cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 13

Question 120

A SaaS database has a geo-secondary but its client continues writing to the old primary after failover because the connection string uses a fixed server endpoint. Which observable result BEST proves the database administration requirement is satisfied?

  1. Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability.
  2. After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits.
  3. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.
  4. The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior.

Explanation

Correct Answer

B:

After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits. This is the observable database and application outcome rather than merely a saved setting. Geo-replication is normally asynchronous and does not guarantee all uncommitted or recently committed data survives a forced regional failover.

Incorrect Answers

A:

Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability. This would validate RPO RTO strategy and availability versus recovery, but it does not establish the required outcome here. Verify instead: After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits.

C:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This would validate Log shipping health and recovery orchestration, but it does not establish the required outcome here. Verify instead: After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits.

D:

The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior. This would validate Azure SQL failover groups versus active geo replication decisions, but it does not establish the required outcome here. Verify instead: After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits.

Question 121

Automatic plan correction is switched on but a Query Store capture issue prevents it from seeing a regression that operators expect it to fix. Which observable result BEST proves the database administration requirement is satisfied?

  1. Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy.
  2. Access paths and estimates remain healthy with acceptable maintenance duration, transaction log growth and production concurrency.
  3. Competing workloads respect their configured limits and critical requests retain service within documented platform and resource constraints.
  4. Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed.

Explanation

Correct Answer

A:

Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy. This is the observable database and application outcome rather than merely a saved setting. Automatic tuning may need time to evaluate evidence and can reverse actions; feature availability is platform and compatibility-level dependent.

Incorrect Answers

B:

Access paths and estimates remain healthy with acceptable maintenance duration, transaction log growth and production concurrency. This would validate Index and statistics maintenance with targeted cadence, but it does not establish the required outcome here. Verify instead: Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy.

C:

Competing workloads respect their configured limits and critical requests retain service within documented platform and resource constraints. This would validate Resource Governor and scoped compute configuration, but it does not establish the required outcome here. Verify instead: Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy.

D:

Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed. This would validate Blocking deadlocks and isolation strategy, but it does not establish the required outcome here. Verify instead: Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy.

Question 122

An SSIS job started by Agent cannot access a shared path that works in an administrator's interactive desktop session. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.
  2. A failed deployment is diagnosed without deleting productive data, and the corrected infrastructure remains consistent with reviewed desired state.
  3. Configure SQL Server Agent notifications, operators and error handling so failed backups and maintenance tasks generate actionable alerts without leaking sensitive details.
  4. Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns.
  5. Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.

Explanation

Correct Answers

A:

Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. This is the discriminating system or configuration evidence for the case. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Corresponding approach: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. It supplies the evidence portion of this complementary answer.

D:

Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. This is the supported administration mechanism for the described workload. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Verify with: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. It supplies the implementation portion of this complementary answer.

Incorrect Answers

B:

A failed deployment is diagnosed without deleting productive data, and the corrected infrastructure remains consistent with reviewed desired state. This choice pertains to Deployment monitoring rollback and drift reconciliation, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

C:

Configure SQL Server Agent notifications, operators and error handling so failed backups and maintenance tasks generate actionable alerts without leaking sensitive details. This choice pertains to SQL Agent alerts operators and failure notifications, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

E:

Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration. This choice pertains to ARM and Bicep declarative Azure SQL provisioning, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

Question 123

An external vendor with UNMASK privileges sees complete account numbers even though the query results were masked during user acceptance tests. Which observable result BEST proves the database administration requirement is satisfied?

  1. Investigators obtain the intended activity or row-change evidence, while tampering or synchronization gaps are detected by the correct feature-specific controls.
  2. Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.
  3. Each authorized tenant sees only its records through SQL and API queries, while unauthorized predicate bypass attempts return no rows.
  4. Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly.

Explanation

Correct Answer

B:

Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements. This is the observable database and application outcome rather than merely a saved setting. Dynamic Data Masking is not encryption or a complete defense against inference; administrators and UNMASK principals can still access original values.

