WGU E033 Azure Solutions Architecture (AZ-305) |
Comprehensive 100 Practice Questions and Answers with
Detailed Rationales | 2026/2027 Updated.
Part 1: Deep research and verified assessment coverage
Research date: October 14, 2026 Institution: Western Governors University Course: E033 –
Azure Solutions Architecture Program: B.S. Cloud and Network Engineering – Microsoft Azure
1. What the official sources establish
WGU's August 2026 transfer guidelines identify E033 as a 3-credit course associated with the
Microsoft AZ-305 / Azure Solutions Architect Expert certification pathway. Its institutional
catalog identifies D338 – Cloud Platform Solutions as a prerequisite.
partners.wgu.edu
+1
Microsoft confirms that AZ-305 measures the design of Azure infrastructure solutions and that
its English-language exam was updated on April 17, 2026. The published passing score is 700 on
Microsoft's scaled scoring system.
Microsoft Learn
+1
Verification boundary: WGU's public documents confirm the certification alignment but do not
disclose E033's complete internal assessment arrangement, the exact live examination questions,
or an official 100-question WGU assessment.
2. Official blueprint and our question allocation
Identity, governance and monitoring
25–30% official
28 Q
Data storage
,20–25% official
22 Q
Business continuity
15–20% official
17 Q
Infrastructure solutions
30–35% official
33 Q
Exam percentages: Microsoft Learn, April 17, 2026 blueprint. Question counts: our proposed
100-question practice allocation.
Microsoft Learn
3. Important updates affecting 2026/2027 preparation
Research identified two product changes worth reflecting in the questions:
Azure Managed Redis: Microsoft now recommends Azure Managed Redis for new
caching architectures as the older Azure Cache for Redis SKUs approach retirement.
Microsoft Learn
Microsoft Entra External ID: Azure AD B2C stopped being available for purchase by
new customers on May 1, 2025. New customer identity architectures should be evaluated
using Microsoft Entra External ID.
Microsoft Learn
+1
,The question bank below is original educational practice material. Its scenario designs are based
on published Microsoft objectives and documentation, not copied live AZ-305 exam questions,
leaked answer keys, or an undisclosed WGU assessment.
Part 2: Comprehensive practice examination
Section A: Identity, Governance and Monitoring
Questions 1–28 | 28 questions
Aligned to Microsoft's logging, monitoring, authentication, authorization, identity governance
and resource governance objectives.
Microsoft Learn
+2
Question 1. A company has four Azure subscriptions. Security administrators must view
resources across all four subscriptions but must not modify them. What should the architect
recommend?
A. Assign the Owner role separately to each administrator B. Assign Reader at their common
management group scope C. Assign Contributor at the tenant root D. Create four new Microsoft
Entra tenants
Correct answer: B
Rationale: Reader provides visibility without resource modification privileges. Assigning the
role at the common management group allows permissions to flow down to its subscriptions.
Owner and Contributor grant excessive privileges, while separate tenants would add complexity.
Question 2. An organization must prevent deployment of resources in Azure regions that its
compliance team has not approved. Which feature best enforces the requirement?
A. Azure Monitor B. Network Security Groups C. Azure Policy with an allowed-locations policy
D. Azure Backup
Correct answer: C
Rationale: Azure Policy can evaluate resource properties and deny deployments that violate
location restrictions. NSGs control network traffic, Monitor provides observability, and Backup
handles data protection.
, Question 3. An enterprise needs a standard set of governance policies across 20 subscriptions
operated by different departments. Which architecture is most appropriate?
A. Separate resource locks on every VM B. Management groups with inherited policy
assignments C. One Azure subscription for every individual resource D. Individual policy
assignments on every virtual machine
Correct answer: B
Rationale: Management groups provide a governance hierarchy above subscriptions, allowing
policies and access permissions to be applied consistently. This minimizes duplicated
assignments and administrative effort.
Question 4. Every newly deployed Azure resource must contain an Environment tag. The
organization also wants missing tags added automatically using a defined value when feasible.
Which policy effect should be considered?
A. Audit only B. Disabled C. Modify, with the required managed identity and permissions D.
DenyAction only
Correct answer: C
Rationale: Azure Policy's Modify effect can add or update supported resource tags. The policy
assignment needs appropriate permissions for remediation. Audit merely reports noncompliance
without making changes.
Question 5. A security team must collect Azure Firewall resource logs in a central location for
querying and investigations. What should the architect recommend?
A. Diagnostic settings routing supported logs to Log Analytics B. VM boot diagnostics C. Azure
Resource Locks D. Azure DNS
Correct answer: A
Rationale: Diagnostic settings can send supported resource logs to a Log Analytics workspace,
where the team can analyze them using Kusto Query Language. The other options do not collect
and centralize firewall operational logs.
Question 6. An administrator wants to determine who deleted an Azure virtual machine and
when the resource-management operation occurred. Which data source should be investigated
first?
