Microsoft Cloud and AI Security Engineer Associate (SC-500)

The SC-500 exam is designed for security engineers who implement end-to-end security controls for cloud, hybrid, and AI workloads using Microsoft security technologies. It validates your ability to manage identity, access, and governance, secure storage, databases, and networking, secure compute, and manage and monitor security posture.

Exam details

Certification
Microsoft Cloud and AI Security Engineer Associate
Application
Microsoft Security
Exam code
SC-500
Level
Associate
Duration
Approximately 100 minutes
Questions
Typically 40–60 questions
Passing score
700 out of 1000
Cost
USD $165 — typical price; the exact fee varies by country/region and currency, and local taxes may apply.
Prerequisites
None required. Azure, hybrid, Entra ID, and Microsoft 365 administration experience are expected.
Languages
English (additional languages may be available)
Delivered by
Pearson VUE
Renewal
Free online assessment, every 12 months

Skills measured

Manage identity, access, and governance

20–25%
  • Secure access with Entra ID, PIM, Conditional Access, MFA, app identities, and managed identities.
  • Deploy and govern Key Vault, including Defender CSPM secret scanning.
  • Enforce Azure Policy, Defender for Cloud compliance, resource locks, and RBAC.
Practice Identity, Access & Governance Questions

Secure compute

20–25%
  • Secure Copilot, Copilot Studio agents, Entra Agent ID, Foundry, and Defender for AI.
  • Harden VMs and hybrid servers with Bastion, JIT, Arc, and Defender for Servers.
  • Secure AKS, containers, Functions, Logic Apps, App Service, WAF, and API Management.
Practice Compute Security Questions

Manage and monitor security posture

20–25%
  • Use Defender CSPM, workload protection, multicloud connectors, and EASM.
  • Collect and automate signals in Microsoft Sentinel.
  • Configure Microsoft Security Copilot workspaces, plugins, and agents.
Practice Security Posture Questions

Study Resources

Frequently asked questions

Who should take SC-500?

SC-500 is for cloud security engineers and AI security engineers who protect Azure, hybrid, and AI workloads. Most work in banks, government, large enterprises, and security consultancies. Microsoft replaced AZ-500 with SC-500 after AZ-500 retired on 31 August 2026. The SC-500 syllabus includes Copilot, Entra Agent ID, Foundry, and Defender for AI alongside classic cloud security controls.

What is the average salary for a Cloud and AI Security Engineer?

Cloud security engineers in the United States earn an average base salary of $140,052 per year, according to Built In's U.S. Cloud Security Engineer salary data.

Average total compensation is $166,163 per year, including $26,111 in additional cash compensation. These U.S. figures were checked on 13 October 2026; pay varies by experience, location, responsibilities, and employer.

How should I prepare for SC-500?

Access the free SC-500T00 Course on Microsoft Learn. Then, use our SC-500 Exam Practice Test, which includes original questions we developed to help you memorise and retain the course content.

Avoid exam dumps: using them can invalidate your score, revoke certifications you already hold, and bar you from future exams.

Search the Microsoft Training Services Partners directory for instructor-led options. Separately, current U.S. listings for the four-day SC-500T00 course quote $2,195 at Microtek and $2,495 at New Horizons.

Does the exam include official labs I can use to practice?

If you purchase instructor-led training, Microsoft Training Services Partners usually provide access to official labs for about 90 days. Always check that the labs are from a Microsoft partner such as Skillable.

Depending on the exam, a trial licence could include demo data to practise with, but this is not guaranteed and Microsoft often changes its policies about free trials with demo data. If you prefer hands-on learning using labs, contact a Microsoft Training Services Partner for instructor-led training.

← More Microsoft Security training & guides