Microsoft Cloud and AI Security Engineer (SC-500) Boot Camp Microsoft Cloud and AI Security Engineer (SC-500) Certification Training Boot Camp
Train for Microsoft SC-500, the engineering credential that replaced AZ-500. Five days on identity, storage, networking, compute and AI workload security across Azure and hybrid estates, with an exam voucher and pass guarantee.
How Our SC-500 Boot Camp Prepares You
Train for Microsoft SC-500, the engineering credential that replaced AZ-500. Five days on identity, storage, networking, compute and AI workload security across Azure and hybrid estates, with an exam voucher and pass guarantee.
SC-500 awards the Microsoft Certified: Cloud and AI Security Engineer Associate credential. It succeeds AZ-500, which Microsoft retired on 31 August 2026 — if you were planning to sit the Azure Security Engineer exam, this is the one that exists now.
The change is not only a rename. SC-500 carries a block of AI workload security that AZ-500 never had: Copilot and agent risk, Entra Agent ID, guardrails in Foundry, and the Data and AI security dashboard in Defender for Cloud.
Microsoft publishes weights as ranges rather than fixed percentages, so the bars below show the published range with the midpoint drawn. Storage, databases and networking is the largest area at 25–30%.
What You’ll Learn
- ✓Securing access with Microsoft Entra ID, PIM and conditional access
- ✓Key Vault deployment, access, firewalls and secret scanning
- ✓Governance with Azure Policy, RBAC and regulatory compliance evaluation
- ✓Storage, Azure SQL and network security including Firewall and Private Link
- ✓Securing AI: Copilot and agent risk, Entra Agent ID and Foundry guardrails
- ✓Posture management in Defender for Cloud, Sentinel collection and Security Copilot
What You Get When You Enroll
Every enrollment includes these resources — no hidden costs, no add-ons required.
What You’ll Cover, Day by Day
5 intensive days covering the exam objectives with hands-on practice and exam prep built into each day.
Topics Covered
- Privileged Identity Management, conditional access and authentication methods
- Application identity, OAuth consent and managed identities
- Key Vault deployment, access, firewall settings and secret scanning
- Azure Policy, RBAC, custom roles, resource locks and compliance evaluation
Labs & Exam Prep
- Hands-on lab work applying the day’s concepts
- Targeted practice questions and exam review for the day’s objectives
Schedule may vary from class to class.
Topics Covered
- Storage account security, firewall rules and access policies
- Defender for Storage threat protection configurations
- Azure SQL platform security and database auditing
- Defender for Databases across Azure database services
Labs & Exam Prep
- Hands-on lab work applying the day’s concepts
- Targeted practice questions and exam review for the day’s objectives
Schedule may vary from class to class.
Topics Covered
- NSGs, ASGs and Azure Virtual Network Manager access policies
- Virtual WAN and VPN connection security
- Entra Private Access, private endpoints and Private Link
- Azure Firewall and effective rule evaluation with Network Watcher
Labs & Exam Prep
- Hands-on lab work applying the day’s concepts
- Targeted practice questions and exam review for the day’s objectives
Schedule may vary from class to class.
Topics Covered
- Disk encryption, Azure Bastion, just-in-time access and Azure Arc
- Defender for Servers, agentless scanning, secure boot and vTPM
- Containers, AKS, Container Registry, Functions, Logic Apps and App Service
- Securing AI: Copilot and agent risk, Entra Agent ID, AI Gateway and Foundry guardrails
Labs & Exam Prep
- Hands-on lab work applying the day’s concepts
- Targeted practice questions and exam review for the day’s objectives
Schedule may vary from class to class.
Topics Covered
- Defender CSPM, regulatory frameworks and workload protection plans
- Connecting AWS and GCP to Defender for Cloud, and External Attack Surface Management
- Sentinel workspaces, connectors, DCRs, syslog and CEF collection
- Microsoft Security Copilot workspaces, permissions, plugins and agents
Labs & Exam Prep
- Hands-on lab work applying the day’s concepts
- Targeted practice questions and exam review for the day’s objectives
Schedule may vary from class to class.
Reserve Your Seat
Live online and in-person dates. Seats fill quickly — especially government and enterprise team blocks.
| Dates | Location | Status | |
|---|---|---|---|
| Nov 9–13, 20269:00am ET | Live Online | Open | Reserve a Seat |
| Feb 8–12, 20279:00am ET | Live Online | Open | Reserve a Seat |
| May 10–14, 20279:00am ET | Live Online | Open | Reserve a Seat |
| Aug 9–13, 20279:00am ET | Live Online | Open | Reserve a Seat |
Don’t see a date that works? Request a custom schedule for your team or agency.
What Guarantees Are Included?
Every boot camp comes with three guarantees because your success is our commitment.
Exam Pass Guarantee
If you don’t pass your SC-500 exam on the first attempt, we’ll cover your second attempt. You can also re-sit the boot camp free for up to one year.
100% Satisfaction Guarantee
Not satisfied after day one? Withdraw and enroll in a different course at no additional cost. We’re that confident in the quality of our instruction.
