Limited time: Get 2 months free with annual plan — Claim offer →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing
Start for free
Exam GuidesMicrosoftAZ-305
MicrosoftExpert Level2026 Updated

Designing Microsoft Azure Infrastructure Solutions

Updated May 1, 202612 min readWritten by Certsqill experts
Quick facts — AZ-305
Exam cost
$165
Questions
40-60 items
Time limit
130 minutes
Passing score
700/1000
Valid for
1 year
Testing
Pearson VUE

Who this exam is for

The Designing Microsoft Azure Infrastructure Solutions certification is designed for professionals who work with or want to work with Microsoft technologies in a professional capacity. It is taken by cloud engineers, DevOps practitioners, IT administrators, and technical professionals looking to validate their expertise.

You do not need extensive prior experience to attempt it, but you will benefit from hands-on familiarity with the subject matter. The exam tests applied knowledge and architectural judgment, not just memorization. If you can reason about trade-offs and real-world scenarios, structured practice will handle the rest.

Domain breakdown

The AZ-305 exam is built around official domains, each with a fixed percentage of the question pool. This distribution should directly inform how you allocate your study time.

Domain
Weight
Focus areas
Design Identity, Governance & Monitoring Solutions
26%
Microsoft Entra ID architecture (B2B, B2C, External Identities), governance hierarchies (Management Groups, Policy initiatives), hybrid identity (Entra Connect sync vs cloud sync), and Azure Monitor/Log Analytics workspace design.
Design Data Storage Solutions
26%
Relational data (Azure SQL DB tiers, SQL Managed Instance, elastic pools for multi-tenant SaaS), non-relational data (Cosmos DB multi-region writes, API selection), analytics (Synapse, Data Lake Gen2), and data migration strategies.
Design Business Continuity Solutions
20%
High availability architecture (Availability Zones vs Availability Sets, zone-redundant services), disaster recovery patterns (Site Recovery, geo-replication, active-passive vs active-active, RTO/RPO targets), and backup strategy.
Design Infrastructure Solutions
28%
Compute architecture (VM right-sizing, VMSS, AKS cluster design, App Service Environment), networking topology (hub-spoke, Azure Virtual WAN, Private Link, Azure Firewall placement), and migration planning with Azure Migrate.

Note the domain with the highest weight — many candidates under-invest here because it feels conceptual. In practice, this is where the exam is most precise, with scenario-based questions that test specifics.

What the exam actually tests

This is not a memorization exam. Questions require applied judgment under constraints. Almost every question includes a scenario with explicit requirements and asks you to select the most appropriate solution.

Here are examples of the question types you will encounter:

Architecture Trade-off Analysis
A global e-commerce company requires 99.99% availability for its web tier with automatic failover under 30 seconds. They run in a single Azure region. What architectural changes address this?
Multi-region active-active with Azure Front Door (global L7 load balancing, WAF, health probes). Availability Zones alone protect against datacenter failures within a region but not full regional outages.
Disaster Recovery Design
An application has an RTO of 1 hour and RPO of 15 minutes. The database runs SQL Server on an Azure VM. Which DR configuration meets these requirements at lowest cost?
Azure Site Recovery for VM replication (configurable RPO, typically ~5 min) with automated recovery plans. Test failover is non-disruptive. SQL Always On AG with async replica is valid but more expensive.
Networking Topology Selection
An enterprise has 20 Azure subscriptions across 5 business units needing centralized security, shared ExpressRoute connectivity, and spoke VNets that must not communicate directly with each other. What topology?
Hub-spoke with Azure Firewall in the hub, VNet peering from each spoke to hub only (no spoke-to-spoke peering), ExpressRoute/VPN Gateway in hub. All inter-spoke traffic routes through the firewall.

How to prepare — 4-week study plan

This plan assumes one hour per weekday and roughly 30 minutes of lighter review on weekends. It is calibrated for someone with some relevant experience. If you are starting from zero, add an extra week before Week 1 to familiarise yourself with the basics.

