Domain 3: Secure compute, storage, and databases

Microsoft Azure Security Engineer (AZ-500) · this domain is approximately 24.0% of the exam · 0 practice questions.

The 'Secure compute, storage, and databases' domain covers the protective controls you apply to Azure virtual machines, containers, storage accounts, SQL databases, and related services. It tests your ability to configure disk encryption, enable Microsoft Defender for servers and databases, restrict network access to storage and SQL, and harden container workloads with Azure Kubernetes Service security features. This domain carries significant weight on the AZ-500 because misconfigurations at the infrastructure layer are among the most common sources of data exposure in cloud environments.

Practice questions from this domain

The full Microsoft Azure Security Engineer (AZ-500) bank includes 497 questions across every domain, each with a verified answer and a written explanation.