Post-Class Support
Your relationship with your instructor doesn’t end when the boot camp does. Get continued access to instructor support after class.
Who This Course Is For
This course is built for professionals pursuing SC-500 to validate their skills, meet a job or compliance requirement, or move into a more advanced role. Demand for these skills remains strong across private sector, government, and contractor environments.
- Azure Security Engineers, including anyone who was heading for AZ-500
- Cloud Security Engineers working in Azure and hybrid estates
- Azure Administrators moving into a security role
- Identity and Access Engineers
- Security Architects who need the implementation detail
- Engineers taking on AI workload security
What Are the SC-500 Prerequisites?
There is no mandatory prerequisite. Microsoft expects practical experience administering Azure and hybrid environments across compute, network and storage, strong familiarity with Microsoft Entra ID, and familiarity with Microsoft 365 administration. AZ-104 is not required, but the ground it covers is assumed throughout.
What Does the SC-500 Exam Cover?
Our boot camp aligns to the SC-500 skills measured so every topic maps to what is tested.
Microsoft publishes ranges rather than fixed weights, so each bar carries the midpoint of its published range. Storage, databases and networking is the largest area at 25–30%, and it is the one where the exam goes deepest into configuration detail.
What Is the SC-500 Exam Format?
Your enrollment includes an exam voucher. Here is what to expect on exam day.
Training a team of five or more?
Private onsite delivery, custom schedules, and volume pricing. We bring the boot camp to your office or run it dedicated for your team online.
Need a training day package?
DoD 8140 aligned, with flexible day packages for federal, state, and local agencies. Quotes within one business day.
Frequently Asked Questions About SC-500 Certification
If you engineer security in Azure, it is now the credential to hold — AZ-500 retired on 31 August 2026 and SC-500 replaced it. The AI workload material is also the first time Microsoft has put Copilot and agent security into a role-based certification, which matters if your organization is deploying either.
Microsoft retired the Azure Security Engineer Associate certification, its exam and its renewal assessments on 31 August 2026. SC-500 and the Cloud and AI Security Engineer Associate credential replace it. If you already hold AZ-500 it does not disappear, but you cannot earn or renew it any more.
Different jobs. SC-500 is for the engineer who builds and hardens: identity, storage, networking, compute, AI workloads and posture. SC-200 is for the analyst who watches and responds: triage, incidents and hunting. If you configure controls rather than work an incident queue, SC-500.
With this boot camp you prepare in 5 days of focused, instructor-led training rather than the months self-study usually takes. The accelerated format works because it follows the exam objectives in a structured sequence, includes hands-on labs, and bundles an exam voucher so you can test while the material is fresh.
No. Microsoft sets no mandatory prerequisite. It does expect practical experience administering Azure and hybrid environments across compute, network and storage, which is most of what AZ-104 covers, so that ground is assumed even though the certification is not required.
Our Exam Pass Guarantee covers your second attempt at no charge, and you can re-sit the boot camp free for up to one year from your enrollment date. The guarantee exists so a single unsuccessful attempt never becomes a financial barrier to getting certified.
Yes. Every enrollment includes a voucher covering the full cost of the SC-500 exam, along with official courseware, practice materials, and hands-on labs.
ExamNav’s SC-500 boot camp is $2,755 for five days of live, instructor-led training. That price includes official courseware, the exam voucher, hands-on labs, unlimited practice exams, a pre-study learning path, and instructor support after class. It also carries our Exam Pass Guarantee: if you don’t pass on the first attempt, your second exam is on us.
Typical students are Azure Security Engineers; Cloud Security Engineers working in Azure and hybrid estates; Azure Administrators moving into a security role; and Identity and Access Engineers, along with people moving into those roles. If you need SC-500 to qualify for a job, meet a contract or compliance requirement, or step up to a more senior role, this course is built for you.
Yes. Every SC-500 class on our schedule is taught live online by an instructor, starting at 9:00am Eastern each day for five days. You attend in real time, ask questions, and work through the labs as you go. It is not a recorded course.
The SC-500 exam runs 120 minutes and you need 700 out of 1000 to pass. Microsoft does not publish a fixed question count. You keep the certification current with a free online renewal assessment each year.
Microsoft’s current exam outline for SC-500 has four domains: Manage identity, access, and governance (20–25%); Secure storage, databases, and networking (25–30%); Secure compute (20–25%); and Manage and monitor security posture (20–25%). Our course outline follows the same domains, so your study time goes where the exam puts its weight.
Pick a date in the schedule on this page and select Reserve a Seat. We confirm your seat by email, usually within one business day, and send the invoice separately. Nothing is charged when you register.
Yes. For five or more people, request a group quote through our Enterprise Training page; agencies and contractors can use our Government Training page. We reply with pricing and dates for your group.
What Jobs Can You Get with SC-500?
SC-500-credentialed professionals are in demand across private sector, government, and defense organizations.
Azure Security Engineer
Security Engineer
Identity and Access Engineer
Cloud Infrastructure Engineer
AI Security Engineer
Security Architect
DevSecOps Engineer
Ready to get certified?
$2,755, with the exam voucher and pass guarantee included.