Cloud administration and cloud security are two halves of the same job. The person who builds a virtual network should also know how to lock it down, and the person who secures a subscription needs to understand how it was built. That is the thinking behind combining Azure Administrator (AZ-104) and Microsoft Cloud and AI Security Engineer (SC-500) in one learning path.
Update: Microsoft retired AZ-500 (Azure Security Engineer) on 31 August 2026. SC-500 is its successor: it keeps the Azure security skills and adds the security of AI workloads.
What each certification proves
- AZ-104 covers managing identities and governance, storage, compute, virtual networking, and monitoring and backup. It shows you can run an Azure environment.
- SC-500 covers identity and access security, network security, securing compute, storage and data, security operations, and protecting AI workloads. It shows you can protect one.
Why study them together
- Shared foundations. Entra ID, RBAC, virtual networks and storage accounts appear in both exams. Learning them once, deeply, is faster than learning them twice.
- Labs build on each other. The network you create for AZ-104 becomes the network you segment, firewall and monitor for SC-500.
- Better habits. When security is part of the first build, you stop treating it as an afterthought.
A sensible study order
Start with governance (subscriptions, RBAC, policy), then storage, compute and networking. Only then add Conditional Access, Privileged Identity Management, Azure Firewall, Key Vault, Defender for Cloud, Microsoft Sentinel and the controls for AI services. Finish each week with a lab that you could explain to a colleague.
Before you book the exams
Both exams are booked with Microsoft, and the objectives are updated from time to time. Always check the current skills-measured document on Microsoft Learn before you schedule. Our Azure Cloud Admin + Security Engineer Career Accelerator program follows the current outline and includes timed practice assessments on this platform.
