The Microsoft Certified: Azure Solutions Architect Expert certification is Microsoft’s expert-level architecture credential for professionals who translate business requirements into Azure solution designs across identity, governance, networking, compute, storage, business continuity, and migrations. The certification is earned by first holding Azure Administrator Associate and then passing AZ-305.
This is not a service memorization exam. Microsoft is testing whether you can design coherent Azure solutions under real business constraints, balancing operational requirements, security, resilience, scalability, and cost while aligning with the Azure Well-Architected Framework and the Cloud Adoption Framework for Azure.
As of May 28, 2026, Microsoft positions this certification for architects with advanced experience across IT operations, networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, governance, Azure administration, Azure development, and DevOps processes.
Exam At a Glance
| Attribute | Value |
|---|---|
| Certification | Microsoft Certified: Azure Solutions Architect Expert |
| Exam code | AZ-305 |
| Level | Expert |
| Duration | 100 minutes |
| Cost | $165 USD |
| Renewal | Every 12 months |
| Prerequisites | You must first earn Microsoft Certified: Azure Administrator Associate, then pass AZ-305 |
| Target candidate | Azure solution architects designing cloud and hybrid solutions across compute, networking, storage, monitoring, security, continuity, and migration domains |
| Primary focus | Identity, governance and monitoring; storage; continuity; and infrastructure architecture on Azure |
- Official certification page: Microsoft Certified: Azure Solutions Architect Expert
- Official exam page: Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions
- Official study guide: AZ-305 study guide
- Official course: Design Microsoft Azure Infrastructure Solutions
- Official learning paths: AZ-305 Microsoft Azure Architect Design Prerequisites, AZ-305: Design identity, governance, and monitor solutions, AZ-305: Design business continuity solutions, AZ-305: Design data storage solutions, AZ-305: Design infrastructure solutions
- Official practice assessment: AZ-305 practice assessment
Official Assessed Areas
- Design identity, governance, and monitoring solutions
- Design data storage solutions
- Design business continuity solutions
- Design infrastructure solutions
AZ-305 is best treated as an architecture tradeoff exam. Microsoft wants candidates who can select Azure patterns and services that fit business, operational, and resilience requirements rather than just naming a familiar service.
1. Design Identity, Governance, and Monitoring Solutions
This domain covers the control plane of the architecture: who has access, how resources are governed, and how the environment is observed.
- Logging and monitoring design - Study when to recommend Azure Monitor, log routing, metrics, and centralized monitoring solutions across workloads. Official resources: Azure Monitor overview, Design identity, governance, and monitor solutions.
- Authentication and authorization architecture - Review Microsoft Entra, access to Azure and on-prem resources, and management of secrets, certificates, and keys. Official resources: What is Microsoft Entra ID?, Azure Key Vault overview.
- Governance and compliance structure - Microsoft expects you to recommend management groups, subscriptions, resource groups, tagging strategy, compliance controls, and identity governance. Official resources: Management groups overview, Azure Policy overview.
- This domain is about architectural control - The best answer usually sets the right long-term governance and visibility boundary for the environment instead of solving one isolated permission or logging problem. Official resources: Certification overview, AZ-305 course.
Exam tip: If the scenario is about governance, compliance, secrets, subscription structure, or centralized monitoring, you are in this identity-governance-monitoring domain before you are in any workload-specific domain.
2. Design Data Storage Solutions
This domain is about matching relational, non-relational, and analytical data requirements to the right Azure storage architecture.
- Relational data design - Study service choice, compute and service tiers, scalability, and data-protection design for relational workloads. Official resources: Design data storage solutions, Azure SQL Database overview.
- Semi-structured and unstructured data design - Review when to recommend Azure Storage, Cosmos DB, or other services based on durability, performance, features, and cost. Official resources: Azure Cosmos DB introduction, Storage account overview.
- Data integration and analysis architecture - Microsoft includes data integration and analytical solution choices, so expect questions about how data should move and where it should be processed. Official resources: Azure Data Factory introduction, AZ-305 storage path.
- This domain is about fit-for-purpose storage - The right answer usually balances durability, scalability, operational simplicity, and cost against the actual access pattern of the workload. Official resources: AZ-305 study guide, Certification overview.
