AZ-305
Free Microsoft Certified: Azure Solutions Architect Expert Practice Test
12 exam-style questions with full explanations — no sign-up. Score yourself, then close your gaps with the full course.
Exam fee ~$1654 exam domainsLevel Advanced2 timed practice tests in the course
✅ Free practice — no sign-up📝 Real exam-style questions💡 Detailed explanations💸 30-day money-back via Udemy
A company has 5,000 users in an on-premises Active Directory domain. They need users to authenticate to Microsoft 365 and Azure resources using their existing on-premises passwords, without storing password hashes in the cloud, and authentication must continue to work even if the on-premises network link to Azure fails. Which authentication method should you recommend?
AD FS federation validates credentials against on-premises AD without syncing password hashes to Microsoft Entra ID, and a properly deployed AD FS farm with multiple servers/agents provides resilience so authentication is not dependent on a single link if designed with redundancy across sites.
A global retail company uses Azure Cosmos DB for NoSQL with multi-region writes (multi-master) enabled across three Azure regions to support low-latency writes for customers worldwide. The company wants the strongest consistency guarantee that Cosmos DB supports when multi-region writes are enabled. Which consistency level should be configured?
Bounded Staleness is the strongest consistency level Cosmos DB supports when multi-region writes are enabled. Strong consistency is only available for single-write-region accounts.
A company runs 200 on-premises VMs and needs to fail them over to Azure during a datacenter outage. The business requires an RTO of 1 hour and an RPO of 15 minutes. Which solution BEST meets these requirements?
Azure Site Recovery (ASR) performs continuous, near-real-time replication of on-premises VMs to Azure, supporting RPOs as low as 30 seconds to a few minutes and orchestrated failover that can meet a 1-hour RTO.
A global retailer runs a web application that serves both static assets and dynamic API responses. Traffic originates from users in North America, Europe, and Asia. The company requires SSL offloading, path-based routing to different backend pools, and a Web Application Firewall (WAF) that inspects traffic before it reaches any regional backend. The solution must minimize latency for users worldwide. Which service should the architect choose?
Azure Front Door Premium is a global, Layer 7 entry point that terminates SSL at the edge, supports path-based routing, and includes an integrated WAF that inspects traffic before it is routed to the closest healthy regional backend, minimizing latency for a worldwide user base.
An Azure Function app needs to read secrets from Azure Key Vault. The company's security policy prohibits storing any credentials, connection strings, or certificates in application code or configuration files. Which authentication mechanism should you configure for the Function app?
A system-assigned managed identity is automatically created and managed by Azure, requires no credentials to be stored anywhere, and can be granted access policy or RBAC permissions on the Key Vault directly.
A company is migrating an on-premises PostgreSQL database to Azure. Requirements: minimize application changes, support zone-redundant high availability with automatic failover, and allow read scale-out via read replicas. Which service should the solutions architect recommend?
Flexible Server supports zone-redundant high availability with automatic failover and native read replicas, while remaining wire-compatible with PostgreSQL, minimizing application changes.
A company wants to replicate a fleet of Azure VMs from the East US region to West US so they can be failed over as a group using an orchestrated recovery plan during a regional outage. Which Azure service should be used?
Azure Site Recovery supports Azure-to-Azure replication between region pairs and lets administrators group VMs into recovery plans for coordinated, ordered failover.
An order-processing system has one publisher and four independent downstream services, each of which must receive a copy of every order message. Some services need to filter which messages they receive based on message properties, and undelivered messages must be moved to a dead-letter queue for later inspection. Which Azure messaging service should be used?
Service Bus Topics implement a publish/subscribe pattern where each subscription receives a copy of every message, subscriptions can apply SQL or correlation filters, and dead-lettering is a built-in feature — matching all stated requirements.
An organization wants administrators to have Global Administrator privileges only when needed, requiring justification and time-bound activation, with automatic expiration after 8 hours and approval from a designated approver. Which Microsoft Entra ID feature should you configure?
PIM allows configuring roles as 'eligible' rather than permanently active, requiring users to activate the role with justification, MFA, and approval, with a maximum activation duration you define (such as 8 hours) after which the role automatically deactivates.
A company stores application telemetry logs in an Azure Storage account within a single region. The data must be synchronously replicated across three availability zones for high durability, but the company does not require the data to be readable from a secondary region. Which redundancy option should be configured?
ZRS synchronously replicates data across three availability zones within the primary region, meeting the durability requirement without needing a readable secondary region.
A company backs up its Azure VMs to a Recovery Services vault and must be able to restore VMs to a secondary Azure region if the primary region becomes completely unavailable. Which vault storage redundancy setting must be configured to support this requirement?
Cross Region Restore requires the Recovery Services vault to be configured with geo-redundant storage (GRS), which replicates backup data to a paired secondary region and allows restoring VMs there during a regional outage.
You are designing the node subnet for an AKS cluster using Azure CNI networking. The cluster will initially run 20 nodes with a maximum of 30 pods per node, and it must be able to scale to 40 nodes without requiring a subnet resize. Which subnet size should you provision?
At 40 nodes with 30 pods each, up to 1,240 IP addresses are needed for nodes and pods combined, plus 5 addresses reserved by Azure for the subnet. A /21 provides 2,048 addresses, comfortably covering this requirement with room for cluster upgrades and surge nodes.
Ready for the real thing?
The full course: two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed explanations.
undefined $34.99 with code 00651DDA8F57721374B8 — valid through Sep 23.
Get my $34.99 deal →AZ-305 exam — quick answers
How much does the AZ-305 exam cost?
The exam fee is approximately $165 and varies by region — confirm current pricing with the certification vendor before you book.
What topics are on the exam?
It covers 4 domains: Design identity, governance, and monitoring solutions (25-30%), Design data storage solutions (25-30%), Design business continuity solutions (10-15%), Design infrastructure solutions (30-35%). The full course has a dedicated chapter, lab and practice-test coverage for each.
Is this practice test really free?
Yes — all questions on this page are free with explanations and no sign-up. The paid Udemy course adds two full-length timed exams, video lessons and hands-on labs.
How do I get the discount?
Use code 00651DDA8F57721374B8 at checkout for $34.99 (list undefined) through Sep 23 — the enroll button applies it automatically.
Will this prepare me for the real exam?
The questions mirror the real exam's style and are mapped to the official domains. This is exam-focused preparation — combine the free test with the full course's timed simulations to gauge your readiness.