The Kindle edition of Ultra Transcenders SC-500, the study guide for the Microsoft Certified Cloud and AI Security Engineer Associate exam, is free on Amazon from Friday 23 to Sunday 25 October 2026.
By Tony Rough
The Kindle edition of Ultra Transcenders SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads is free on Amazon this weekend, from Friday 23 October to Sunday 25 October 2026.
Amazon runs free promotions from midnight to midnight Pacific time, so in the UK it’s free from about 8am on Friday until 7am on Monday 26 October (the UK clocks go back an hour on Sunday). Use the buttons below to get it from Amazon.co.uk or Amazon.com. Once you’ve downloaded it, it’s yours to keep.
SC-500 is the exam for the Microsoft Certified: Cloud and AI Security Engineer Associate certification. It replaces AZ-500 and adds securing AI workloads. Like its predecessor, it rewards knowing which control enforces a requirement, and why, rather than where a setting sits in the portal. The book is built around that:
If you’d like to see the style before downloading, several sections are free to read on this site:
SC-500 replaces AZ-500, so if you started preparing for the old exam, the identity, network, compute and data security chapters will feel familiar. Securing AI workloads and agents is new, and the book gives it a full chapter.
If the book helps, a short review on Amazon makes a real difference to an independent series. Thank you, and good luck with the exam.
Tony Rough
Microsoft moved the retirement dates for gpt-4o and extended the deadline for Application Insights query API keys to 31 March 2027. The HTTP DDoS ruleset for Front Door Premium WAF and route maps for Azure Route Server are now generally available, and Azure Firewall application rules for IPv6 are in preview.
Several partner models in Microsoft Foundry now have retirement dates, starting with Llama-4-Maverick on 19 November 2026, and the Log Analytics logging destination for Azure Container Apps is now legacy. Front Door WAF policies can now be attached to a whole profile or a single route, and Azure Backup can restore individual files from Premium SSD v2 and Ultra disks.
Microsoft Entra opens its Choose Your Own Telephony Provider option on 30 October 2026, ahead of Microsoft-provided SMS and voice retiring from 1 February 2027. Standard service endpoints, automatic zone balance for scale sets and keyless TLS on Application Gateway are now generally available.
Microsoft has published retirement dates for Azure Deployment Environments (22 February 2027) and Microsoft Dev Box (18 September 2028). WAF exceptions are now generally available on Application Gateway and Front Door, and AKS now uses a zone-redundant StandardV2 NAT gateway by default for managed NAT.
Three Azure features all promise "high availability" for virtual machines, but each protects against a different failure. Fault and update domains, zonal vs zone-redundant, Flexible vs Uniform scale sets, how they combine, and the exam traps.