Azure AZ-500 study materials
Azure AZ-500 study resources

Azure AZ-500 case studies

Azure AZ-500 · Put your knowledge to work in context.

The Microsoft Certified: Azure Security Engineer Associate is an intermediate-level Microsoft certification, listed as a Security credential with the Security Engineer role and Azure as its product. It is aimed at professionals who implement, manage, and monitor security for resources in Azure plus multi-cloud and hybrid environments as part of an end-to-end infrastructure. The Azure AZ-500 case studies are 5 cases and about 3,834 words.

1

Break-Glass Accounts Blocked After Conditional Access Enforcement

Fabrikam has 6,200 users in a single Microsoft Entra tenant, synchronized from on-premises AD with Entra Connect. Twelve standing Global Administrators use synchronized accounts.

666 words, about 3 min
2

Private Endpoint Reachable from Nowhere: DNS and Forced Tunneling

Northwind runs a hub-and-spoke network. The hub VNet is 10.0.0.0/16 and contains Azure Firewall at 10.0.1.4 plus subnet 10.0.2.0/24 reserved for private endpoints.

743 words, about 4 min
3

Key Vault Lockdown Breaks the Secrets Store CSI Driver

Tailspin runs an AKS cluster (3 node pools, 60 pods) in West Europe using Azure CNI. Pods read 14 secrets from a Key Vault through the Secrets Store CSI driver, authenticating with a user-assigned managed identity federated to a Kubernetes service account; that identity has Key Vault Secrets User on a vault that uses Azure RBAC for data-plane authorization.

758 words, about 4 min
4

Defender for Cloud: A Flat Secure Score and Missing Agent Data

Litware has 180 subscriptions under six management groups. Defender for Cloud has Defender CSPM enabled on two management groups and Defender for Servers Plan 2 on the production management group only; dev/test subscriptions have only the free foundational CSPM tier.

772 words, about 4 min
5

Sentinel: Cutting Incident Noise and Cost Without Losing Coverage

Adventure Works runs one Microsoft Sentinel workspace in West Europe with 90 GB/day average ingestion. Three tier-1 analysts triage 250 incidents a day and close 220 as benign.

895 words, about 4 min