SC-500 practice examsFinished
Microsoft Certified: Cloud and AI Security Engineer Associate
Implement end-to-end security controls for cloud and AI workloads. Covers identity, access and governance, storage, database and network security, compute and AI workload security, and security posture management with Microsoft Defender for Cloud, Microsoft Sentinel, and Security Copilot. Successor to the retired AZ-500.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Manage identity, access, and governance | 20-25% |
| Secure storage, databases, and networking | 25-30% |
| Secure compute | 20-25% |
| Manage and monitor security posture | 20-25% |
Two sample questions
1. You must ensure that inbound traffic to a public-facing web app is inspected for exploits before reaching the backend. Where should the Web Application Firewall be placed?
- On each backend virtual machine as a local host agent
- Inside the database engine as a server security policy
- On Application Gateway or Front Door in front of the backend — correct
- On the private endpoint used by the backend address pool
Why: The WAF runs on Application Gateway or Front Door in front of the backend so inbound HTTP traffic is inspected before reaching the application servers.
2. Which standard does Defender for Cloud apply by default to measure an environment and feed the secure score?
- ISO/IEC 27001 Annex A controls
- The CIS Azure Foundations Benchmark
- NIST SP 800-53 revision 5
- The Microsoft Cloud Security Benchmark — correct
Why: The Microsoft Cloud Security Benchmark is applied automatically and its recommendations drive the secure score. The others can be added to the regulatory compliance dashboard.
The real SC-500 exam
| Length | 120 minutes |
|---|---|
| Questions | Not published by Microsoft (typically 40-60) |
| Pass mark | 700/1000 |
| Price | Varies by country or region |
| Recommended before you sit it | None enforced. Recommended: practical experience administering Azure and hybrid environments including compute, network, and storage, strong familiarity with Microsoft Entra ID, and familiarity with Microsoft 365 administration. |
| Valid for | 1 year, renewable free of charge through a Microsoft Learn renewal assessment |
Exam facts as published by Microsoft; always check the vendor’s page before you book.
Study SC-500 with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.