Microsoft Azure Solutions Architect Expert (AZ-305): 6 Critical Design Patterns

The Azure Solutions Architect Expert exam (AZ-305) tests design of cloud and hybrid solutions under multi-constraint scenarios. Trade-offs matter more than service trivia — these six patterns recur across stems.

1. Designing Resilient Multi-Region Architectures#

Multi-region design is fundamental to the AZ-305—expect scenarios involving global distribution, disaster recovery, and high availability requirements.

Global Load Balancing Options#

When to Use Each#

• Front Door — Global HTTP/HTTPS traffic with caching, WAF, and intelligent routing
• Traffic Manager — DNS-based routing for non-HTTP protocols or when you need failover without proxying
• Cross-region LB — Combine Traffic Manager or Front Door with regional Application Gateway/Load Balancer for complex scenarios

Architecture Pattern: Active-Active Multi-Region#

Users Worldwide
       ↓
Azure Front Door (Global Entry Point)
   ├── WAF Policy (Protection)
   ├── Origin Group 1 → Region A (App Service + SQL)
   └── Origin Group 2 → Region B (App Service + SQL)
                            ↑
                    Auto-Failover Group (Data Sync)

2. Identity and Access Design Patterns#

AZ-305 heavily tests your understanding of Microsoft Entra ID (formerly Azure AD) and Zero Trust principles.

Conditional Access Decision Matrix#

External Identity Scenarios#

Managed Identities for Azure Resources#

Always prefer managed identities over stored credentials:

Your App (App Service, VM, Function)
        ↓
  Managed Identity (System or User-assigned)
        ↓
  Azure AD Token Request
        ↓
  Access to Azure Resources (Key Vault, Storage, SQL)

System-assigned: Tied to resource lifecycle, automatically deleted when resource is deleted. User-assigned: Independent lifecycle, can be shared across multiple resources.

3. Data Storage Architecture Patterns#

Choosing the right data store is a core AZ-305 skill. You must match requirements to the appropriate service and configuration.

Relational Database Decision Tree#

Do you need...
├── Hyperscale (100+ TB, read scale-out)?
│   └── Azure SQL Hyperscale
├── Cross-region replication with automatic failover?
│   └── Azure SQL with Auto-failover Groups
├── Full SQL Server feature compatibility + OS access?
│   └── Azure SQL Managed Instance
├── Serverless with auto-pause?
│   └── Azure SQL Database Serverless
└── Basic managed SQL?
    └── Azure SQL Database (provisioned or serverless)

Non-Relational Database Selection#

Storage Account Replication Options#

4. Compute Architecture Decisions#

AZ-305 tests your ability to select the right compute platform for given constraints.

Compute Platform Selection Matrix#

Autoscaling Patterns#

Migration Strategy Mapping#

5. Governance and Compliance Patterns#

Enterprise governance appears frequently on AZ-305—you must understand the hierarchy and enforcement mechanisms.

Azure Resource Hierarchy#

Tenant (Azure AD)
    └── Management Groups (up to 6 levels)
            └── Subscriptions
                    └── Resource Groups
                            └── Resources

Key principle: Policies and RBAC assigned at higher levels are inherited by lower levels.

Azure Policy Effects#

Cost Management Patterns#

6. Networking Architecture Patterns#

Networking design ties together all Azure services. AZ-305 tests your ability to design secure, performant network architectures.

Hybrid Connectivity Options#

Service Endpoints vs Private Endpoints#

Network Security Layers#

Hub-Spoke Architecture#

                    ┌─────────────────┐
                    │   Hub VNet      │
                    │  ┌───────────┐  │
                    │  │  Firewall │  │
                    │  └───────────┘  │
On-Prem ─VPN/ER─────│  ┌───────────┐  │
                    │  │  Bastion  │  │
                    │  └───────────┘  │
                    └────────┬────────┘
               ┌─────────────┼─────────────┐
               ↓             ↓             ↓
         ┌─────────┐   ┌─────────┐   ┌─────────┐
         │ Spoke 1 │   │ Spoke 2 │   │ Spoke 3 │
         │  (Web)  │   │  (App)  │   │  (Data) │
         └─────────┘   └─────────┘   └─────────┘

---

Know your range before test day#

AZ-305 is trade-off exam craft. Sit a short scenario diagnostic, then drill the design domains that still feel fragile.

• Timed diagnostic with domain-level breakdown
• Clear signal on what to drill next
• Practice free; timed sittings and readiness range on Pro

Take the free AZ-305 assessment →

---

Next step: Start practicing free on the AZ-305 hub, or sit a short diagnostic first.