AZ-305: Designing Microsoft Azure Infrastructure Solutions

Uncategorized
Wishlist Share
Share Course
Page Link
Share On Social Media

About Course

This course is a comprehensive preparation path for the AZ-305 certification exam, designed for IT professionals and solution architects who want to master designing secure, scalable, resilient, and cost-optimized solutions on Microsoft Azure.

Unlike AZ-104 (which focuses on implementation and administration), AZ-305 emphasizes architectural decision-making — choosing the right services, integrating them effectively, and aligning solutions with business and compliance needs.

Through 11 structured modules and 55+ bite-sized capsules, this course covers:

  • Designing identity, governance, and monitoring solutions.

  • Planning secure data storage strategies.

  • Creating business continuity and disaster recovery architectures.

  • Building compute, networking, and application architectures.

  • Designing cost-optimized, high-availability Azure environments.

  • Real-world scenarios and case studies that mirror the exam’s case-study format.

Each capsule blends concept explanations, design trade-offs, and exam tips to ensure you not only understand Azure services but also know how to apply them in real-world architecture designs.

By the end of this course, you will:

  • Have the knowledge and confidence to pass the AZ-305 exam.

  • Be able to design Azure solutions that balance performance, security, scalability, and cost.

  • Step into the role of an Azure Solution Architect with a clear blueprint for decision-making

Show More

What Will You Learn?

  • Design, secure, and optimize enterprise-grade Azure solutions.
  • This hands-on, scenario-driven course prepares you to ace the AZ-305: Designing Microsoft Azure Infrastructure Solutions exam — and think like a real-world Solutions Architect. You’ll learn how to design cloud architectures that balance security, scalability, performance, and cost efficiency across identity, networking, storage, and governance.
  • Through structured modules, practical examples, and exam-style scenarios, you’ll master key design principles for identity & governance, network & compute, data storage, business continuity, and monitoring & optimization. Every topic is explained in plain language, with architecture reasoning, design trade-offs, and the exact focus areas tested in Microsoft’s blueprint.
  • By the end of this course, you’ll be ready to earn your Azure Solutions Architect Expert certification and confidently design end-to-end cloud solutions in real enterprise environments.

Course Content

Exam Overview & Fundamentals
This module introduces you to the AZ-305: Designing Microsoft Azure Infrastructure Solutions exam and sets the foundation for your learning journey. You’ll understand the exam structure, the skills measured, and how this certification differs from AZ-104. We’ll also explore the role of a Solution Architect vs an Azure Administrator, highlighting the shift from hands-on implementation to high-level design and decision-making. Finally, you’ll review the core design principles — security, scalability, reliability, and cost optimization — that guide every architecture decision in Azure. By completing this module, you’ll have a clear view of what to expect in the exam and the mindset needed to think like an Azure Solutions Architect.

Designing Identity & Access Solutions
Identity is the foundation of every Azure solution. In this module, you’ll learn how to design secure, scalable, and flexible identity and access strategies that align with the Zero Trust model. We’ll cover how to structure Entra ID (formerly Azure AD), apply Conditional Access, integrate on-premises Active Directory, and secure privileged roles with Privileged Identity Management (PIM). You’ll also explore role-based access control (RBAC) to ensure least-privilege access and see how Azure Key Vault can be used to protect application secrets, keys, and certificates. By the end of this module, you’ll be able to: Design an enterprise-grade identity solution in Azure. Apply Conditional Access and MFA for secure authentication. Plan hybrid identity integration using AD Connect, PTA, or ADFS. Control and review privileged access with PIM. Implement RBAC at the right scope for proper governance. Secure secrets and encryption keys using Key Vault. This module is heavily tested on the exam, often through scenario-based case studies, making it a critical area to master for your AZ-305 success.

