Azure / Associate / SC-500
Cloud and AI Security Engineer Associate
Secure cloud identities, data, infrastructure and AI agents, then collect evidence and automate a controlled response.
SC-500 is the current Cloud and AI Security Engineer path. AZ-500 retired in August 2026; the new exam includes substantial AI and agent-security content.
THE REVISION PATH
Your topics, in order.
Read. Recall. Explain the alternative.
Microsoft Entra ID and Azure RBAC
Entra identifies the principal; Azure RBAC authorises an action at a scope.
Subscriptions, Policy and Cost Governance
RBAC decides who may act; Policy evaluates what configuration is acceptable.
Storage Access, Encryption and Redundancy
Network reachability, authorisation and encryption are separate storage controls.
Virtual Machines, Disks and Scale Sets
Size for the bottleneck, place for failure and distinguish stopped from deallocated.
App Service and Container Platforms
Separate image storage, execution, application configuration and the hosting plan.
Virtual Networks, Routes and Secure Access
Check the effective route and the effective rule in both directions.
Azure Monitor, Logs and Alerts
Metrics quantify, logs explain, traces connect and alerts start a response.
Azure Backup and Site Recovery
Backup restores a point; replication supports failover; neither is proven until tested.
Defender, Key Vault and Preventive Controls
Posture finds exposure; workload protection detects threats; prevention still needs correctly scoped policy.
AI Data Exposure and Agent Security
An agent can combine every permission it receives; constrain its identity, context and tools.
Sentinel, Incident Automation and Security Copilot
Collect the right evidence, correlate it, then authorise every response action.
SQL Security and Compliance Controls
Authentication identifies; permissions authorise; encryption and masking protect different exposures.
How this guide is organised
Original revision notes arranged around practical decisions. The linked official objectives define the mapped scope; primary documentation supports the explanations. Read each topic, answer without looking, then explain why another option would fail.
- Official exam guide ↗ Scope authority
Revision material supports preparation; it does not guarantee every possible exam question. Check the exam version and official objectives before booking.