Microsoft's most advanced security engineering credential — the only certification spanning identity, network, data, compute, AND AI security in one exam, built to replace AZ-500 as security responsibilities expand into Copilot and agentic AI.
SC-500 validates end-to-end security engineering across the full Azure stack: securing access with Entra ID and Key Vault, enforcing governance and regulatory compliance, locking down storage/database/network services, hardening servers and application platforms, and — new to this exam — securing the AI layer itself, from Copilot data exposure to Entra Agent ID blast-radius analysis. It's the capstone of Forge's Azure track, the credential for the security engineer who owns Microsoft Sentinel, Defender for Cloud, and Security Copilot day to day rather than one narrow slice of the environment. As organizations rush Copilot and autonomous agents into production, SC-500 is fast becoming the credential that proves someone actually secured that rollout instead of just shipping it.
Source: U.S. Bureau of Labor Statistics, Information Security Analysts (cybersecurity/cloud security engineer track) · May 2024 wage data
This course builds toward: Security Architect, Cloud Security Engineer
See all career paths →Self-paced access, AI Coach on every lesson, full-length practice exams, and a free course retake if you complete the readiness gate and still don't pass your exam on the first attempt. Exam registration and voucher are purchased separately, directly through the certifying body.
See the full curriculum100% self-paced online — study on your schedule, no bootcamp seat to book.
Training a whole team on SC-500? Fund a Training Bank account for any amount, then assign any course to any employee — self-serve, published discount tiers, no sales call.
Set up your team account
