Written to the SC-500 outline last updated May 13, 2026All four domains, 245 questions, every option explainedWhat changed from AZ-500, objective by objectiveEvery fact linked to Microsoft LearnPDF + EPUB, updates included
Know where you stand on every SC-500 domain, AI security included
An independent study guide for SC-500, the exam for Microsoft's Cloud and AI Security Engineer Associate certification. 245 practice questions follow the four domains of the official outline, and each one explains every option. One chapter lists, objective by objective, what changed from AZ-500, including the new subgroup on securing AI workloads and agents. Written for Azure administrators moving into security, and for AZ-500 candidates whose exam retired on August 31, 2026. The study plans run from three to eight weeks.
All sales are final. Download starts right after payment.Get the guide · $47
463 pagestext in proportion to exam weights
245 questionswith a reason for every wrong option
4 of 4 domainscovered, see the map below
Four study plansthree weeks, eight weeks, and a path each from AZ-500 and AZ-104
Coverage map official domain → weight → our material
Exam domain (official outline)
Weight
Chapter pages
Questions
Traps
Manage identity, access, and governance
20–25%
40
47
47
Secure storage, databases, and networking
25–30%
49
58
51
Secure compute
20–25%
40
48
46
Manage and monitor security posture
20–25%
44
47
53
Final mock exam (all four domains)
mixed
0
45
0
Total
100%
173
245
197
Outline version: skills measured as of 2026-05-13. Guide version 2026.10. You get every future revision at no cost.
Look inside before you buy
Real pages from the document, exactly as you get them.
Coverage map: every domain, its official weight, and how many pages and questions it gets
The AI security map: where each control sits along a request, with the section that teaches it
Cheat sheet, chapter 3: the whole domain on two pages
What changed from AZ-500: the change log Microsoft did not publish
Practice questions, in the formats the exam uses
An answer page: every option explained, with the Microsoft Learn page that proves it
Labs: what each one covers and what it costs to run
A question, exactly as it appears in the guide
Not a preview. This is question 3.18 with its full explanation, so you can judge the depth before paying.
Q 3.18 · Secure computedifficulty 3 / 5
A Foundry agent answers questions from supplier PDFs it retrieves at run time. In a red-team test, hidden instructions planted in one PDF make the agent ignore its system instructions. The agent's guardrail uses the default Prompt Shields settings. Which change addresses this attack?
ATurn on document attack detection in the guardrail
BRaise the Violence blocking level to High for the agent
CAdd a groundedness control to the guardrail
DTurn on user prompt attack detection in the guardrail
ACorrect. Prompt Shields detect two attack types. Attacks hidden in document content, such as emails, web pages or files, are document attacks, and their detection is off by default and must be enabled in the guardrail's controls.
BIncorrect. Hidden instructions in a document are a document attack, which Prompt Shields detect. A harmful-content level judges whether content is harmful, and Prompt Shields' job, detecting manipulation, is a different check.
CIncorrect. Detecting instructions planted in documents is the job of Prompt Shields' document attack detection. Microsoft is explicit that Prompt Shields don't judge groundedness, and a grounding check is a different control that doesn't look for manipulation attempts.
DIncorrect. User prompt attack detection is already on by default, and it analyzes what the user types. The attack here arrived inside a retrieved document, not in the user's prompt.
Tests
Configure guardrails for agent security in Foundry: enabling Prompt Shields for document attacks
You have never administered Azure. The exam expects hands-on Azure administration, solid Microsoft Entra ID and some Microsoft 365 administration. This guide assumes all three and does not teach them.
You want each product taught from scratch. Microsoft's 12 free self-paced learning paths for SC-500 do that. This guide tests you on the material and explains every answer.
You want a simulator with drag-and-drop and hot-area items. This is a book: PDF and EPUB, read offline.
You want a pass guarantee. Nobody honest can give one. We give you the outline, the questions and the reasons.
How this was made
The chapters and questions were drafted with AI from Microsoft's SC-500 skills outline and the documentation on Microsoft Learn, the only source we use for facts. Every question was then solved by a second reviewer, an AI agent working in a separate session, which did not see the answer key and opened the source page to confirm it supports the answer. Questions that failed either check went back to their author and stay out of the guide until they pass. The AZ-500 chapter was built by reading the SC-500 and AZ-500 outlines side by side, objective by objective. A person reads the whole guide and checks the source links before each edition is released. Nothing here reproduces a real exam item.
Microsoft LearnAzure, Entra, Defender, Sentinel and Purview documentationSC-500 skills outline 2026-05-13AZ-500 skills outline, for the diff21 questions rejected in review
Questions people ask before buying
What is actually different about SC-500 compared with AZ-500?
SC-500 is the recommended successor to AZ-500, which retired on August 31, 2026. Most of the Azure security material carries over, regrouped into four new domains. The domain that held Defender for Cloud and Sentinel went from 30–35% of the exam to 20–25%, and its contents spread across all four domains. Sentinel data collection is much wider. Two subgroups are new: 11 objectives on securing AI workloads and agents, from Purview DSPM for AI and Entra Agent ID to guardrails in Foundry and Defender for AI Services, and 4 on Security Copilot. Routing, peering, Application Gateway, Front Door and DDoS Protection lost their objectives. Microsoft published no change log for this outline, so one chapter of this guide is that change log.
How is this different from Microsoft's free material?
Microsoft teaches the material for free: course SC-500T00 has 12 self-paced learning paths, one for each subgroup of the outline. What it does not offer yet is practice. On October 19, 2026 the SC-500 certification page said the practice assessment was not currently available. Microsoft says assessments usually arrive within 8 weeks of an exam becoming generally available. Microsoft planned general availability for July 2026, and the certification page no longer shows a beta label. If one appears, this guide still adds 245 questions that explain why each wrong option is wrong, each linked to the Microsoft Learn page that proves it, plus the comparison with AZ-500.
What is in the mock exam?
45 questions that appear nowhere else in the guide, with all four domains mixed together and fewer recall items than the practice sets. A short chapter sets the rules: sit it once, about a week before your exam, in one 100-minute session without notes. It also explains how to score it domain by domain, and what to do with the result.
Is there really no refund?
Yes. The files are delivered the moment you pay, so the sale is final. That is why a whole question is shown on this page, not a snippet.
Will I get updates when Microsoft changes the outline?
Yes. The SC-500 outline has no "as of" date and no change log, and the AI-security objectives name products whose names and preview status changed through 2025 and 2026. When the outline or those products change, we revise the guide and email you a link to the new version at no cost.
Is this an official Microsoft course?
No. It is an independent publication, not affiliated with or approved by Microsoft.
All sales are final. Download starts right after payment.Get the guide
AZ-500 retired on August 31, 2026. What that means if you hold Azure Security Engineer Associate, if you were studying for it, and which exam comes next.
AZ-500 retired on August 31, 2026, and SC-500 is Microsoft's recommended successor. How the two outlines differ and what to study if you began with AZ-500.
SC-500's AI security subgroup has 11 objectives across eight admin portals, several in preview. What each covers, where you set it up, and its release status.
SC-200 is for analysts who detect, respond and hunt. SC-500 is for engineers who configure the controls. Where the two exams overlap, and which one fits you.
SC-300 goes deep on Microsoft Entra. SC-500 covers Entra more briefly, then secures Azure workloads and AI. Where they overlap and which to take first.
