AZ-305 Designing Azure Infrastructure Solutions Exam Prep

Discover azure monitor, logging, and the data platform that collects from OS, applications, resources, and tenant data, stores in a workspace, analyzes with Log Analytics, and generates alerts and reports.

Define the Azure Log Analytics workspace and describe access control and modes. Compare centralized, decentralized, and hybrid models and workspace versus resource context for scalable, cost-aware data analysis.

Discover Azure insights and visualization in Azure Monitor, Workbook, and Azure Data Explorer. Learn to apply application, VM, container insights, and Data Explorer for performance, usage, and health analytics.

Leverage the Cloud Adoption Framework to plan and migrate workloads to Azure, assessing workload readiness, testing migration scenarios, and deploying and releasing with options for lift-and-shift or modernized databases.

Learn to migrate on premise databases to Azure using the Azure Database Migration Service, with online and offline options, Data Migration Assistant-guided steps—assess, migrate schema, copy, and validate.

Explains how to assess on premise workloads and plan migration with the Azure Migration Framework, and outlines Azure Migrate tools and strategies for migrating to Azure.

Explore designing identity and access solutions with Azure AD, including B2B and B2C models, guest access, MFA policies, and seamless integration with on premise and third party directories.

Design identity solutions in Azure by applying zero-trust principles through conditional access, identity protection, risk policies, and access reviews to secure users, devices, locations, and apps.

Learn how to design service principals and managed identities for applications in azure, leveraging azure ad, rbac, and azure key vault to securely manage credentials and access tokens.

Explore Azure app architecture and design decentralized, event-driven solutions, using queues, event grid, event hub, and service bus, then optimize with Azure Cache for Redis, API management, and App Configuration.

Explore the cloud adoption framework and Azure well-architected framework to govern subscriptions, resource groups, and resources with security, cost optimization, and monitoring.

Design resource groups and resources by using a flat management group structure, aligned subscriptions, and logical resource groups; apply RBAC, policies, and tagging for security, scalability, and clear governance.

Apply and manage Azure policies and RBAC to enforce governance, with inheritance, target scopes, and best practices; combine them via Azure Blueprints for scalable compliance.

Explore design considerations for Azure App Service solutions, including web apps, API, web jobs, and mobile backends, with Azure Functions for event-driven serverless apps and Logic Apps for automated workflows.

Design with Azure Container Instances and AKS, covering container groups, orchestration, storage, security, and how to choose the right computing service for container-based workloads.

Plan backup with Azure Backup by selecting storage or recovery services vault, evaluating workload, RPO, MTD, MTBF, and SLA, with redundancy options like LRS or GRS and blob backup.

Design backups for Azure file shares and virtual machines using snapshots, Azure Backup, and the Mars agent for on-premises, with recovery service vaults, scheduled policies, alerts, and self-service restores.

Explore Azure SQL backup options—full weekly, differential every 12–24 hours, and transaction log backups every 5–10 minutes—and Azure Site Recovery for automated failover and geo restore across regions.

Explore how to design Azure network solutions with hub and spoke architecture, plan IP addressing and subnets, and implement layered security using Azure AD, firewalls, network security groups, and NAT.

Design on-premises connectivity to Azure using VPN gateways or ExpressRoute, comparing private and public networks, site-to-site options, and hub-and-spoke architectures with Azure Virtual WAN for centralized security.

Design Azure virtual networks using best practices for topology, segmentation, and routing; implement VNet peering, hub and spoke, NAT gateway, and UDR to manage traffic and security.

Explore how to protect your Azure network with Azure Firewall, NSG, Bastion, and just-in-time access, plus Private Link and DDoS protection, and web application firewall for web traffic.