AZ-500 Azure Security Engineer retired on August 31, 2026: the SC-500 route

By Alexander Shick · Updated November 5, 2026

The security engineer role SC-500 now certifies

Microsoft describes the SC-500 candidate as a security engineer who protects organizational systems and data across cloud and hybrid environments, spanning identity, network, application, data and compute, and who also helps ensure that the platforms, data, identities and infrastructure used by AI workloads are securely implemented and monitored. AZ-500 covered the same Azure infrastructure security without the AI workload and Microsoft 365 parts. If you hold AZ-500, Microsoft says it stays valid until it expires, but it cannot be renewed.

SC-500 eligibility, experience and exam format

Formal eligibility. Microsoft lists no prerequisite certification for SC-500.

Recommended experience. Microsoft says you should have practical experience in administration of Azure and hybrid environments, including compute, network and storage, strong familiarity with Microsoft Entra ID, and familiarity with Microsoft 365 administration. AZ-500 asked for the Azure and Entra ID experience but not Microsoft 365.

The exam. SC-500 gives 120 minutes, needs 700 to pass and is proctored, with possible interactive components. Microsoft's replacement plan said the SC-500 exam was expected in July 2026, and the certification page now offers scheduling. Microsoft says its Practice Assessment for SC-500 is not available yet. The study guide, last updated May 13, 2026, weights four areas:

Preparation routes for SC-500

Free official training. Microsoft Learn publishes the SC-500T00 course content as self-paced learning paths, covering Entra ID, Key Vault, governance and compliance, Azure Storage and SQL security, network security and a path on securing AI. Microsoft also offers an exam sandbox. This suits engineers who already secure Azure and can test controls in their own subscription.

Practice exams. Tutorials Dojo sells an SC-500 set; with Microsoft's own Practice Assessment not yet available, an independent set is one of the few ways to rehearse timing.

The official instructor-led course. Microsoft's course is SC-500T00, Implement end-to-end security controls for cloud and AI workloads, listed at four days with instructor-led sessions and hands-on labs. ONLC teaches a class on the same outline. It suits people whose employer pays, or who want guided lab time on AI workload security.

What SC-500 preparation costs

Costs people miss. Each retake is another $165; Microsoft requires 24 hours before a first retake and 14 days between later ones, up to five attempts in 12 months. AZ-500 vouchers or class credits bought earlier cannot buy an AZ-500 exam now, so ask the seller whether they transfer to SC-500. Azure resources you create for practice are billed to your subscription.

Checking an SC-500 class before you pay

• SC-500, not AZ-500 material. Ask whether the class follows SC-500T00, including the securing-AI path, rather than an updated AZ-500 deck. ONLC's outline lists the SC-500 modules.
• Voucher. ONLC's page lists a $2,395 fee and Learning Credits as a savings option, without an exam voucher, so add $165.
• Lab tenant. SC-500 includes Microsoft 365 familiarity; ask whether labs include a Microsoft 365 and Entra ID tenant as well as Azure, and for how long.
• State approval. ONLC notes that the course has not yet been approved by the New Hampshire Department of Education; ask if that matters for your funding.

Validity and renewal after the switch

The AZ-500 renewal assessment retired on August 31, 2026, so an existing Azure Security Engineer Associate lapses on its expiry date. SC-500 renews like other Microsoft associate certifications: it expires each year, and you renew free by passing an open-book online assessment on Microsoft Learn in the six months before expiry.

For security teams with AZ-500 holders

If SC-100 is the next step. Microsoft's Cybersecurity Architect Expert page lists the prerequisite as one of the Identity and Access Administrator, Security Operations Analyst or Cloud and AI Security Engineer Associate certifications. The Azure Security Engineer Associate is no longer on that list, so SC-500 counts; if you hold a valid AZ-500, confirm with Microsoft whether it still counts before you book SC-100.

Staff with a valid AZ-500 keep it until it expires, so plan SC-500 for each person around that date rather than all at once. Ask whether your Microsoft agreement includes training days or exam vouchers that apply to SC-500.

AZ-500 retirement questions

When did AZ-500 retire?

August 31, 2026, together with the certification and its renewal assessment.

What replaced AZ-500?

Exam SC-500 for the Microsoft Certified: Cloud and AI Security Engineer Associate, $165 in the US.

Is my AZ-500 certification still valid?

Yes, until its expiry date. You cannot renew it after the retirement.

Do I need AZ-104 before SC-500?

No. Microsoft lists no prerequisite certification, though it expects practical Azure administration experience.

Next step

Send your security background and target date and we will suggest an SC-500 study route and classes.

Ask for help choosing SC-500 (replacing AZ-500) training