Microsoft Certified: Azure Security Engineer Associate Questions and Answers
200 questions organized by topic with detailed explanations
Microsoft
AZ-500
200 questions
4 topics
Updated May 2026Secure identity and access
36 questions9 easy18 medium9 hard~18% of exam
You are registering an internal business application that should be usable only by employees in your own tenant. Which s...A workload currently uses a system-assigned managed identity. The virtual machine is deleted and recreated with the same...A user has the Reader role on a resource group and the Contributor role at the subscription scope. What are the user's e...
Secure networking
48 questions12 easy24 medium12 hard~23% of exam
A user creates a private endpoint to a resource they don't own and selects manual approval. The endpoint shows Pending. ...Your organization uses Azure Virtual Network Manager security admin rules. What happens when traffic matches an Always a...An Application Gateway WAF policy is running in prevention mode with OWASP anomaly scoring. A single matched rule has se...
Secure compute, storage, and databases
48 questions12 easy24 medium12 hard~24% of exam
You want applications and users to connect to Azure SQL by using Microsoft Entra identities. What must be configured fir...A call center application should hide most of a customer's email address from nonprivileged users, but the actual values...How is Transparent Data Encryption configured for newly created Azure SQL databases?
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
68 questions19 easy34 medium15 hard~35% of exam
After you disable public access on an Azure Key Vault, how can clients reach the vault?In a scheduled Microsoft Sentinel analytics rule, which relationship between the query interval and the lookback period ...A company still uses the Key Vault access policy model. Why does Microsoft recommend moving to Azure RBAC for Key Vault ...
All Questions
| # | Question | Topic | Difficulty |
|---|---|---|---|
| 1 | You want applications and users to connect to Azure SQL by using Microsoft Entra identities. What mu... | Secure compute, storage, and databases | medium |
| 2 | A call center application should hide most of a customer's email address from nonprivileged users, b... | Secure compute, storage, and databases | medium |
| 3 | You are registering an internal business application that should be usable only by employees in your... | Secure identity and access | medium |
| 4 | After you disable public access on an Azure Key Vault, how can clients reach the vault? | Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel | medium |
| 5 | How is Transparent Data Encryption configured for newly created Azure SQL databases? | Secure compute, storage, and databases | easy |
Sign in to see all 200 questions
Create a free account to browse all questions — completely free during our launch phase.
Ready to test your knowledge?
Take a full Microsoft Certified: Azure Security Engineer Associate practice test with timed exam simulation.
Start Practice Test