Free Practice Tests36 exams · real exam timerStart free
Microsoft Azure Live online

Microsoft Cloud and AI Security Engineer Associate (SC-500) Training

CertOcean's Microsoft Cloud and AI Security Engineer Associate (SC-500) training is a live, instructor-led online course that prepares you for the Microsoft Cloud and AI Security Engineer Associate (SC-500) certification exam. You learn in 15 live sessions (30 hours in total) with an expert instructor, work through 8 curriculum modules with hands-on assignments and keep lifetime access to the class recordings.

  • 30 hoursLive training
  • 15 sessionsWith an instructor
  • 8 modules56 topics
  • Sat, Nov 14Next batch
SC-500 Microsoft AzureExam-focused live training
$554 $640 One-time · USD
You save$8613% off
Enroll now
Not sure yet? Talk to a course advisor
Course overview

About the Microsoft Cloud and AI Security Engineer Associate (SC-500) training

What is the SC-500 exam?

  • Full name: Exam SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads
  • Certification: Microsoft Certified: Cloud and AI Security Engineer Associate (replaced AZ-500; available since July 21, 2026)
  • Duration: 120 minutes; passing score: 700 on a scale of 1–1000; Microsoft does not publish the number of questions
  • Delivery: Pearson VUE test center or online; price is set by country (Associate exams typically cost US$165 in the US)
  • Renewal: free online renewal assessment on Microsoft Learn every year
  • If you hold AZ-500, it stays on your Microsoft Learn transcript but can no longer be renewed

This course includes

  • Instructor-led live classes30 hours of live online classes: 6 sessions of 5 hours each.
  • AssignmentsEvery class is followed by hands-on lab practice.
  • Lifetime accessKeep lifetime access to all course material, including presentations, quizzes, installation guides and class recordings.
  • 24/7 expert supportOur support team is available 24x7 to answer technical questions.
  • CertificationComplete the course and project to receive CertOcean's course completion certificate for SC-500 Cloud and AI Security Engineer training. The Microsoft certification is earned by passing the SC-500 exam.

What you'll learn in this course

  • Secure access with Microsoft Entra ID: Conditional Access, PIM, MFA, passwordless and managed identities
  • Protect secrets, keys and certificates with Azure Key Vault and Defender for Key Vault
  • Enforce governance and compliance with Azure Policy, RBAC and Microsoft Defender for Cloud
  • Secure storage, Azure SQL and networks with firewalls, private endpoints and Azure Firewall
  • Secure AI workloads and agents with Purview DSPM, Defender for AI services and Foundry guardrails
  • Protect servers, containers and app services with Defender for Servers, Defender for Containers and WAF
  • Detect and respond to threats with Microsoft Sentinel and Microsoft Security Copilot
  • Prepare confidently for the SC-500 exam, the successor of AZ-500

What will you learn in SC-500 training?

CertOcean's SC-500 training prepares you for the exam that replaced AZ-500. It follows Microsoft's four SC-500 skill areas:

  • Manage identity, access and governance (20–25%): Microsoft Entra ID, Privileged Identity Management, Conditional Access, Azure Key Vault, Azure Policy and RBAC
  • Secure storage, databases and networking (25–30%): storage accounts, Azure SQL, network security groups, Azure Firewall, Private Link and Microsoft Entra Private Access
  • Secure compute (20–25%): AI workloads and agents, servers and VMs, containers, AKS, App Service, Functions and API Management
  • Manage and monitor security posture (20–25%): Microsoft Defender for Cloud, Microsoft Sentinel and Microsoft Security Copilot

Through hands-on labs and real-world scenarios, you learn to secure Azure, hybrid and multicloud environments and the AI workloads running on them.

Curriculum

Microsoft Cloud and AI Security Engineer Associate (SC-500) course syllabus

8 modules · 56 topics · 30 hours of live training

Securing Access with Microsoft Entra ID 6 topics
  • Privileged Identity Management (PIM)
  • Conditional Access policies
  • Authentication methods: MFA and passwordless
  • Identity for applications: enterprise apps and app registrations
  • OAuth permission grants and consent settings
  • Managed identities for Azure resources
Protecting Secrets and Keys with Azure Key Vault 5 topics
  • Deploying and configuring Key Vault
  • Access control and firewall settings
  • Managing keys, secrets and certificates
  • Scanning for secrets with Defender CSPM
  • Microsoft Defender for Key Vault
Governance and Regulatory Compliance 7 topics
  • Azure Policy: built-in and custom definitions
  • Regulatory compliance and security standards in Defender for Cloud
  • Resource locks
  • Built-in and custom roles (Azure and Microsoft Entra)
  • Finding and fixing overprivileged access with RBAC
  • Security controls for Azure Backup
  • Security controls with infrastructure as code
Securing Storage and Databases 6 topics
  • Storage account security and firewall rules
  • Defender for Storage threat protection
  • Managing access to storage and access policies
  • Platform-level security in Azure SQL
  • Auditing for Azure SQL Database and SQL Managed Instance
  • Defender for Databases
Securing Azure Networking 7 topics
  • Network security groups and application security groups
  • Network access policies with Azure Virtual Network Manager
  • Azure Virtual WAN and VPN security
  • Microsoft Entra Private Access
  • Private endpoints and Azure Private Link
  • Azure Firewall
  • Evaluating effective security rules with Network Watcher
Securing AI Workloads 8 topics
  • Finding data overexposure in SharePoint
  • AI and Copilot risks with Microsoft Purview DSPM
  • Real-time protection for Copilot Studio agents
  • Conditional Access and access management for Microsoft Entra Agent ID
  • Blast-radius analysis with Defender XDR
  • AI Gateway in Azure API Management for Microsoft Foundry
  • Defender for AI services and the Data and AI security dashboard
  • Guardrails for agents in Foundry and managing agents in the Microsoft 365 admin center
Securing Servers, Containers and App Services 8 topics
  • Disk encryption, Azure Bastion and just-in-time VM access
  • Trusted launch features: secure boot, vTPM and integrity monitoring
  • Hybrid and multicloud servers with Azure Arc
  • Defender for Servers, vulnerability scanning, EDR and agentless scanning
  • Azure Machine Configuration
  • Defender for Containers, AKS, Container Registry, Container Instances and Container Apps
  • Securing Azure Functions, Logic Apps and App Service
  • Web Application Firewall and API Management policies
Managing Security Posture and Operations 9 topics
  • Defender CSPM and compliance with security frameworks
  • Defender for Cloud workload protection plans
  • Connecting AWS and Google Cloud to Defender for Cloud
  • Defender Vulnerability Management and Defender EASM
  • Microsoft Sentinel: workspaces, roles, content hub and data connectors
  • Syslog, CEF and Windows Security event collection
  • Custom log tables, automation rules, playbooks and data retention
  • Querying Microsoft Purview Audit in Defender XDR
  • Microsoft Security Copilot: workspaces, roles, plugins and agents

