Domain 3 · 20-25% of Exam

Secure Compute, Storage, and Databases

Implement security for compute resources, storage accounts, and database services.

What You'll Be Tested On

  • Configure security for Azure Storage accounts
  • Implement database security (TDE, Always Encrypted, auditing)
  • Manage Key Vault secrets, keys, and certificates
  • Configure compute security (VM, container, App Service)

Key AWS Services in This Domain

Exam Tips for Domain 3

💡

Storage account security: disable public access, require HTTPS, use private endpoints.

💡

Always Encrypted protects sensitive columns; client-side encryption with column master key.

💡

Key Vault soft delete and purge protection prevent accidental or malicious key deletion.

Practice Domain 3 Questions

Test your knowledge of Secure Compute, Storage, and Databases with practice questions from our AZ-500 question bank.

Start Practice Quiz →

Other AZ-500 Domains