AZ-305 logo
Focused certification exam prep
Start practice

AZ-305 Domain 4: Design infrastructure solutions (30-35%) - Complete Study Guide 2026

TL;DR
  • Domain 4, Design infrastructure solutions, is the largest domain at 30-35% of the AZ-305 exam.
  • It spans compute, application architecture, networking, and migration decisions, not just VMs.
  • The exam has 40-60 questions in a 100-minute window, so Domain 4 items deserve fast, confident reasoning.
  • A 700+ score is required, and AZ-305 also requires holding Azure Administrator Associate first.

Why Domain 4 Carries the Most Weight on AZ-305

Among the four official domains on Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions, Design infrastructure solutions sits at the top of the weighting scale at 30-35%. That's a wider range and a heavier share than Design identity, governance, and monitoring solutions (25-30%), Design data storage solutions (20-25%), or Design business continuity solutions (15-20%). If you're mapping out study time across the exam, this is the domain that should get the most hours, not because it's inherently harder, but because it simply covers more exam real estate.

If you haven't yet reviewed how all four domains fit together, the complete guide to all four AZ-305 content areas is a useful companion to this article. This piece drills specifically into Domain 4: compute, application architecture, networking, and migrations.

Scope Reality Check: Domain 4 isn't one topic. Microsoft's own skills outline groups compute, application architecture, networking, and migration design under this single domain, which is why it commands over a third of the exam.

Designing Compute Solutions

Compute design questions test whether you can match a workload's characteristics to the right Azure compute service and configuration. You're not memorizing VM series specs; you're reasoning about constraints like cost sensitivity, scaling patterns, container maturity, and management overhead tolerance.

Compute Selection Criteria

Candidates must understand when to recommend Azure VMs, Azure App Service, Azure Container Apps, AKS, Azure Functions, or Azure Virtual Desktop based on scenario constraints.

  • Choosing between VM Scale Sets and AKS for horizontally scaling workloads
  • Selecting App Service plans versus Functions for event-driven or intermittent workloads
  • Recommending Azure Batch or HPC configurations for parallel workloads
  • Designing for availability sets, availability zones, and proximity placement groups
  • Sizing decisions tied to reserved instances, spot VMs, or hybrid benefit cost strategies

A common exam trap is picking a technically valid compute option that ignores a stated business constraint, such as "minimize administrative overhead" or "must support existing containerized CI/CD pipeline." Read every requirement line before eliminating answer choices.

Designing Application Architecture

This subarea tests architectural patterns rather than single services. You'll be asked to design for loose coupling, resiliency, and scalability using messaging and integration services.

Application Architecture Patterns

Expect scenarios involving decoupled components, event-driven systems, and API management.

  • Azure Service Bus versus Event Grid versus Event Hubs selection based on delivery guarantees and throughput
  • API Management for versioning, throttling, and exposing backend services securely
  • Caching strategies with Azure Cache for Redis to reduce backend load
  • Designing for autoscale triggers based on queue length or CPU metrics
  • Choosing between microservices and monolithic hosting based on team maturity and deployment cadence

Key Takeaway

When a scenario mentions "loosely coupled" or "publish-subscribe," think Event Grid or Service Bus topics first, not straight queues. The exact wording in the scenario usually points to the correct messaging pattern.

Designing Network Solutions

Networking is frequently the densest part of Domain 4 because Azure networking has many interlocking services that solve overlapping but distinct problems. You need to distinguish connectivity, security, and traffic-routing services quickly under time pressure.

Core Networking Decisions

These are the recurring design decisions candidates report seeing on the exam.