Get the detailed syllabus

Receive the full module plan, batch timings and a call with an advisor who can answer your exam questions.

Request syllabus
Upcoming batches

Next Microsoft Cloud and AI Security Engineer Associate (SC-500) batches

Live online classes with an instructor. Pick the weekend or weekday batch that suits you.

Batch details
  • FormatLive online
  • Sessions15 live sessions
  • Total30 hours
  • BatchesWeekend and weekday
Weekend batch

Starts Saturday, November 14

Starts in 2 days · Live online

Enroll
Weekday batch

Starts Monday, November 16

Starts in 4 days · Live online

Enroll
Flexible

Need another date or time?

Ask for a private or custom schedule.

Ask us
Sample certificate
Certification

Earn your Microsoft Cloud and AI Security Engineer Associate (SC-500) certificate

  • Certificate of completionIssued by CertOcean when you finish the training and assignments.
  • Official Microsoft Azure certificationAwarded by Microsoft Azure when you pass the exam. The course is built to get you there.
  • Show it to employersAdd it to your LinkedIn profile and resume.
Start your certification
Learner reviews

Why learners choose CertOcean

Rated Excellent · 4.9 out of 5 on Trustpilot
The training curriculum was great. CertOcean provided me everything required to obtain my CISM. They're excellent!
Laxmi Haya Vadan KaramcheduUnited States · CISMVerified
Very resourceful company, I passed my PMP exam at first attempt, highly recommended.
IjeomaCanada · PMPVerified
Great training support! Helped me pass several certifications.
Cozumel TyUnited StatesVerified
  • US, Canada and UK hoursClasses set around your working day
  • Expert instructorsWorking professionals in your field
  • Career supportResume and interview help
FAQ

Microsoft Cloud and AI Security Engineer Associate (SC-500) course FAQs

Can't find your answer? A course advisor can help with the syllabus, batch dates and exam questions.

How long is the Microsoft Cloud and AI Security Engineer Associate (SC-500) course, and when does it start?

The course runs for 30 hours of live, instructor-led online training across 15 sessions. Weekend and weekday batches are available, and the next batch starts on Saturday, November 14, 2026.

What projects are included in SC-500 training?

You work on real-world projects that apply what you learn to Azure, hybrid and multicloud security scenarios. Each project tests your skills and practical knowledge so you are ready for real work.

What if I miss a live SC-500 session?

You can watch the recording of the session in your learning portal. You can also retake the course free of charge within one year.

What are the system requirements for SC-500 training?

You only need a stable internet connection and, ideally, a headset.

How will I practice in SC-500 training?

We give you a step-by-step guide to creating a free Microsoft Azure trial account with your own login, so you can practice every lab.

Does SC-500 training include the exam fee?

Yes. The course fee includes the SC-500 exam fee.

Will I get a certificate after the Microsoft Cloud and AI Security Engineer Associate (SC-500) training?

Yes. You receive a CertOcean certificate of completion when you finish the training. The official Microsoft Azure certification is awarded by Microsoft Azure when you pass the exam, and this course prepares you for it.

What if I don't pass the Microsoft Cloud and AI Security Engineer Associate (SC-500) exam?

Choose CertOcean's No Pass, No Pay exam assistance. If you don't pass on your first attempt, your exam assistance fee comes back under the refund terms. Training-only plans are not covered.

Free course consultation

Talk to a Microsoft Cloud and AI Security Engineer Associate (SC-500) advisor

Share your details and we will send the syllabus, the next batch dates and the best plan for your exam date.

  1. 1Tell us your goal and exam date
  2. 2Get the syllabus and batch options
  3. 3Enroll when you are ready

Get the syllabus and batch dates

Takes under a minute. No payment needed.

Course

Microsoft Cloud and AI Security Engineer Associate (SC-500)

By sending this form you agree to our Terms of Use and Privacy Policy. We never share your details.