Security engineering for cloud and AI workloads, with Azure, identity and protective controls at the centre.
Apply it to the work
Useful when a team needs secure access, configuration and monitoring around the cloud or AI services it is putting into use.
Build practical evidence
Build Azure administration skills first, particularly networking, storage and Entra ID. A security setting is easier to assess when you understand the workload it protects.
Security engineering for cloud and AI workloads, with Azure, identity and protective controls at the centre.
Apply it to the work
Useful when a team needs secure access, configuration and monitoring around the cloud or AI services it is putting into use.
Build practical evidence
Build Azure administration skills first, particularly networking, storage and Entra ID. A security setting is easier to assess when you understand the workload it protects.
Certification essentials
Requirements, costs and keeping it current.
Check the vendor record and ongoing commitment alongside the career guidance.
Pricing view
Market
Vendor record
Live
Live, one exam, SC-500, 120 minutes. This is the credential Microsoft moved to after retiring AZ-500 on 31 August 2026. A held AZ-500 does not transfer, so SC-500 has to be earned outright. Microsoft's page states no certification prerequisite.
Current name
Microsoft Certified: Cloud and AI Security Engineer Associate
Exam code
SC-500
Vendor-stated experience
Microsoft expects practical experience administering Azure and hybrid environments across compute, network and storage, strong familiarity with Entra ID and familiarity with Microsoft 365 administration.
Source: Microsoft Learn · Read 17 September 2026
Sourced fields only; this does not mean every exam detail has been verified. Pricing and renewal policies have their own sources and check dates. Confirm the currency, tax and final booking total with the vendor.
Role-fit guidance is TechWaymark editorial interpretation. It is separate from the recorded vendor facts and does not measure hiring outcomes.
Costs and renewal
Exam cost
Check current vendor pricing
Exam format
Proctored assessment; 120 minutes; interactive components may be included
Keeping it current
Renew annually by passing a free, online Microsoft Learn assessment during the 6 months before expiry.
Renewal sources & exceptions
This applies to the earned certification, not an individual exam pass. Renewal must be completed before expiry and while its assessment remains available.
Renewal policy checked 2026-09-28. Check the linked provider policy for current fees and eligibility.
No verified quote held for this market. Check booking currency, taxes, membership, training and renewal fees with the vendor; no currency conversion is assumed. Check the vendor record before booking.
Consider the work, the alternatives and your starting point.
Reality check
Relevant to Azure, hybrid and AI workload security; prepare a control implementation and verification example alongside study. Pursue if: You implement security controls for Azure or AI workloads. Avoid if: You need introductory networking and identity practice first.
Adds a complementary capability
Certified Cloud Security Professional (CCSP)
Connects cloud-security architecture and governance with Microsoft cloud and AI security implementation.
Overlap and sources
Cloud controls overlap. SC-500 adds platform detail where Azure and Microsoft security are used.
Microsoft Certified: Cybersecurity Architect Expert
Cloud and AI Security Engineer Associate is one eligible prerequisite route for Cybersecurity Architect Expert with SC-100; it is not necessary to earn all the listed associate credentials.
Overlap and sources
Engineering controls support architecture decisions; SC-100 assesses a broader design remit.
Check the current syllabus, access terms and total cost before choosing. Resource inclusion does not guarantee exam success.
Optional home projects
Build something you can explain.
Ideas to explore after choosing a certification, using your own tools and keeping evidence of your work.
Example project evidence
Project evidence map (example)
AI workload threat and access diagramScope and inputs
Control validation planDecisions and reasoning
Evidence record (example)
Evidence
What to capture
AI workload threat and access diagram
Show the inputs, scope and decisions behind this record. The user’s document entitlement is not replaced by the application’s broad access.
Control validation plan
Include the evidence supporting your conclusion. Logging avoids retaining sensitive prompt contents without a reason.
Review access to a cloud-hosted AI workload
A team proposes an Azure AI assistant that retrieves internal documents. Security must examine the application identity, retrieval boundary and handling of sensitive data.