SC-500 vs AZ-500: what changed?
AZ-500 and the Microsoft Certified: Azure Security Engineer Associate certification retired on August 31, 2026, along with their renewal assessments. Microsoft’s notice is blunt: “You will no longer be able to earn or renew this certification after this date.”
SC-500 is the current Microsoft exam for the security engineer role. Most of your AZ-500 knowledge still applies — but the exam was reorganised, and one substantial new area was added.
The domains, side by side
AZ-500 — four areas:
- Secure identity and access
- Secure networking
- Secure compute, storage, and databases
- Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
SC-500 — four areas:
| Area | Weight |
|---|---|
| Manage identity, access, and governance | 20–25% |
| Secure storage, databases, and networking | 25–30% |
| Secure compute | 20–25% |
| Manage and monitor security posture | 20–25% |
Same number of domains, redrawn boundaries. Networking moved in with storage and databases. Compute became its own domain — and that is where the new material went. Governance was promoted into the identity domain title. Defender for Cloud and Sentinel became “manage and monitor security posture”.
The big change: securing AI
The single most important difference is a block of objectives inside secure compute called implement security for AI. None of it existed on AZ-500:
- Identifying overexposure of data in SharePoint
- Identifying Copilot and AI app risks with Microsoft Purview DSPM
- Real-time protection for Copilot Studio agents
- Conditional access for Microsoft Entra Agent ID
- Blast radius analysis for Entra Agent ID using Defender XDR
- Managing Entra Agent ID access
- AI Gateway in Azure API Management for Microsoft Foundry
- Defender for AI Services in Cloud Workload Protection
- Guardrails for agent security in Foundry
- The Data and AI security dashboard in Defender for Cloud
- Managing agents in the Microsoft 365 admin center
Two ideas underpin all of it. First, agents are identities — Entra Agent ID means an agent gets an identity you govern with conditional access and whose blast radius you can analyse. Second, oversharing is now a security problem, because a Copilot that can read everything a user can read turns dormant overpermissioning into immediate exposure.
Other additions
Beyond AI, SC-500 pulled in material AZ-500 either lacked or touched lightly:
- Microsoft Security Copilot — workspaces, permissions, plugins, agents.
- Microsoft Entra Private Access and Azure Virtual Network Manager.
- Defender EASM for discovering unprotected assets.
- Deeper container coverage: Defender for Containers, AKS, Container Registry, Container Instances, Container Apps.
- More explicit governance: Azure Policy, resource locks, custom roles, remediating overprivileged RBAC, backup protection, infrastructure as code.
- More Microsoft 365 reach, hence the “familiarity with Microsoft 365 administration” in the audience profile.
What carries over unchanged
A great deal. Entra ID, PIM, conditional access, MFA and passwordless, managed identities, Key Vault, NSGs and ASGs, Azure Firewall, private endpoints and Private Link, VPN, storage and SQL security, disk encryption, Bastion, JIT VM access, Arc, Defender for Servers, App Service, Functions, WAF, Defender for Cloud and Sentinel. If you studied AZ-500, this is most of your effort already banked.
Held AZ-500?
Your certification remains on your transcript, but it can no longer be renewed — the renewal assessments retired with it. When it lapses, SC-500 is the route to a current credential in this role.
The practical estimate: if you passed AZ-500 recently, budget roughly two to three weeks rather than six. Spend most of it on the AI objectives, Security Copilot, Entra Private Access, Virtual Network Manager and the container material, then revise the rest lightly.
One thing that got harder
AZ-500 was offered in ten languages. SC-500 is currently English only. If you sat AZ-500 in your own language, that is a real change — request the additional 30 minutes Microsoft offers when a localised version is unavailable.