Free AZ-500: Microsoft Azure Security Technologies Exam Questions and Answers
This exam retired on 31 August 2026. No replacement exam was announced. The questions remain useful for the material it covered.
Microsoft Azure Security Technologies is exam AZ-500, part of Microsoft Certifications. Microsoft exam codes name the solution area rather than the level — AZ for Azure, DP for data, MS for Microsoft 365, PL for Power Platform, SC for security, AI for Azure AI — with one reliable rule: any exam numbered 900 or 901 is Fundamentals. Every technical exam is scored from 1 to 1000 with 700 to pass, a scaled score Microsoft notes is explicitly not 70% of the marks.
Looking for AZ-500 exam dumps or ExamTopics AZ-500 questions? These AZ-500 practice questions cover the same ground with verified answers and explanations, a downloadable AZ-500 PDF and a full AZ-500 practice test, kept current as Microsoft updates the exam.
Last updated: October 7, 2026
- Exam code
- AZ-500
- Provider
- Microsoft
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Official page
- Official Exam website
- Our test mode duration & pass mark
- 130 mins · 70%
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
You have an Azure subscription. You configure the subscription to use a different Azure Active Directory (Azure AD) tenant. What are two possible effects of the change? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Select 2 answers.
Correct answer: A, B
Explanation
Reference: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associ
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #2
You have an Azure subscription named Subscription1 that contains the resources shown in the following table. You have an Azure subscription named Subscription2 that contains the following resources: An Azure Sentinel workspace An Azure Event Grid instance You need to ingest the CEF messages from the NVAs to Azure Sentinel. What should you configure for each subscription? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Type your answer, then reveal.
Correct answer: Subscription1: An Azure Log Analytics agent on a Linux virtual machine; Subscription2: A new Azure Sentinel data connector
Explanation
CEF logs are collected by the Log Analytics agent on a Linux VM (syslog forwarder) in Subscription1, which forwards them to the Sentinel workspace. In Subscription2, enable the Common Event Format (CEF) data connector in Azure Sentinel.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #3
Lab Task Task 3 You need to ensure that a user named Danny-31330471 can sign in to any SQL database on a Microsoft SQL server named web31330471 by using SQL Server Management Studio (SSMS) and Azure AD credentials.
Type your answer, then reveal.
Correct answer: Set Danny-31330471 as the Azure AD admin of SQL server web31330471
Explanation
In the Azure portal open the SQL server web31330471, select Azure Active Directory (Microsoft Entra ID) under Settings, click Set admin, choose Danny-31330471 and save. As the server's Azure AD admin, Danny can sign in to every database on the server from SSMS with Azure AD authentication.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #4
You have an Azure web app named WebApp1. You upload a certificate to WebApp1. You need to make the certificate accessible to the app code of WebApp1. What should you do?
Correct answer: B
Explanation
Reference: https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #5
You have an Azure subscription that contains the storage accounts shown in the following table. You need to configure authorization access. Which authorization types can you use for each storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Type your answer, then reveal.
Correct answer: storage1: Shared Key, shared access signature (SAS), and Azure Active Directory (Azure AD); storage2: Shared Key and shared access signature (SAS); storage3: Shared Key and shared access signature (SAS) only
Explanation
Blob storage supports Shared Key, SAS and Azure AD authorization. Azure Files over SMB supports Shared Key and SAS (identity-based access uses AD DS, not listed). At the time of this question Table storage supported only Shared Key and SAS.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #6
You have an Azure Active Directory (Azure AD) tenant named contoso1812.onmicrosoft.com that contains the users shown in the following table. You create an Azure Information Protection label named Label1. The Protection settings for Label1 are configured as shown in the exhibit. (Click the Exhibit tab.) Label1 is applied to a file named File1. For each of the following statements, select Yes if the statement is true, Otherwise, select No. NOTE: Each correct selection is worth one point.



Decide Yes or No for each statement, then reveal.