Designing Identity & Access Solutions
Description Identity is the foundation of Azure security and governance. In this module, you’ll learn how to design enterprise-grade identity and access strategies using Microsoft Entra ID (formerly Azure AD). You’ll explore how to apply Conditional Access and MFA, integrate on-premises Active Directory, secure privileged roles with Privileged Identity Management (PIM), and enforce Role-Based Access Control (RBAC) across different scopes. We’ll also dive into Azure Key Vault, which protects secrets, keys, and certificates, ensuring applications and workloads meet compliance and security requirements. By mastering this module, you’ll be equipped to design identity solutions that follow the Zero Trust model and meet both business and regulatory needs. What Will I Learn? How to structure and design Entra ID tenants for internal, partner, and customer access. Designing Conditional Access policies and MFA enforcement to reduce sign-in risks. Choosing the right hybrid identity solution (AD Connect, PTA, ADFS, or Cloud Sync). Securing privileged roles with PIM and enabling just-in-time access. Applying RBAC at management group, subscription, resource group, and resource scope. Designing Key Vault solutions for managing secrets, keys, and certificates securely.

Designing Governance Solutions
Description Governance is critical for managing Azure environments at scale. Without clear governance, organizations risk inconsistent security, cost overruns, and compliance failures. In this module, you’ll learn how to design effective governance strategies using management groups, subscriptions, policies, and initiatives. We’ll also compare Blueprints vs Landing Zones to understand how Azure provides ready-made frameworks for consistent deployments. Finally, we’ll cover resource-level governance with Resource Groups, Tags, and Locks, which ensure resources are organized, classified, and protected from accidental deletion. By mastering these concepts, you’ll be able to design governance solutions that balance flexibility, compliance, and manageability across large enterprise environments. What Will I Learn? How to structure subscriptions using Management Groups for enterprise-wide governance. Best practices for subscription strategies across departments and environments. How to design and apply Azure Policies to enforce compliance and consistency. The role of Policy Initiatives for bundling related compliance requirements. When to use Blueprints vs Landing Zones for enterprise deployments. How to apply Resource Groups, Tags, and Locks for resource organization and protection.

Designing Monitoring & Logging Solutions
Description Visibility and security are critical to designing reliable cloud environments. In this module, you’ll learn how to design monitoring, logging, and security monitoring solutions using Azure’s core observability services. We’ll start with Azure Monitor, the central platform for metrics and alerts, and then explore how to design Log Analytics Workspaces for centralized log collection and compliance. You’ll also learn how to use Application Insights to track application performance and user behavior, and how to design security monitoring with Microsoft Sentinel and Microsoft Defender for Cloud. By the end of this module, you’ll know how to design monitoring and logging solutions that provide operational visibility, improve performance, and strengthen security across enterprise Azure environments. What Will I Learn? How to design Azure Monitor solutions for metrics, logs, alerts, and insights. Best practices for Log Analytics Workspace design, retention, and access. How to use KQL queries to analyze log data. Designing Application Insights for distributed applications and performance tracking. When to use Microsoft Defender for Cloud for posture management and workload protection. When to use Microsoft Sentinel for SIEM/SOAR across Azure, hybrid, and multi-cloud.

Designing Networking Solutions
Description Networking is the backbone of any Azure solution. Without proper design, even well-architected applications can face latency, security gaps, or connectivity failures. In this module, you’ll learn how to design networking strategies that ensure secure, scalable, and resilient connectivity across Azure, on-premises, and hybrid environments. We’ll cover Virtual Network design, VNet peering and hub-and-spoke architecture, hybrid connectivity with VPN and ExpressRoute, and network security controls such as NSGs, Azure Firewall, and Private Endpoints. You’ll also learn how to design for scalability with load balancers, Front Door, and CDN, while balancing cost and performance. By the end of this module, you’ll be able to design networking solutions that meet enterprise needs for isolation, security, performance, and global reach. What Will I Learn? Best practices for designing Virtual Networks (VNets) and subnets. How to design VNet peering and use hub-and-spoke models for scalability. Hybrid connectivity options: VPN Gateway vs ExpressRoute. Designing network security using NSGs, Azure Firewall, and Private Endpoints. How to use Azure Load Balancer, Application Gateway, Front Door, and CDN for availability and performance. Strategies to avoid IP overlap, routing conflicts, and single points of failure.

