Azure Security Engineer Associate

Exam format

Microsoft logo

Azure Security Engineer Associate Exam Format

AZ-500

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Azure Security Engineer Associate certification validates your ability to implement security controls, protect identity and access, secure networking, compute, storage, and databases, and manage security operations with Microsoft Defender for Cloud and Microsoft Sentinel. This role-based certification focuses on real-world tasks such as configuring conditional access, managing secrets, detecting threats, and responding to incidents across Azure environments. The updated 2026 syllabus emphasizes modern identity scenarios, cloud-native security tools, and proactive threat hunting. Earning this credential demonstrates that you can translate security requirements into technical solutions and maintain a resilient Azure infrastructure.

55 questions
120 min
70% to pass
4 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions55
Time limit120 minutes (131s per question)
Passing score70% — 700 or greater (on a scale of 1 to 1,000)
Domains4
LevelAssociate
Question bank here55 questions
Published formatNot published by the provider; duration confirmed at registration (Microsoft's table lists 100 or 120 minutes depending on labs)
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Secure networking23%
  • Plan and implement network security groups and application security groups
  • Configure Azure Firewall, policies, and Azure Firewall Manager
  • Implement Azure DDoS Protection and Web Application Firewall
  • +3 more
13
Secure Identity and Access18%
  • Design and implement secure Microsoft Entra ID
  • Manage user authentication with MFA and passwordless methods
  • Implement conditional access policies and risk policies
  • +3 more
10
Secure compute, storage, and databases23%
  • Secure Azure Virtual Machines and manage secrets
  • Harden Azure Kubernetes Service and container workloads
  • Secure Azure App Service, Function Apps, and API Management
  • +3 more
13
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel36%
  • Implement and manage Microsoft Defender for Cloud plans
  • Evaluate security posture using secure score and compliance standards
  • Remediate security alerts and configure auto-provisioning
  • +3 more
19

The heaviest domain is Secure networking at 23%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: RETIRED on 2026-08-31: exam, certification and renewal assessments retired; replaced by Cloud and AI Security Engineer Associate (SC-500), available since 2026-07-21. The planned blog (2027-02-24) MUST cover the SC-500 transition. Exam URL 301-redirects to the certification page; price no longer purchasable. Official exam page

More about the Azure Security Engineer Associate exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Azure Security Engineer Associate exam.