SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads is the exam for Microsoft Certified: Cloud and AI Security Engineer Associate. It replaced AZ-500 (Azure Security Engineer Associate), which retired on 31 August 2026. If you were preparing for AZ-500, this is the exam to take now. Much of the Azure security content carries over, but SC-500 adds a large new block on securing AI: Copilot and agent risks, Microsoft Entra Agent ID, guardrails in Microsoft Foundry, an AI gateway in API Management and Defender for AI services. It also adds Microsoft Security Copilot.
This guide follows Microsoft's SC-500 study guide: every skill area with its weight, what is new compared with AZ-500, an 8-week plan with labs, and 20 original scenario questions.
Quick facts (Microsoft Learn, November 2026)
| Item | Detail |
|---|---|
| Exam | SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads |
| Certification | Microsoft Certified: Cloud and AI Security Engineer Associate |
| Level | Intermediate (associate) |
| Time | 120 minutes; proctored; may include interactive components |
| Passing score | 700 |
| Languages | English, Japanese, Chinese (Simplified and Traditional), Korean, German, French, Italian, Portuguese (Brazil), Spanish |
| Retake | 24 hours after the first attempt; longer waits after that |
| Price | Set by the country where you take the exam |
| Practice Assessment | Not yet available; Microsoft usually adds one within about 8 weeks of an exam leaving beta |
Read the official SC-500 study guide and certification page before booking. For every 2026 change, see Microsoft certifications retired in 2026.
Who should take SC-500?
- Azure administrators and cloud engineers moving into security.
- Security engineers who protect Azure, hybrid and multicloud estates.
- Anyone who was preparing for AZ-500.
- Engineers who secure AI apps and agents built on Microsoft Foundry and Copilot Studio.
Microsoft expects practical Azure and hybrid administration experience (compute, network and storage), strong familiarity with Microsoft Entra ID, and familiarity with Microsoft 365 administration. If you are new to Azure, start with AZ-900 and AZ-104.
Skills measured and weights
| Skill area | Weight |
|---|---|
| Manage identity, access, and governance | 20–25% |
| Secure storage, databases, and networking | 25–30% |
| Secure compute (including AI) | 20–25% |
| Manage and monitor security posture | 20–25% |
AZ-500 vs SC-500: what changed?
| Area | AZ-500 (retired) | SC-500 (current) |
|---|---|---|
| AI security | Not covered | Copilot and AI app risks with Purview DSPM, Entra Agent ID, Foundry guardrails, AI Gateway in API Management, Defender for AI services |
| Identity | PIM, Conditional Access, app registrations | Same, plus passwordless methods and Key Vault secret scanning with Defender CSPM |
| Networking | NSGs, Firewall, Private Link, WAF, Front Door | Adds Microsoft Entra Private Access; WAF and API Management now sit under application platform security |
| Compute | VMs, AKS, containers | Adds Azure Arc for hybrid servers, Machine Configuration, vTPM and secure boot, Logic Apps and Functions security |
| Security operations | Defender for Cloud, Sentinel basics | Deeper Sentinel (data collection rules, CEF/syslog, retention, playbooks), Purview Audit in Defender XDR, and Microsoft Security Copilot |
1. Identity, access and governance (20–25%)
- Microsoft Entra ID: Privileged Identity Management; Conditional Access; MFA and passwordless; enterprise apps and app registrations; OAuth permission grants and consent; managed identities.
- Azure Key Vault: deploy and configure vaults; access (RBAC) and firewall settings; keys, secrets and certificates; scanning for exposed secrets with Defender CSPM; Defender for Key Vault.
- Governance: built-in and custom Azure Policy; regulatory compliance in Defender for Cloud; resource locks; built-in and custom roles; finding over-privileged RBAC assignments; Azure Backup security features; security controls through infrastructure as code.
# Grant an app's managed identity read access to secrets only (Key Vault RBAC)
az role assignment create \
--assignee-object-id <principal-id> --assignee-principal-type ServicePrincipal \
--role "Key Vault Secrets User" \
--scope $(az keyvault show -n kv-prod-ci --query id -o tsv)2. Storage, databases and networking (25–30%)
- Storage: secure configuration, firewall rules, Defender for Storage and access policies.