Designing Compute Solutions
Description Compute is at the heart of every Azure workload. Whether it’s running virtual machines, scaling containerized workloads, or hosting modern serverless applications, choosing the right compute option is critical for cost, performance, and reliability. In this module, you’ll explore how to design compute solutions in Azure across multiple models: Virtual Machines (VMs) for traditional workloads. App Services for managed web hosting. Azure Functions for serverless event-driven applications. AKS (Azure Kubernetes Service) and containers for microservices and modern distributed architectures. VM Scale Sets and Autoscaling for elasticity. You’ll also learn when to use Platform-as-a-Service (PaaS) vs Infrastructure-as-a-Service (IaaS), how to implement availability and resilience across regions, and how to design application architectures that integrate APIs, messaging, and caching. By the end of this module, you’ll know how to design compute environments that are resilient, scalable, cost-optimized, and aligned with business requirements. What Will I Learn? When to use Virtual Machines vs App Services vs Functions vs Containers/AKS. How to design VM Scale Sets and use autoscaling for elastic workloads. Designing availability and resiliency using Availability Zones and paired regions. Best practices for serverless architectures (Functions, Logic Apps, Event Grid). Designing containerized solutions with AKS and ACR (Azure Container Registry). How to integrate compute with APIs, messaging (Service Bus/Event Grid), and caching (Azure Redis) in application architecture. Trade-offs between IaaS, PaaS, and serverless compute models in Azure.

Designing Business Continuity Solutions
Description Business continuity is about ensuring your applications and data remain available, recoverable, and resilient even in the face of failures — whether they are system crashes, natural disasters, or accidental deletions. In Azure, this means designing for backup, disaster recovery, and high availability using the right mix of services and architectural patterns. In this module, you’ll learn how to design continuity strategies for Azure workloads, including Azure Backup, Site Recovery (ASR), storage redundancy models, database replication, and geo-distribution. We’ll also explore how to define and design around Recovery Time Objective (RTO) and Recovery Point Objective (RPO), ensuring that business needs align with technical capabilities. By the end of this module, you’ll be able to design resilient architectures that protect data, minimize downtime, and ensure applications can recover quickly in the event of outages. What Will I Learn? Core concepts of business continuity, RTO, and RPO. How to design backup strategies with Azure Backup and Recovery Services Vaults. Disaster Recovery planning with Azure Site Recovery (ASR). High availability patterns using Availability Zones, paired regions, and geo-redundant storage. Database replication and failover options (SQL Always On, Cosmos DB multi-region, etc.). Designing resilient applications with traffic failover (Traffic Manager, Front Door). Best practices for testing failover and recovery plans in Azure.

Designing Identity, Security & Governance Solutions
Description Identity and governance are the cornerstones of secure cloud adoption. Without proper access control, policy enforcement, and security management, even well-architected workloads can become vulnerable. In this module, you’ll learn how to design Azure solutions that use Microsoft Entra ID (formerly Azure AD) for authentication, Role-Based Access Control (RBAC) for authorization, and Azure Key Vault for securing secrets. We’ll also cover governance tools like Management Groups, Subscriptions, and Resource Groups, along with Azure Policy, Blueprints, and Cost Management to enforce compliance and track cloud spending. Finally, you’ll learn how to integrate monitoring, logging, and security services like Azure Monitor, Defender for Cloud, and Sentinel to build a comprehensive governance and security framework. By the end of this module, you’ll be able to design architectures that are secure, compliant, and well-governed, meeting both technical and regulatory requirements. What Will I Learn? How to design identity solutions with Microsoft Entra ID, hybrid identity, and guest access (B2B). How to apply Role-Based Access Control (RBAC) for least-privilege access. Securing secrets and certificates using Azure Key Vault. Designing governance with Management Groups, Subscriptions, and Resource Groups. Enforcing compliance with Azure Policy and Blueprints. Designing for cost management and tagging strategies. Integrating monitoring and logging using Azure Monitor, Activity Logs, and Log Analytics. Enhancing security posture with Defender for Cloud and Sentinel SIEM/SOAR.

Designing Migration Solutions
Description Migration is a critical phase of cloud adoption. Most organizations don’t start fresh in Azure — they move existing workloads, applications, and data from on-premises or other clouds. Poorly designed migrations can lead to downtime, data loss, cost overruns, and compliance issues. In this module, you’ll learn how to design end-to-end migration strategies in Azure, including workload assessments, migration tools, and modernization patterns. We’ll cover Azure Migrate as the central migration hub, explore migration strategies such as Rehost, Refactor, Rearchitect, and Rebuild, and review workload-specific migration considerations (VMs, databases, web apps, storage). You’ll also learn how to design migrations for compliance, minimal downtime, and business continuity, ensuring organizations move to Azure securely and efficiently. What Will I Learn? The Azure Migrate framework: discovery, assessment, and migration. Migration strategies: Rehost (lift & shift), Refactor, Rearchitect, Rebuild. How to migrate VMs and applications with minimal downtime. Database migration tools: Azure Database Migration Service (DMS), SQL Managed Instance migration. Storage migration approaches: File shares to Azure Files or Blob storage. Modernization opportunities during migration (serverless, PaaS adoption). Designing for compliance and governance during migration. Ensuring continuity with hybrid and phased migration approaches.