A. Guest operating-system event logs B. Azure Activity Log C. Azure Blob inventory D. Azure
Service Bus metrics
Correct answer: B
Comprehensive 100 Practice Questions and Answers with
Detailed Rationales | 2026/2027 Updated.
Part 1: Deep research and verified assessment coverage
Research date: October 14, 2026 Institution: Western Governors University Course: E033 –
Azure Solutions Architecture Program: B.S. Cloud and Network Engineering – Microsoft Azure
1. What the official sources establish
WGU's August 2026 transfer guidelines identify E033 as a 3-credit course associated with the
Microsoft AZ-305 / Azure Solutions Architect Expert certification pathway. Its institutional
catalog identifies D338 – Cloud Platform Solutions as a prerequisite.
partners.wgu.edu
+1
Microsoft confirms that AZ-305 measures the design of Azure infrastructure solutions and that
its English-language exam was updated on April 17, 2026. The published passing score is 700 on
Microsoft's scaled scoring system.
Microsoft Learn
+1
Verification boundary: WGU's public documents confirm the certification alignment but do not
disclose E033's complete internal assessment arrangement, the exact live examination questions,
or an official 100-question WGU assessment.
2. Official blueprint and our question allocation
Identity, governance and monitoring
25–30% official
28 Q
Data storage
,20–25% official
22 Q
Business continuity
15–20% official
17 Q
Infrastructure solutions
30–35% official
33 Q
Exam percentages: Microsoft Learn, April 17, 2026 blueprint. Question counts: our proposed
100-question practice allocation.
Microsoft Learn
3. Important updates affecting 2026/2027 preparation
Research identified two product changes worth reflecting in the questions:
Azure Managed Redis: Microsoft now recommends Azure Managed Redis for new
caching architectures as the older Azure Cache for Redis SKUs approach retirement.
Microsoft Learn
Microsoft Entra External ID: Azure AD B2C stopped being available for purchase by
new customers on May 1, 2025. New customer identity architectures should be evaluated
using Microsoft Entra External ID.
Microsoft Learn
+1
,The question bank below is original educational practice material. Its scenario designs are based
on published Microsoft objectives and documentation, not copied live AZ-305 exam questions,
leaked answer keys, or an undisclosed WGU assessment.
Part 2: Comprehensive practice examination
Section A: Identity, Governance and Monitoring
Questions 1–28 | 28 questions
Aligned to Microsoft's logging, monitoring, authentication, authorization, identity governance
and resource governance objectives.
Microsoft Learn
+2
Question 1. A company has four Azure subscriptions. Security administrators must view
resources across all four subscriptions but must not modify them. What should the architect
recommend?
A. Assign the Owner role separately to each administrator B. Assign Reader at their common
management group scope C. Assign Contributor at the tenant root D. Create four new Microsoft
Entra tenants
Correct answer: B
Rationale: Reader provides visibility without resource modification privileges. Assigning the
role at the common management group allows permissions to flow down to its subscriptions.
Owner and Contributor grant excessive privileges, while separate tenants would add complexity.
Question 2. An organization must prevent deployment of resources in Azure regions that its
compliance team has not approved. Which feature best enforces the requirement?
A. Azure Monitor B. Network Security Groups C. Azure Policy with an allowed-locations policy
D. Azure Backup
Correct answer: C
Rationale: Azure Policy can evaluate resource properties and deny deployments that violate
location restrictions. NSGs control network traffic, Monitor provides observability, and Backup
handles data protection.
, Question 3. An enterprise needs a standard set of governance policies across 20 subscriptions
operated by different departments. Which architecture is most appropriate?
A. Separate resource locks on every VM B. Management groups with inherited policy
assignments C. One Azure subscription for every individual resource D. Individual policy
assignments on every virtual machine
Correct answer: B
Rationale: Management groups provide a governance hierarchy above subscriptions, allowing
policies and access permissions to be applied consistently. This minimizes duplicated
assignments and administrative effort.
Question 4. Every newly deployed Azure resource must contain an Environment tag. The
organization also wants missing tags added automatically using a defined value when feasible.
Which policy effect should be considered?
A. Audit only B. Disabled C. Modify, with the required managed identity and permissions D.
DenyAction only
Correct answer: C
Rationale: Azure Policy's Modify effect can add or update supported resource tags. The policy
assignment needs appropriate permissions for remediation. Audit merely reports noncompliance
without making changes.
Question 5. A security team must collect Azure Firewall resource logs in a central location for
querying and investigations. What should the architect recommend?
A. Diagnostic settings routing supported logs to Log Analytics B. VM boot diagnostics C. Azure
Resource Locks D. Azure DNS
Correct answer: A
Rationale: Diagnostic settings can send supported resource logs to a Log Analytics workspace,
where the team can analyze them using Kusto Query Language. The other options do not collect
and centralize firewall operational logs.
Question 6. An administrator wants to determine who deleted an Azure virtual machine and
when the resource-management operation occurred. Which data source should be investigated
first?
A. Guest operating-system event logs B. Azure Activity Log C. Azure Blob inventory D. Azure
Service Bus metrics
Correct answer: B
