Microsoft Certified: Azure Security Engineer Associate (AZ-500) Exam Guide
The **Azure Security Engineer** (AZ-500) certification validates your skills to implement security controls and threat protection on Azure. You manage identity, access, data, application, and network security.
Which Azure service provides cloud-based identity and access management (IAM)?
Answer : Microsoft Entra ID (formerly Azure AD).
Manages users, groups, application access, and security features like MFA.
Which feature enforces security policies based on context like user location or device state?
Answer : Conditional Access.
Uses signals at login to determine if access should be granted, blocked, or require MFA.
Which tool provides security recommendations and threat protection for Azure resources?
Answer : Microsoft Defender for Cloud.
Offers Security Posture Management (CSPM) and advanced threat detection for workloads.
What is a 'Managed Identity'?
Answer : An identity automatically created for an Azure resource so it can access other resources without password management.
Improves security by removing the need to hardcode credentials in applications.
Which service securely stores and manages encryption keys, secrets, and certificates?
Answer : Azure Key Vault.
Centralizes secrets management with highly controlled and auditable access.
Related Certifications