Correct answer: Yes, Yes, No
Explanation
The Co-Author permission level includes Print, so User1 can print File1. AuthenticatedUsers have Viewer rights, so User3 can read File1 and the guest User4 can view but not print.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #7
You have an Azure subscription that contains the resources shown in the following table. User1 is a member of Group1. Group1 and User2 are assigned the Key Vault Contributor role for Vault1. On January 1, 2019, you create a secret in Vault1. The secret is configured as shown in the exhibit. (Click the Exhibit tab.) User2 is assigned an access policy to Vault1. The policy has the following configurations: Key Management Operations: Get, List, and Restore Cryptographic Operations: Decrypt and Unwrap Key Secret Management Operations: Get, List, and Restore Group1 is assigned an access to Vault1. The policy has the following configurations: Key Management Operations: Get and Recover Secret Management Operations: List, Backup, and Recover For each of the following statements, select Yes if the statement is true. Otherwise, select No.



Decide Yes or No for each statement, then reveal.
Correct answer: No, Yes, No
Explanation
The secret's activation date is 1 March 2019, so nobody can read it on 1 January 2019. User2's access policy includes the Get secret permission, so User2 can view it on 1 June 2019. Group1's policy lacks Get, so User1 cannot view the value.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #8
You have an Azure subscription that contains a web app named App1 and an Azure key vault named Vault1. You need to configure App1 to store and access the secrets in Vault1. How should you configure App1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Type your answer, then reveal.
Correct answer: Box 1: System-assigned managed identity; Box 2: Application settings tab
Explanation
Configure App1 to authenticate with a system-assigned managed identity, then add the Key Vault reference (@Microsoft.KeyVault(...)) on the Application settings tab of App1 configuration.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #9
You have multiple development teams that will create apps in Azure. You plan to create a standard development environment that will be deployed for each team. You need to recommend a solution that will enforce resource locks across the development environments and ensure that the locks are applied in a consistent manner. What should you include in the recommendation?
Correct answer: D
Explanation
Reference: https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #10
You have an Azure subscription that contains four Azure SQL managed instances. You need to evaluate the vulnerability of the managed instances to SQL injection attacks. What should you do first?
Correct answer: B
Explanation
Enabling Advanced Data Security on the managed instances turns on the built-in vulnerability assessment, which scans the databases for weaknesses such as SQL injection. Sentinel, a health check solution and ATP do not provide that assessment.
Continue with AZ-500: Microsoft Azure Security Technologies
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-500: Microsoft Azure Security Technologies, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Discussion
Explain your reasoning, not just the letterOther Microsoft certifications
- MS-101: Microsoft 365 Mobility and Security (opens in a new tab)
- MS-102: Microsoft 365 Administrator (beta) (opens in a new tab)
- MS-100: Microsoft 365 Identity and Services (opens in a new tab)
- PL-900: Microsoft Power Platform Fundamentals (opens in a new tab)
- AZ-305: Designing Microsoft Azure Infrastructure Solutions (opens in a new tab)
- AZ-400: Microsoft Azure DevOps Solutions (opens in a new tab)
- MS-900: Microsoft 365 Fundamentals (opens in a new tab)
- AZ-900: Microsoft Azure Fundamentals (opens in a new tab)
- 70-740: Installation, Storage, and Compute with Windows Server 2016 (opens in a new tab)
- MD-102: Endpoint Administrator (beta) (opens in a new tab)
- PL-300: Microsoft Power BI Data Analyst (opens in a new tab)
- MS-203: Microsoft 365 Messaging (opens in a new tab)
Reviews
Write a review★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit SharmaVerified buyer
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar NyströmVerified buyer
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah SmithVerified buyer
FAQ
Learn More: https://learn.microsoft.com/en-us/credentials/
- Q1: Is the AZ-500 exam still available?
- A: No. Microsoft retired exam AZ-500 and the Azure Security Engineer Associate certification on August 31, 2026, at 11:59 PM Central Standard Time. After that date the certification can no longer be earned or renewed.
- Q2: What replaced AZ-500?
- A: Microsoft replaced it with exam SC-500, which leads to the Microsoft Certified: Cloud and AI Security Engineer Associate certification. Microsoft said the SC-500 training and exam were expected in July 2026, and the certification is live as of October 2026.
- Q3: What was the passing score for AZ-500?
- A: A score of 700 or greater was required to pass the real exam.
- Q4: What did the AZ-500 exam cover and how was it weighted?
- A: The final skills outline, as of January 22, 2026, covered Secure identity and access (15-20%), Secure networking (20-25%), Secure compute, storage, and databases (20-25%), and Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel (30-35%).
- Q5: How long was the AZ-500 exam and what kinds of questions did it have?
- A: Microsoft gives associate role-based exams 100 minutes, or 120 minutes if the exam may include labs, and most exams have 40 to 60 questions. AZ-500 was proctored and could include interactive components.
