Microsoft Azure Security Engineer practice questions
Original questions written from the published exam objectives, never recalled exam content, with an explanation that teaches the concept behind every answer. Why that matters.
- Exam code
- AZ-500
- Cost
- $165 USD
- Questions
- 40 to 60
- Duration
- 120 minutes
- Passing score
- 700 (scale 1000)
- Format
- Multiple choice, drag-and-drop, hot area, and case studies
The AZ-500 exam costs $165. Fail it and the retake is another $165. Practicing until you are ready is the cheapest part of this. Full cost breakdown.
Exam domains and official weightings
From the official Microsoft Learn study guides. Put your study time where the weight is.
- Manage identity and access28%
- Secure networking22%
- Secure compute, storage, and databases22%
- Manage security operations28%
- Manage identity and access28%
- Secure networking22%
- Secure compute, storage, and databases22%
- Manage security operations28%
Where to focus: Identity and security operations are 56 percent together. Build a lab tenant and configure conditional access and Defender for Cloud yourself; the exam asks what happens, not what the feature is called.
Try 5 free sample questions
No account needed. Every question includes our three-tier explanation: the concept, why the answer follows, and why each wrong option is wrong.
Sample question 1 of 5
An Azure virtual machine needs to read secrets from Key Vault. The team currently stores a service principal's client secret in an environment variable on the VM. What replaces that with no stored credential at all?
Sample question 2 of 5
A storage account must be reachable from one virtual network and from nowhere else, including other subscriptions that resolve its public name. Which approach meets that requirement?
Sample question 3 of 5
Leadership wants one number that shows whether the Azure estate's security posture is improving month over month. Which Defender for Cloud feature provides it?
Sample question 4 of 5
A regulator requires that your organisation, not the cloud provider, controls the key that encrypts data at rest, and can revoke it. Which configuration satisfies that?
Sample question 5 of 5
A Conditional Access policy requiring multifactor authentication for all users is in report-only mode and shows it would have applied to 4,000 sign-ins this week. What happens if you switch it to On?
Full AZ-500 question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
What the exam actually asks you to do
Multiple choice and multiple response, plus drag-and-drop ordering, hot area items where you click a region of a screenshot, and case studies that hold one scenario across several linked questions.
- Multiple choice
- Multiple response
- Drag and drop
- Hot area
- Case study
The highlighted formats are the ones you cannot answer from memory alone. Microsoft Learn, exam duration and question types ↗
An honest study plan
1. Read the official objectives first
Download the official objectives from Microsoft Azure and skim every line. The exam can only test what’s listed there, it’s the contract.
2. Weight your study toward Manage identity and access and Manage security operations
Together the top two domains are 56% of the exam. Practice them until your accuracy is consistently above 80%.
3. Drill weak domains, then take a mock exam
Use Domain Drill on your weakest areas, then a full timed mock at real length (40 to 60 questions, 120 minutes). Book the real exam when you’re consistently passing mocks, not before.
Official free resources
Study from the source. These are Microsoft Azure’s own materials:
Official AZ-500 exam page & objectives ↗Where AZ-500 fits
Related certifications
Microsoft Azure Administrator
5 domains
Try free sample questionsMicrosoft Azure Fundamentals
3 domains
Try free sample questionsMicrosoft Security, Compliance, and Identity Fundamentals
4 domains
Try free sample questionsMicrosoft Identity and Access Administrator
4 domains
Try free sample questionsFrequently asked questions
Do I need AZ-104 before AZ-500?
Not formally, but AZ-500 assumes you can already build and operate the things it asks you to secure. If virtual networks, managed identities, and RBAC are unfamiliar, AZ-500 will feel like two exams at once.
What is the hardest part of AZ-500?
Most candidates report the networking domain, because it demands exact behaviour: which NSG rule wins, what a service endpoint does that a private endpoint does not, and where a firewall rule applies. Guessing does not survive contact with those questions.
How much of AZ-500 is Entra ID?
Identity and access is 28% on its own, and identity turns up again inside the compute and operations domains through managed identities and Key Vault access. Study it first and it pays back twice.
Is AZ-500 still worth taking?
For anyone running security in an Azure estate, yes. It is the credential that maps most directly to the day job, and the free annual renewal makes holding it cheap once you have it.
Ready to practice for AZ-500?
Play the free samples now. The full question bank is in progress, and you can join the waitlist on any sample question.
Payment is not switched on yet. Everything free stays free either way, and explanations are never behind a payment.
$29 buys the AZ-500 bank for good, including everything added to it later. Right now that is 5 sample questions, so buy it to back the work rather than for what is there today. Or go Pro for every certification.