Microsoft Certified Associate

The AZ-500 Microsoft Azure Security Technologies certification exam tests and validates a candidates expertise at implementing security controls, and maintaining security, and identity, access and protections within Microsoft Azure. This exam is a part of the required exams needed to earn the larger Microsoft Certified: Azure Security Engineer Associate certification.

Certification Target Audience

The AZ-500 Microsoft Azure Security Technologies certification exam is geared towards Security Engineers who implement security controls, maintain the security posture, manages identity and access, and protects data, applications, and networks. These candidates should be able to identify and remediate vulnerabilities by using a variety of security tools, implement threat protection, and respond to security incident escalations.

Azure Security Engineers will generally serve as part of a larger team that’s dedicated to managing cloud-based systems and security. They might also be involved in securing hybrid or polynimbus environments as part of an end-to-end infrastructure.

Skills Measured

Here’s a high level list of all the skills and objectives measured by the AZ-500 Microsoft Azure Security Technologies certification exam. The percentages next to each exam objective area represents the portion of the exam that focuses on that particular objective area.

Manage Identity and Access (20-25%)

  • Configure Microsoft Azure Active Directory for workloads
    • May include but is not limited to: Create App Registration, configure App Registration permission scopes, manage App Registration permission consent, configure Multi-Factor Authentication settings, manage Microsoft Azure AD directory groups, manage Microsoft Azure AD users, install and configure Microsoft Azure AD Connect, configure authentication methods, implement Conditional Access policies, configure Microsoft Azure AD identity protection
  • Configure Microsoft Azure AD Privileged Identity Management
    • May include but is not limited to: Monitor privileged access, configure Access Reviews, activate Privileged Identity Management
  • Configure Microsoft Azure tenant security
    • May include but is not limited to: Transfer Microsoft Azure subscriptions between Microsoft Azure AD tenants, manage API access to Microsoft Azure subscriptions and resources

Implement Platform Protection (35-40%)

  • Implement network security
    • May include but is not limited to: Configure virtual network connectivity, configure Network Security Groups (NSGs), create and configure Microsoft Azure Firewall, create and configure application security groups, configure remote access management, configure baseline, configure resource firewall
  • Implement host security
    • May include but is not limited to: Configure endpoint security within the VM, configure VM security, harden VMs in Microsoft Azure, configure system updates for VMs in Microsoft Azure, configure baseline
  • Configure container security
    • May include but is not limited to: Configure network, configure authentication, configure container isolation, configure AKS security, configure container registry, configure container instance security, implement vulnerability management
  • Implement Microsoft Azure Resource management security
    • May include but is not limited to: Create Microsoft Azure resource locks, manage resource group security, configure Microsoft Azure policies, configure custom RBAC roles, configure subscription and resource permissions

Manage Security Operations (15-20%)

  • Configure security services
    • May include but is not limited to: Configure Microsoft Azure Monitor, configure Microsoft Azure Log Analytics, configure diagnostic logging and log retention, configure vulnerability scanning
  • Configure security policies
    • May include but is not limited to: Configure centralized policy management by using Microsoft Azure Security Center, configure Just in Time VM access by using Microsoft Azure Security Center
  • Manage security alerts
    • May include but is not limited to: Create and customize alerts, review and respond to alerts and recommendations, configure a playbook for a security event by using Microsoft Azure Security Center, investigate escalated security incidents

Secure Data and Applications (30-35%)

  • Configure security policies to manage data
    • May include but is not limited to: Configure data classification, configure data retention, configure data sovereignty
  • Configure security for data infrastructure
    • May include but is not limited to: Enable database authentication, enable database auditing, configure Microsoft Azure SQL Database threat detection, configure access control for storage accounts, configure key management for storage accounts, create and manage Shared Access Signatures (SAS), configure security for HDInsights, configure security for Cosmos DB, configure security for Microsoft Azure Data Lake
  • Configure encryption for data at rest
    • May include but is not limited to: Implement Microsoft Azure SQL Database Always Encrypted, implement database encryption, implement Storage Service Encryption, implement disk encryption, implement backup encryption
  • Implement security for application delivery
    • May include but is not limited to: Implement security validations for application development, configure synthetic security transactions
  • Configure application security
    • May include but is not limited to: Configure SSL/TLS certs, configure Microsoft Azure services to protect web apps, create an application security baseline
  • Configure and manage Key Vault
    • May include but is not limited to: Manage access to Key Vault, manage permissions to secrets, certificates, and keys, manage certificates, manage secrets, configure key rotation

To view the most up-to-date list of these exam objectives, please reference the official AZ-500 exam page.

Happy studying!

Posted by Chris Pietschmann

Chris is a Microsoft MVP and has nearly 20 years of experience building enterprise systems both in the cloud and on-premises. He is also a Microsoft Certified Azure Solutions Architect and developer, a Microsoft Certified Trainer (MCT), and Cloud Advocate. He has a passion for technology and sharing what he learns with others to help enable them to learn faster and be more productive.

2 Comments

  1. Jerin P George April 5, 2019 at 12:55 am

    what are the prerequisites to take this exam ?

    Reply

    1. Chris Pietschmann April 24, 2019 at 9:53 am

      Microsoft exams don’t have prerequisites. Just be sure to study the exam objectives.

      Reply

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.