Microsoft Azure Security Engineer (AZ-500)
Comprehensive preparation for the AZ-500 exam covering Azure security technologies including identity management networking security compute and storage protection and Microsoft Defender for Cloud.
Spend your points to unlock real exam questions
The points you’re earning right now aren’t just for show — redeem them on Godlike Exams to unlock real exam-style questions for the certifications you study here. 20 questions are free per exam to try right away.
Browse practice examsCourse Content
4 modules · 77 lessons
Module 1: Secure Identity and Access
Manage security controls for identity and access including Azure roles Privileged Identity Management MFA and Conditional Access policies.
Managing Security Controls for Identity
Configure Azure role assignments PIM settings MFA and Conditional Access for cloud resources.
- Lesson Understanding Azure Built-in Role Assignments 12 min
- Quiz Understanding Azure Built-in Role Assignments 5 questions
- Lesson Managing Custom Azure Roles 12 min
- Quiz Managing Custom Azure Roles 5 questions
- Lesson Creating Custom Microsoft Entra Roles 12 min
- Quiz Creating Custom Microsoft Entra Roles 5 questions
- Lesson Planning Privileged Identity Management 15 min
- Quiz Planning Privileged Identity Management 5 questions
- Lesson Configuring PIM Settings and Assignments 12 min
- Quiz Configuring PIM Settings and Assignments 5 questions
- Lesson Implementing Multi-Factor Authentication 12 min
- Quiz Implementing Multi-Factor Authentication 5 questions
- Lesson Implementing Conditional Access Policies 12 min
- Quiz Implementing Conditional Access Policies 5 questions
- Lesson Advanced Conditional Access Scenarios 12 min
- Quiz Advanced Conditional Access Scenarios 5 questions
Microsoft Entra Application Access and Managed Identities
Manage enterprise applications OAuth permissions app registrations service principals and managed identities.
- Lesson Managing Enterprise Application Access 12 min
- Quiz Managing Enterprise Application Access 5 questions
- Lesson Managing OAuth Permission Grants 12 min
- Quiz Managing OAuth Permission Grants 5 questions
- Lesson Configuring App Registration Permission Scopes 12 min
- Quiz Configuring App Registration Permission Scopes 5 questions
- Lesson Managing Service Principals 12 min
- Quiz Managing Service Principals 5 questions
- Lesson Managing Managed Identities 12 min
- Quiz Managing Managed Identities 5 questions
Module 2: Secure Networking
Plan and implement network security for virtual networks private and public access including NSGs firewalls and application gateways.
Security for Virtual Networks
Implement NSGs ASGs UDRs VNet peering Virtual WAN and Network Watcher monitoring.
- Lesson Planning and Implementing NSGs 12 min
- Quiz Planning and Implementing NSGs 5 questions
- Lesson Implementing Application Security Groups 12 min
- Quiz Implementing Application Security Groups 5 questions
- Lesson Managing VNets with Virtual Network Manager 12 min
- Quiz Managing VNets with Virtual Network Manager 5 questions
- Lesson Implementing User-Defined Routes 12 min
- Quiz Implementing User-Defined Routes 5 questions
- Lesson Configuring VNet Peering and VPN Gateway 12 min
- Quiz Configuring VNet Peering and VPN Gateway 5 questions
- Lesson Implementing Virtual WAN and Secured Hub 12 min
- Quiz Implementing Virtual WAN and Secured Hub 5 questions
- Lesson Securing VPN and ExpressRoute Connectivity 12 min
- Quiz Securing VPN and ExpressRoute Connectivity 5 questions
- Lesson Monitoring with Network Watcher 12 min
- Quiz Monitoring with Network Watcher 5 questions
Security for Private Access
Configure service endpoints private endpoints Private Link and network integration for services.
