Official blueprint
The AZ-500 exam covers 2 domains. Each domain has a defined weight — the percentage of exam questions it contributes. Courseiva has 1,073 practice questions mapped across these objectives.
Click any objective to see practice questions for that domain.
Manage identity and access is roughly 9% of AZ-500 and concentrates on Microsoft Entra ID: users, groups, and external identities; authentication methods including MFA and passwordless; conditional access policies; and privileged identity management. Expect scenario questions where you choose the least-privilege configuration, diagnose why a sign-in or policy failed, and map governance controls such as access reviews and PIM role assignments to a stated requirement.
184 practice questions available
Secure networking is 24% of AZ-500 and covers designing and configuring network controls that protect Azure workloads. Expect scenario items on NSG and Azure Firewall rules, service endpoints versus private endpoints, VNet peering and routing, DDoS Protection, and Bastion or VPN access, plus interpreting effective security rules and diagnosing connectivity failures.
255 practice questions available
Start with the highest-weight domain — that's where most of your exam questions will come from. Work through each objective's practice questions until you can answer at least 85% correctly. Return to lower-weight domains last, and use the full practice test to test cross-domain recall.