10 free, exam-style Microsoft Certified: Azure Solutions Architect Expert (AZ-305) (AZ-305) practice questions with answers and
explanations. No signup required. Work through them below, then take the
full free AZ-305 practice test to study every exam domain.
These 10 free AZ-305 questions are organized by exam domain, so you can see how each part of the Microsoft Certified: Azure Solutions Architect Expert (AZ-305) blueprint is tested. Reveal the answer and explanation under each question.
Domain 1: Design identity, governance, and monitoring solutions (25-30%)
Question 1
A security team wants administrators to hold elevated Azure roles only when actively needed, for a limited time, and only after an approval step. The rest of the time those accounts should have standard permissions. Which solution should the architect recommend?
- Assign the elevated roles permanently through Azure RBAC
- Apply Conditional Access policies to the administrators
- Microsoft Entra Privileged Identity Management (PIM)
- Build a custom RBAC role with fewer permissions
Show answer & explanation
Correct answer: C - Microsoft Entra Privileged Identity Management (PIM)
Question 2
An organization must guarantee that resources can only ever be deployed into two approved Azure regions to meet a data-residency requirement, regardless of which administrator performs the deployment. Which governance tool enforces this?
- Azure role-based access control (RBAC)
- Microsoft Entra Conditional Access
- Azure Policy with an allowed-locations rule
- Resource locks on each resource group
Show answer & explanation
Correct answer: C - Azure Policy with an allowed-locations rule
Domain 2: Design data storage solutions (20-25%)
Question 3
An application stores backup archives that are almost never read but must be retained for seven years at the lowest possible storage cost. On the rare occasion data is needed, a retrieval delay of several hours is acceptable. Which Azure Blob Storage access tier is MOST appropriate?
- Hot, for frequently accessed data
- Cool, for data accessed less than monthly
- Cold, for data accessed less than quarterly
- Archive, offline with hours-long rehydration
Show answer & explanation
Correct answer: D - Archive, offline with hours-long rehydration
Question 4
An architect is migrating an on-premises SQL Server database that relies on SQL Server Agent jobs, cross-database queries, and linked servers. The business wants a managed PaaS service with the least possible application rework. Which target is BEST?
- Azure SQL Managed Instance
- Azure SQL Database, single database
- Azure Database for PostgreSQL
- SQL Server installed on an Azure VM
Show answer & explanation
Correct answer: A - Azure SQL Managed Instance
Question 5
A globally distributed application requires low-latency reads and writes in multiple regions simultaneously, with a tunable, well-defined consistency guarantee. Which Azure database service is purpose-built for this?
- Azure Cosmos DB
- Azure SQL Database with read replicas
- Azure Database for MySQL Flexible Server
- Azure Cache for Redis Enterprise tier
Show answer & explanation
Correct answer: A - Azure Cosmos DB
Domain 3: Design business continuity solutions (15-20%)
Question 6
A finance workload runs on virtual machines in a single Azure region. The business requires the solution to remain available even if an entire Azure datacenter within that region fails. Which deployment approach meets this requirement with the highest VM SLA?
- Distribute the VMs across multiple availability zones
- Place the VMs in a single availability set
- Attach premium managed disks to each VM
- Replicate the VMs to a paired region for recovery
Show answer & explanation
Correct answer: A - Distribute the VMs across multiple availability zones
Question 7
A workload of Azure virtual machines must fail over to a second Azure region during a regional outage, with a recovery point objective of about 15 minutes and orchestrated, testable failover plans. Which service should the architect recommend?
- Azure Backup with a Recovery Services vault
- Availability zones within the primary region
- Geo-redundant storage (GRS) on the VM disks
- Azure Site Recovery replication and failover
Show answer & explanation
Correct answer: D - Azure Site Recovery replication and failover
Domain 4: Design infrastructure solutions (30-35%)
Question 8
A team is deploying a set of microservices as containers. They want automatic scale-to-zero when idle, event-driven scaling, and they explicitly do NOT want to manage a Kubernetes control plane or perform cluster upgrades. Which compute service should the architect recommend?
- Azure Kubernetes Service (AKS)
- Azure Container Apps
- Azure Container Instances
- Virtual Machine Scale Sets
Show answer & explanation
Correct answer: B - Azure Container Apps
Question 9
A company needs to connect its on-premises datacenter to Azure with a private, high-bandwidth, low-latency connection that does NOT traverse the public internet and carries a connectivity SLA. Which option should the architect recommend?
- A site-to-site VPN tunnel over the public internet
- A point-to-site VPN configured on each server
- Virtual network peering between the sites
- Azure ExpressRoute private connectivity
Show answer & explanation
Correct answer: D - Azure ExpressRoute private connectivity
Question 10
A retail platform must ingest millions of telemetry events per second from IoT devices and make that stream available to multiple downstream analytics consumers in parallel. Which Azure service is designed for this high-throughput streaming ingestion?
- Azure Service Bus queues
- Azure Event Hubs
- Azure Event Grid
- Azure Queue Storage
Show answer & explanation
Correct answer: B - Azure Event Hubs