Exam tip: If the question is about where data should live or how it should scale or be protected, classify it first as relational, non-relational, unstructured, or integration-driven. That usually eliminates several wrong answers immediately.
3. Design Business Continuity Solutions
This domain focuses on resilience architecture across compute, data, and hybrid estates.
- Backup and disaster recovery design - Study recovery objectives, backup and recovery for compute, databases, and unstructured data, and hybrid recovery planning. Official resources: Design business continuity solutions, Azure Backup overview.
- High availability design - Review how compute, relational data, and storage workloads should be made highly available under Azure service constraints. Official resources: Azure Well-Architected reliability guidance, Business continuity path.
- This domain is about architectural resilience - Microsoft wants candidates who can translate RTO/RPO-style requirements into actual Azure recovery and availability patterns, not just name backup services. Official resources: AZ-305 study guide, Azure Well-Architected Framework.
Exam tip: If the prompt mentions outage tolerance, failover, backup windows, RTO, or RPO-like requirements, slow down and solve it as a continuity tradeoff question instead of a feature question.
4. Design Infrastructure Solutions
This largest domain covers compute, application architecture, migrations, and networking.
- Compute design - Study VM-based, container-based, serverless, and batch-processing solutions and how workload requirements drive those choices. Official resources: Design infrastructure solutions, Azure compute decision guidance.
- Application architecture - Microsoft explicitly includes messaging, event-driven architecture, API integration, caching, configuration management, and deployment architecture. Official resources: Azure architecture styles, Azure messaging choices.
- Migration design - Review how the Cloud Adoption Framework shapes migration strategy across servers, applications, databases, and unstructured data. Official resources: Cloud Adoption Framework for Azure, Infrastructure solutions path.
- Network solutions - Study connectivity to the internet and on-prem, network performance and security, and load-balancing and routing choices across Azure. Official resources: Hybrid networking architectures, Virtual Network overview.
- This domain is about whole-solution architecture - The right answer usually balances service fit, operational complexity, resilience, and business constraints across the full system instead of optimizing one layer alone. Official resources: Azure Architecture Center, Certification overview.
Exam tip: If a scenario is broad and spans workload shape, connectivity, migration, and scaling, you are almost certainly in this infrastructure domain, and the question is really about tradeoffs.
Recommended 5-Week Study Plan
| Week | Focus | Primary resources |
|---|---|---|
| 1 | Prerequisites review, identity, governance, monitoring, subscription structure | AZ-305 prerequisites path, identity-governance-monitor path, Entra and Azure Monitor docs |
| 2 | Relational, non-relational, unstructured storage, durability, scalability, integration | AZ-305 storage path, Azure SQL docs, Cosmos DB docs, Storage docs |
| 3 | Business continuity, backup, disaster recovery, high availability | Business continuity path, Azure Backup docs, Well-Architected reliability guidance |
| 4 | Compute, application architecture, messaging, API, caching, deployment choices | Infrastructure solutions path, Architecture Center, compute and messaging guidance |
| 5 | Migrations, networking, hybrid connectivity, mixed review, practice assessment | Cloud Adoption Framework, networking docs, AZ-305 practice assessment |
Last-Mile Exam Strategy
- Study AZ-305 as a tradeoff exam. The main skill is recommending the right Azure design under business, operational, and resilience constraints.
- Spend extra time on scenario framing: governance, storage, continuity, and infrastructure are distinct buckets, and identifying the right bucket quickly makes the answer space much smaller.
- Do not ignore prerequisites and foundational operations. Microsoft explicitly expects Azure administration, Azure development, and DevOps-process familiarity as background to architecture decisions.
- Use the public practice assessment late in preparation to calibrate Microsoft’s scenario phrasing and to spot any weak domain quickly.
- When unsure, favor answers that align with the Azure Well-Architected Framework and that produce a coherent whole-system design rather than a local optimization.
If you want adjacent context from this repo, pair this guide with our Azure Administrator Associate study guide because that certification is the prerequisite for the expert credential. Our Azure Developer Associate study guide is also useful background for application-architecture decisions even though it is not the prerequisite for this one.
The fastest way to pass AZ-305 is to think like the architect who has to defend the design in front of stakeholders: explain how access is governed, where data lives, how continuity goals are met, how workloads run, how networks connect, and why the overall Azure design is the best fit for the business requirement.