Incorrect Answers

A:

Investigators obtain the intended activity or row-change evidence, while tampering or synchronization gaps are detected by the correct feature-specific controls. This would validate Azure SQL auditing ledger and change tracking distinctions, but it does not establish the required outcome here. Verify instead: Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.

C:

Each authorized tenant sees only its records through SQL and API queries, while unauthorized predicate bypass attempts return no rows. This would validate Row-level security and ownership predicates, but it does not establish the required outcome here. Verify instead: Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.

D:

Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly. This would validate Always Encrypted client-side protection and enclaves, but it does not establish the required outcome here. Verify instead: Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.

Question 124

A database enables automatic index creation and the team assumes all generated indexes are optimal without watching write overhead or reversal events. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions.
  2. Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.
  3. Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.
  4. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Explanation

Correct Answer

B:

Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events. This is the discriminating system or configuration evidence for the case. Automatic tuning may need time to evaluate evidence and can reverse actions; feature availability is platform and compatibility-level dependent. Corresponding approach: Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.

Incorrect Answers

A:

Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions. These checks primarily test Query Store plan regressions and forced plans instead of the critical system behavior in this case. Examine: Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.

C:

Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics. These checks primarily test Resource Governor and scoped compute configuration instead of the critical system behavior in this case. Examine: Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.

D:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. These checks primarily test Database watcher and Azure SQL monitoring baseline instead of the critical system behavior in this case. Examine: Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.

Question 125

An employee leaves and hundreds of Agent jobs fail because they are owned by that employee's removed SQL login. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database.
  2. Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.
  3. The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation.
  4. Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns.
  5. Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

Explanation

Correct Answers

A:

Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database. This is the discriminating system or configuration evidence for the case. SQL Server Agent is supported on relevant instance-level offerings but is not the native scheduling mechanism inside a standalone Azure SQL Database. Corresponding approach: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. It supplies the evidence portion of this complementary answer.

E:

Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. This is the supported administration mechanism for the described workload. SQL Server Agent is supported on relevant instance-level offerings but is not the native scheduling mechanism inside a standalone Azure SQL Database. Verify with: Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database. It supplies the implementation portion of this complementary answer.

Incorrect Answers

B:

Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health. This choice pertains to Deployment monitoring rollback and drift reconciliation, not the needed response/evidence pair. Use: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. Check: Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database.

C:

The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation. This choice pertains to Azure SQL Database elastic jobs for fleet maintenance, not the needed response/evidence pair. Use: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. Check: Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database.

D:

Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. This choice pertains to SQL Agent job troubleshooting and idempotent maintenance, not the needed response/evidence pair. Use: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. Check: Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database.

Question 126

A SQL Server VM runs ETL and latency-sensitive OLTP together, and a batch report monopolizes CPU during business hours. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.
  2. Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.
  3. Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.
  4. Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.

Explanation

Correct Answer

C:

Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics. This is the discriminating system or configuration evidence for the case. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Corresponding approach: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

Incorrect Answers

A:

Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead. These checks primarily test Extended Events and workload-specific incident evidence instead of the critical system behavior in this case. Examine: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

B:

Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows. These checks primarily test Index and statistics maintenance with targeted cadence instead of the critical system behavior in this case. Examine: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

D:

Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events. These checks primarily test Automatic tuning and intelligent query processing guardrails instead of the critical system behavior in this case. Examine: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

Question 127

An administrator scales Managed Instance storage during a maintenance window but fails to verify whether its performance and price tier meets the new capacity requirement. Which observable result BEST proves the database administration requirement is satisfied?

  1. The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features.
  2. Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead.
  3. The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.
  4. After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements.

Explanation

Correct Answer

D:

After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements. This is the observable database and application outcome rather than merely a saved setting. Increasing CPU cannot fix a saturated log throughput budget or a storage path with high sustained write latency.

Incorrect Answers

A:

The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features. This would validate Choosing Azure SQL Database versus Managed Instance versus SQL VM, but it does not establish the required outcome here. Verify instead: After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements.

