Microsoft SC-500

SC-500 is the exam for the Microsoft Certified: Cloud and AI Security Engineer Associate certification. It replaces AZ-500, which Microsoft retired on 31 August 2026. If you were part way through AZ-500 study when it closed, this is where that work goes now.

The full exam title is Implementing End-to-End Security Controls for Cloud and AI Workloads. The second half of that name is the real change. AZ-500 was an Azure infrastructure security exam. SC-500 keeps that ground and adds securing AI workloads as a graded part of the syllabus.

What Is SC-500?

SC-500 sits at associate level and targets the security engineer who implements controls rather than designs the strategy. You’re expected to have practical Azure and hybrid administration experience, strong familiarity with Microsoft Entra ID, and some Microsoft 365 administration.

Microsoft hasn’t published a transition path from AZ-500. Holding the old certification doesn’t shorten this one, so treat SC-500 as a separate certification you sit from scratch. That’s worth knowing before you assume a renewal will cover it.

What Does the Exam Cover?

Four areas, each given as a range rather than a fixed weight:

Secure storage, databases, and networking (25 to 30%): The heaviest area. Storage account security and firewall rules, Azure SQL platform security and auditing, network security groups, Virtual Network Manager, private endpoints and Private Link, Azure Firewall, and VPN security. If you came from AZ-500 this will feel familiar.

Manage identity, access, and governance (20 to 25%): Entra ID access, Privileged Identity Management, conditional access, MFA and passwordless, managed identities, and Key Vault for secrets and keys. Governance sits here too: Azure Policy, regulatory compliance evaluation in Defender for Cloud, RBAC, and finding overprivileged assignments.

Secure compute (20 to 25%): This is where the AI content lives, and it’s the part with no AZ-500 equivalent. Topics include identifying data overexposure in SharePoint, spotting Copilot and AI app risks with Purview DSPM, and real-time protection for Copilot Studio agents. They also include conditional access for Entra Agent ID, blast radius analysis in Defender XDR, AI Gateway in API Management, Defender for AI Service, and guardrails in Foundry. The rest of the area is the familiar VM, container and app service material.

Manage and monitor security posture (20 to 25%): This area covers Defender CSPM, workload protection plans, connecting AWS and GCP to Defender for Cloud, and External Attack Surface Management. It also has a substantial Microsoft Sentinel section covering workspaces, data connectors, CEF and syslog collection, automation rules and playbooks. Microsoft Security Copilot configuration is graded here as well.

How SC-500 Differs From AZ-500

Most of the Azure infrastructure material carried over. Identity, networking, storage, compute and Defender for Cloud are all still here. That’s why AZ-500 study notes are still worth keeping.

What’s new is a full block of AI security: agent identity, Copilot risk, AI gateway configuration and guardrails. That reflects a real shift in the role. Securing an Azure tenant now includes securing the AI agents inside it. Those agents have identities, permissions and a blast radius of their own.

The practical consequence for study: budget extra time for the AI section even if you were comfortable with AZ-500. It’s the newest material and it changes quickly. There’s also less third-party content on it than on the infrastructure topics.

Who Should Take SC-500?

It fits Azure security engineers, cloud engineers who own security controls, and anyone who was working toward AZ-500 when it retired.

It’s the wrong exam if you want the analyst path. SC-200 covers threat detection and response and is a better fit for SOC work. If identity is your focus rather than infrastructure, SC-300 targets that directly. And if you’re new to Microsoft security entirely, SC-900 is the fundamentals exam to sit first.

One caveat: SC-500 is heavily Microsoft-specific. It proves you can secure a Microsoft estate, not that you understand cloud security as a discipline. If you want the portable version of that knowledge, CCSP is vendor-neutral and travels better between employers.

Exam Details

Microsoft prices exams by the country where you sit them. Check the price for your region when you schedule through Pearson VUE, rather than relying on a number quoted elsewhere.

How to Prepare

Work from the official SC-500 study guide. The skills measured list is granular, naming individual features rather than broad topics, so it doubles as a checklist you can tick through.

Get a tenant and build the controls. Conditional access, PIM, Key Vault access policies, private endpoints and Defender for Cloud plans all behave differently when you configure them yourself. The exam asks about behaviour, not definitions.

For the AI section, hands-on practice matters more than reading. The material is recent, and much of what’s written about it online is speculation rather than documentation. Entra Agent ID, Purview DSPM for AI, and Defender for AI Service are the specific items to get in front of.

Microsoft notes that the practice assessment for this exam wasn’t available at launch. It says these usually appear within about eight weeks of an exam going generally available. Check whether one exists before you plan around it.

What Comes After SC-500?

SC-100, the Cybersecurity Architect certification, is the expert-level step above this. It moves from implementing controls to designing the strategy behind them.

Sideways moves make sense too. SC-200 adds the detection and response half of the picture. Pairing the two is common on smaller teams where the same person does both jobs. For a vendor-neutral credential that carries across employers and cloud platforms, CCSP or CISSP is the usual next target.

Daniel Griggs

Retired Army Chief Warrant Officer. Twenty years in cyber ops. Now in government consulting.