AZ-500 retired on 31 August 2026. Its successor is SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads , so from this week the series follows the SC-500 study guide. Most of it is the same Azure security you know (identity, Key Vault, networking, Defender for Cloud, Sentinel). The new part is securing AI . This week: Defender for AI alerts, keyless access to Microsoft Foundry, user consent for apps, Entra-only Azure SQL and Trusted launch VMs.

How to use these: read the question, pick your answer before you open Answer , and write it down (or in the comments). Then check the "why not the others" part even if you got it right: that is where the exam traps live. Every scenario, name and number is made up by me; only the question formats follow the real exam.

Table of contents

Q011: Someone tried to jailbreak the chatbot.…