Microsoft AZ-500 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Manage identity and access (30-35%) | |
| Manage Azure Active Directory identities | - configure security for service principals - manage Azure AD directory groups - manage Azure AD users - manage administrative units - configure password writeback - configure authentication methods including password hash and Pass Through Authentication (PTA), OAuth, and passwordless - transfer Azure subscriptions between Azure AD tenants |
| Configure secure access by using Azure AD | - monitor privileged access for Azure AD Privileged Identity Management (PIM) - configure Access Reviews - Configure PIM - implement Conditional Access policies including Multi-Factor Authentication (MFA) - configure Azure AD identity protection |
| Manage application access | - create App Registration - configure App Registration permission scopes - manage App Registration permission consent - manage API access to Azure subscriptions and resources |
| Manage access control | - configure subscription and resource permissions - configure resource group permissions - configure custom RBAC roles - identify the appropriate role
- interpret permissions
|
Implement platform protection (15-20%) | |
| Implement advanced network security | - secure the connectivity of virtual networks (VPN authentication, Express Route encryption) - configure Network Security Groups (NSGs) and Application Security Groups (ASGs) - create and configure Azure Firewall - implement Azure Firewall Manager - configure Azure Front Door service as an Application Gateway - configure a Web Application Firewall (WAF) on Azure Application Gateway - configure Azure Bastion - configure a firewall on a storage account, Azure SQL, KeyVault, or App Service - implement Service Endpoints - implement DDoS protection |
| Configure advanced security for compute | - configure endpoint protection - configure and monitor system updates for VMs - configure authentication for Azure Container Registry - configure security for different types of containers
- implement Azure Disk Encryption
|
Manage security operations (25-30%) | |
| Monitor security by using Azure Monitor | - create and customize alerts - monitor security logs by using Azure Monitor - configure diagnostic logging and log retention |
| Monitor security by using Azure Security Center | - evaluate vulnerability scans from Azure Security Center - configure Just in Time VM access by using Azure Security Center - configure centralized policy management by using Azure Security Center - configure compliance policies and evaluate for compliance by using Azure Security Center - configure workflow automation by using Azure Security Center |
| Monitor security by using Azure Sentinel | - create and customize alerts - configure data sources to Azure Sentinel - evaluate results from Azure Sentinel - configure a playbook |
| Configure security policies | - configure security settings by using Azure Policy - configure security settings by using Azure Blueprint |
Secure data and applications (20-25%) | |
| Configure security for storage | - configure access control for storage accounts - configure key management for storage accounts - configure Azure AD authentication for Azure Storage - configure Azure AD Domain Services authentication for Azure Files - create and manage Shared Access Signatures (SAS)
- configure Storage Service Encryption |
| Configure security for databases | - enable database authentication - enable database auditing - configure Azure Defender for SQL - implement database encryption
|
| Configure and manage Key Vault | - manage access to Key Vault - manage permissions to secrets, certificates, and keys
- manage certificates |
Reference: https://www.microsoft.com/en-us/learning/exam-az-500.aspx
What are the requirements for the Microsoft AZ-500 exam?
The potential candidates for this certification exam are Azure Security Engineers. These specialists serve as the members of a bigger team that works on Cloud-based security and management or hybrid environments. Although the test has no official prerequisites, it is recommended that the students have a good understanding of the exam topics. The applicants should also have the skills in automation and scripting as well as an extensive understanding of networking and virtualization. It’s also important that the individuals get familiar with Cloud capabilities as well as Azure services and products and other products and services offered by Microsoft.
1042 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
