ExamSprintLab

Free AZ-305 sample questions with answers

Updated October 9, 2026

Here are five free AZ-305 sample questions, one or more from each design area, with the answer and the reasoning behind it. Try each one before opening the answer. These are original scenario questions written against the official skills outline, not questions from the real exam.

Question 1. A company has 20 subscriptions. The security team needs to query logs from all of them in one place, keep them for one year, and run cross-resource queries with KQL. Which design should you recommend?

  • A. One Log Analytics workspace per subscription with local retention
  • B. A central Log Analytics workspace with diagnostic settings from every subscription and one-year retention
  • C. A storage account per subscription holding exported logs
  • D. A virtual machine that collects logs from all subscriptions into text files
Show answer

Answer: B

A central Log Analytics workspace receiving diagnostic settings from all subscriptions gives one place to run cross-resource KQL queries and one retention setting. One workspace per subscription forces cross-workspace queries and separate retention management. Storage accounts keep logs but do not support KQL querying. Activity log export to a single VM is not a supported monitoring design.

Want more questions like this? Full AZ-305 practice tests →

Question 2. Financial records must be stored for seven years, are almost never read, and must not be modified or deleted during that period, even by administrators. Which solution minimises cost while meeting the requirement?

  • A. Hot-tier blobs protected by RBAC
  • B. An Azure SQL Database with long-term backup
  • C. Archive-tier blobs with a time-based immutability policy
  • D. A premium Azure Files share with snapshots
Show answer

Answer: C

Blob Storage with the archive tier gives the lowest storage cost for data that is rarely read, and a time-based immutability policy (WORM) prevents modification or deletion during the retention period. Hot-tier blobs with RBAC alone do not stop an administrator from deleting data and cost more. Azure SQL Database is expensive for archives. A premium file share costs far more and has no WORM guarantee.

Want more questions like this? Full AZ-305 practice tests →

Question 3. An application stores user uploads in a storage account in one region. During a regional outage the application must still be able to read the data from the secondary region without waiting for a Microsoft-initiated failover, and it must survive a datacenter failure in the primary region. Which redundancy option meets the requirement?

  • A. Read-access geo-zone-redundant storage (RA-GZRS)
  • B. Geo-zone-redundant storage (GZRS)
  • C. Read-access geo-redundant storage (RA-GRS)
  • D. Zone-redundant storage (ZRS)
Show answer

Answer: A

RA-GZRS keeps zone-redundant copies in the primary region, replicates to the secondary region, and exposes a read-only secondary endpoint at all times. GZRS has the same copies but no read access to the secondary until failover. RA-GRS gives secondary reads but keeps the primary copies in one datacenter. ZRS survives a datacenter loss but has no secondary region.

Want more questions like this? Full AZ-305 practice tests →

Question 4. A research team runs a nightly job that splits a large dataset into thousands of independent tasks. The work can be interrupted and restarted, and the team wants the lowest cost without managing a cluster by hand. Which compute service should you recommend?

  • A. One large virtual machine started by a schedule
  • B. An App Service plan with scheduled WebJobs
  • C. A permanently running AKS cluster
  • D. Azure Batch with a pool of Spot VMs
Show answer

Answer: D

Azure Batch schedules large numbers of independent tasks across a pool of VMs it manages, and the pool can use Spot VMs for interruptible work at a lower price. A single large VM does not scale out. App Service is for web workloads. A permanently running AKS cluster needs management and runs all day for a nightly job.

Want more questions like this? Full AZ-305 practice tests →

Question 5. A public web application is deployed in two Azure regions. Users are worldwide, the company wants HTTP-level routing to the closest healthy region, fast failover, TLS offload and a web application firewall at the edge. What should you recommend?

  • A. Azure Traffic Manager with performance routing
  • B. Azure Front Door with a WAF policy
  • C. A regional Application Gateway in one region
  • D. A public Azure Load Balancer in each region
Show answer

Answer: B

Azure Front Door is a global layer 7 service that routes HTTP traffic to the best healthy backend, terminates TLS at the edge and supports WAF. Traffic Manager is DNS-based, so it cannot offer edge TLS offload or WAF and fails over only as fast as DNS caches allow. Application Gateway is regional. A public Load Balancer is layer 4 and regional.

Want more questions like this? Full AZ-305 practice tests →

How did you do?

Questions 3 and 5 catch the most people, because all the options are real services and the deciding detail is small: read access to the secondary, or DNS-level versus HTTP-level routing. If either slowed you down, read the business continuity guide or the infrastructure guide.

What these questions have in common

None asks for a definition. Each describes a requirement and several options that could all work in some situation; the answer turns on one phrase: cross-resource queries, not modified even by administrators, read from the secondary, without managing a cluster, closest healthy region. Underline that phrase first, then eliminate the options that fail it.

For a longer check, take the 20-question practice test.