Chapter 3 of 4 · Microsoft SC-500
Secure Compute
Securing AI apps and agents, servers and virtual machines, and application platform services such as AKS and App Service.
- 3topics
- 13 minfast track
- 20–25%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Implementing Security for AISC-500 AI security: data oversharing and Purview DSPM for AI, Copilot Studio protection, Entra Agent ID, AI Gateway, Defender for…5 min
- 2Security for Servers and Virtual MachinesSC-500 server security: disk encryption, Bastion, just-in-time access, Azure Arc, Defender for Servers, Trusted Launch and…4 min
- 3Security for Application Platform ServicesSC-500 app platform security: Defender for Containers, AKS and ACR controls, Container Apps, Functions, Logic Apps, App Service…4 min
About this chapter
What this chapter covers
Secure Compute is 20 to 25% of the SC-500 exam. It has three skill groups: implementing security for AI, for servers and virtual machines, and for application platform services.
The AI security skill group is new compared with older Azure security exams. It covers protecting data that AI tools can reach, securing AI agents and their identities, and monitoring AI workloads. The other two groups cover classic compute: VMs, containers, Functions, Logic Apps, App Service, web application firewalls and APIs.
How the topics fit together
Each compute type needs the same three things: hardened configuration, controlled access, and threat detection. Defender for Cloud plans provide the detection layer for AI services, servers and containers.
Many AI security features were new or in preview when SC-500 launched. Learn what each feature is for rather than portal details that may change.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-500 question bank has 650 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.