🎯 Goal: Earn the Microsoft Certified: Azure Security Engineer Associate badge 📅 Notes Version: 2026 🌐 Published site: 📘 AZ-500 Study Notes ✍️ Author: Marco Grimaldi
| Detail | Info |
|---|---|
| 🏅 Certification | Microsoft Certified: Azure Security Engineer Associate |
| 📝 Passing Score | 700 / 1000 |
| 💶 Exam Price | ~€126 EUR (varies by region; VAT may apply) |
| ⏱️ Duration | ~100 minutes |
| ❓ Question Types | MCQ, multi-select, drag-and-drop, case studies |
| 🔁 Renewal | Annual via free online assessment on Microsoft Learn |
pie title AZ-500 Exam Domain Weights
"Secure Identity & Access (15–20%)" : 20
"Secure Networking (20–25%)" : 25
"Secure Compute, Storage & Databases (20–25%)" : 25
"Defender for Cloud & Sentinel (30–35%)" : 30
| # | Domain | Official Weight | Key Services |
|---|---|---|---|
| 1 | Secure Identity & Access | 15–20% | Entra ID, PIM, MFA, Conditional Access, Managed Identities |
| 2 | Secure Networking | 20–25% | NSG, ASG, Firewall, WAF, Private Endpoint, DDoS |
| 3 | Secure Compute, Storage & Databases | 20–25% | ADE, AKS, ACR, TDE, Key Vault, SQL Auditing |
| 4 | Defender for Cloud & Microsoft Sentinel | 30–35% | Defender plans, Secure Score, SIEM, SOAR, Automation |
🔑 Domain 4 = heaviest domain — allocate ≥35% of total study time here.
flowchart LR
AZ900["☁️ AZ-900\nAzure Fundamentals\n(Recommended)"]
SC900["🪪 SC-900\nSecurity, Compliance, and Identity Fundamentals\n(Recommended)"]
AZ500["🔐 AZ-500\nAzure Security\nTechnologies\n(This Exam)"]
BADGE["🏅 Azure Security\nEngineer Associate"]
AZ900 -->|Foundation| AZ500
SC900 -->|Foundation| AZ500
AZ500 -->|"Prerequisite\n(must be active)"| SC100
SC100 --> BADGE["🏅 Microsoft Cybersecurity Architect"]
az-500-study-notes/
├── README.md ← 📍 You are here
├── index.md ← GitHub Pages home
├── 00-azure-security-fundamentals.md ← Core security concepts & Zero Trust
├── 01-identity-access.md ← Domain 1: Identity & Access (15–20%)
├── 02-secure-networking.md ← Domain 2: Secure Networking (20–25%)
├── 03-compute-storage-databases.md ← Domain 3: Compute/Storage/DB (20–25%)
├── 04-defender-sentinel.md ← Domain 4: Defender + Sentinel (30–35%)
└── 05-quick-reference-cheatsheet.md ← Last-minute review & exam traps
| Resource | Link |
|---|---|
| 📄 Official Exam Page | AZ-500 Exam |
| 📋 Study Guide | Official Study Guide |
| 🧪 Free Practice Assessment | Practice Assessment |
| 🎬 Exam Readiness Videos | Exam Readiness Zone |
| 🔐 Microsoft Defender for Cloud | Defender Docs |
| 🗡️ Microsoft Sentinel | Sentinel Docs |
| 🏛️ Azure Security Benchmark | MCSB |
- 🎯 The exam tests "why this control?" — think in threat models and defence-in-depth layers
- 🔄 Understand Zero Trust principles — verify explicitly, least privilege, assume breach
- 🔑 Know Key Vault tiers (Standard vs Premium/HSM) and when to use each
- 🛡️ Defender for Cloud Secure Score is heavily tested — know how to interpret & improve it
- 📊 Memorise RBAC built-in roles vs custom roles, and when each is appropriate
- 🌐 Know all Private Endpoint vs Service Endpoint trade-offs — scenario questions test these
- 🔍 Understand Microsoft Sentinel analytics rule types (Scheduled, NRT, Fusion, etc.)
- ⚡ PIM — know the difference between eligible, active, and permanent assignments
These notes are hosted on GitHub Pages and published as a searchable website on this URL:
The site includes full-text search, Mermaid diagram rendering, and mobile-friendly navigation for on-the-go review.
These notes are designed to be a structured, exam-focused summary of the most important concepts and services baseds on the official Microsoft AZ-500 Study Guide and its criteria.
Additional study notes maintained by me are also available for those pursuing Microsoft and Azure certifications at the following Landing Page:
Maintained by Marco Grimaldi — Cloud Consultant, Language Trainer & Lifelong Learner.
Find more certification guides, study tips, and tech content at 🏠 marcogrimaldi29.com
The site is continuously updated and based on my personal study notes and experiences. If you have any feedback, suggestions, or corrections, feel free to reach out!
This site uses Umami for privacy-friendly analytics.
Azure security services change fast, so if something here is wrong or out of date, please report an issue.
If these notes helped you prepare for AZ-500, there are a couple of ways to show it: ⭐ star this repo on GitHub so other candidates can find it, or 🤝 connect with me on LinkedIn.
The Just the Docs theme is used for a clean documentation-style layout. Licensed under MIT.
Claude Sonnet 4.6 was used for initial content generation; all final edits, fact-checking, and formatting by the author.
Not affiliated with or endorsed by Microsoft. Always verify against the latest Microsoft documentation.