W1
Week 1: Identity & Governance Architecture
  • Design Microsoft Entra ID topologies: single tenant vs multi-tenant, B2B (guest access for partners), B2C (customer-facing identity), External Identities federation options
  • Study hybrid identity: Entra Connect sync vs cloud sync, password hash sync vs pass-through authentication vs ADFS federation — trade-offs for each
  • Design governance hierarchies: Management Group structure (max 6 levels), Policy initiative assignment at appropriate scope, resource tagging taxonomy for cost allocation and RBAC
  • Study Azure Monitor workspace design: centralized vs decentralized Log Analytics, workspace RBAC, data export rules, cross-workspace queries for enterprise-wide visibility
W2
Week 2: Data Storage Architecture
  • Design relational data solutions: Azure SQL DB (DTU vs vCore), SQL Managed Instance (near 100% compatibility for migration), elastic pools for multi-tenant SaaS cost optimization
  • Design Cosmos DB at scale: multi-region write configuration, consistency level selection per workload (financial = Strong, social = Eventual), partition key design to avoid hot partitions
  • Study analytics architecture: Synapse dedicated SQL pool (complex analytics, petabyte scale), serverless SQL pool (pay-per-query exploration), Data Lake Gen2 hierarchical namespace design for POSIX ACLs
  • Design data migration paths: Azure Database Migration Service (online vs offline mode), Azure Migrate for holistic assessment, Data Box for offline large-scale transfers
W3
Week 3: Business Continuity & Infrastructure Design
  • Master HA patterns: zonal deployment (pin to specific AZ) vs zone-redundant deployment (automatically spread), multi-region active-passive vs active-active cost and complexity trade-offs
  • Study DR metrics in depth: RTO (recovery time objective), RPO (recovery point objective) — know what each Azure service achieves: Site Recovery ~5min RPO, SQL geo-replication <5sec RPO
  • Design AKS architecture: system vs user node pools, Azure CNI vs kubenet, private cluster with private API server endpoint, workload identity with federated credentials, KEDA for event-driven scaling
  • Study hub-spoke networking: Azure Firewall Standard vs Premium (IDPS, TLS inspection), Private DNS zone design for private endpoint resolution, Azure Virtual WAN for managed large-scale hub-spoke
W4
Week 4: Migration Planning & Mock Exams
  • Study Azure Migrate: server assessment (dependency analysis, right-sizing recommendations), agentless vs agent-based replication, database migration assessment for SQL workloads
  • Design integration architecture: API Management tier selection (Consumption/Developer/Basic/Standard/Premium), Event Grid vs Service Bus vs Event Hubs decision criteria
  • Memorize the load balancer decision tree: Load Balancer (L4, regional) vs Application Gateway (L7, regional, WAF) vs Azure Front Door (L7, global, WAF, CDN) vs Traffic Manager (DNS, global, no data path)
  • Take all 6 mock exams; case study questions require holistic multi-service architecture decisions with trade-off justification — practice explaining why you chose each component

Common mistakes candidates make

These patterns appear repeatedly among candidates who resit this exam. Knowing them in advance is worth several percentage points.

Not knowing when to use Availability Zones vs Availability Sets
Availability Sets protect against rack-level hardware failures within a single datacenter (99.95% SLA with 2+ VMs). Availability Zones protect against entire datacenter failures within a region (99.99% SLA). Zones are always preferred for new deployments. Availability Sets are only for scenarios where zones are not supported.
Confusing Azure Front Door vs Traffic Manager vs Application Gateway
Traffic Manager = DNS-based global load balancing, no data path through Azure (client connects directly to origin). Azure Front Door = anycast global L7 load balancing with data path through Microsoft network, WAF, SSL offload, caching. Application Gateway = regional L7 load balancer with WAF. Front Door and Traffic Manager are global; Application Gateway is regional.
Weak on disaster recovery RPO/RTO options and costs
The exam presents specific RPO/RTO numbers and asks which solution meets them at lowest cost. Azure Site Recovery: RPO ~5 minutes for Azure VMs. Azure SQL geo-replication: RPO < 5 seconds. Cosmos DB multi-region writes with Strong consistency: RPO = 0. Know these numbers and the relative cost of each approach.
Not studying the AZ-104 prerequisite gaps before sitting AZ-305
AZ-305 is Expert-level and assumes deep AZ-104 administrator knowledge. Candidates weak on NSG rule evaluation, RBAC scope inheritance, and storage replication options often fail AZ-305 because architect-level questions build on those fundamentals rather than re-explaining them.

Is Certsqill right for you?

Honestly: Certsqill is built for candidates who have already done some studying and want to convert knowledge into exam performance. If you have never touched the subject, start with a foundational course first — then come to Certsqill when you are ready to practice.

Where Certsqill is strong: question depth, AI-powered explanations, and domain analytics. Every question is mapped to the exam blueprint. When you get something wrong, the AI tutor explains why the right answer is right and why each wrong answer fails under the specific constraints in the question.

Where Certsqill is not a replacement: video courses and hands-on labs. Use Certsqill to test and sharpen — not as your first exposure to a topic you have never encountered.

Ready to start practicing?
860 AZ-305 questions. AI tutor. 6 mock exams. 7-day free trial.

Related Articles for AZ-305

azure
How to Study for AZ-305 in 14 Days: The Two-Week Prep Plan
May 9, 2026 14 min read
azure
How to Study for AZ-305 in 30 Days: Full Preparation Plan (2026)
May 9, 2026 16 min read
azure
How to Study for AZ-305 in 7 Days: A Realistic Sprint Plan
May 9, 2026 13 min read
Browse all articles