- Lesson Implementing Service Endpoints 12 min
- Quiz Implementing Service Endpoints 5 questions
- Lesson Implementing Private Endpoints 15 min
- Quiz Implementing Private Endpoints 5 questions
- Lesson Implementing Private Link Services 12 min
- Quiz Implementing Private Link Services 5 questions
- Lesson Network Integration for App Service and Functions 12 min
- Quiz Network Integration for App Service and Functions 5 questions
- Lesson Network Security for ASE and SQL Managed Instance 12 min
- Quiz Network Security for ASE and SQL Managed Instance 5 questions
Security for Public Access
Implement TLS Azure Firewall Application Gateway Front Door WAF and DDoS Protection.
- Lesson Implementing TLS for Applications 12 min
- Quiz Implementing TLS for Applications 5 questions
- Lesson Planning and Implementing Azure Firewall 15 min
- Quiz Planning and Implementing Azure Firewall 5 questions
- Lesson Managing Firewall Policies with Azure Firewall Manager 12 min
- Quiz Managing Firewall Policies with Azure Firewall Manager 5 questions
- Lesson Implementing Azure Application Gateway 12 min
- Quiz Implementing Azure Application Gateway 5 questions
- Lesson Implementing Azure Front Door and CDN 12 min
- Quiz Implementing Azure Front Door and CDN 5 questions
- Lesson Implementing Web Application Firewall 12 min
- Quiz Implementing Web Application Firewall 5 questions
- Lesson Implementing Azure DDoS Protection 12 min
- Quiz Implementing Azure DDoS Protection 5 questions
Module 3: Secure Compute Storage and Databases
Implement advanced security for compute resources storage accounts and Azure SQL including encryption access control and monitoring.
Advanced Security for Compute
Configure VM remote access AKS security container monitoring ACR access and disk encryption.
- Lesson Remote Access with Azure Bastion 12 min
- Quiz Remote Access with Azure Bastion 5 questions
- Lesson Implementing Just-in-Time VM Access 12 min
- Quiz Implementing Just-in-Time VM Access 5 questions
- Lesson Configuring AKS Network Isolation 12 min
- Quiz Configuring AKS Network Isolation 5 questions
- Lesson Securing and Monitoring AKS 15 min
- Quiz Securing and Monitoring AKS 5 questions
- Lesson AKS Authentication Configuration 12 min
- Quiz AKS Authentication Configuration 5 questions
- Lesson Security Monitoring for Container Instances and Apps 12 min
- Quiz Security Monitoring for Container Instances and Apps 5 questions
- Lesson Managing Access to Azure Container Registry 12 min
- Quiz Managing Access to Azure Container Registry 5 questions
- Lesson Configuring Disk Encryption Options 12 min
- Quiz Configuring Disk Encryption Options 5 questions
- Lesson Security for Azure API Management 12 min
- Quiz Security for Azure API Management 5 questions
Security for Storage
Configure storage access control access keys Azure Files Blob Storage and encryption.
- Lesson Configuring Storage Account Access Control 12 min
- Quiz Configuring Storage Account Access Control 5 questions
- Lesson Managing Storage Account Access Keys 10 min
- Quiz Managing Storage Account Access Keys 5 questions
- Lesson Configuring Access to Azure Files 12 min
- Quiz Configuring Access to Azure Files 5 questions
- Lesson Configuring Access to Azure Blob Storage 12 min
- Quiz Configuring Access to Azure Blob Storage 5 questions
- Lesson Data Protection with Soft Delete and Versioning 12 min
- Quiz Data Protection with Soft Delete and Versioning 5 questions
- Lesson Configuring BYOK and Infrastructure Encryption 12 min
- Quiz Configuring BYOK and Infrastructure Encryption 5 questions
Security for Azure SQL
Configure database authentication auditing dynamic masking TDE and Always Encrypted.
- Lesson Enabling Microsoft Entra Database Authentication 12 min
- Quiz Enabling Microsoft Entra Database Authentication 5 questions
- Lesson Enabling Database Auditing 10 min
- Quiz Enabling Database Auditing 5 questions
- Lesson Implementing Dynamic Data Masking 12 min
- Quiz Implementing Dynamic Data Masking 5 questions
- Lesson Implementing Transparent Data Encryption 12 min
- Quiz Implementing Transparent Data Encryption 5 questions
- Lesson Using Azure SQL Always Encrypted 12 min
- Quiz Using Azure SQL Always Encrypted 5 questions
Module 4: Microsoft Defender for Cloud and Sentinel
Implement governance manage security posture configure threat protection and security monitoring with Defender for Cloud and Sentinel.
