Cert-prep courses with hands-on practice for AWS, Azure, Kubernetes, security and AIModule 1 of every course free, no card →
CloudaQube

SC-500exam prep · Microsoft · intermediate

Microsoft SC-500: Cloud and AI Security Engineer

Master end-to-end security controls across identity, storage, networking, compute, and AI workloads on Azure. Build hands-on skills securing Entra ID, Key Vault, Defender for Cloud, Microsoft Sentinel, and Microsoft Foundry AI deployments to prepare for the Microsoft SC-500 certification.

  • 14 hours
  • 26 lessons
  • 6 modules
  • 50-question practice exam
  • updated September 2026
Module 1 freeNo credit cardFull course from $8.99/mo
exam coverage

Mapped to the SC-500 exam guide

Every module is tagged with the exam domain it covers. Weights are from Microsoft’s official exam guide.

23%Manage Identity, Access, and GovernanceModules 1 and 2
28%Secure Storage, Databases, and NetworkingModule 3
24%Secure ComputeModules 4 and 5
25%Manage and Monitor Security PostureModule 6
Official SC-500 exam guide ↗
try it

Try it before you sign up

Read a full lesson and answer 3 questions from the Module 1 quiz. No account needed.

free lesson · read · 30 min

Privileged Access, Conditional Access & Modern Authentication

Microsoft Entra Privileged Identity Management (PIM) is the control plane for just-in-time (JIT) administrative access. Instead of granting a user a permanently active Azure or Entra role, PIM lets you make them…
question 1 of 3 · from the Module 1 quiz
A user has an eligible assignment to the Global Administrator role in PIM but has not activated it. What is true of their standing privilege right now?
Pick an answer.
curriculum

6 modules, 26 lessons

Module 1 is free — lessons, hands-on walkthrough and quiz. The course ends with a 50-question practice exam.

  • readPrivileged Access, Conditional Access & Modern Authentication30 min
  • videoVideo: Conditional Access in Practice15 min
  • hands-onHands-On: Configure App Identities and Managed Identities via Azure CLI25 min
  • quizModule 1 Quiz: Entra ID Identity & Access Security12 min
how it's built

Built by the CloudaQube team

No celebrity instructor — here is exactly what goes into the course instead.

  • 01 Follows the official SC-500 exam guide — every module is tagged with the exam domain it covers.
  • 02 7 guided hands-on walkthroughs you run in your own Azure subscription.
  • 03 6 module quizzes and a 50-question practice exam — every answer comes with an explanation.
  • 04 Last updated September 2026.
  • 05 Any module can become a hands-on lab in Labs Studio.
outcomes

What you'll be able to do

  • 01 Explain how Microsoft Entra ID, Key Vault, and Azure Policy work together to enforce identity, access, and regulatory governance
  • 02 Identify security gaps in storage, database, and network configurations using Defender for Cloud recommendations
  • 03 Build hands-on CLI workflows that harden Key Vault, storage, VMs, containers, and application platforms
  • 04 Apply Conditional Access, managed identity, and workload identity patterns to eliminate stored credentials across an environment
  • 05 Evaluate AI-specific security risks in Copilot, Copilot Studio agents, and Microsoft Foundry deployments using Entra Agent ID and Defender for AI Services
  • 06 Evaluate security posture using Defender CSPM attack-path analysis and Microsoft Sentinel analytics and automation rules
  • 07 Demonstrate a complete Zero-Trust security baseline design across identity, network, compute, and monitoring layers
before you start
  • — Practical experience administering Azure and hybrid environments (compute, network, storage)
  • — Strong familiarity with Microsoft Entra ID
  • — Familiarity with Microsoft 365 administration
  • — Basic comfort with the Azure CLI and JSON
  • — An Azure subscription for hands-on CLI exercises (a free-tier account works — exercises run in your own environment, not a managed sandbox)
questions

Before you start SC-500

Is this course current for the SC-500 exam?

It follows the current SC-500 exam guide — all 4 exam domains, with the weights shown on this page, and was last updated September 2026.

Official SC-500 exam page ↗
How do I book the SC-500 exam, and what does it cost?

You book it directly with Microsoft. The official exam page lists the current fee, format, length and passing score, which can vary by country.

Official SC-500 exam page ↗
Is this an exam dump?

No. The lessons and quiz questions are written to teach the exam objectives, and every answer comes with an explanation. Real exam questions (“dumps”) break the exam provider’s candidate agreement and can cost you the certification.

What do I need for the hands-on walkthroughs?

An Azure subscription — a free account works for most walkthroughs. Delete what you create when you finish so you don’t keep paying.

How long does it take?

About 14 hours of lessons, videos and hands-on walkthroughs across 6 modules, plus a 50-question practice exam. We suggest planning around 60 hours of total study time for SC-500, including review and practice.

What’s free?

Module 1 in full — lessons, hands-on walkthrough and quiz — with no card required. Any paid plan (from $8.99/mo) unlocks all 6 modules and the practice exam, and starts with a 14-day free trial.

get started

Start SC-500 with Module 1 free.

No card required. Unlock every module and the practice exam from $8.99/mo when you’re ready.

See pricing