Microsoft AZ-305, Designing Microsoft Azure Infrastructure Solutions, is a key exam for the Azure Solutions Architect Expert certification. It is designed for professionals who plan, design, and recommend Azure solutions across identity, governance, storage, business continuity, and infrastructure. This exam matters because it validates the ability to create secure, scalable, and reliable Azure architectures for real-world business needs. Passing AZ-305 demonstrates strong solution design skills for advanced cloud roles.
| # | Exam Topics | Sub-Topics | Approximate Weightage (%) |
|---|---|---|---|
| 1 | Design Identity, Governance, and Monitoring Solutions | Identity strategy, access management, governance controls, monitoring and alerting | 25% |
| 2 | Design Data Storage Solutions | Storage account design, data redundancy, data protection, storage access patterns | 25% |
| 3 | Design Business Continuity Solutions | Backup planning, disaster recovery, high availability, recovery objectives | 25% |
| 4 | Design Infrastructure Solutions | Networking design, compute planning, virtualization choices, application infrastructure | 25% |
The AZ-305 exam tests how well candidates can design Azure solutions that meet technical and business requirements. It focuses on practical decision-making, architecture planning, and the ability to choose the right services for identity, storage, resilience, and infrastructure. Candidates need more than theory because the exam measures applied knowledge, scenario analysis, and solution design depth.
QA4Exam.com helps you prepare for the Microsoft AZ-305 exam with an Exam PDF that includes actual questions and answers, plus an Online Practice Test that mirrors the exam style. These resources help you understand the question patterns, review verified answers, and build confidence before test day. The practice test also gives you real exam simulation and time management practice, which is important for handling the pressure of the actual exam. With updated content and focused preparation, you can study smarter and improve your chances of passing on the first attempt.
This exam is for candidates pursuing the Azure Solutions Architect Expert certification and for professionals who design Azure infrastructure solutions.
Yes, it can be challenging because it tests solution design skills across multiple Azure areas, not just memorized facts.
Braindumps alone are not enough. You should also understand the concepts and use practice tests to strengthen your preparation.
Hands-on experience is very helpful because the exam focuses on practical design decisions and real-world Azure solutions.
The Exam PDF and Online Practice Test help you review actual questions and answers, practice under exam-like conditions, and improve readiness before test day.
QA4Exam.com offers an Exam PDF and an Online Practice Test so you can study offline and also simulate the exam experience online.
Yes, the materials are presented as verified questions and answers to support accurate and focused exam preparation.
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group'. Group i is configured Tor assigned membership. Group I has 50 members. including 20 guest users.
You need To recommend a solution for evaluating the member ship of Group1. The solution must meet the following requirements:
* The evaluation must be repeated automatically every three months
* Every member must be able to report whether they need to be in Group1
* Users who report that they do not need to be in Group 1 must be removed from Group1 automatically
* Users who do not report whether they need to be m Group1 must be removed from Group1 automatically.
What should you include in me recommendation?
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#learn-about-access-reviews
Have reviews recur periodically: You can set up recurring access reviews of users at set frequencies such as weekly, monthly, quarterly or annually, and the reviewers will be notified at the start of each review. Reviewers can approve or deny access with a friendly interface and with the help of smart recommendations.
An administrator creates an access review of Group C with 50 member users and 25 guest users. Makes it a self-review. 50 licenses for each user as self-reviewers.* https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#example-license-scenarios
There are 4 requirements and every single one is only met by access reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#when-should-you-use-access-reviews
Dynamic User is needed if a user must be automatically granted access on base of its attributes (department, jobtitle, location, etc.) https://techcommunity.microsoft.com/t5/itops-talk-blog/dynamic-groups-in-azure-ad-and-microsoft-365/ba-p/2267494
Implementing Azure AD PIM is no solution and absolutely not necessary for access reviews. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#where-do-you-create-reviews
You have a Microsoft Dataverse instance named dv1 and an Azure Cosmos DB database named dbl.
You need to develop a solution to update dbl automatically when a record is updated in dv1. The solution must minimize development effort.
What should you include in the solution?
To develop a solution that updates Azure Cosmos DB automatically when a record is updated in Microsoft Dataverse with minimal development effort, the recommendation should include <strong>automated flows in Microsoft Power Automate (Cloud Flows)</strong>. Power Automate provides pre-built connectors for both Dataverse and Cosmos DB, enabling no-code or low-code automation. When a Dataverse record is updated, an automated trigger initiates an action that updates the corresponding document in Cosmos DB. This approach minimizes development effort by eliminating the need for custom code, APIs, or complex integration logic. Power Automate handles authentication, retry logic, and error handling automatically.
You have an on-premises datacenter named Site1 that contains multiple servers.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines. VNet1 uses the default Azure DNS service. Site1 connects to VNet1 by using a Site-to-Site (S2S) VPN.
You need to recommend a DNS solution that will forward DNS queries from the virtual machines that target the on-premises DNS namespace to the on-premises DNS servers. The solution must minimize administrative effort and costs.
What should you include in the recommendation?
To forward DNS queries from Azure virtual machines to on-premises DNS servers while minimizing administrative effort and costs, <strong>Azure DNS Private Resolver</strong> is the recommended solution. It allows you to resolve on-premises DNS namespaces from Azure and vice versa, without requiring the deployment and management of custom DNS forwarder virtual machines. The private resolver rules enable conditional forwarding to on-premises DNS servers over the Site-to-Site VPN connection. This approach reduces operational overhead and costs compared to maintaining separate DNS forwarding virtual machines or more complex DNS infrastructure.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
Several VMs are exhibiting network connectivity issues.
You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
Solution: Install and configure the Microsoft Monitoring Agent and the Dependency Agent on all VMs. Use the Wire Data solution in Azure Monitor to analyze the network traffic.
Does the solution meet the goal?
Instead use Azure Network Watcher to run IP flow verify to analyze the network traffic.
Note: Wire Data looks at network data at the application level, not down at the TCP transport layer. The solution doesn't look at individual ACKs and SYNs.
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview
You plan to store data in Azure Blob storage for many years. The stored data will be accessed rarely.
You need to ensure that the data in Blob storage is always available for immediate access. The solution must
minimize storage costs.
Which storage tier should you use?
Azure cool tier is equivalent to the Amazon S3 Infrequent Access (S3-IA) storage in AWS that provides a low cost high performance storage for infrequently access data.
Note: Azure's cool storage tier, also known as Azure cool Blob storage, is for infrequently-accessed data that needs to be stored for a minimum of 30 days. Typical use cases include backing up data before tiering to archival systems, legal data, media files, system audit information, datasets used for big data analysis and more.
The storage cost for this Azure cold storage tier is lower than that of hot storage tier. Since it is expected that the data stored in this tier will be accessed less frequently, the data access charges are high when compared to hot tier. There are no additional changes required in your applications as these tiers can be accessed using APIs in the same manner that you access Azure storage.
https://cloud.netapp.com/blog/low-cost-storage-options-on-azure
Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits
Get All 379 Questions & Answers