MICROSOFTRetiringMicrosoft Certified:Azure Security Engineer Associate
The Microsoft Certified: Azure Security Engineer Associate certification validates your ability to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities. It is designed for security engineers who manage security for Azure resources, ensuring compliance and protection across cloud environments.
409 practice questions · Updated 2023-10-01
4Domains
12Objectives
96Concepts
409Questions
AZ-500 Curriculum
Every domain, objective, and concept the AZ-500 exam measures.
- Azure Built-in Role Assignments
- Custom Role Creation
- Custom Role Management
- Privileged Identity Management Settings
- Privileged Identity Management Assignments
- Multi-Factor Authentication Implementation
- Conditional Access Policy Creation
- Conditional Access Policy Management
- Enterprise Application Access Management
- App Registration Management
- Permission Scope Configuration
- Permission Consent Management
- Service Principal Management
- Managed Identities Management
- Network Security Groups (NSGs)
- Application Security Groups (ASGs)
- Azure Virtual Network Manager
- User-Defined Routes (UDRs)
- Virtual Network Peering
- VPN Gateway
- Virtual WAN
- Secured VPN Connectivity
- ExpressRoute Encryption
- Azure Firewall Configuration
- Network Watcher Monitoring
- Virtual Network Service Endpoints
- Private Endpoints
- Private Link Services
- Azure App Service Network Integration
- App Service Environment Network Security
- Azure SQL Managed Instance Network Security
- TLS Planning for Azure Applications
- Azure Firewall Implementation
- Azure Application Gateway Configuration
- Azure Front Door Setup
- Web Application Firewall Deployment
- Azure DDoS Protection Standard Recommendation
- Azure Bastion Setup
- Just-in-Time VM Access
- AKS Network Isolation
- AKS Security Monitoring
- AKS Authentication Configuration
- ACI Security Monitoring
- ACA Security Monitoring
- ACR Access Management
- Disk Encryption Configuration
- Azure API Management Security
- Storage Account Access Control
- Manage Access Keys
- Azure Files Access Methods
- Azure Blob Storage Access Methods
- Data Security Threat Protection
- Bring Your Own Key (BYOK)
- Double Encryption
- Microsoft Entra Database Authentication
- Database Auditing Configuration
- Dynamic Data Masking Planning
- Transparent Data Encryption Implementation
- Always Encrypted Recommendation
- Azure Policy Creation
- Azure Policy Assignment
- Azure Policy Interpretation
- Azure Policy Initiatives
- Key Vault Network Configuration
- Key Vault Access Policies
- Azure RBAC for Key Vault
- Manage Key Vault Certificates
- Manage Key Vault Secrets
- Manage Key Vault Keys
- Key Rotation Configuration
- Backup Key Vault Items
- Recovery of Key Vault Items
- Backup Security Controls
- Asset Management Security Controls
- Secure Score Analysis
- Security Risk Remediation
- Inventory Management
- Compliance Assessment
- Compliance Standards Management
- Custom Standards Addition
- Hybrid Cloud Connection
- Multi-Cloud Integration
- External Attack Surface Management
- Enable Cloud Workload Protection Plans
- Configure Defender for Servers
- Configure Defender for Databases
- Configure Defender for Storage
- Agentless Scanning for VMs
- Defender Vulnerability Management for VMs
- Connect DevOps Security Tools
- SecurityAlertManagement
- WorkflowAutomationConfiguration
- NetworkSecurityMonitoring
- DataConnectorConfiguration
- AnalyticsRulesEnablement
- SentinelAutomationConfiguration
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for AZ-500, so none is invented.