  • Hub-and-spoke topology design with Azure Virtual WAN versus traditional hub VNets
  • Choosing Azure Firewall, Network Security Groups, or Application Security Groups for a given control layer
  • Load balancing decisions: Azure Load Balancer versus Application Gateway versus Front Door versus Traffic Manager
  • Private connectivity using Private Link, Private Endpoints, and Service Endpoints
  • VNet peering constraints, ExpressRoute versus Site-to-Site VPN, and DNS resolution across hybrid networks

A recurring exam pattern is distinguishing Layer 4 load balancing from Layer 7 routing. If a scenario mentions SSL offloading, path-based routing, or WAF requirements, that's Application Gateway or Front Door territory, not the basic Load Balancer.

Global vs. Regional Traffic: Front Door and Traffic Manager both operate globally, but Front Door works at the HTTP layer with WAF and caching, while Traffic Manager is DNS-based routing with no content inspection. Mixing these up is one of the most common Domain 4 mistakes.

Designing Migration Solutions

The migration subarea evaluates your ability to plan lift-and-shift, replatform, or refactor strategies for workloads moving to Azure, along with the tooling used to assess and execute the move.

Migration Planning Essentials

Understand assessment, tooling, and target-service selection for on-premises workloads.

  • Azure Migrate for discovery, assessment, and dependency mapping
  • Selecting IaaS versus PaaS targets based on refactoring appetite and downtime tolerance
  • Database migration paths using Azure Database Migration Service
  • Storage migration options for large-scale data transfer, including offline transfer appliances
  • Designing for minimal downtime cutover versus phased migration waves

Migration questions often overlap with business continuity concepts covered in Domain 3: Design business continuity solutions, since a migration plan needs a rollback and recovery story. Don't study migrations in isolation from resiliency design.

How Domain 4 Questions Are Actually Asked

Microsoft doesn't publish a fixed question format ahead of time, but the exam sandbox includes active screen, build list, case study, drag-and-drop, hot area, and multiple choice items, plus possible labs. In practice, Domain 4 lends itself heavily to case studies because infrastructure design almost always involves multiple interacting requirements: cost, latency, compliance, and existing on-premises footprint all at once.

  • Case studies: A multi-paragraph scenario followed by several questions referencing the same environment; changing one constraint can flip your compute or network answer.
  • Drag-and-drop / build list: Ordering migration steps or assembling a network topology from component parts.
  • Hot area: Selecting the correct service or configuration option within a diagram or dropdown list.
  • Multiple choice: Straightforward "which service satisfies this requirement" questions, often with two plausible-looking distractors.

Because you have Microsoft Learn access available during the exam within the Learn domain while the timer keeps running, it's worth practicing how to search Learn documentation quickly for niche service limits rather than trying to memorize every number. If you're unsure how challenging this format feels in practice, the AZ-305 difficulty guide breaks down what makes the exam demanding beyond raw content volume.

Scheduling Domain 4 Against the Other Domains

Because Domain 4 is the largest domain, it deserves the largest slice of your study calendar, but it shouldn't consume the entire schedule at the expense of identity, data, and business continuity content. A domain-weighted approach works better than dividing time evenly across four domains.

Week 1

Compute and Application Architecture

  • Compare VM, App Service, Container Apps, AKS, and Functions selection criteria
  • Practice messaging service selection scenarios (Service Bus, Event Grid, Event Hubs)
Week 2

Networking Deep Dive

  • Build a hub-and-spoke topology diagram from scratch to reinforce peering and routing logic
  • Drill load balancer vs. gateway vs. Front Door vs. Traffic Manager decisions
Week 3

Migration Scenarios and Cross-Domain Review

  • Work through Azure Migrate assessment scenarios and IaaS-vs-PaaS decision trees
  • Revisit Domain 1 and Domain 3 material so infrastructure choices connect to governance and recovery requirements

This kind of weighted scheduling only works if you already know how the remaining domains are structured. Review Domain 1's identity and governance guide and Domain 2's data storage guide so your Domain 4 study time isn't duplicating concepts you've already locked in elsewhere. For a full first-attempt strategy that ties all domains together, see the AZ-305 study guide for passing on your first attempt.

