Microsoft SC-500 Certification Preparation: Cloud and AI Security Engineer (AZ-500 successor)

SC-500 replaces AZ-500, which retired on 31 August 2026, and extends Azure security to AI workloads. Over four days you secure identities, secrets, storage, databases, networking and compute, then manage posture with Defender for Cloud, Sentinel and Security Copilot. Every block ends with exam-style questions so you can track your progress.

The essentials

Objectives

Program

  1. Identity, access and governance (20–25%)
    • Secure access with Entra ID
    • Secrets and keys in Key Vault
    • Governance and regulatory compliance
  2. Storage, databases and networking (25–30%)
    • Storage account security
    • Database security
    • Azure network service security
  3. Compute security (20–25%)
    • Security for AI solutions
    • Servers and virtual machines
    • Application platform services
  4. Posture management and monitoring (20–25%)
    • Posture with Defender for Cloud
    • Activity and event collection in Sentinel
    • Implementing Security Copilot

Prerequisites

Target audience

The exam

The SC-500 exam lasts 120 minutes, may include interactive components and requires a score of 700. It is out of beta and you take it through Pearson VUE at a test centre or online with a remote proctor. It is currently offered in English only; you can request an extra 30 minutes when the exam is not available in your preferred language. The Associate certification is valid for one year, renews for free online and is one of the accepted prerequisites for the SC-100 Expert certification.

Preparation tips

Frequently asked questions (FAQ)

Is AZ-500 still available?

No. The Azure Security Engineer Associate certification (AZ-500) retired on 31 August 2026 and can no longer be earned or renewed. SC-500 is the path to follow for Azure security.

What changes compared with AZ-500?

The Azure core stays (identity, Key Vault, networking, storage, compute), but SC-500 adds security for AI workloads and Security Copilot. The domains are reorganised around identity, data, compute and posture, so revision plans built for AZ-500 need rework.

Can I take the exam in French?

Not yet: it is only available in English, and you can ask for 30 extra minutes. The course itself can be delivered in French or English, with English terminology practised throughout.

Do I need AZ-104 first?

It is not required, but solid hands-on Azure administration experience is expected, and AZ-104 is a common way to build it before moving on to security.

Does SC-500 lead to SC-100?

Yes, it is one of the Associate certifications accepted for Cybersecurity Architect Expert. It also pairs well with SC-200 for teams that handle both protection and detection.

Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.

Securevalley is not a Microsoft training partner. Microsoft, Azure, Microsoft Entra, Microsoft Defender, Microsoft Sentinel and Microsoft Security Copilot are trademarks of Microsoft.

Related trainings