Microsoft Azure Security Engineer Associate

The Microsoft Azure Security Engineer Associate (AZ-500) validates the ability to implement security controls, maintain the security posture of Azure environments, and manage identity protection, network security, and data protection in Azure. It is the primary Azure security certification at the Associate level.

The exam covers four domains: Manage Identity and Access (25–30%), Secure Networking (20–25%), Secure Compute, Storage, and Databases (20–25%), and Manage Security Operations (25–30%). Core services include Microsoft Entra ID (identity protection, PIM, Conditional Access), Azure Key Vault, Microsoft Defender for Cloud, Microsoft Sentinel, Azure Firewall, DDoS Protection, NSGs, Application Gateway with WAF, and Azure Policy for compliance.

Microsoft has announced the AZ-500 will retire on August 31, 2026. Azure security skills are expected to be consolidated into updated certifications. For a durable Azure security credential, candidates may also consider SC-200 (Security Operations Analyst) or SC-300 (Identity and Access Administrator), which are active certifications addressing specific security domains.

Azure security engineers, cloud security architects, and IT security professionals responsible for securing Azure environments.

Prerequisites: AZ-900 and AZ-104 recommended. Experience with security operations, identity management, and network security in Azure.