Az-305 Designing Microsoft Azure Infrastructure Solutions Study Guide
Free community-driven exam analysis for Microsoft. Based on 20 community-discussed topics.
Exam Overview
The AZ-305 certification validates your expertise in designing infrastructure solutions on the Microsoft Azure platform. It is intended for experienced Azure Solutions Architects who focus on computing, storage, network, and security services to build scalable, resilient, and secure cloud environments.
Exam Domains
- Design identity, governance, and monitoring solutions
- Design data storage solutions
- Design business continuity solutions
- Design infrastructure solutions
Key Concepts & Common Difficulties
- Governance at Scale: Candidates often struggle with balancing centralized control against decentralized autonomy. The correct approach involves implementing Azure Policy and Blueprints for consistent compliance while using Management Groups for hierarchical isolation.
- Storage Performance Tiers: Many overlook the nuanced differences between hot, cool, archive, and premium SSD tiers. Success requires mapping workload access patterns and IOPS requirements to specific storage accounts and redundancy options like LRS, ZRS, or GRS.
- Networking Hybrid Connectivity: Designers frequently confuse ExpressRoute with VPN Gateway capabilities. You must correctly choose between private peering, public peering, and Microsoft peering based on traffic flow, latency sensitivity, and bandwidth needs.
- Disaster Recovery Strategies: A common pitfall is selecting a DR solution without considering RPO and RTO constraints accurately. Evaluate whether Azure Site Recovery, Geo-Restore, or Multi-region replication best fits the business continuity requirements.
- Security Identity Integration: Integrating Azure AD with on-premises Active Directory can be complex. Focus on understanding password hash sync vs. pass-through authentication vs. federated identity to ensure seamless user experience and security posture.
Study Strategy
1. Prerequisites: Ensure you have hands-on experience with Azure services and consider holding the AZ-104 or AZ-900 certification as a foundation. 2. Study Order: Start with Governance and Identity, then move to Networking and Security, followed by Data Storage, and finally Business Continuity. 3. Practice Approach: Use scenario-based questions to practice decision-making. Focus on understanding why one solution is better than another in a given context rather than memorizing features. 4. Lab Experience: Build real-world architectures in the Azure portal to visualize how components interact. Experiment with Terraform or ARM templates for infrastructure-as-code practice. 5. Exam-Day Tips: Read each question carefully to identify keywords like "minimize cost" or "maximize availability." Eliminate obviously incorrect options first and choose the most architecturally sound solution.
What You'll Find Here
- 8 highly debated topics with expert breakdown and analysis
- 12 community-verified topics with consensus explanations
- Debate ranking showing which concepts cause the most confusion
Study Recommendation
Focus on the debated topics first — these represent the areas where candidates most frequently struggle on the actual exam.
Featured Analysis
Most debated concepts with community insight
HOTSPOT You plan to deploy multiple containerized microservice-based apps to Azu
The exam tests whether you can separate application-level building blocks (Dapr state and pub/sub) from network-level traffic control (Istio routing/s
S-Grade · Deep AnalysisHOTSPOT You are planning an Azure Storage solution for sensitive data. The data
The item tests immutable blob storage (WORM retention) combined with cost-aware access-tier selection; the trap is picking a storage account resource
S-Grade · Deep AnalysisHOTSPOT You are planning an Azure Storage solution for sensitive data. The data
The exam tests whether you know that blob immutability is a container/blob-level WORM policy, not an Azure Resource Manager lock, and that daily reads
S-Grade · Deep AnalysisYou have an Azure subscription. You plan to deploy a monitoring solution that wi
The question tests whether you know that these four services are solutions layered on top of the same Log Analytics workspace rather than four indepen
S-Grade · Deep AnalysisA company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant th
This item tests external identity for cross-tenant Azure RBAC access — the trap is choosing an on-premises forest trust or a Microsoft 365 organizatio
S-Grade · Deep AnalysisReady to practice?
Access 95 AZ-305 questions with instant feedback and detailed explanations.
View AZ-305 Practice Questions →