If you blocked out the next two months for Azure Security Engineer AZ-500 prep, redirect that effort today. Microsoft retired the Azure security engineer exam on August 31, 2026, and the Azure Security Engineer Associate credential can no longer be earned or renewed; the retirement notice sits at the top of the official AZ-500 study guide and on the certification page. The successor, Exam SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads, awards the Microsoft Certified: Cloud and AI Security Engineer Associate certification. Most of your AZ-500 study investment still counts toward it — this guide shows what transferred, what is genuinely new, and how to restructure your prep in eight weeks.
Why AZ-500 prep stopped
The retirement closed two doors at once: the exam itself and the free annual renewal assessment that kept the credential active. There is no transition exam, no equivalency credit for existing holders, and no discounted upgrade path — the only forward route to a current Microsoft security-engineer credential is the new exam at standard pricing. For a closer look at what the cutoff means for holders whose expiration fell after the retirement date, read our AZ-500 retirement and SC-500 transition guide.
The replacement arrived through a public beta announced on the Microsoft Community Hub. During the beta window, the first 300 candidates could take the replacement exam at 80% off, and the certification has since reached general availability for everyone through Pearson VUE. That beta mattered for more than price: it seeded the question pools and study paths that now anchor the live exam.
Inside the SC-500 exam
The replacement exam assesses four weighted skill areas: manage identity, access, and governance (20–25%); secure storage, databases, and networking (25–30%); secure compute (20–25%); and manage and monitor security posture (20–25%), according to the official SC-500 study guide. Candidates have 120 minutes to complete the proctored replacement exam, which can include interactive components, as stated on the certification page.
| Skill area | Weight | Where AZ-500 prep helps |
|---|---|---|
| Manage identity, access, and governance | 20–25% | Direct carryover from AZ-500 identity work |
| Secure storage, databases, and networking | 25–30% | Strong carryover; two old domains consolidated |
| Secure compute | 20–25% | Strong carryover, minus some legacy VM detail |
| Manage and monitor security posture | 20–25% | Partial carryover; Purview and AI monitoring are new |
What carries over intact
Most of an AZ-500 syllabus maps onto the new exam: Entra ID roles, Privileged Identity Management, Conditional Access, NSGs and Private Endpoints, Key Vault, disk encryption, AKS hardening, and the Defender for Cloud and Sentinel operational toolset all survive the transition. What does not carry over is the scope. AZ-500 lived almost entirely inside Azure; the new exam assumes familiarity with Microsoft 365 administration on top of Azure and hybrid experience, and adds explicit objectives for securing AI solutions and for data security posture management through Purview — territory AZ-500 never touched.
If you arrived at security certifications only recently and are weighing whether an associate-level security credential is the right entry point at all, our comparison of entry-level cybersecurity certifications breaks down the alternatives and the order to take them.
Your eight-week pivot plan
Reuse what you already built instead of starting from zero:
- Weeks 1–2 — audit: map your existing AZ-500 notes against the four skill areas in the table above. Tag what transfers (identity, network, compute, storage) and what does not (retired preview features and legacy tooling).
- Weeks 3–4 — posture operations: go deep on Defender for Cloud secure score, regulatory compliance dashboards, workload protection plans, and Sentinel data connectors plus automation rules.
- Weeks 5–6 — new ground: study Purview data security posture management, AI workload security controls, and Microsoft 365 administration basics. These are the sections AZ-500 veterans most often under-prepare.
- Week 7 — hands-on labs: configure Key Vault with role-based access, PIM assignments, Private Endpoints, and a working Sentinel analytics rule. Interactive-style exam items reward muscle memory.
- Week 8 — dress rehearsal: take timed practice sets, walk through the exam sandbox, and re-review the two weakest areas from your weekly audits.
Exam-day logistics to know
Book through Pearson VUE using a personal Microsoft account — Microsoft warns that exam records tied to a work or school account are unrecoverable if you later leave the organization. The exam is proctored, may include interactive components, and a failed first attempt can be retaken after 24 hours. Pricing varies by the country where the exam is proctored and is listed at $165 USD for the United States. The free Practice Assessment was not available at launch; check the certification page before relying on one, because Microsoft typically publishes practice assessments within eight weeks of an exam leaving beta.
Sources
- Study guide for Exam AZ-500 — Microsoft Learn
- Microsoft Certified: Azure Security Engineer Associate — Microsoft Learn
- Study guide for Exam SC-500 — Microsoft Learn
- Microsoft Certified: Cloud and AI Security Engineer Associate — Microsoft Learn
- New Microsoft Certified: Cloud and AI Security Engineer Associate Certification — Microsoft Community Hub