Microsoft Azure logoAZ-500

Microsoft Azure Security Engineer is retired

Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.

Exam code
AZ-500
Cost
$165USD
Questions
40 to 60
Duration
120minutes
Passing score
700(scale 1000)
Level
Advanced
Valid for
1year
Study guide
How to prepare
Sources
59official pages
Format
Multiple choice, drag-and-drop, hot area, and case studies

Azure Security Engineer practice exams

2 full-length forms, 40 questions each, apportioned to the published domain weightings.

AZ-500Microsoft Azure Security Engineer

A team publishes checks through a custom security initiative and expects the secure score to rise once those findings are remediated. Does it?

The answer

No. Only built-in MCSB recommendations affect it

Checked against

Only built-in recommendations from the MCSB affect the secure score.

learn.microsoft.com, checked August 2026
Answer five like it, free

What the exam tests

Exam domains and official weightings

The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.

4domains
  • Manage identity and access28%
    24 verified
  • Secure networking22%
    20 verified
  • Secure compute, storage, and databases22%
    20 verified
  • Manage security operations28%
    24 verified

Where to focus: Identity and security operations are 56 percent together. Build a lab tenant and configure conditional access and Defender for Cloud yourself; the exam asks what happens, not what the feature is called.

What the exam actually asks you to do

Multiple choice and multiple response, plus drag-and-drop ordering, hot area items where you click a region of a screenshot, and case studies that hold one scenario across several linked questions.

Item formats

  • Multiple choice
  • Multiple response
  • Drag and drop
  • Hot area
  • Case study

The highlighted formats are the ones you cannot answer from memory alone. Microsoft Learn, exam duration and question types

Between sittings

The same bank the numbered forms are assembled from.

  • Quick Practice

    Open now

    All 88 verified questions, untimed, with the explanation after each answer.

  • Domain Drill

    Open now

    Every domain on its own, for the area a score report says is weakest.

  • Review Missed

    Fills as you go

    Re-asks the questions you got wrong. Nothing to review until you miss something.

Open Azure Security Engineer practice

Where Azure Security Engineer fits

Microsoft Azure’s free resources

Study from the source. Everything below is published by the vendor, free to read, and is what our own questions are written from:

Official Azure Security Engineer exam page & objectives ↗

Keep reading

Cheat sheets

Printable reference tables, free.

Every guide and cost breakdown, by vendor

Frequently asked questions

Do I need AZ-104 before AZ-500?

Not formally, but AZ-500 assumes you can already build and operate the things it asks you to secure. If virtual networks, managed identities, and RBAC are unfamiliar, AZ-500 will feel like two exams at once.

What is the hardest part of AZ-500?

Most candidates report the networking domain, because it demands exact behaviour: which NSG rule wins, what a service endpoint does that a private endpoint does not, and where a firewall rule applies. Guessing does not survive contact with those questions.

How much of AZ-500 is Entra ID?

Identity and access is 28% on its own, and identity turns up again inside the compute and operations domains through managed identities and Key Vault access. Study it first and it pays back twice.

Is AZ-500 still worth taking?

For anyone running security in an Azure estate, yes. It is the credential that maps most directly to the day job, and the free annual renewal makes holding it cheap once you have it.