Course Overview

Secure, scalable, and well-architected solutions are becoming increasingly important as businesses speed their cloud migration. Microsoft Azure, one of the leading cloud platforms, offers a multitude of services that support digital transformation across numerous industries. Effectively utilizing these services, however, calls for more than simply familiarity; it also calls for strategic design and architectural knowledge. AZ-305T00: Designing Microsoft Azure Infrastructure Solutions is a course that addresses this issue.

The goal of this advanced-level training is to provide current and prospective Azure solution architects with the knowledge and abilities necessary to create reliable infrastructure solutions on Microsoft Azure. By emphasizing real-world architecture decisions, trade-offs, and best practices, the course bridges the gap between implementation and design and gets students ready for the Microsoft Certified: Azure Solutions Architect Expert certification.

Building on fundamental Azure knowledge, such as that gained from the AZ-104: Microsoft Azure Administrator certification, the AZ-305T00 course focuses on solution strategy and design thinking. Students will acquire a thorough understanding of how to evaluate technical and commercial needs and convert them into Azure infrastructure solutions that are safe, scalable, and resilient during this course.

First, participants will learn how to use Azure Active Directory (Entra ID), RBAC, Conditional Access, and Hybrid Identity solutions to develop identity and access management strategies. To guarantee uniformity and compliance across cloud environments, security and governance frameworks like Azure Policy, Blueprints, and resource tagging are prioritized.

A thorough examination of storage options is also covered in the course, including databases (SQL, Cosmos DB, PostgreSQL), Blob Storage, Azure Files, and storage access techniques including encryption, managed identities, and SAS tokens. Students will evaluate and contrast storage options according to business use cases, performance, cost, and scalability.

The course delves further into compute architecture, which includes serverless functions, virtual machines (VMs), containers (AKS and ACI), and App Services. It discusses how to use technologies like Azure Front Door, Traffic Manager, and Azure Load Balancer to optimize performance across regions, autoscale, and provide high availability.

Introduction

Resilience and business continuity are essential elements of contemporary infrastructure design, and the course examines technologies like Azure Site Recovery, Backup, Availability Zones, and Geo-redundant services. In order to fulfill organizational SLAs, learners will assess Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).

In addition to infrastructure and services, the AZ-305T00 course covers cost management and optimization, automation with Bicep, ARM templates, and Terraform, and monitoring and diagnostics using Azure Monitor, Log Analytics, and Application Insights.

In addition to being prepared to pass the AZ-305 test, students who successfully complete the course will have the practical skills needed to oversee infrastructure design initiatives, conduct architectural reviews, and collaborate effectively with DevOps, security, and operations teams. A final capstone project requires students to integrate all of the ideas into a coherent architectural vision by designing and presenting a full-scale Azure solution based on a challenging enterprise scenario.

Designing safe, scalable, and economical infrastructure is a crucial skill for IT professionals and architects in today’s cloud-first world. The first step toward becoming a reputable cloud architect who can confidently and technically lead businesses through digital transformation is the AZ-305T00: Designing Microsoft Azure Infrastructure Solutions course.

We are The Training Bee, a global training and education firm providing services in many countries. We are specialized in capacity building and talent development solutions for individuals and organizations, with our highly customized programs and training sessions.

Learning Objectives

Upon completing AZ-305T00: Designing Microsoft Azure Infrastructure Solutions, participants will be able to:

• Use Azure Active Directory to create scalable and safe identity and access management systems.
• Use Azure Policy, Blueprints, and role-based access control to plan and carry out governance policies.
• Create cloud-based and hybrid network topologies with ExpressRoute, VPN, and VNet peering.
• Create highly accessible and robust computing systems with Azure containers, App Services, and virtual machines.
• Utilize Azure Blob, File, Queue, and Table Storage to create scalable and secure storage plans.
• Utilize Azure Backup and Site Recovery to create plans for business continuity and catastrophe recovery.
• To create distributed application delivery, use load balancers, Traffic Manager, and Azure Front Door.
• Use network security groups, firewalls, and private endpoints to establish secure resource access.
• Create data integration solutions with Service Bus, Event Grid, and Azure Data Factory.

Our Unique Training Methodology

This interactive course comprises the following training methods:

• Journaling – This consists of setting a timer and letting your thoughts flow, unedited and unscripted recording events, ideas, and thoughts over a while, related to the topic.
• Social learning – Information and expertise exchanged amongst peers via computer-based technologies and interactive conversations including Blogging, instant messaging, and forums for debate in groups.
• Project-based learning
• Mind mapping and brainstorming – A session will be carried out between participants to uncover unique ideas, thoughts, and opinions having a quality discussion.
• Interactive sessions – The course will use informative lectures to introduce key concepts and theories related to the topic.
• Presentations – Participants will be presented with multimedia tools such as videos and graphics to enhance learning. These will be delivered engagingly and interactively.

Pre-course assessment

Before you enroll in this course all we wanted to know is your exact mindset and your way of thinking.