- Q6: In which languages was AZ-500 offered?
- A: The exam was offered in English, Japanese, Chinese (Simplified), Chinese (Traditional), Korean, German, French, Spanish, Portuguese (Brazil), and Italian.
- Q7: What experience did Microsoft recommend for AZ-500?
- A: Microsoft recommended practical experience administering Azure and hybrid environments and strong familiarity with Microsoft Entra ID, as well as compute, network, and storage in Azure. There were no formal prerequisites.
- Q8: Can you still renew an Azure Security Engineer Associate certification?
- A: No. Renewal assessments for this certification were also retired on August 31, 2026. Certifications already earned stay on your Microsoft Learn transcript, but Microsoft has no conversion path to SC-500, which must be earned separately.
- Q9: What is the AZ-500: Microsoft Azure Security Technologies exam?
- A: AZ-500: Microsoft Azure Security Technologies is a Microsoft certification exam. Judging by the questions in our bank, it concentrates on azure, named, subscription, worth and tenant.
- Q10: What topics does the AZ-500: Microsoft Azure Security Technologies exam cover?
- A: Questions in our AZ-500: Microsoft Azure Security Technologies bank cluster around azure, named, subscription, worth, tenant, selection, user1 and directory. Working through the full set is the quickest way to find which of these you are weakest on.
- Q11: How should I prepare for AZ-500: Microsoft Azure Security Technologies?
- A: Work through the AZ-500: Microsoft Azure Security Technologies practice questions here, checking your answer on each one, then sit the practice test to rehearse the exam under timed conditions before the real thing.
- Q12: Are these real AZ-500: Microsoft Azure Security Technologies exam questions?
- A: They are drawn from officially released past questions and from community members who have sat AZ-500: Microsoft Azure Security Technologies. Answers are verified and updated weekly.
- Q13: Where do I register for the AZ-500: Microsoft Azure Security Technologies exam?
- A: Register through Microsoft directly at https://learn.microsoft.com/en-us/credentials/. Exampractice is not affiliated with Microsoft and does not administer the exam.
- Q14: Is there a free AZ-500: Microsoft Azure Security Technologies sample?
- A: Yes. Every AZ-500: Microsoft Azure Security Technologies page shows a free sample of real questions. Upgrading opens the full bank and the practice test.
- Q15: What are Microsoft Certification Exams?
- A: Microsoft Certification Exams validate your expertise in using and managing Microsoft’s technologies and solutions, including Azure, Office 365, Windows, and more. These certifications demonstrate your proficiency in deploying, configuring, and optimizing Microsoft products to support business operations and IT infrastructure.
- Q16: Why should I pursue Microsoft Certification?
- A: Microsoft Certification enhances your professional credibility, showcasing your skills and knowledge in Microsoft technologies. This can lead to better job opportunities, higher salaries, and career advancement in IT, cloud computing, software development, and related fields.
- Q17: What are the benefits of Microsoft Certification?
- A: Benefits include recognition as a certified Microsoft professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest Microsoft technologies and best practices.
- Q18: Who should take Microsoft Certification Exams?
- A: IT professionals, system administrators, developers, cloud engineers, data analysts, and anyone involved in managing and implementing Microsoft solutions should consider these certifications to validate their expertise and advance their careers.
- Q19: What types of Microsoft Certification Exams are available?
- A: Microsoft offers various certification paths, including:
- Q20: How do I prepare for Microsoft Certification Exams?
- A: Preparation can include official Microsoft training courses, study guides, practice exams, online tutorials, and hands-on experience with Microsoft products and solutions.
- Q21: Where can I take Microsoft Certification Exams?
- A: Microsoft Certification Exams can be taken online with remote proctoring or at authorized Pearson VUE testing centers worldwide, providing flexibility to fit your schedule and location.
- Q22: How do Microsoft Certifications impact my career?
- A: Microsoft Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in IT, cloud computing, software development, and other tech-related fields.
- Q23: Are there any prerequisites for Microsoft Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior experience with Microsoft products. Check the specific requirements for each certification path on the Microsoft Learn website.
- Q24: How often do I need to recertify for Microsoft Certifications?
- A: Microsoft Certifications typically require renewal every year or two, depending on the certification, to ensure that certified professionals stay updated with the latest technologies and industry practices.



