What is the Azure Solutions Architect Expert Certification?
The Azure Solutions Architect Expert (exam code: AZ-305) is an advanced certification that validates your ability to design complex cloud infrastructure on Microsoft Azure.
This exam does not ask "how well can you write code." It asks how you choose and design the architecture that best meets specific business requirements. The primary audience is working engineers and solutions architects who already have a background equivalent to AZ-104 (Azure Administrator).
A simple analogy: an architect does not lay bricks. The architect's role is to assess the building's purpose, load, and cost holistically and propose the most suitable design. AZ-305 works the same way. The core skill is not knowing how to deploy individual Azure services, but exercising sound judgment to select the best architecture while balancing high availability, security, cost, and scalability. Studying AZ-104 before tackling AZ-305 will make architecture design questions far more approachable.
---
Exam Basics
Here is the essential information you need to know before the exam.
| Item | Details | |------|---------| | Exam Code | AZ-305 | | Exam Name | Designing Microsoft Azure Infrastructure Solutions | | Exam Duration | Approx. 100–120 minutes | | Number of Questions | 40–60 questions | | Passing Score | 700 (scale of 100–1,000) | | Question Types | Multiple choice, multi-select, drag-and-drop, case studies | | Recommended Experience | AZ-104 + 1+ year of hands-on Azure experience | | Target Audience | Solutions architects, cloud engineers |
Case Study questions present a single scenario with multiple questions attached. Practicing how to grasp the full context before choosing answers is essential.
---
Exam Domain Breakdown
AZ-305 is structured around four domains officially announced by Microsoft Learn.
| Domain | Topic | Weight | |--------|-------|--------| | Domain 1 | Design identity, governance, and monitoring solutions | 25–30% | | Domain 2 | Design data storage solutions | 25–30% | | Domain 3 | Design business continuity solutions | 10–15% | | Domain 4 | Design infrastructure solutions | 25–30% |
Domains 1, 2, and 4 each carry roughly equal weight at 25–30%. Rather than focusing on a single domain, you need a balanced study strategy that covers all domains evenly.
!AZ-305 exam domain weight breakdown
Domain 1: Design Identity, Governance, and Monitoring Solutions (25–30%)
This domain covers access control using Entra ID (Azure AD), RBAC, and Conditional Access; governance frameworks built on Azure Policy and Management Groups; and monitoring architecture using Azure Monitor and Log Analytics.
Exam tip: RBAC controls access (who can do what), while Azure Policy enforces compliance (rules for resource configuration). The two are complementary, not alternatives.
Related posts: A Practical Guide to Identity and Access Management Design from Entra ID to PIM, A Complete Governance Design Guide with Policy, Management Groups, and Cost Management, Designing a Unified Monitoring Architecture from Azure Monitor to KQL
Domain 2: Design Data Storage Solutions (25–30%)
This domain addresses Azure Blob Storage access tiers (Hot, Cool, Archive), the right use cases for Azure SQL Database versus Cosmos DB, and data redundancy (LRS, ZRS, GRS) and disaster recovery design.
Exam tip: The five Cosmos DB consistency levels — Strong, Bounded Staleness, Session, Consistent Prefix, and Eventual — appear frequently. Make sure you know the trade-offs for each level.
Related posts: An Essential Guide to Mastering Storage Solution Design, Complete Guide to Choosing and Designing Azure Database Services, A Complete Guide to Data Integration and Analytics Pipelines
Domain 3: Design Business Continuity Solutions (10–15%)
This domain covers disaster recovery (DR) design using Azure Site Recovery, protecting virtual machines and databases with Azure Backup, and the criteria for choosing between Availability Zones and Availability Sets for high availability.
Exam tip: Site Recovery focuses on replicating and failing over entire workloads, while Azure Backup focuses on protecting and restoring individual data items.
Related posts: Complete Guide to High Availability and Disaster Recovery Design
Domain 4: Design Infrastructure Solutions (25–30%)
This domain covers selection criteria for App Service, AKS, and Azure Container Instances; network design using VNet, Private Link, Front Door, Traffic Manager, and Application Gateway; and migration strategies (Rehost, Refactor, Rearchitect).
Exam tip: Front Door is for global HTTP optimization, Traffic Manager is for DNS-based routing, and Application Gateway is a regional Layer-7 load balancer. Use the scenario scope (global vs. regional) to distinguish them.
Related posts: Key Concepts for Choosing Compute and Serverless Architectures, The Complete Guide to Networking Design from VNet to Front Door, Complete Guide to Network and Application Security Design
---
Study Roadmap
A step-by-step learning sequence for those starting AZ-305 preparation from scratch.
Step 1: Review AZ-104 Fundamentals (1–2 weeks)
AZ-305 assumes Azure operational knowledge at the AZ-104 level. Review core topics such as virtual networks, storage accounts, IAM, and virtual machines. If you have not yet obtained AZ-104, investing sufficient time at this stage is more efficient in the long run.
Step 2: Study Each AZ-305 Domain (3–4 weeks)
Follow the official Microsoft Learn learning path to study all four domains. Using the ten domain-specific blog posts in this study resource folder will help you focus intensively on key services and design principles.
Step 3: Practice Case Studies (1–2 weeks)
Review the reference architectures in the Azure Architecture Center and internalize the rationale behind design decisions. You should be able to explain in your own words why a particular service was chosen.
Step 4: Mock Exams and Weakness Reinforcement (1 week)
Take the official Microsoft Learn practice assessments and identify your weak domains. Spend the final week reinforcing weak areas and consolidating key concepts rather than learning anything new.
---
Key Exam Summary
Essential points to review just before exam day.
| Topic | Key Points to Remember | |-------|----------------------| | Availability Set vs. Zone | Set: fault domain distribution within the same datacenter / Zone: distribution across physically separate datacenters | | Region Pair | Two regions in the same geography paired together to guarantee data residency during disaster recovery | | Cosmos DB consistency levels | Strong > Bounded Staleness > Session > Consistent Prefix > Eventual — consistency vs. performance trade-offs | | RBAC vs. Azure Policy | RBAC: access control / Policy: enforcing resource configuration rules | | Conditional Access | Dynamically applies MFA or blocks access based on conditions such as user, location, and device state | | Managed Identity | Lets Azure resources authenticate securely to other services without storing credentials in code | | Site Recovery vs. Azure Backup | Site Recovery: whole-workload replication and failover / Azure Backup: individual data protection and restore | | Front Door vs. Traffic Manager vs. Application Gateway | Front Door: global HTTP / Traffic Manager: DNS / Application Gateway: regional Layer 7 | | Private Link vs. Service Endpoint | Private Link: dedicated IP within VNet / Service Endpoint: retains public IP, routes over Azure backbone | | Storage tiers | Hot: frequent access / Cool: infrequent / Archive: rare access, lowest cost |
AZ-305 tests scenario-based judgment rather than rote memorization. If you understand the differences between each service and can explain why you would choose one over another, passing is well within reach. Go for it with confidence!
Ready to test where you stand? Try the AZ-305 practice exam now.