20+ practice questions focused on Design identity, governance, and monitoring solutions — one of the most tested topics on the Microsoft Azure Solutions Architect Expert AZ-305 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Design identity, governance, and monitoring solutions PracticeA company needs to monitor sign-in logs from multiple Microsoft Entra ID tenants and analyze user sign-in patterns across those tenants. Which Azure solution should they use?
Explanation: Azure Sentinel (now Microsoft Sentinel) is the correct choice because it is a cloud-native SIEM that can ingest sign-in logs from multiple Microsoft Entra ID tenants via its connectors and provide centralized monitoring, analytics, and correlation across those tenants. While it is possible to configure diagnostic settings to a single Log Analytics workspace for multi-tenant log collection, Sentinel adds pre-built security analytics, workbooks, and incident management that make it the more comprehensive solution for analyzing user sign-in patterns across tenants.
A company has multiple Azure subscriptions and wants to enforce that all administrators must use multi-factor authentication (MFA) when accessing the Azure portal. They also want to monitor and report on any policy changes that affect this enforcement. Which combination of Azure services should they use?
Explanation: Microsoft Entra ID Conditional Access policies can enforce MFA specifically for Azure management (including the Azure portal). To monitor and report on policy changes, configure diagnostic settings for Microsoft Entra ID to stream audit logs to Azure Monitor Log Analytics. This combination directly addresses both requirements: enforcing MFA for administrators and auditing changes to the Conditional Access policy itself.
A large enterprise has multiple Azure subscriptions and on-premises servers. They need to collect performance metrics (CPU, memory) from all servers, create custom dashboards to visualize health across workloads, and set up alerts for critical thresholds. They also need to retain log data for one year. Which combination of Azure services should they use?
Explanation: Azure Monitor is the central service for collecting performance metrics (CPU, memory) from both Azure VMs and on-premises servers via the Log Analytics agent or Azure Monitor Agent. Log Analytics workspace stores the data, enabling custom dashboards with Azure Workbooks and alerts with Azure Monitor Alerts. The 1-year retention is achieved by configuring the workspace's data retention settings (up to 730 days by default, extendable to 2 years).
A company uses Microsoft Entra ID Privileged Identity Management (PIM) to control access to administrator roles. They want to implement a monitoring solution that sends an email to the security team whenever a user activates the Global Administrator role outside of standard business hours (9 AM–5 PM). They also need to track all activation history for quarterly audits. Which solution should they implement?
Explanation: PIM can be configured to send email notifications for role activations, but to meet the specific requirement of emailing only for activations outside business hours, you should stream PIM audit logs to Azure Log Analytics and create an alert rule that triggers on Global Administrator activations outside 9 AM–5 PM. This alert rule can send an email to the security team. Log Analytics can be configured to retain logs for up to two years, providing the audit trail needed for quarterly audits.
A company uses Microsoft Entra ID and wants to automate the process of granting access to internal applications and Microsoft 365 groups. Employees request access through a portal, and managers must approve the requests. The access should be automatically removed after a defined period, and managers must perform quarterly access reviews to confirm continued need. Which Microsoft Entra ID feature should they use?
Explanation: Microsoft Entra ID Entitlement Management is the correct feature because it provides automated access request workflows, time-bound access assignments (via access packages), and periodic access reviews. This directly matches the requirements for a portal-based request process with manager approval, automatic expiration, and quarterly reviews.
+15 more Design identity, governance, and monitoring solutions questions available
Practice all Design identity, governance, and monitoring solutions questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Design identity, governance, and monitoring solutions. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Design identity, governance, and monitoring solutions questions on the AZ-305 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Design identity, governance, and monitoring solutions is tested as part of the Microsoft Azure Solutions Architect Expert AZ-305 blueprint. Practicing with targeted Design identity, governance, and monitoring solutions questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free AZ-305 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Design identity, governance, and monitoring solutions is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Design identity, governance, and monitoring solutions practice session with instant scoring and detailed explanations.
Start Design identity, governance, and monitoring solutions Practice →