Candidates for this exam should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, and governance. A professional in this role should manage how decisions in each area affect an overall solution. In addition, they should have experience in Azure administration, Azure development, and DevOps processes.

The Microsoft Certified: Azure Solutions Architect Expert certification will be earned by completing the following requirements:

Earn the Microsoft Certified: Azure Administrator Associate certification and pass Exam AZ-305
or
Pass Exam AZ-303 (before it retires on March 31, 2022) and Exam AZ-305

NOTE: Passing score: 700. Learn more about exam scores here. Beta exams are not scored immediately because we are gathering data on the quality of the questions and the exam. Learn more about the value and importance of beta exams.

Part of the requirements for: Microsoft Certified: Azure Solutions Architect Expert

Related exams: none
Important: See details

Skills measured

Design identity, governance, and monitoring solutions (25-30%)
Design data storage solutions (25-30%)
Design business continuity solutions (10-15%)
Design infrastructure solutions (25-30%)

NOTE: Passing score: 700. Learn more about exam scores here.

Audience Profile
Candidates for the Azure Solutions Architect Expert certification should have subject matter expertise in designing cloud and hybrid solutions that run on Microsoft Azure, including compute, network, storage, monitoring, and security.
Responsibilities for this role include advising stakeholders and translating business requirements into designs for secure, scalable, and reliable Azure solutions.

An Azure Solutions Architect partners with developers, administrators, and other roles responsible for implementing solutions on Azure.

A candidate for this certification should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, and governance. A professional in this role should manage how decisions in each area affect an overall solution. In addition, they should have experience in Azure administration, Azure development, and DevOps processes.

Skills Measured
NOTE: The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.
NOTE: Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Design Identity, Governance, and Monitoring Solutions (25-30%)
Design a solution for logging and monitoring
 design a log routing solution
 recommend an appropriate level of logging
 recommend monitoring tools for a solution

Design authentication and authorization solutions
 recommend a solution for securing resources with role-based access control
 recommend an identity management solution
 recommend a solution for securing identities

Design governance
 recommend an organizational and hierarchical structure for Azure resources
 recommend a solution for enforcing and auditing compliance

Design identities and access for applications
 recommend solutions to allow applications to access Azure resources
 recommend a solution that securely stores passwords and secrets
 recommend a solution for integrating applications into Azure Active Directory (Azure AD)
 recommend a user consent solution for applications

Design Data Storage Solutions (25-30%)
Design a data storage solution for relational data
 recommend database service tier sizing
 recommend a solution for database scalability
 recommend a solution for encrypting data at rest, data in transmission, and data in use

Design data integration
 recommend a solution for data integration
 recommend a solution for data analysis

Recommend a data storage solution
 recommend a solution for storing relational data
 recommend a solution for storing semi-structured data
 recommend a solution for storing non-relational data

Design a data storage solution for non-relational data
 recommend access control solutions to data storage
 recommend a data storage solution to balance features, performance, and cost
 design a data solution for protection and durability

Design Business Continuity Solutions (10-15%)
Design a solution for backup and disaster recovery
 recommend a recovery solution for Azure, hybrid, and on-premises workloads that meets recovery objectives (Recovery Time Objective [RTO], Recovery Level Objective [RLO],

Recovery Point Objective [RPO])
 understand the recovery solutions for containers
 recommend a backup and recovery solution for compute
 recommend a backup and recovery solution for databases
 recommend a backup and recovery solution for unstructured data

Design for high availability
 identify the availability requirements of Azure resources
 recommend a high availability solution for compute
 recommend a high availability solution for non-relational data storage
 recommend a high availability solution for relational data storage

Design Infrastructure Solutions (25-30%)
Design a compute solution
 recommend a virtual machine-based compute solution
 recommend an appropriately sized compute solution based on workload requirements
 recommend a container-based compute solution
 recommend a serverless-based compute solution

Design an application architecture
 recommend a caching solution for applications
 recommend a messaging architecture
 recommend an event-driven architecture
 recommend an automated deployment solution for your applications
 recommend an application configuration management solution
 recommend a solution for API integration

Design migrations
 evaluate a migration solution that leverages the Cloud Adoption Framework for Azure
 assess and interpret on-premises servers, data, and applications for migration
 recommend a solution for migrating applications and virtual machines
 recommend a solution for migrating databases
 recommend a solution for migrating unstructured data

Design network solutions
 recommend a network architecture solution based on workload requirements
 recommend a connectivity solution that connects Azure resources to the internet
 recommend a connectivity solution that connects Azure resources to on-premises networks
 optimize network performance for applications
 recommend a solution to optimize network security
 recommend a load balancing and routing solution

QUESTION 1
After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements.
What should you do?

A. Create an access policy for the blob service.
B. Implement Azure resource locks.
C. Create Azure RBAC assignments.
D. Modify the access level of the blob service.

Answer: B

QUESTION 2
You need to recommend a solution to meet the database retention requirements.
What should you recommend?

A. Configure a long-term retention policy for the database.
B. Configure Azure Site Recovery.
C. Use automatic Azure SQL Database backups.
D. Configure geo-replication of the database.

Answer: A

QUESTION 3
You have an Azure subscription that contains a custom application named Application1. Application1 was
developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based
access control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan.
You need to recommend a solution to verify whether the Fabrikam developers still require permissions to
Application1. The solution must meet the following requirements:
To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
If the manager does not verify an access permission, automatically revoke that permission.
Minimize development effort.
What should you recommend?

A. In Azure Active Directory (Azure AD), create an access review of Application1.
B. Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
C. In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.
D. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.

Answer: A

Examkingdom Microsoft AZ-305 Exam pdf, Certkingdom Microsoft AZ-305 PDF

Best Microsoft AZ-305 Certification, Microsoft AZ-305 Training at certkingdom.com