Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions Practice Test
AZ-305 practice concerns designing Azure infrastructure solutions from application and business requirements. The available questions use scenarios involving identity-based access to storage, secret management, web traffic routing, relational database choices, device communication, event-driven compute, cost controls, and virtual machine recovery. These examples connect architecture decisions with the Azure services and operating models that can meet a workload’s needs.
Exam overview
About the Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions Exam
Infrastructure design work involves translating requirements such as security, availability, performance, operational effort, and cost into service choices. Database scenarios call for distinguishing managed relational platforms from SQL Server on virtual machines when compatibility or operating-system control matters. Security decisions include centralizing secrets and encryption keys and granting an application identity access to Blob Storage without distributing account keys. Other scenarios involve selecting a layer-7 routing service for URL-based backend rules, choosing event-driven compute for queue processing, and matching managed device communication to fleet telemetry and commands. Cost management and recovery decisions require identifying budget alerts and scheduled VM backups. The key skill is comparing architectures against stated constraints rather than choosing a service by name alone.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
An organization needs to store encryption keys and application secrets centrally, control access to them, and support managed integration with Azure services. Which service is designed for this purpose?
Show answer
Correct answer: AAzure Key Vault provides centralized management for secrets, keys, and certificates, with access controls and integrations that help applications retrieve protected values. The other services address networking, traffic routing, or messaging.
A company stores confidential documents in Azure Blob Storage and wants to limit access to a specific application identity without distributing storage account keys. Which approach is most appropriate?
Show answer
Correct answer: AA managed identity lets an Azure-hosted application authenticate to supported services without managing credentials in code. Azure role-based access control can grant the identity only the required storage data permissions.
An application must accept HTTPS requests and route them to backend services based on the requested URL path, such as sending /images requests to one backend and /api requests to another. Which Azure service is designed for this layer-7 routing pattern?
Show answer
Correct answer: AAzure Application Gateway is a layer-7 web traffic load balancer that supports URL path-based routing. Azure Load Balancer operates at layer 4, while Bastion provides secure VM access and DNS resolves names.
A database workload requires relational tables, transactions, and managed backups, while the team wants to avoid managing database server operating systems. Which Azure service is the most appropriate starting point?
Show answer
Correct answer: AAzure SQL Database is a managed relational database service that supports transactional workloads and managed backup capabilities. Blob Storage is object storage, Cosmos DB is a NoSQL database service, and Redis is an in-memory data store.
An organization wants to run a managed relational database that is compatible with PostgreSQL while avoiding the routine management of database server infrastructure. Which Azure service should it evaluate?
Show answer
Correct answer: AAzure Database for PostgreSQL is a managed relational database service based on PostgreSQL. Redis is an in-memory cache, Data Explorer is optimized for analytics over telemetry and logs, and Table Storage is a NoSQL key-attribute store.
A company wants to move a SQL Server database to Azure while retaining SQL Server features that are not available in a fully managed database service. The team also wants to manage the operating system and database installation. Which option best fits?
Show answer
Correct answer: CSQL Server on an Azure Virtual Machine provides control over the guest operating system and SQL Server installation, making it suitable when specific SQL Server features or administrative control are required. Managed database services reduce that level of control.
An application needs to send commands and receive telemetry from a large fleet of remotely managed devices. Which Azure service is designed to provide a managed cloud endpoint for this device communication?
Show answer
Correct answer: AAzure IoT Hub provides a managed service for secure, bidirectional communication between IoT devices and a cloud solution, including device management capabilities. Event Grid routes events, Application Gateway handles web traffic, and Logic Apps orchestrates workflows.
How to use this practice test
Access the free AZ-305 practice questions in sessions of up to 20 randomly selected items from the 50-question bank. After each session, review the results to identify which architecture choices need closer attention, such as database hosting, identity-based storage access, or event-driven compute.
Preparation tips
- For database scenarios, compare managed relational services with SQL Server on Azure virtual machines; note when SQL Server feature compatibility or operating-system control changes the choice.
- Practice mapping access requirements to managed identities and Azure Key Vault, distinguishing application access from storage account key distribution.
- For web application cases, identify when URL-path routing requires layer-7 capabilities and trace each path to its intended backend.
- Match queue-triggered processing and device telemetry requirements to the appropriate compute or managed device-communication pattern.
- Separate spending controls from data protection: budget thresholds notify teams about cost, while scheduled Azure VM backups support recovery.