Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Microsoft
Exam Format
100 min
40-60
700
Associate
Registration
$165 USD
Pearson VUE or online proctoring
Validity
1 year
Pass the renewal assessment on Microsoft Learn; Pass a higher-level exam in the same role; Pass the current version of the exam
AZ-500 Exam Topics and Domains
AZ-500 is organized into 4 weighted domains. Expect to work with Microsoft Defender for Cloud, Azure Key Vault, Azure SQL Database, Azure Storage, and more.
1
Secure identity and access
17.5%
Manage security controls for identity and access
Manage Azure built-in role assignmentsManage custom rolesImplement Microsoft Entra Permissions ManagementPlan and manage Azure resources in Microsoft Entra PIMImplement MFA for Azure resourcesImplement Conditional Access policies
- Configure and manage role-based access control
- Implement just-in-time privileged access
- Configure multi-factor authentication and conditional access
Manage Microsoft Entra application access
Manage enterprise applicationsManage app registrationsConfigure app registration permission scopesManage service principals and managed identities
- Configure and manage application access in Microsoft Entra ID
- Implement service principals and managed identities
- Manage OAuth permission grants and consent
2
Secure networking
22.5%
Plan and implement security for virtual networks
Network Security Groups and Application Security GroupsAzure Virtual Network ManagerUser-defined routesVNet peering and VPN gatewaysVirtual WAN and secured virtual hubExpressRoute encryptionNetwork Watcher monitoring
- Design and implement network segmentation strategies
- Configure network security controls
- Monitor and troubleshoot network security
Plan and implement security for private access
Service Endpoints and Private EndpointsPrivate Link servicesApp Service and Functions networkingApp Service Environment securitySQL Managed Instance network security
- Implement private connectivity to Azure services
- Configure network isolation for PaaS services
- Design secure network architectures for applications
Plan and implement security for public access
TLS implementationAzure Firewall and Firewall ManagerAzure Application GatewayAzure Front Door and CDNWeb Application FirewallDDoS Protection
- Implement edge security services
- Configure Web Application Firewall policies
- Design DDoS protection strategies
3
Secure compute, storage, and databases
22.5%
Plan and implement advanced security for compute
Remote access to VMsAzure Kubernetes Service securityContainer securityAzure Container RegistryDisk encryptionAPI Management security
- Secure virtual machine access
- Implement container and Kubernetes security
- Configure disk and data encryption
Plan and implement security for storage
Storage account access controlStorage account key managementAzure Files accessAzure Blob Storage accessData protection featuresStorage encryption
- Configure storage account security
- Implement data protection and encryption
- Manage storage access methods
Plan and implement security for Azure SQL
Microsoft Entra authenticationDatabase auditingDynamic data maskingTransparent Data EncryptionAlways Encrypted
- Implement database authentication and authorization
- Configure database encryption
- Implement data protection features
4
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
32.5%
Implement and manage enforcement of cloud governance policies
Azure PolicyAzure Key Vault configurationKey Vault access controlKey Vault object managementKey rotationBackup and recoverySecurity controls for backups and assets
- Implement governance using Azure Policy
- Configure and manage Key Vault security
- Implement backup and recovery security
Manage security posture using Microsoft Defender for Cloud
Secure Score and InventoryCompliance assessmentCustom standardsMulti-cloud connectivityExternal Attack Surface Management
- Improve security posture using Secure Score
- Manage regulatory compliance
- Implement multi-cloud security management
Configure and manage threat protection
Workload protection servicesDefender for ServersDefender for Databases and StorageVulnerability ManagementDevOps Security
- Enable and configure Defender plans
- Implement vulnerability management
- Integrate DevOps security
Configure and manage security monitoring and automation
Security alerts managementWorkflow automationAzure Monitor integrationMicrosoft Sentinel data connectorsSentinel analytics rulesSentinel automation
- Configure security monitoring solutions
- Implement automated response workflows
- Manage security incidents and alerts
How do I earn this certification?
It sits in the Security track.
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for AZ-500 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Announcement date: 2024-11-25
Updates
- Microsoft Entra Permissions Management
- Microsoft Defender for Cloud DevOps Security
- Data Collection Rules (DCRs)
Who should take this exam?
This exam is typically taken by Security Engineers implementing Azure security and IT Professionals managing hybrid environments.
- At least 1 year of hands-on experience securing Azure workloads
- Experience with Azure administration
- Strong understanding of Microsoft Entra ID
- Familiarity with compute, network, and storage in Azure
- Understanding of scripting and automation