EarnYourCert
ES EN
All exams › SC-500
Microsoft Certified Associate

SC-500 Practice Exam: Cloud and AI Security Engineer

Security controls for identity, storage, networking, compute, AI and security posture management on Azure: 329 original questions with detailed explanations, smart review and progress tracking. Independent prep resource, not affiliated with Microsoft.

Start the free practice exam →
329
Questions
50
Per exam
70%
Pass mark
4
Domains

SC-500 exam domains

Manage identity, access, and governance
20-25%
Secure storage, databases, and networking
25-30%
Secure compute
20-25%
Manage and monitor security posture
20-25%

Why practice with EarnYourCert

Detailed explanations on every question, not just the right answer.
Smart spaced-repetition review (SRS) to reinforce what you get wrong.
Progress tracking per domain and over time.
Free to start, no sign-up required.

SC-500 sample questions

Five real questions from our 329-question bank. Try to answer before revealing the solution.

1. What is the benefit of a Temporary Access Pass for onboarding a new admin with passwordless methods?

  1. It permanently replaces MFA for the account so no other method is needed
  2. The user can register passkeys or Authenticator without a credential
  3. It removes the user's existing authentication methods before onboarding
  4. It grants the Authentication Administrator role
Show answer

Correct answer: B. TAP is time-limited and intended for bootstrap and recovery.

2. Which Azure Policy effect blocks creation of a non-compliant resource?

  1. Disabled
  2. Modify
  3. Audit
  4. Deny
Show answer

Correct answer: D. Deny prevents the request; Audit only records noncompliance.

3. Which Defender for Storage capability scans uploaded blobs for malware?

  1. Lifecycle management
  2. Static website hosting
  3. Malware scanning
  4. Object replication
Show answer

Correct answer: C. Defender for Storage adds malware scanning and threat detection.

4. Which AKS configuration limits API server exposure by keeping it off the public internet?

  1. Disabling RBAC
  2. Shared kubeconfig
  3. A public cluster with open API
  4. A private cluster
Show answer

Correct answer: D. Private clusters expose the API server via a private endpoint.

5. Which role should a team lead have to create and edit analytics rules and workbooks in Sentinel?

  1. Microsoft Sentinel Reader
  2. Microsoft Sentinel Contributor
  3. Billing Reader
  4. Guest
Show answer

Correct answer: B. Contributor manages Sentinel content.

Practice all 329 questions →

Frequently asked questions

How many questions does the SC-500 practice exam have?

The question bank has 329 original questions. Each practice exam draws 50 questions weighted by domain, just like the official exam.

What's the passing score for SC-500?

Microsoft's official SC-500 exam requires a score equivalent to 70% to pass. We use the same threshold in our practice exams so you train under realistic conditions.

What domains does the SC-500 exam cover?

Four domains: manage identity, access and governance (20-25%), secure storage, databases and networking (25-30%), secure compute (20-25%), and manage and monitor security posture (20-25%).

Is the SC-500 practice exam free?

Yes, you can practice for free without signing up. Creating a free account adds progress tracking and smart review (SRS); the Pro tier removes daily question limits.

Are these the official Microsoft exam questions?

No. These are original questions written based on Microsoft's official "Skills measured" guide for SC-500, not extracts from the real exam or "exam dumps".