10% OFF VCF Special Offer – Limited Seats Available! Claim my offer
Log in Get started
Free practice test · Microsoft

Free SC-500 practice test

15 exam-style practice questions for Microsoft Cloud and AI Security Engineer (SC-500). Take your time (about 15 minutes), then see your score, the topics to work on and the correct answers with explanations.
Start the test
In this test15 questions
  • AI workload security4
  • Security: network3
  • Security: data3
  • Security operations3
  • Security: identity2
About 15 min Instant score Answers explained
1 of 15Security: network

Which option allows outbound traffic from a subnet only through Azure Firewall?

2 of 15Security: network

What is the main advantage of a private endpoint over a service endpoint?

3 of 15AI workload security

Where should customer-managed keys for encrypting an Azure OpenAI resource be stored?

4 of 15Security: data

Which Key Vault permission model uses Azure RBAC instead of vault access policies?

5 of 15Security operations

What are Sentinel playbooks built on?

6 of 15AI workload security

What is the main risk of giving an AI agent broad tool access, such as sending e-mail and deleting files?

7 of 15Security: identity

Which Microsoft Entra feature requires approval and justification before activating an Owner role?

8 of 15Security operations

What is threat hunting in Sentinel?

9 of 15AI workload security

Which Microsoft Defender for Cloud plan raises threat alerts for generative AI workloads, such as jailbreak attempts against an Azure OpenAI deployment?

10 of 15Security: data

Which feature makes Azure Blob data unchangeable for a set time to meet regulation?

11 of 15Security: data

Which storage setting should be enabled to block anonymous public read access to containers?

12 of 15Security operations

Which feature correlates related alerts into a single incident in Sentinel?

13 of 15Security: network

Which Azure Firewall SKU adds TLS inspection and IDPS?

14 of 15AI workload security

A company wants its Azure OpenAI resource reachable only from its virtual network. What should it configure?

15 of 15Security: identity

Which Azure RBAC element defines allowed actions?

See your score

We show your score, topic breakdown and the answers straight away. A counselor may WhatsApp you once to suggest the right batch; reply STOP any time.