B:

Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead. This would validate Table partitioning compression and scale-out tradeoffs, but it does not establish the required outcome here. Verify instead: After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements.

C:

The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations. This would validate Azure SQL Database service tiers and elastic pools, but it does not establish the required outcome here. Verify instead: After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements.

Question 128

An Agent import job fails after inserting half the rows; an automatic retry imports the same batch again without an idempotency key. Which observable result BEST proves the database administration requirement is satisfied?

  1. The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.
  2. The repaired scheduled job completes reliably and re-executing a partially completed workflow does not double-post or delete unintended data.
  3. A real job failure triggers one useful notification to the right team and its history records sufficient context for a safe repair or retry.
  4. Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.

Explanation

Correct Answer

B:

The repaired scheduled job completes reliably and re-executing a partially completed workflow does not double-post or delete unintended data. This is the observable database and application outcome rather than merely a saved setting. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled.

Incorrect Answers

A:

The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords. This would validate Azure PowerShell and CLI operations with scoped automation identity, but it does not establish the required outcome here. Verify instead: The repaired scheduled job completes reliably and re-executing a partially completed workflow does not double-post or delete unintended data.

C:

A real job failure triggers one useful notification to the right team and its history records sufficient context for a safe repair or retry. This would validate SQL Agent alerts operators and failure notifications, but it does not establish the required outcome here. Verify instead: The repaired scheduled job completes reliably and re-executing a partially completed workflow does not double-post or delete unintended data.

D:

Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data. This would validate ARM and Bicep declarative Azure SQL provisioning, but it does not establish the required outcome here. Verify instead: The repaired scheduled job completes reliably and re-executing a partially completed workflow does not double-post or delete unintended data.

Question 129

A new schema is deployed after role grants, and app users can query old objects but not a newly created table due to missing schema-level permissions. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Investigators obtain the intended activity or row-change evidence, while tampering or synchronization gaps are detected by the correct feature-specific controls.
  2. Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls.
  3. Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.
  4. Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error.
  5. Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

Explanation

Correct Answers

D:

Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error. This is the supported administration mechanism for the described workload. GRANT on one schema or stored procedure does not automatically confer arbitrary permissions on all underlying cross-database resources. Verify with: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation. It supplies the implementation portion of this complementary answer.

E:

Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation. This is the discriminating system or configuration evidence for the case. GRANT on one schema or stored procedure does not automatically confer arbitrary permissions on all underlying cross-database resources. Corresponding approach: Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Investigators obtain the intended activity or row-change evidence, while tampering or synchronization gaps are detected by the correct feature-specific controls. This choice pertains to Azure SQL auditing ledger and change tracking distinctions, not the needed response/evidence pair. Use: Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error. Check: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

B:

Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. This choice pertains to SQL authentication versus Entra and managed-instance principals, not the needed response/evidence pair. Use: Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error. Check: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

C:

Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies. This choice pertains to Transparent data encryption keys and protector lifecycle, not the needed response/evidence pair. Use: Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error. Check: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

Question 130

A deployment job has Contributor on an Azure resource group but fails its SQL table modifications because no database principal was granted access. Which observable result BEST proves the database administration requirement is satisfied?

  1. The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.
  2. Scheduled maintenance produces validated database results and on-call teams receive accurate failure notifications with safe recovery playbooks.
  3. Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.
  4. The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login.

Explanation

Correct Answer

A:

The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords. This is the observable database and application outcome rather than merely a saved setting. Azure RBAC permissions to create an Azure SQL server do not imply arbitrary T-SQL data access to every user database.

Incorrect Answers

B:

Scheduled maintenance produces validated database results and on-call teams receive accurate failure notifications with safe recovery playbooks. This would validate Azure database task automation alerts and retries, but it does not establish the required outcome here. Verify instead: The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.

C:

Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data. This would validate ARM and Bicep declarative Azure SQL provisioning, but it does not establish the required outcome here. Verify instead: The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.

D:

The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login. This would validate SQL Server Agent schedules and job ownership, but it does not establish the required outcome here. Verify instead: The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests