AZ-500 remains a useful skills map for Azure security work, but Microsoft lists the Azure Security Engineer Associate exam for retirement in 2026. Teams should not ignore the content. They should decide whether to finish the exam path before retirement or turn the domains into an internal Azure security workshop.
Primary source checked on 2026-05-10: Microsoft retired certification exams list. Use the Microsoft page as the final source of truth before booking an exam or committing a remediation plan.
Who this is for
- Azure administrators who planned to use AZ-500 as their security follow-up.
- Security engineers responsible for Defender for Cloud, Key Vault, network security, identities, and platform hardening.
- Managers who need to keep Azure security skills current even when a certification path changes.
What to work on first
- Confirm the retirement date on Microsoft Learn before booking any exam attempt.
- Prioritize reusable skills: identity protection, network security, data protection, Defender for Cloud, Key Vault, and workload hardening.
- If the exam window is too tight, convert the study plan into a security readiness workshop with tenant and subscription evidence.
Team training angle
The best AZ-500 replacement for a team is a hands-on Azure security sprint. Use the exam domains as the agenda, but make the output a set of real controls and remediation actions.
One-week action plan
- Day 1: role assignments, privileged access, managed identities, and Key Vault.
- Day 2: network controls, private endpoints, firewalls, WAF, and NSGs.
- Day 3: Defender for Cloud recommendations and regulatory compliance.
- Day 4: logging, alerting, Sentinel handoff, and incident workflow.
- Day 5: remediation backlog and certification decision.
Where Cloud Evolvers fits
Cloud Evolvers can help teams turn AZ-500 content into a practical Azure security workshop even if the public certification path changes.