Designing Monitoring & Optimization Solutions
Description Migrating to Azure is only the beginning — the real challenge is ensuring workloads remain healthy, cost-efficient, and performant over time. Without proper monitoring and optimization, resources may become underutilized, overspend budgets, or suffer downtime unnoticed. In this module, you’ll learn how to design end-to-end monitoring, alerting, and optimization solutions using Azure’s native tools. We’ll cover Azure Monitor, Log Analytics, and Application Insights for observability, along with alerts, dashboards, and KQL queries for troubleshooting. You’ll also explore cost and performance optimization strategies, such as Autoscaling, Azure Advisor recommendations, Reserved Instances, Spot VMs, and performance tuning for apps and databases. The focus is on creating proactive, automated monitoring frameworks that align with business SLAs while controlling cloud spend. What Will I Learn? Core monitoring architecture with Azure Monitor, Metrics, and Activity Logs. How to use Log Analytics and KQL queries for deep insights. Application monitoring with Application Insights (APM, dependencies, telemetry). Building dashboards, alerts, and action groups for proactive response. Designing automated remediation with Logic Apps & Automation Runbooks. Cost optimization strategies: Azure Advisor, Reserved Instances, Spot VMs. Performance optimization strategies for compute, storage, and databases. Best practices for SLA alignment, alert fatigue reduction, and governance integration.

Designing Governance, Compliance & Identity Protection Solutions
Description As organizations expand their cloud footprint, ensuring governance, compliance, and identity protection becomes critical. Without strong guardrails, workloads may violate regulatory requirements, data may leak, and privileged accounts may be exploited. This module focuses on designing solutions that maintain control, compliance, and security across Azure environments. You’ll learn how to use Azure Policy, Blueprints, and Management Groups for governance, integrate compliance frameworks (ISO, HIPAA, NIST) into your designs, and implement identity protection strategies with Microsoft Entra (Azure AD). We’ll also explore Defender for Cloud, Purview, and Sentinel for regulatory compliance, data governance, and security incident monitoring — ensuring your designs align with enterprise security and compliance needs. What Will I Learn? How to enforce governance controls using Management Groups, Subscriptions, and Resource Groups. Designing policy-driven compliance with Azure Policy & Blueprints. Applying regulatory compliance frameworks (ISO, HIPAA, PCI DSS, NIST). Using Microsoft Purview for data governance and sensitivity labeling. Designing identity protection with Entra ID features: Conditional Access, Identity Protection, MFA, and PIM. Leveraging Defender for Cloud for compliance assessments and recommendations. Integrating Sentinel for security incident response and compliance reporting. Best practices for aligning governance with cost, security, and performance objectives.

Designing Resiliency & High Availability Solutions
Description Even the best cloud solutions will fail if they don’t account for resiliency and high availability (HA). Outages can happen at the VM, datacenter, or even regional level — and architects must design for continuity by ensuring workloads can recover quickly and stay online. In this module, you’ll learn how to design resilient architectures that use Availability Sets, Availability Zones, Load Balancers, Traffic Manager, and Front Door to provide redundancy and fault tolerance. We’ll also cover resiliency in databases (SQL Auto-Failover Groups, Cosmos DB multi-region), storage replication (LRS, ZRS, GRS, RA-GRS), and application patterns that support scale and failover. The focus is on designing for failure, minimizing downtime, and aligning designs with business SLAs for mission-critical workloads. What Will I Learn? Core resiliency concepts: fault domains, update domains, redundancy models. Designing intra-region availability with Availability Sets & Availability Zones. Designing inter-region resiliency with Paired Regions, Traffic Manager, Front Door. Load balancing strategies at Layer 4 (Azure Load Balancer) and Layer 7 (Application Gateway, Front Door). Resiliency in databases with SQL Auto-Failover Groups and Cosmos DB global distribution. Storage redundancy options: LRS, ZRS, GRS, RA-GRS and when to use each. Designing resilient apps using retry logic, queues, and decoupled architectures. Best practices for aligning designs with RTO, RPO, and SLA requirements.

