☁️ Series: AZ-104 → AZ-305 Foundation Series Hub

"An administrator asks: how do I configure this? An architect asks: should I use this at all? AZ-305 is the exam that tests the second question."

You already know Azure. You can deploy VMs, configure storage, set up VNets, and manage identities. AZ-104 validated that. But when you sit in front of an AZ-305 scenario question — "design a highly available multi-region e-commerce platform that meets RTO of 5 minutes and RPO of 1 minute" — configuration knowledge alone is not enough. You need architectural judgment.

This series bridges that gap. Six modules, each building on the last, each connecting your existing AZ-104 knowledge to AZ-305 design thinking.

What This Series Covers

Module
Topic
AZ-305 Connection
1
Azure Identity & Governance
Design governance strategies, zero-credential architectures
2
Core Azure Services
Choose the right service — IaaS vs PaaS vs Serverless decisions
3
Azure Networking
Hub-and-Spoke, Private Endpoints, load balancing tier selection
4
Deployment & IaC
Design repeatable, governed deployment pipelines
5
Monitoring & Security
Security-by-design, Key Vault patterns, DR strategy
6
Design Thinking for AZ-305
WAF pillars, HA patterns, architecture patterns

The Shift That AZ-305 Requires

AZ-104 tests whether you know how to use Azure services. AZ-305 tests whether you know when to use them and why. The questions change from "how do you configure X" to "a company needs Y — what is the most cost-effective architecture that meets the SLA?"

AZ-104 thinking
AZ-305 thinking
How do I apply an Azure Policy?
At which scope should I apply this policy, and what is the blast radius?
How do I create a VM?
Should this workload be a VM, App Service, or Function — and why?
How do I set up VNet peering?
Should this be Hub-and-Spoke or flat? What are the governance tradeoffs?
How do I configure a Load Balancer?
Is this workload Layer 4 or Layer 7? Global or regional? WAF required?

How to Use This Series

Each module post is standalone — you can read them in any order. But the series builds: Module 1 (identity) → Module 2 (services) → Module 3 (networking) → Module 4 (deployment) → Module 5 (monitoring) → Module 6 (design thinking). Following that order gives you the most coherent mental model.

Each post includes:

  • The WHY — what problem this solves and why architects care
  • Core concepts with enterprise analogies and real scenarios
  • Architecture diagrams showing how things connect
  • Architect scenario questions — the type AZ-305 asks
  • AZ-305 bridge notes — explicit connection to exam thinking
  • Key takeaways you can revise from

After reading the series, use the interactive training tool to test your architectural judgment with scenario questions across all 6 modules.

Prerequisites

This series assumes you have AZ-104 level knowledge or equivalent hands-on Azure experience. You should already know how to:

  • Deploy and manage Azure VMs, storage accounts, and databases
  • Configure VNets, subnets, and NSGs
  • Manage Azure AD users, groups, and RBAC assignments
  • Work with the Azure portal and basic Azure CLI/PowerShell

If you are earlier in your Azure journey, start with the AZ-900 and AZ-104 content on RR Skillverse first.

Series Overview

  • AZ-305 tests architectural judgment, not configuration knowledge — a different skill requiring a different mindset
  • Six modules cover the complete AZ-104 → AZ-305 transition: identity, services, networking, deployment, monitoring, design
  • Every module post connects to real AZ-305 exam thinking and the Well-Architected Framework
  • The interactive training tool lets you test judgment with scenario questions across all modules
  • Prerequisites: AZ-104 level knowledge or equivalent hands-on Azure experience