-104 vs AZ-500

Get the Azure Security Engineer Study Planner

Fillable PDF with 12-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your Azure Security Engineer certification training:

Frequently Asked Questions

What is the Azure Security Engineer certification?

The Azure Security Engineer (AZ-500) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the Azure Security Engineer certification syllabus cover?

The Azure Security Engineer exam syllabus covers 4 domains. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for Azure Security Engineer?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for Azure Security Engineer?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.