Microsoft continues to update it’s role based exams and next on the list is AZ-304. This is the updated version of AZ-301 and launched at the end of June 2020. Currently this exam is arguably part of the most difficult certification path as it is one of only two Expert level certifications for Azure. Here is what Microsoft have to say about it:

Candidates for this exam are Azure Solutions Architects who advise stakeholders and translate business requirements into secure, scalable, and reliable solutions. Candidates should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platform, budgeting, and governance. This role requires managing how decisions in each area affects an overall solution. Candidates must have expert-level skills in Azure administration and have experience with Azure development processes and DevOps processes.

As the exam is still in beta, if you take it, it will not be scored immediately. So bear that in mind before you sit it! Of course, if you pass the exam, once scored, it will count towards the certification.

As always, a great place to start is Microsoft Learn. There are several interactive learning paths that are free that you can work through at your own pace. I find this a great way to study and gain greater understanding of the services by actually using them and you will need to be very familiar with Azure to pass this exam.

Below I’ve put together a collection of links relevant to the sections Microsoft have highlighted as being part of the skills measured for this exam. These are only guide links, sometimes you need to explore a topic much more deeply if you are not familiar with it. Hopefully these study materials will help guide you to successfully passing AZ-304!

Design Monitoring (10-15%)

Design for cost optimization

• https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/quick-acm-cost-analysis
• https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/tutorial-acm-opt-recommendations

Design a solution for logging and monitoring

• https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform-logs
• https://docs.microsoft.com/en-us/azure/security/fundamentals/log-audit
• https://docs.microsoft.com/en-us/azure/azure-monitor/platform/platform-logs-overview
• https://docs.microsoft.com/en-us/azure/event-grid/overview
• https://docs.microsoft.com/en-us/azure/security/benchmarks/security-control-logging-monitoring

Design Identity and Security (25-30%)

Design authentication

• https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on
• https://docs.microsoft.com/en-us/azure/active-directory/authentication/overview-authentication
• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview (explore)
• https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition
• https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect
• https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment
• https://docs.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b

Design authorization

• https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-vs-authorization
• https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/identity-and-access-management
• https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/management-group-and-subscription-organization

Design governance

• https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/naming-and-tagging
• https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/govern/policy-compliance/cloud-policy-review
• https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/foundation-blueprint (this is a CAF example, helps with understanding, review Blueprint as a concept too)

Design security for applications

• https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates
• https://docs.microsoft.com/en-us/azure/key-vault/general/best-practices
• https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
• https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/plan-an-application-integration

Design Data Storage (15-20%)

Design a solution for databases

• https://docs.microsoft.com/en-us/azure/architecture/example-scenario/dataplate2e/data-platform-end-to-end
• https://docs.microsoft.com/en-us/azure/architecture/data-guide/ (and sub-sections)
• https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-overview

Design data integration

• https://docs.microsoft.com/en-us/azure/data-factory/concepts-data-flow-overview
• https://docs.microsoft.com/en-us/azure/data-factory/introduction
• https://docs.microsoft.com/en-us/azure/databricks/scenarios/what-is-azure-databricks
• https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-overview-what-is

Select an appropriate storage account

• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal
• https://docs.microsoft.com/en-us/azure/storage/common/storage-auth
• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts?tabs=azure-portal

Design Business Continuity (10-15%)

Design a solution for backup and recovery

• https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
• https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-faq (entire Concepts section)
• https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-move-overview
• https://docs.microsoft.com/en-us/azure/backup/backup-overview
• https://docs.microsoft.com/en-us/azure/backup/backup-azure-manage-vms
• https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-rehydration?tabs=azure-portal
• https://docs.microsoft.com/en-us/azure/storage/common/storage-disaster-recovery-guidance?toc=/azure/storage/blobs/toc.json
• https://docs.microsoft.com/en-us/azure/storage/common/storage-compliance-offerings

Design for High Availability

• https://docs.microsoft.com/en-us/azure/architecture/high-availability/building-solutions-for-high-availability
• https://docs.microsoft.com/en-us/azure/architecture/best-practices/auto-scaling
• https://docs.microsoft.com/en-us/azure/architecture/example-scenario/infrastructure/iaas-high-availability-disaster-recovery
• https://docs.microsoft.com/en-us/azure/storage/common/geo-redundant-design

Design Infrastructure (25-30%)

Design a compute solution

• https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree
• https://docs.microsoft.com/en-us/dotnet/architecture/modernize-with-azure-containers/modernize-existing-apps-to-cloud-optimized/choosing-azure-compute-options-for-container-based-applications
• https://docs.microsoft.com/en-us/azure/automation/automation-intro

Design a network solution

• https://docs.microsoft.com/en-us/azure/networking/networking-overview (each of the four sections)
• https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/reference/networking-vdc
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm?toc=/azure/networking/toc.json
• https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

Design an application architecture

• https://docs.microsoft.com/en-us/azure/architecture/microservices/
• https://docs.microsoft.com/en-us/azure/container-instances/container-instances-orchestrator-relationship
• https://docs.microsoft.com/en-us/azure/api-management/api-management-key-concepts

Design migrations

• https://docs.microsoft.com/en-us/azure/migrate/concepts-migration-planning
• https://docs.microsoft.com/en-us/azure/migrate/how-to-migrate (and follow on sections)
• https://docs.microsoft.com/en-us/azure/dms/dms-overview