Study Azure AZ-305 Identity and Governance: key concepts, common traps, and exam decision cues.
This chapter gives AZ-305 its control-plane logic. Microsoft is testing whether you can separate who can act, what is allowed, where governance applies, and how telemetry flows before you start naming application services.
Microsoft currently weights this skill area at 25-30% of the exam.
| Lesson | Focus |
|---|---|
| 1.1 Logging, Monitoring and Log Routing | Learn the monitoring stack and how log destinations change the design. |
| 1.2 Authentication, Authorization and Secrets | Learn how identity choice, access model, and secret handling drive architecture. |
| 1.3 Governance Scope, Compliance and Identity Governance | Learn how management groups, subscriptions, Policy, tags, locks, and privileged access fit together. |
| If the question is really about… | Go first to… |
|---|---|
| metrics, logs, telemetry, SIEM export, or archive retention | 1.1 Logging, Monitoring and Log Routing |
| workload identity, Azure access, partner access, or secret reduction | 1.2 Authentication, Authorization and Secrets |
| scope hierarchy, compliance guardrails, tags, or privileged review | 1.3 Governance Scope, Compliance and Identity Governance |