Azure AZ-305 case studies

Azure AZ-305 · Put your knowledge to work in context.

Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions is the required exam for the Microsoft Certified: Azure Solutions Architect Expert certification. It targets architects who design cloud and hybrid solutions on Azure across compute, networking, storage, monitoring, and security, and who translate business requirements into designs aligned with the Azure Well-Architected Framework and the Cloud Adoption Framework for Azure. The Azure AZ-305 case studies are 5 cases and about 3,829 words.

Contoso Retail: governing 42 subscriptions after two acquisitions

Contoso has grown from 4 to 42 Azure subscriptions through two acquisitions, and two of the acquired subscriptions sit in separate Microsoft Entra tenants. The CISO requires that all activity logs and VM telemetry land in one Log Analytics workspace, that no NIC anywhere has a public IP except resources in a single Lab-RG used for training, and that developers can manage their own resource groups without being able to grant access to anyone else.

786 words, about 4 min 2

Fabrikam Media: 1.2 PB archive with a 12-hour retrieval promise

Fabrikam Media stores 1.2 PB of video masters on an on-premises NAS reachable over a 2 Gbps ExpressRoute circuit. About 40 TB is actively used by rendering nodes every month; the remaining archive is read in roughly 5% of months, but legal requires any asset to be retrievable within 12 hours and kept immutable for three years.

732 words, about 4 min 3

Northwind Logistics: a first-ever regional failover with a 1-hour SQL RTO

Northwind Logistics runs a three-tier .NET application on 60 IaaS VMs and 4 SQL Server 2019 VMs holding 2 TB, all in Sweden Central. The business requires an RTO of 4 hours for the web tier and 1 hour for SQL, with an RPO of 15 minutes for SQL and 24 hours for the 20 TB file share.

781 words, about 4 min 4

Tailwind Manufacturing: a hub-spoke network that has outgrown its hub

Tailwind Manufacturing runs a hub-and-spoke network in East US 2 with 14 spokes peered to a hub holding an Azure Firewall and a 10 Gbps ExpressRoute circuit to two datacenters. All spoke-to-spoke traffic is forced through the firewall by UDRs.

794 words, about 4 min 5

First Harbor Bank: cloud sign-in that survives the datacenter going dark

First Harbor Bank's Azure tenant is synchronized from on-premises AD DS via Microsoft Entra Connect for 3,000 users. Regulators require that Microsoft 365 sign-in continues if the on-premises datacenter is offline, that no inbound connections from Azure to the on-premises network are required, and that a legacy intranet application using Kerberos keeps working for domain-joined PCs.

736 words, about 4 min