cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 1

Question 1

An execution plan estimates one row for a join but the actual result has millions, causing a poor join strategy and memory spills. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.
  2. Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.
  3. Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests.
  4. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.

Explanation

Correct Answer

D:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This is the supported administration mechanism for the described workload. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Verify with: Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification.

Incorrect Answers

A:

Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. This addresses Database watcher and Azure SQL monitoring baseline, not the controlling requirement here. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Prefer: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.

B:

Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. This addresses Intelligent Insights and parameter-sensitive query analysis, not the controlling requirement here. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Prefer: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.

C:

Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. This addresses Blocking deadlocks and isolation strategy, not the controlling requirement here. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Prefer: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.

Question 2

A nightly workload deadlocks with an online update because two procedures acquire shared resources in opposite orders. Which observable result BEST proves the database administration requirement is satisfied?

  1. The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load.
  2. Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.
  3. A representative mix of small and large parameter executions achieves stable resource use, with intelligent feature effects monitored over time.
  4. Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed.

Explanation

Correct Answer

D:

Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed. This is the observable database and application outcome rather than merely a saved setting. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior.

Incorrect Answers

A:

The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load. This would validate SQL operational baseline across waits locks and storage, but it does not establish the required outcome here. Verify instead: Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed.

B:

Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable. This would validate Azure Monitor alerts diagnostics and resource metrics, but it does not establish the required outcome here. Verify instead: Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed.

C:

A representative mix of small and large parameter executions achieves stable resource use, with intelligent feature effects monitored over time. This would validate Intelligent Insights and parameter-sensitive query analysis, but it does not establish the required outcome here. Verify instead: Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed.

Question 3

A new Azure SQL diagnostic setting points to a Log Analytics workspace but its access and retention requirements were never validated. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.
  2. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  3. Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.
  4. Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.
  5. A representative mix of small and large parameter executions achieves stable resource use, with intelligent feature effects monitored over time.

Explanation

Correct Answers

A:

Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. This is the discriminating system or configuration evidence for the case. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Corresponding approach: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. It supplies the evidence portion of this complementary answer.

B:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This is the supported administration mechanism for the described workload. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Verify with: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. It supplies the implementation portion of this complementary answer.

Incorrect Answers

C:

Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. This choice pertains to Database watcher and Azure SQL monitoring baseline, not the needed response/evidence pair. Use: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. Check: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

D:

Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows. This choice pertains to Index and statistics maintenance with targeted cadence, not the needed response/evidence pair. Use: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. Check: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

E:

A representative mix of small and large parameter executions achieves stable resource use, with intelligent feature effects monitored over time. This choice pertains to Intelligent Insights and parameter-sensitive query analysis, not the needed response/evidence pair. Use: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. Check: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

Question 4

A business dashboard slows despite low CPU, but diagnostic snapshots show dozens of sessions blocked behind one long-running transaction. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  2. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.
  3. Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.
  4. Queries use appropriate access paths under representative parameters while maintenance and write overhead remain acceptable.
  5. Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.

Explanation

Correct Answers

B:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This is the supported administration mechanism for the described workload. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together. Verify with: Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change. It supplies the implementation portion of this complementary answer.

E:

Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change. This is the discriminating system or configuration evidence for the case. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together. Corresponding approach: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This choice pertains to Azure Monitor alerts diagnostics and resource metrics, not the needed response/evidence pair. Use: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. Check: Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.

C:

Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. This choice pertains to Blocking deadlocks and isolation strategy, not the needed response/evidence pair. Use: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. Check: Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.

D:

Queries use appropriate access paths under representative parameters while maintenance and write overhead remain acceptable. This choice pertains to Execution plans cardinality and indexing improvements, not the needed response/evidence pair. Use: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. Check: Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.

Question 5

A business moves SQL Server databases to Managed Instance and assumes the service's local HA guarantees recovery from regional application dependency failure. Which diagnostic evidence should the database administrator check FIRST?

  1. Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.
  2. Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.
  3. Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.
  4. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

Explanation

Correct Answer

A:

Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity. This is the discriminating system or configuration evidence for the case. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Corresponding approach: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

Incorrect Answers

B:

Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior. These checks primarily test Azure SQL Database active geo replication and failover groups instead of the critical system behavior in this case. Examine: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

C:

Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map. These checks primarily test RPO RTO strategy and availability versus recovery instead of the critical system behavior in this case. Examine: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

D:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. These checks primarily test SQL Server failover cluster instances shared storage constraints instead of the critical system behavior in this case. Examine: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

Question 6

A DBA disables intelligent query processing globally because one query regressed after a compatibility-level change, without isolating the affected feature. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.
  2. Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.
  3. Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.
  4. Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

Explanation

Correct Answer

B:

Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings. This is the discriminating system or configuration evidence for the case. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Corresponding approach: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.