Domain 4 vs. the Other Three Domains

DomainWeightingPrimary Focus
Domain 1: Identity, governance, monitoring25-30%Identity, RBAC, policy, monitoring design
Domain 2: Data storage solutions20-25%Storage account, database, and data platform selection
Domain 3: Business continuity solutions15-20%Backup, disaster recovery, high availability
Domain 4: Infrastructure solutions30-35%Compute, application architecture, networking, migration

Registration, Pricing, and Retake Mechanics

AZ-305 is delivered through Pearson VUE, either at a physical test center or via online proctoring. In the United States, pricing is typically $165 plus applicable taxes, with no separate member or non-member pricing tier. The exam typically contains 40-60 questions within a 100-minute exam window (120 minutes total seat time), and a scaled score of 700 or greater is required to pass. Microsoft does not publicly disclose pass rates, so treat any pass-rate claims you see elsewhere with skepticism; the honest answer is qualitative, not a specific number.

To actually earn the Microsoft Certified: Azure Solutions Architect Expert title, passing AZ-305 alone isn't enough - you must also already hold Microsoft Certified: Azure Administrator Associate. The English exam and its measured skills were last updated as of April 17, 2026, and no retirement date has been announced. Once earned, the certification expires after 12 months and renews free through an online Microsoft Learn renewal assessment during your renewal window.

For a full breakdown of fees, retake costs, and renewal mechanics in one place, see the AZ-305 certification cost and pricing breakdown. If you want the data-backed view on pass expectations, the AZ-305 pass rate article explains what is and isn't publicly known.

Who Hires for This Skill Set

Domain 4 knowledge - compute, application architecture, networking, and migration design - maps directly to roles hiring for cloud infrastructure and solutions architecture: cloud architects, infrastructure engineers, platform engineers, and migration specialists who plan enterprise moves to Azure. Because this domain is the largest single content area, interviewers for these roles frequently probe candidates on exactly the trade-offs tested here: compute selection, network topology, and migration strategy.

If you're weighing whether the certification translates into career movement, the AZ-305 salary guide and the ROI analysis on whether AZ-305 is worth it both look at this from a market-demand angle rather than guesswork. You can also browse current listings referencing the credential directly through AZ-305 jobs.

For readers newer to the credential itself, background pieces like What Is AZ-305?, AZ-305 Meaning, and What Is AZ-305 Certification? cover the fundamentals before you dive deeper into domain-level prep. Once you're ready to test your Domain 4 knowledge against realistic scenario questions, our practice test platform is built specifically around this exam's case-study and drag-and-drop formats.

Practice Before You Book: Because Domain 4 spans four distinct technical areas, running full-length practice exams through our AZ-305 practice tests before scheduling your real exam date helps surface which of the four subareas - compute, application architecture, networking, or migration - needs more review time.

FAQ

Why is Design infrastructure solutions the largest AZ-305 domain?

Microsoft groups compute, application architecture, networking, and migration design all under this single domain, which is why its official weighting of 30-35% exceeds every other domain on the exam.

Does Domain 4 include hands-on labs?

Microsoft does not publish a fixed list of exams with labs, and it doesn't confirm formats before the exam. The exam sandbox includes case studies, drag-and-drop, hot area, and multiple choice, plus possible labs, so be prepared for any of these formats.

How much of my AZ-305 study time should go to Domain 4?

Since it represents 30-35% of the exam versus 15-30% for the other three domains, it deserves the largest, though not disproportionate, share of your study schedule.

Can I access documentation during Domain 4 networking questions?

Yes. Microsoft Learn access is available during associate and expert exams within the Learn domain while the exam timer continues, which can help with specific service limits or configuration details.

Do I need Azure Administrator Associate before focusing on Domain 4 content?

You don't need it to take AZ-305, but you do need to hold Microsoft Certified: Azure Administrator Associate to actually earn the Azure Solutions Architect Expert certification after passing AZ-305.

Ready to pass your AZ-305 exam?

Put this into practice with free AZ-305 questions across every exam domain.