• What are Azure Availability Zones’ main advantage?
• Which service makes it possible for hybrid identities to be synchronized between Azure AD and on-premises AD?
• What makes Azure Blob Storage different from Azure File Storage?
• Which Azure networking feature enables subnet-level traffic restriction for both inbound and outgoing traffic?
• What is Azure ExpressRoute used for?
• In your Azure setup, which service aids in the monitoring and analysis of performance logs?
• Which identity management system enables safe access to internal apps by external users?
• Which Azure storage solution is best suited for large-scale unstructured data?

Course Outline

This AZ-305T00:Designing Microsoft Azure Infrastructure Solutions covers the following topics for understanding the essentials of the Agile Workplace:

Module 1 – Azure Design Governance and Compliance

• Azure Resource Locks, Blueprints, and Policy
• Compliance with regulations (such as ISO, NIST, and GDPR)
• Enterprise-scale architecture governance and landing zones

Module 2 – Authorization, Authentication, and Design Identity

• Conditional Access and Azure Active Directory (Entra ID)
• Design patterns for B2B and B2C
• RBAC, or role-based access control, and managed identities

Module 3 – Create a Secure Network Architecture

• Azure Firewall, NSGs, and Virtual Networks
• Connectivity via a hybrid network (VPN Gateway, ExpressRoute)
• Just-in-Time (JIT) access, Azure Bastion, and private endpoints

Module 4 – Design Load Balancing and Application Delivery

• Comparison between Azure Front Door, Traffic Manager, and Application Gateway
• Geo-routing, latency optimization, and high availability
• WAF design and SSL termination

Module 5 – Create Computational Solutions to Meet Workload Needs

• Zones, Availability Sets, and VM Sizing
• Azure Function Apps and App Service Plans
• Container tactics: Azure Container Apps, AKS, and ACI

Module 6 – Create Data Access Patterns and Storage Solutions

• File, Table, Blob, and Queue Storage
• Redundancy, storage levels, and lifetime guidelines
• Shared access signatures (SAS) and encryption both in transit and at rest

Module 7 – Create Multi cloud and Hybrid Solutions

• Tools for hybrid management with Azure Arc
• Connectivity to on-premises systems
• Utilizing Azure, AWS, and GCP in a multicloud architecture

Module 8 – Make plans for business continuity and disaster recovery (BCDR).

• Azure Site Backup and Recovery
• Strategies for RTO, RPO, and failover
• Designing for application resilience and geo-redundancy

Module 9 – Create Analytics and Data Integration Solutions

• Stream Analytics, Data Factory, and Azure Synapse
• Runtime integration with ETL/ELT pipelines
• Real-time processing scenarios, an event hub, and an internet of things hub

Module 10 – Create Database Solutions

• PostgreSQL, MySQL, Cosmos DB, and Azure SQL (PaaS vs. IaaS)
• Indexing, scalability, and geo-replication
• Consistency models and database design for several regions

Module 11 – Design Observability, Logging, and Monitoring

• Application Insights, Log Analytics, and Azure Monitor
• Kusto Query Language (KQL), metric dashboards, and alerting
• Governance via cost control and tagging

Module 12 – Design for Sustainability and Cost Reduction

• Azure Billing, Cost Management, and Pricing Calculator
• Spot VMs, Azure Reservations, and resource sizing

Creating environmentally friendly architectural designs (GreenOps)

Post-Course Assessment

Participants need to complete an assessment post-course completion so our mentors will get to know their understanding of the course. A mentor will also have interrogative conversations with participants and provide valuable feedback.

• Which Azure service enables container hosting without requiring management of the supporting infrastructure?
• Which Azure feature gives subscribers fine-grained access control over particular resources?
• Which Azure AD approach is best for controlling guest user access in a business-to-business setting?
• In an Azure context, what tool would you use to ensure regulatory compliance at scale?
• Explain how managed identities make it easier to access Azure services securely.
• Which networking service would be most suitable for SSL termination and worldwide application routing?
• What distinguishes availability zones from availability sets?

Lessons Learned

By adopting a business-centric mindset while architecting, participants were able to connect Azure infrastructure choices with organizational objectives, service level agreements, and regulatory needs, moving away from a technical implementation focus and toward a business-first design approach.

Creating Secure and Scalable Identity Solutions: The course focused on best practices for Azure Active Directory identity and access management design, such as role-based access control (RBAC), conditional access, and multi-factor authentication (MFA), which allow for safe user and service interactions.

Using Governance and Compliance Strategies: Students developed a thorough understanding of how to implement governance in large-scale environments to ensure uniformity, cost control, and compliance using Azure Policy, Blueprints, and resource locks.

Creating Hybrid and Multi-Region Network Architectures: Using Virtual Networks, VPN Gateways, ExpressRoute, and Private Endpoints, participants gained the ability to create robust, secure, and efficient networking solutions through practical labs and design workshops.

Considering Cost and Availability When Developing Compute Solutions In order to balance performance, redundancy, and cost-effectiveness for various workloads, attendees learned how to assess and suggest virtual machines (VMs), containers, App Services, and serverless solutions.

Learners investigated how to create storage solutions with Azure Blob Storage, File Shares, and databases (SQL, Cosmos DB, and PostgreSQL) while taking performance tiers, replication, and access control into account.