- Databases: Azure SQL platform security, auditing for SQL Database and Managed Instance, Defender for Databases.
- Networking: NSGs and ASGs; Azure Virtual Network Manager security admin rules; Virtual WAN; VPNs; Microsoft Entra Private Access; private endpoints and Private Link; Azure Firewall; Network Watcher to check effective rules.
| Need | Use |
|---|---|
| Reach a PaaS service (SQL, Storage) over a private IP | Private endpoint |
| Expose your own service privately to other VNets or tenants | Private Link service |
| Central egress filtering with threat intelligence | Azure Firewall |
| Rules that teams cannot override across many VNets | Virtual Network Manager security admin rules |
| Zero-trust access to private apps without a classic VPN | Microsoft Entra Private Access |
3. Secure compute, including AI (20–25%)
Security for AI (the newest material):
- find overexposed data in SharePoint before Copilot can surface it;
- identify Copilot and AI app risks with Microsoft Purview DSPM;
- real-time protection for Copilot Studio agents;
- Conditional Access, access management and blast-radius analysis (in Defender XDR) for Microsoft Entra Agent ID;
- an AI Gateway in Azure API Management in front of Microsoft Foundry;
- Defender for AI services and the Data and AI security dashboard in Defender for Cloud;
- guardrails for agents in Foundry, and managing agents in the Microsoft 365 admin center.
Servers and VMs: disk encryption; Azure Bastion; just-in-time access; Azure Arc for hybrid and multicloud servers; Defender for Servers (vulnerability scanning, EDR, agentless scanning); secure boot, vTPM and integrity monitoring; Azure Machine Configuration.
Application platforms: Defender for Containers; AKS, ACR, Container Instances and Container Apps controls; Functions, Logic Apps and App Service security; Web Application Firewall; API Management policies for back-end APIs.
Background: enterprise AI security, AI security interview questions and the AI-103 guide for how Foundry agents are built.
4. Manage and monitor security posture (20–25%)
- Defender for Cloud: Defender CSPM risks; compliance against frameworks; workload protection plans; connecting AWS and GCP; Defender Vulnerability Management; External Attack Surface Management (EASM).
- Microsoft Sentinel: workspaces and roles; content hub; data connectors; syslog and CEF; Windows Security events with data collection rules and WEF; custom log tables; automation rules and playbooks; data retention; Purview Audit queries in Defender XDR.
- Microsoft Security Copilot: workspaces, roles, plugins, and Microsoft and Security Store agents.
// KQL: sign-ins with failed MFA by user in the last 24 hours
SigninLogs
| where TimeGenerated > ago(24h)
| where ResultType == 500121
| summarize failures = count() by UserPrincipalName
| order by failures desc8-week study plan (about 2 hours a day)
| Week | Focus | Lab |
|---|---|---|
| 1 | Entra ID: PIM, Conditional Access, MFA and passwordless, app consent | Make a role eligible in PIM with approval; block legacy authentication |
| 2 | Key Vault, managed identities, Azure Policy, RBAC, locks | App reads a secret through managed identity; policy denies public storage |
| 3 | Storage and Azure SQL security; Defender for Storage and Databases | Private endpoint for SQL; auditing to Log Analytics |
| 4 | NSG/ASG, Virtual Network Manager, Firewall, VPN, Entra Private Access | Hub firewall with forced tunnelling; check effective rules in Network Watcher |
| 5 | VMs: Bastion, JIT, encryption, Arc, Defender for Servers, Machine Configuration | Onboard an on-premises or other-cloud VM through Arc |
| 6 | AKS, ACR, Container Apps, Functions, App Service, WAF, API Management | Defender for Containers findings on a test cluster |
| 7 | AI security: Purview DSPM, Entra Agent ID, Foundry guardrails, AI Gateway, Defender for AI | Put an AI gateway with token limits in front of a Foundry model |
| 8 | Defender CSPM, Sentinel, Security Copilot; full revision | Sentinel analytics rule plus a playbook that disables a user; book the exam |
Use a free or trial subscription and delete resources after each lab; Defender plans and Sentinel ingestion cost money if left running.
20 scenario questions with answers
These are original scenarios written for this guide, not exam questions.