Cloud Governance Policies
Manage Azure Policy Key Vault configuration and backup security controls.
- Lesson Creating and Assigning Azure Policies 12 min
- Quiz Creating and Assigning Azure Policies 5 questions
- Lesson Interpreting Azure Policy Initiatives 12 min
- Quiz Interpreting Azure Policy Initiatives 5 questions
- Lesson Configuring Key Vault Network Settings 12 min
- Quiz Configuring Key Vault Network Settings 5 questions
- Lesson Configuring Key Vault Access Policies and RBAC 12 min
- Quiz Configuring Key Vault Access Policies and RBAC 5 questions
- Lesson Managing Certificates Secrets and Keys 12 min
- Quiz Managing Certificates Secrets and Keys 5 questions
- Lesson Configuring Key Rotation and Backup 12 min
- Quiz Configuring Key Rotation and Backup 5 questions
- Lesson Implementing Backup Security Controls 12 min
- Quiz Implementing Backup Security Controls 5 questions
Security Posture with Defender for Cloud
Manage Secure Score compliance multi-cloud and External Attack Surface Management.
- Lesson Using Secure Score and Inventory 12 min
- Quiz Using Secure Score and Inventory 5 questions
- Lesson Managing Compliance Standards 12 min
- Quiz Managing Compliance Standards 5 questions
- Lesson Adding Custom Standards to Defender 12 min
- Quiz Adding Custom Standards to Defender 5 questions
- Lesson Connecting Multi-Cloud Environments 15 min
- Quiz Connecting Multi-Cloud Environments 5 questions
- Lesson Using External Attack Surface Management 12 min
- Quiz Using External Attack Surface Management 5 questions
Threat Protection with Defender for Cloud
Enable workload protection configure Defender plans and DevOps security.
- Lesson Enabling Cloud Workload Protection Plans 12 min
- Quiz Enabling Cloud Workload Protection Plans 5 questions
- Lesson Configuring Defender for Servers 15 min
- Quiz Configuring Defender for Servers 5 questions
- Lesson Configuring Defender for Databases and Storage 12 min
- Quiz Configuring Defender for Databases and Storage 5 questions
- Lesson Implementing Agentless VM Scanning 12 min
- Quiz Implementing Agentless VM Scanning 5 questions
- Lesson Managing Vulnerability Management for VMs 12 min
- Quiz Managing Vulnerability Management for VMs 5 questions
- Lesson Configuring DevOps Security 12 min
- Quiz Configuring DevOps Security 5 questions
Security Monitoring and Automation
Manage alerts workflow automation Azure Monitor and Microsoft Sentinel.
- Lesson Managing Security Alerts 12 min
- Quiz Managing Security Alerts 5 questions
- Lesson Configuring Workflow Automation 12 min
- Quiz Configuring Workflow Automation 5 questions
- Lesson Configuring Data Collection Rules 12 min
- Quiz Configuring Data Collection Rules 5 questions
- Lesson Configuring Sentinel Data Connectors 12 min
- Quiz Configuring Sentinel Data Connectors 5 questions
- Lesson Enabling Analytics Rules in Sentinel 12 min
- Quiz Enabling Analytics Rules in Sentinel 5 questions
- Lesson Configuring Automation in Sentinel 12 min
- Quiz Configuring Automation in Sentinel 5 questions
Your Progress
Spend your points to unlock real exam questions
Spend your points on real exam questions.
Browse practice examsEnjoying the courses?
Everything stays free. Pro shows fewer ads, doubles the points you earn on every lesson and quiz so you progress twice as fast, unlocks half of every practice exam — plus full case studies — with the Learn & Exam study modes, and lets you read each lesson on one page.
- ✓ Fewer advertisements
- ✓ 2× points per lesson & quiz
- ✓ 50% of every exam unlocked
- ✓ Learn & Exam modes
- ✓ Distraction-free lessons