Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Cloud security gaps rarely come from one big mistake. They come from inconsistent MFA rollout, overlapping network security groups that break traffic, or storage accounts left on default keys. This AZ-500 course gives IT Directors and Team Leads a single, structured path to standardize how their team secures Azure, from identity through security posture management.

Role fit: Best suited to security engineers and Azure administrators with at least a year of hands-on Azure experience. Coverage spans Azure AD and Microsoft Entra, network security (NSGs, Azure Firewall, VPN, Private Link), data protection (Azure SQL, Storage, disk encryption), containers and AKS, API Management, and Microsoft Defender for Cloud. That breadth makes it useful across identity, network, cloud, and SecOps roles.

Time investment: About 32.6 hours across 34 skills, most under about an hour each. Learners can finish one skill per session without pulling engineers off production work.

Risk and change-management notes: Instructors demonstrate in the live Azure portal, PowerShell, and CLI, including troubleshooting with sign-in logs, Network Watcher, and effective routes. Teams can apply these practices to their own tenants with less trial and error. Consider assigning the identity and governance skills first to align the team before changing production controls.

Training Managers can sequence skills by role and track progress with Team Reporting. Microsoft retired the AZ-500 exam on 31 August 2026, so the course is assigned today for the Azure security skills themselves.

How this training helps your team succeed in the real world

Azure security gaps rarely show up as one big failure. They show up as a locked-out user, a VM that stops communicating after an NSG change, or an alert nobody acts on. IT teams take this training to handle those moments with confidence instead of escalating them.

In the course, learners work through realistic scenarios. They roll out per-user MFA and use sign-in logs to troubleshoot failed logins. They publish on-premises apps through Azure AD Application Proxy and run diagnostic reports. They untangle overlapping NSGs by isolating misconfigurations and reviewing how security rules affect traffic. They also build Microsoft Sentinel analytics rules and hunting notebooks.

• Fewer identity-related escalations: Team members can enable and manage MFA, reset compromised accounts, and read sign-in logs to resolve authentication issues quickly.
• Faster network troubleshooting: Engineers can review NSG behavior, check routing decisions, test VNet connectivity, and isolate misconfigurations before small changes become outages.
• Stronger data and workload protection: Your team can protect access to Azure Storage accounts, review Defender for Cloud recommendations, and apply controls such as WAF policies for public-facing Azure resources.
• More mature detection and response: Security staff can connect data sources to Microsoft Sentinel, write analytics rules, and run hunting queries to find suspicious activity sooner.

The result is a team that can implement and verify Azure security controls in-house, with less reliance on outside help.

Knowledge

• How Azure AD (Microsoft Entra ID) authentication and authorization work, including per-user MFA deployment as a two-step process of enabling the user and completing enrollment
• When to use Application Proxy to provide secure remote access to on-premises apps and bring them under Azure AD identity and security tooling
• How NSGs, Azure Firewall, VNet peering, UDRs, VPN gateways, Virtual WAN, and Private Endpoints combine to control traffic flow
• The Azure SQL security model of principals, permissions, and securables, plus encryption considerations for storage
• Security controls for container workloads across Azure Container Registry, Container Apps, and AKS, including Azure RBAC and Kubernetes RBAC
• How Microsoft Sentinel workbooks, notebooks, and hunting workflows support security operations

Ability

• Configure and troubleshoot MFA using Azure AD sign-in logs
• Diagnose connectivity issues caused by overlapping NSG rules, using effective routes and Network Watcher tools such as packet capture and Connection troubleshoot
• Deploy Azure Firewall with its required subnets and validate transitive routing across peered VNets
• Secure Azure Storage accounts using authentication, authorization, redundancy, and backup controls
• Publish and protect APIs through API Management products and policies
• Monitor security posture with Defender for Cloud and Azure Monitor alerts, then investigate incidents and hunt threats in Sentinel