1. Admins should hold Owner rights only when needed, with approval and a time limit. What do you use?
Privileged Identity Management with eligible assignments, approval and maximum activation time.
2. Sign-ins from outside India must require MFA, and legacy authentication must be blocked. How?
Conditional Access policies: one with a location condition requiring MFA, one blocking legacy authentication clients.
3. An app must read secrets without storing any credential. What do you configure?
A managed identity with the Key Vault Secrets User role (Key Vault RBAC).
4. Users keep granting risky third-party apps access to mail. What do you change?
User consent settings and the admin consent workflow, and review existing OAuth permission grants.
5. Developers must not create storage accounts that allow public blob access. How do you enforce it?
An Azure Policy with a Deny effect assigned at the management group or subscription.
6. Someone accidentally deleted a production resource group. What prevents a repeat?
A CanNotDelete resource lock, plus least-privilege RBAC.
7. An Azure SQL database must be reachable only from your VNet. What do you use?
A private endpoint, with public network access disabled.
8. Spokes must not override the central "deny RDP from the internet" rule. What enforces it?
Security admin rules in Azure Virtual Network Manager.
9. Remote employees need access to private web apps without a full VPN. What do you use?
Microsoft Entra Private Access.
10. Admins need RDP to VMs without public IPs. What do you deploy?
Azure Bastion (with JIT access where ports must be opened temporarily).
11. On-premises Linux servers must appear in Defender for Cloud with the same policies as Azure VMs. How?
Connect them with Azure Arc, then enable Defender for Servers and apply policies.
12. Container images must be scanned and runtime risks detected on AKS. What do you enable?
Defender for Containers.
13. A public web app needs protection against SQL injection and cross-site scripting. What do you add?
A Web Application Firewall on Application Gateway or Front Door.
14. Before rolling out Copilot, you must find sites where sensitive files are shared with everyone. What do you use?
Data oversharing assessments in Microsoft Purview DSPM (and SharePoint oversharing reports).
15. AI agents need their own identities with Conditional Access and access reviews. What feature?
Microsoft Entra Agent ID.
16. Several apps call a Foundry model; you need token limits, central keys and logging. What do you deploy?
An AI Gateway in Azure API Management in front of Foundry.
17. You want alerts for prompt injection and data-leak attempts against your AI services. What do you enable?
Defender for AI services in Defender for Cloud.
18. Linux firewalls send logs in CEF format to Sentinel. What do you configure?
Syslog/CEF collection through the Azure Monitor Agent with a data collection rule.
19. A high-severity Sentinel incident must automatically disable the user and post to Teams. How?
An automation rule that runs a playbook (Logic App).
20. Your company also runs workloads on AWS and Google Cloud. How do you see their posture in one place?
Connect the AWS and GCP environments to Microsoft Defender for Cloud.
After SC-500
- Read the cybersecurity engineer career path and AI for cloud security engineers.
- Add AI-103 to understand the AI apps you are securing.
- See live security and cloud jobs.
Cloud Soft Solutions in Ameerpet, Hyderabad teaches cloud security, AI security and Azure with hands-on labs. See the APEX AI, ML, Cloud and Cyber Security program and all courses.
📞 Call +91 96660 19191 · WhatsApp · Flat No. 513, 5th Floor, Nilagiri Block, Aditya Enclave, Ameerpet, Hyderabad
Frequently Asked Questions
Did SC-500 replace AZ-500?
Yes. AZ-500 retired on 31 August 2026. SC-500 leads to Microsoft Certified: Cloud and AI Security Engineer Associate.
How long is the SC-500 exam?
120 minutes. It is proctored and may include interactive components.
What is the passing score for SC-500?
700.
Which SC-500 skill area has the most weight?
Secure storage, databases, and networking, at 25–30%.
Is there a free Practice Assessment for SC-500?
Not yet. Microsoft says Practice Assessments usually appear within about 8 weeks of an exam leaving beta.
What is new in SC-500 compared with AZ-500?
Security for AI (Purview DSPM, Entra Agent ID, Foundry guardrails, AI Gateway, Defender for AI services), Entra Private Access, Azure Arc, deeper Sentinel and Microsoft Security Copilot.
