SC-500: Cloud and AI Security Engineer Associate

Pick how to study

• Try 10 free SC-500 questions
• SC-500 mock exam: timed, you pick the length
• SC-500 flashcards: spaced repetition
• SC-500 decision sheets: look-alike services, settled

The SC-500 exam

• Questions: 307
• Exam time: 120 min

What SC-500 covers

Every question and flashcard is mapped to the SC-500: Cloud and AI Security Engineer Associate skills outline so you only revise what is on the exam.

• Manage identity, access, and governance
• Secure storage, databases, and networking
• Secure compute
• Manage and monitor security posture

Why earn the SC-500 certification in 2026

SC-500 is Microsoft's associate-level certification for cloud and AI security engineers, earning Microsoft Certified: Cloud and AI Security Engineer Associate. Microsoft expects candidates to have practical experience administering Azure and hybrid environments, strong familiarity with Microsoft Entra ID, and familiarity with Microsoft 365 administration. There is no prerequisite certification. The exam covers identity, access and governance, securing storage, databases and networking, securing compute, and managing and monitoring security posture.

Who should sit this exam

Security engineers securing Azure, hybrid and multicloud estates, cloud engineers taking on security responsibilities, and teams deploying AI workloads that need protecting.

Exam tips

• Know Microsoft Defender for Cloud across Azure, hybrid servers through Azure Arc, and AWS and GCP connectors
• Understand AI workload security: Defender for AI in Defender for Cloud, Purview DSPM, and AI Gateway in API Management
• Practise identity and network controls: RBAC, Key Vault, Private Link, Azure Firewall and Azure Bastion
• Review posture management with Defender CSPM, regulatory compliance in Defender for Cloud, and Microsoft Sentinel

SC-500 skill areas and weights

The SC-500 study guide lists four skill areas. Securing storage, databases and networking is the largest, at 25 to 30% of the exam. The other three are 20 to 25% each.

• Manage identity, access, and governance: 20 to 25%
• Secure storage, databases, and networking: 25 to 30%
• Secure compute: 20 to 25%
• Manage and monitor security posture: 20 to 25%

Source: Microsoft Learn study guide for SC-500.

SC-500 exam format: questions, duration and passing score

• Passing score: A score of 700 or greater is required to pass.
• Duration: You have 120 minutes to complete the exam, according to the Microsoft SC-500 certification page. Microsoft lists the same 120 minutes for associate and expert exams that may contain labs.
• Number of questions: Microsoft does not state a fixed question count for SC-500. Its exam duration page says most Microsoft Certification exams typically contain 40 to 60 questions, and that the number varies by exam.
• Question types: Microsoft does not identify exact question types before the exam. It lists active screen, build list, case study, drag and drop, hot area, multiple choice and lab questions as samples you might see, and the SC-500 certification page says the exam may include interactive components.
• Microsoft Learn during the exam: Associate and expert exams let you open Microsoft Learn while you answer. The exam timer keeps running while you do.
• Preview features: Most questions cover features that are generally available. The exam may include questions on preview features that are commonly used.
• Languages: The exam is offered in English, Japanese, Chinese (Simplified), Chinese (Traditional), Korean, German, French, Italian, Portuguese (Brazil) and Spanish. If it is not available in your preferred language, you can request an additional 30 minutes.
• Exam fee: The fee depends on the country or region where you sit the exam. Microsoft shows it when you schedule.
• Retakes: If you fail, you can retake the exam 24 hours after the first attempt. The wait for later retakes varies.
• Practice Assessment: The certification page says the official Practice Assessment for this exam is not currently available.
• Certification: Passing SC-500 earns Microsoft Certified: Cloud and AI Security Engineer Associate.

Sources: Microsoft Learn study guide for SC-500, the SC-500 exam page and exam duration and exam experience.

How to use this SC-500 practice exam

The 307 SC-500 practice questions follow the four skill areas in Microsoft's outline, so you can drill the area you are weakest in instead of working down one long list. Every question comes with an explanation and a documentation reference. Read both after a wrong answer, and after a right answer you were unsure of.

Weight your time by the official percentages. Securing storage, databases and networking is the largest area at 25 to 30%. Identity, access and governance, compute, and security posture are 20 to 25% each.

The outline reaches past Azure. It covers securing AI workloads with Defender for Cloud and Microsoft Purview, servers onboarded through Azure Arc, and connecting AWS and Google Cloud environments to Defender for Cloud. Microsoft expects practical Azure and hybrid administration experience and strong familiarity with Microsoft Entra ID, so practise in a subscription as you go.

Questions you miss come back through spaced repetition, so a topic you got wrong on Monday is asked again before you rely on it. Finish with timed sets against the 120-minute limit.

We write our questions to Microsoft's published skills outline. They are practice material rather than a copy of the live exam, and we do not support the use of exam dumps.

SC-500 traps: free decision sheets

Each sheet settles one choice the exam tests, with every rule cited to a practice question.

• PIM eligible vs active vs permanent, and where scope and activation controls live
• Always Encrypted vs TDE vs dynamic data masking vs row-level security vs Ledger
• VM and backup disk encryption: SSE with CMK vs PMK vs ADE vs encryption at host
• Workload identity types: app object vs service principal vs managed identity

SC-500 study resources

• Build a study plan: tell us your exam date and we schedule daily practice and review sessions backwards from the date.
• Decision sheets: each sheet settles one choice between look-alike services, verdict first, then the comparison, then the traps.

Frequently asked about SC-500

How many questions are on the SC-500 exam?

Microsoft does not state a fixed number for SC-500. Its exam duration page says most Microsoft Certification exams typically contain 40 to 60 questions and that the number varies by exam, so plan for a range rather than a fixed count.

How long is the SC-500 exam?

The Microsoft SC-500 certification page says you have 120 minutes to complete the exam. That is the time Microsoft lists for associate and expert exams that may contain labs.

What is the SC-500 passing score?

You need a score of 700 or greater to pass.

What types of questions are on the SC-500 exam?

Microsoft does not identify exact question types before the exam. Samples it shows include multiple choice, drag and drop, hot area, build list, case studies and labs. You can try each type in the exam sandbox on Microsoft Learn.

What experience does Microsoft expect for SC-500?

Microsoft says you should have practical experience administering Azure and hybrid environments, including compute, network and storage, strong familiarity with Microsoft Entra ID, and familiarity with Microsoft 365 administration.

Does SC-500 cover AWS and Google Cloud?

Yes, through Defender for Cloud. The skills outline includes connecting hybrid cloud and multicloud environments to Defender for Cloud, including Amazon Web Services (AWS) and Google Cloud Platform (GCP).

Are these SC-500 practice questions the same as the real exam?

No. They are written to Microsoft's published skills outline to test the same skills and judgement. They are not copied from the live exam.

Can I use Microsoft Learn during the SC-500 exam?

Yes. Microsoft says you can access Microsoft Learn while you complete an associate or expert exam. The exam timer continues while you search, so use it for specific lookups.

Unlock SC-500

Try 10 SC-500 questions free, then pick a plan. The All-Access plan covers every certification; current prices are on the pricing page.

Ready for SC-500?

Try the practice surface for free. Answer a few questions, see the spacing loop, then decide. Try 10 free SC-500 questions or browse the catalogue.