Incorrect Answers

A:

Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. These checks primarily test Blocking deadlocks and isolation strategy instead of the critical system behavior in this case. Examine: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

C:

Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events. These checks primarily test Automatic tuning and intelligent query processing guardrails instead of the critical system behavior in this case. Examine: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

D:

Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics. These checks primarily test Resource Governor and scoped compute configuration instead of the critical system behavior in this case. Examine: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

Question 7

An engineering team deploys zone-redundant compute and assumes the architecture also survives a complete Azure region failure without geo backups. Which diagnostic evidence should the database administrator check FIRST?

  1. Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.
  2. Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.
  3. Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.
  4. Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

Explanation

Correct Answer

B:

Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map. This is the discriminating system or configuration evidence for the case. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets. Corresponding approach: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

Incorrect Answers

A:

Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination. These checks primarily test Azure SQL automatic PITR and long-term retention instead of the critical system behavior in this case. Examine: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

C:

Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence. These checks primarily test HA DR tabletop and destructive failure testing instead of the critical system behavior in this case. Examine: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

D:

Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling. These checks primarily test Azure SQL failover groups versus active geo replication decisions instead of the critical system behavior in this case. Examine: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

Question 8

A Managed Instance engineer creates a deadlock Extended Events session but never starts it, then assumes absence of a target file means no deadlocks occurred. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.
  2. Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.
  3. Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.
  4. Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production.

Explanation

Correct Answer

D:

Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production. This is the supported administration mechanism for the described workload. Extended Events supports focused diagnostic collection; an unfiltered high-volume session can itself increase production overhead and leak query text. Verify with: Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.

Incorrect Answers

A:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This addresses SQL operational baseline across waits locks and storage, not the controlling requirement here. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together. Prefer: Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production.

B:

Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes. This addresses Automatic tuning and intelligent query processing guardrails, not the controlling requirement here. Automatic tuning may need time to evaluate evidence and can reverse actions; feature availability is platform and compatibility-level dependent. Prefer: Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production.

C:

Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. This addresses Resource Governor and scoped compute configuration, not the controlling requirement here. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Prefer: Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production.

Question 9

A SaaS database has a geo-secondary but its client continues writing to the old primary after failover because the connection string uses a fixed server endpoint. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.
  2. Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.
  3. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  4. Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

Explanation

Correct Answer

A:

Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior. This is the discriminating system or configuration evidence for the case. Geo-replication is normally asynchronous and does not guarantee all uncommitted or recently committed data survives a forced regional failover. Corresponding approach: Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures.

Incorrect Answers

B:

Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target. These checks primarily test SQL Server native backup chain and recovery model instead of the critical system behavior in this case. Examine: Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.

C:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. These checks primarily test SQL Server failover cluster instances shared storage constraints instead of the critical system behavior in this case. Examine: Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.

D:

Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. These checks primarily test Log shipping health and recovery orchestration instead of the critical system behavior in this case. Examine: Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.

Question 10

A developer copies highly classified payment columns into an unlabeled reporting table and assumes the source database's label automatically follows every extract. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required.
  2. Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode.
  3. Only approved SQL principals or application clients decrypt the intended data and key rotation retains tested recovery capability.
  4. Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.
  5. Implement Row-Level Security with a carefully tested predicate function and security policy for each tenant or business boundary, independent of form-level filtering.

Explanation

Correct Answers

A:

Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required. This is the supported administration mechanism for the described workload. Dynamic Data Masking is not encryption or a complete defense against inference; administrators and UNMASK principals can still access original values. Verify with: Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities. It supplies the implementation portion of this complementary answer.

D:

Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities. This is the discriminating system or configuration evidence for the case. Dynamic Data Masking is not encryption or a complete defense against inference; administrators and UNMASK principals can still access original values. Corresponding approach: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode. This choice pertains to SQL authentication versus Entra and managed-instance principals, not the needed response/evidence pair. Use: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required. Check: Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.

C:

Only approved SQL principals or application clients decrypt the intended data and key rotation retains tested recovery capability. This choice pertains to Object-level encryption and database cryptographic controls, not the needed response/evidence pair. Use: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required. Check: Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.

E:

Implement Row-Level Security with a carefully tested predicate function and security policy for each tenant or business boundary, independent of form-level filtering. This choice pertains to Row-level security and ownership predicates, not the needed response/evidence pair. Use: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required. Check: Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests