EarnYourCert
Open the app
Exams › AZ-305 › Domain 4 of 4
AZ-305 · Domain 4 of 4 · 30-35% of the exam

Design infrastructure solutions

Domain 4 of AZ-305 accounts for 30-35% of the exam, the heaviest part of the syllabus. EarnYourCert has 136 original questions for this domain, all with explanations: 93 multiple choice, 18 yes/no and 25 completion or ordering items, like the real exam.

Practice domain 4 for free →No sign-up. Choose how many questions you want.

Domain 4 sample questions

8 questions from our 136-question bank for this domain. Try to answer before revealing the solution.

1. A team needs full Kubernetes control, custom operators and service mesh integration. Which service should they choose?

  1. Azure App Service
  2. Azure Kubernetes Service (AKS)
  3. Azure Container Instances
  4. Azure Functions
Show answer

Correct answer: B. AKS gives managed Kubernetes with full API access.

2. You must transfer 80 TB of data to Azure over a slow link. Which option is most suitable?

  1. AzCopy over the internet
  2. A VPN with more bandwidth
  3. Azure Data Box
  4. Azure File Sync only
Show answer

Correct answer: C. Data Box is a physical appliance for offline bulk transfer.

3. Which pattern protects a downstream service from being overloaded by buffering requests between producers and consumers?

  1. Synchronous coupling
  2. Shared database
  3. Queue-based load leveling
  4. Direct file copy
Show answer

Correct answer: C. Queues absorb spikes and decouple components.

4. Which service discovers and assesses on-premises servers, databases and web apps for migration readiness and cost estimates?

  1. Azure Advisor
  2. Azure Migrate
  3. Azure Site Recovery
  4. Azure Database Migration Service
Show answer

Correct answer: B. Azure Migrate provides discovery, assessment and migration tools.

5. Which migration strategy re-architects an application to use cloud-native services such as microservices and serverless?

  1. Retire and replace with SaaS
  2. Rearchitect or rebuild
  3. Retain on-premises for now
  4. Rehost on Azure VMs (lift and shift)
Show answer

Correct answer: B. Rearchitecting yields maximum cloud benefits with higher effort.

6. Which service provides a private, dedicated connection between on-premises and Azure that does not traverse the public internet?

  1. Azure DNS
  2. Azure VPN Gateway over the internet
  3. Azure ExpressRoute
  4. Azure Bastion
Show answer

Correct answer: C. ExpressRoute offers private connectivity via a provider.

7. Which networking option improves VM network throughput by bypassing the host virtual switch?

  1. Availability set
  2. Accelerated networking
  3. Proximity placement groups
  4. Premium SSD v2 disks
Show answer

Correct answer: B. Accelerated networking uses SR-IOV to reduce latency and CPU use.

8. Which service provides secure RDP/SSH access to VMs without exposing public IPs or opening management ports?

  1. Azure Firewall
  2. Azure NAT Gateway
  3. Azure DDoS Protection
  4. Azure Bastion
Show answer

Correct answer: D. Bastion connects over TLS from the portal.

Practice domain 4 for free →

Other AZ-305 domains

1Design identity, governance, and monitoring solutions25-30% 2Design data storage solutions20-25% 3Design business continuity solutions15-20% AZ-305: full practice exam→