Designing Data Storage & Database Solutions
Description Every application relies on data, and designing the right storage and database architecture is critical for scalability, performance, security, and cost optimization. In Azure, architects must choose the correct storage service (Blob, Files, Tables, Queues) and the right database solution (SQL Database, SQL Managed Instance, Cosmos DB, PostgreSQL/MySQL) based on workload requirements. This module focuses on designing data storage and database solutions that meet business requirements for availability, consistency, security, and cost. You’ll explore partitioning, indexing, sharding, replication, and global distribution, as well as encryption and backup strategies to safeguard data. By the end of this module, you’ll be able to evaluate trade-offs between different Azure storage/database options and align them with enterprise-grade workloads. What Will I Learn? Core Azure storage services: Blob, File, Table, Queue storage. Choosing between SQL Database, SQL Managed Instance, and VMs with SQL Server. When to use Cosmos DB for globally distributed, low-latency applications. Partitioning, indexing, and sharding strategies for performance scaling. Database replication, read replicas, and Auto-Failover Groups. Data encryption at rest and in transit (TDE, Always Encrypted, Key Vault). Backup and restore strategies across storage and databases. Trade-offs: relational vs non-relational, structured vs unstructured storage. Cost optimization: storage tiers (hot, cool, archive), reserved capacity, serverless DB tiers.

Designing Application Integration Solutions
Description Modern cloud solutions rarely operate in isolation. Applications must communicate, share data, and trigger events across distributed systems. Azure provides a rich set of messaging, eventing, and API management services to build scalable, loosely coupled, and resilient integrations. This module covers the design of application integration patterns using Azure Service Bus, Event Grid, Event Hubs, and API Management. You’ll learn when to use message queues vs event streams, how to implement publish/subscribe patterns, and how to expose APIs securely to internal and external consumers. By the end of this module, you’ll be able to design integration architectures that support decoupling, real-time eventing, big data ingestion, and secure API management, while aligning with enterprise governance and performance requirements. What Will I Learn? The difference between messaging vs eventing in application design. How to design reliable messaging with Azure Service Bus (queues, topics, dead-lettering). Event-driven integration using Azure Event Grid (serverless, push model). Large-scale data ingestion with Azure Event Hubs. Secure and manage APIs with Azure API Management (APIM). Integration patterns: publish/subscribe, fan-out, request/reply, async decoupling. Choosing the right service based on requirements (latency, reliability, scale). Security and governance in integration: authentication, throttling, API gateways. Best practices for building scalable and decoupled architectures.

Designing Security & Compliance Solutions (Advanced)
Description Security and compliance are enterprise-critical when designing Azure solutions. While earlier modules covered basics like RBAC, MFA, and Azure Policy, this advanced module dives deeper into encryption, networking security, zero trust, threat protection, and compliance frameworks. You’ll learn how to design solutions that protect workloads against data breaches, insider threats, and external attacks, while also ensuring compliance with regulations such as HIPAA, GDPR, PCI DSS, ISO 27001, and NIST. This module emphasizes defense-in-depth — securing identities, data, networks, and workloads with layered Azure services such as Key Vault, Private Endpoints, NSGs, Azure Firewall, DDoS Protection, Microsoft Defender for Cloud, and Microsoft Sentinel. What Will I Learn? Advanced identity security beyond MFA (Conditional Access, Identity Protection, PIM). Network security: NSGs, ASGs, Azure Firewall, Private Endpoints, and DDoS Protection. Encryption best practices for data at rest, in transit, and in use (TDE, Always Encrypted, Key Vault, Confidential Computing). Designing Zero Trust architectures in Azure. Integrating Defender for Cloud for compliance scoring and recommendations. Using Microsoft Sentinel for threat detection and automated incident response. Mapping Azure security services to compliance frameworks (HIPAA, GDPR, PCI DSS, ISO, NIST). Best practices for securing hybrid/multi-cloud environments with Azure Arc.

Exam Preparation, Scenarios & Common Pitfalls

Survey

Student Ratings & Reviews

No Review Yet
No Review Yet