Networking and Performance Design
Network design items test internet connectivity, private connectivity, hybrid links, routing, DNS, load balancing, network security, and performance optimization.
How to study for AZ-305
Treat each AZ-305 item as an architecture decision: identify the workload requirement, governance boundary, data shape, recovery objective, and infrastructure tradeoff before choosing.
Core concepts
Concept 1
Networking and Performance Design questions test Azure architecture tradeoff decisions rather than isolated service-name recall.
Exam cue: Identify the requirement, workload type, data shape, access boundary, recovery target, and operational ownership model.
Concept 2
The best answer maps business requirements to identity, governance, data, resilience, compute, network, security, cost, and operations constraints.
Exam cue: Choose the Azure design that satisfies the constraint with the least unnecessary operational burden.
Concept 3
Eliminate answers that ignore governance scope, recovery objectives, data durability, private connectivity, security boundaries, or workload fit.
Exam cue: Prefer Well-Architected choices: secure, reliable, cost-aware, observable, governed, and scalable.
Risk pitfalls and guardrails
Choosing a service before identifying the business driver and nonfunctional requirement.
Guardrail: Avoid answers that pick services without checking governance scope, data model, recovery target, migration dependency, or network boundary.
Solving availability while ignoring identity, data protection, compliance, or cost constraints.
Guardrail: Avoid answers that pick services without checking governance scope, data model, recovery target, migration dependency, or network boundary.
Assuming a migration, networking, or storage pattern is correct without checking workload dependencies.
Guardrail: Avoid answers that pick services without checking governance scope, data model, recovery target, migration dependency, or network boundary.
Memory anchors
Virtual Network
An Azure virtual network provides an isolated network boundary for Azure resources.
Hub Spoke
A hub-spoke topology centralizes shared connectivity, security, and routing services.
ExpressRoute
ExpressRoute provides private connectivity between on-premises networks and Microsoft cloud services.
VPN Gateway
A VPN gateway provides encrypted site-to-site or point-to-site connectivity.
Private Endpoint
A private endpoint exposes a PaaS resource through a private IP address in a virtual network.
Azure Front Door
Azure Front Door provides global HTTP routing, acceleration, TLS, WAF, and health-based failover.
Traffic Manager
Traffic Manager uses DNS-based routing to direct clients to healthy endpoints.
Azure Firewall
Azure Firewall provides managed network security, filtering, and logging for Azure traffic.
User Defined Route
A user-defined route controls next-hop behavior for subnet traffic.
Network Performance
Network performance design considers latency, throughput, routing path, peering, and proximity to users.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
You must connect two virtual networks so resources communicate privately over the Azure backbone with low latency. Which feature fits?
Your design must centralize shared services and connectivity for many spoke networks. Which topology fits?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”