The candidates for Microsoft AZ-500 will be tested on four different domains. They should understand each component of the topics before attempting the exam. The highlights of these areas are as follows:

• Implementing Platform Protection: 15-20%

  This section requires that the examinees develop competence in applying advanced network security, which includes securing connectivity of virtual networks, configuring NSG and ASGs, Web Application Firewall, Azure Front Door Service, firewall on storage accounts, and implementing DDoS protection and Service Endpoints. It also measures their skills in configuring advanced security for computing.

• Managing Security Operations: 25-30%

  Here the test takers are required to develop their knowledge and skills in monitoring security with the use of Azure Monitor. This covers their expertise in creating and customizing alerts, monitoring security logs with Azure Monitor, and configuring diagnostic logging & log retention. The students also need to have competence in monitoring security with the use of Azure Security Center; configuring security policies; monitoring security with the use of Azure Sentinel.

• Managing Identity & Access: 30-35%

  This subject area will measure one’s skills in managing Azure AD identities, including configuring and managing security for service principals, Azure AD directory groups, Azure AD users, password write-back, and authentication methods. It will also evaluate the competence in configuring secure access through the use of Azure Active Directory, managing application access, and managing access control.

• Securing Data & Applications: 20-25%

  This topic of the Microsoft AZ-500 exam will measure the ability of the candidates to configure security for storage, which includes configuring access control and key management for storage accounts, configuring Azure AD authentication for Azure Storage and Azure AD Domain Services authentication for different Azure Files. It also evaluates the skills of the learners associated with configuring security for different databases and configuring and managing Key Vault.

For more info visit:

Microsoft AZ-500 Exam Reference

Microsoft AZ-500 Exam Overview:

Books and a Training Course for Exam Preparation

The following are books that cover all the topics of Microsoft AZ-500, with essential information and realistic practice questions to help you be up in arms on the real exam.

• Mastering Azure Security (Safeguard your Azure workload with innovative cloud security measures) by M. Toroman, T. Janetscheck

  This book deserves your attention because it will help you learn cloud security concepts and get the gist of how to operate cloud identities. You will be proficient in working with Azure security cloud infrastructure and have a solid understanding of how to secure cloud resources. In addition, you’ll know all about security polices and rules and how to implement them in your daily work. To add more, you’ll sharpen your knowledge in using Azure Security Center, as well as other Azure security features. As a result, you’ll grow as a security professional and work more effectively.

• ‘Exam Ref AZ-500 Microsoft Azure Security Technologies 1st Edition’ by Yuri Diogenes and Orin Thomas

  This official study guide written by a team of leading Microsoft experts will explain to you all the objectives of Microsoft AZ-500 and will help you demonstrate your real-world knowledge of Microsoft Azure security technologies. In addition, you’ll deepen your skills in working with threat protection, security controls, operating access, and will be a real professional in securing assets in hybrid environment as well as in cloud. The authors guide students through many “what if” scenarios and give up-to-date exam preparation tips to pass the exam successfully. This printed edition will prepare you for associate-level roles where you will need to demonstrate your real-world knowledge of Microsoft Azure security. So, the paperback version of this guide is available on Amazon.

If the candidate wants to improve his/her odds, to close the knowledge gaps, or to systematize the material before taking the actual exam, s/he can use Microsoft's official tools and enroll in Instructor-led training - Course AZ-500T00: Microsoft Azure Security Technologies. Classes are offered both in virtual classrooms and offline. The upcoming dates and prices can be found on the Microsoft webpage. Potential learners should be familiar with Azure security protocols and workload deployment, have experience with Windows and Linux operating systems, and know Security advanced practices and industry security requirements. Prior completion of the free online training will be an advantage to the candidate, and a chance for him/her to succeed in this course. Each of the 4 modules corresponds to the exam program and focuses on security for identity and access, data and applications protection, and security operations. Unequivocally, the 4 days of training will benefit Azure security engineers and candidates for the relevant exam to gain and practice skills they can apply in their day-to-day work.

Reference: https://www.microsoft.com/en-us/learning/exam-az-500.aspx

Microsoft AZ-500 Exam Syllabus Topics: