cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 16

Question 150

A production SQL Server VM experiences brief deadlocks and the DBA enables an unfiltered statement-level trace for every query for a week. Which diagnostic evidence should the database administrator check FIRST?

  1. Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.
  2. Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions.
  3. Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.
  4. Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.

Explanation

Correct Answer

D:

Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead. This is the discriminating system or configuration evidence for the case. Extended Events supports focused diagnostic collection; an unfiltered high-volume session can itself increase production overhead and leak query text. Corresponding approach: Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production.

Incorrect Answers

A:

Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events. These checks primarily test Automatic tuning and intelligent query processing guardrails instead of the critical system behavior in this case. Examine: Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.

B:

Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions. These checks primarily test Query Store plan regressions and forced plans instead of the critical system behavior in this case. Examine: Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.

C:

Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. These checks primarily test Azure Monitor alerts diagnostics and resource metrics instead of the critical system behavior in this case. Examine: Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.

Question 151

A DBA exports a database for long-term retention but decommissions the external key before verifying its recovery requirements. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.
  2. Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.
  3. Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.
  4. A previously failing user connects with the correct principal and performs only approved operations after a narrowly scoped corrective change.
  5. Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

Explanation

Correct Answers

B:

Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. This is the supported administration mechanism for the described workload. TDE encrypts storage at rest but does not hide column values from authorized SQL queries or replace end-to-end TLS. Verify with: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies. It supplies the implementation portion of this complementary answer.

E:

Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies. This is the discriminating system or configuration evidence for the case. TDE encrypts storage at rest but does not hide column values from authorized SQL queries or replace end-to-end TLS. Corresponding approach: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. This choice pertains to Azure SQL private endpoints firewall and TLS boundary, not the needed response/evidence pair. Use: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. Check: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

C:

Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation. This choice pertains to Least-privilege SQL roles and ownership chaining, not the needed response/evidence pair. Use: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. Check: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

D:

A previously failing user connects with the correct principal and performs only approved operations after a narrowly scoped corrective change. This choice pertains to Diagnosing login failure and group-based access, not the needed response/evidence pair. Use: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. Check: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

Question 152

A pipeline retries a resource update after a policy denial and repeatedly fails because its region or SKU violates organizational guardrails. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.
  2. Review subscription context, service principal or managed identity, Azure RBAC role, API response, database resource state and script error handling.
  3. Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.
  4. Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

Explanation

Correct Answer

A:

Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health. This is the discriminating system or configuration evidence for the case. Rolling back an infrastructure template is not identical to restoring committed database transactions, and destructive replacements require explicit protection. Corresponding approach: Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.

Incorrect Answers

B:

Review subscription context, service principal or managed identity, Azure RBAC role, API response, database resource state and script error handling. These checks primarily test Azure PowerShell and CLI operations with scoped automation identity instead of the critical system behavior in this case. Examine: Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.

C:

Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration. These checks primarily test ARM and Bicep declarative Azure SQL provisioning instead of the critical system behavior in this case. Examine: Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.

D:

Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. These checks primarily test SQL Agent job troubleshooting and idempotent maintenance instead of the critical system behavior in this case. Examine: Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.

Question 153

An application reaches its database connection limit for ten minutes but the dashboard plots only daily average CPU and remains green. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.
  2. Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.
  3. Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.
  4. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Explanation

Correct Answer

B:

Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. This is the discriminating system or configuration evidence for the case. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Corresponding approach: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.

Incorrect Answers

A:

Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead. These checks primarily test Extended Events and workload-specific incident evidence instead of the critical system behavior in this case. Examine: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

C:

Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows. These checks primarily test Index and statistics maintenance with targeted cadence instead of the critical system behavior in this case. Examine: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

D:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. These checks primarily test Database watcher and Azure SQL monitoring baseline instead of the critical system behavior in this case. Examine: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

Question 154

An Azure SQL Database admin attempts to execute instance-level Resource Governor configuration and assumes the managed database grants unrestricted server control. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Schedule integrity checks, index and statistics maintenance based on measured fragmentation, modification rates and SLA rather than indiscriminately rebuilding every object each night.
  2. Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.
  3. Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests.
  4. Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

Explanation

Correct Answer

D:

Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. This is the supported administration mechanism for the described workload. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Verify with: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

Incorrect Answers

A:

Schedule integrity checks, index and statistics maintenance based on measured fragmentation, modification rates and SLA rather than indiscriminately rebuilding every object each night. This addresses Index and statistics maintenance with targeted cadence, not the controlling requirement here. Small index fragmentation percentages do not automatically justify full rebuild; large rebuilds consume log space and can block workloads. Prefer: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

B:

Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes. This addresses Automatic tuning and intelligent query processing guardrails, not the controlling requirement here. Automatic tuning may need time to evaluate evidence and can reverse actions; feature availability is platform and compatibility-level dependent. Prefer: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

C:

Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. This addresses Blocking deadlocks and isolation strategy, not the controlling requirement here. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Prefer: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

Question 155

An archive requirement needs seven years of evidence but a team relies only on the ordinary short-term point-in-time retention period. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.
  2. Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.
  3. Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs.
  4. Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.
  5. The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior.

Explanation

Correct Answers

C:

Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs. This is the supported administration mechanism for the described workload. Point-in-time restore usually creates a separate database and does not undo production writes in place; retention is constrained by service-specific limits. Verify with: Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination. It supplies the implementation portion of this complementary answer.

D:

Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination. This is the discriminating system or configuration evidence for the case. Point-in-time restore usually creates a separate database and does not undo production writes in place; retention is constrained by service-specific limits. Corresponding approach: Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets. This choice pertains to Backup to Azure Blob URL and tested cloud restore, not the needed response/evidence pair. Use: Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs. Check: Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.

B:

Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target. This choice pertains to SQL Server native backup chain and recovery model, not the needed response/evidence pair. Use: Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs. Check: Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.

E:

The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior. This choice pertains to Azure SQL failover groups versus active geo replication decisions, not the needed response/evidence pair. Use: Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs. Check: Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.

Question 156

An operator checks that a Blob container contains yesterday's full backup but never verifies log chain completeness or the target RTO through restore testing. Which diagnostic evidence should the database administrator check FIRST?

  1. Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.
  2. Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.
  3. Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.
  4. Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.

Explanation

Correct Answer

C:

Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats. This is the discriminating system or configuration evidence for the case. A backup file's existence or a VERIFYONLY success does not replace a tested full restoration and end-to-end workload check. Corresponding approach: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

Incorrect Answers

A:

Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence. These checks primarily test HA DR tabletop and destructive failure testing instead of the critical system behavior in this case. Examine: Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.

B:

Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination. These checks primarily test Azure SQL automatic PITR and long-term retention instead of the critical system behavior in this case. Examine: Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.

D:

Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior. These checks primarily test Azure SQL Database active geo replication and failover groups instead of the critical system behavior in this case. Examine: Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.

Question 157

A SQL Server availability group fails to synchronize because its mirroring endpoint cannot communicate through the network security policy. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  2. Inspect Windows Server failover cluster or supported Linux HA configuration, availability replica state, listener IP/DNS, synchronization health, AG endpoint port and failover readiness.
  3. Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.
  4. Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

Explanation

Correct Answer

B:

Inspect Windows Server failover cluster or supported Linux HA configuration, availability replica state, listener IP/DNS, synchronization health, AG endpoint port and failover readiness. This is the discriminating system or configuration evidence for the case. An AG protects replicated user databases and requires cluster/listener configuration; it does not automatically synchronize every SQL Agent job or server-level login. Corresponding approach: Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode.

Incorrect Answers

A:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. These checks primarily test SQL Server failover cluster instances shared storage constraints instead of the critical system behavior in this case. Examine: Inspect Windows Server failover cluster or supported Linux HA configuration, availability replica state, listener IP/DNS, synchronization health, AG endpoint port and failover readiness.

C:

Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. These checks primarily test Log shipping health and recovery orchestration instead of the critical system behavior in this case. Examine: Inspect Windows Server failover cluster or supported Linux HA configuration, availability replica state, listener IP/DNS, synchronization health, AG endpoint port and failover readiness.

D:

Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling. These checks primarily test Azure SQL failover groups versus active geo replication decisions instead of the critical system behavior in this case. Examine: Inspect Windows Server failover cluster or supported Linux HA configuration, availability replica state, listener IP/DNS, synchronization health, AG endpoint port and failover readiness.

Question 158

A developer copies highly classified payment columns into an unlabeled reporting table and assumes the source database's label automatically follows every extract. Which observable result BEST proves the database administration requirement is satisfied?

  1. Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations.
  2. Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.
  3. Investigators obtain the intended activity or row-change evidence, while tampering or synchronization gaps are detected by the correct feature-specific controls.
  4. The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.

Explanation

Correct Answer

B:

Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements. This is the observable database and application outcome rather than merely a saved setting. Dynamic Data Masking is not encryption or a complete defense against inference; administrators and UNMASK principals can still access original values.

Incorrect Answers

A:

Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations. This would validate Transparent data encryption keys and protector lifecycle, but it does not establish the required outcome here. Verify instead: Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.

C:

Investigators obtain the intended activity or row-change evidence, while tampering or synchronization gaps are detected by the correct feature-specific controls. This would validate Azure SQL auditing ledger and change tracking distinctions, but it does not establish the required outcome here. Verify instead: Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.

D:

The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries. This would validate Microsoft Entra authentication with contained service identity, but it does not establish the required outcome here. Verify instead: Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.

Question 159

An Azure VM SQL Server job writes .bak files to Blob but the SAS token expires and backup failures go unnoticed for several weeks. Which observable result BEST proves the database administration requirement is satisfied?

  1. The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.
  2. A complete chain can be restored to the required point using valid full, differential and sequential log backups with proven integrity.
  3. A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.
  4. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.

Explanation

Correct Answer

C:

A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements. This is the observable database and application outcome rather than merely a saved setting. A backup file's existence or a VERIFYONLY success does not replace a tested full restoration and end-to-end workload check.

Incorrect Answers

A:

The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name. This would validate SQL Server failover cluster instances shared storage constraints, but it does not establish the required outcome here. Verify instead: A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.

B:

A complete chain can be restored to the required point using valid full, differential and sequential log backups with proven integrity. This would validate SQL Server native backup chain and recovery model, but it does not establish the required outcome here. Verify instead: A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.

D:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This would validate Log shipping health and recovery orchestration, but it does not establish the required outcome here. Verify instead: A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.

Question 160

A new SaaS app needs isolated managed databases and automated patching but a team proposes maintaining full SQL Server VMs for every tenant. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.
  2. Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent.
  3. Select Azure SQL Database for managed database-level PaaS needs, Azure SQL Managed Instance when near-instance compatibility is required, or SQL Server on Azure VMs for OS and instance control.
  4. Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS.

Explanation

Correct Answer

C:

Select Azure SQL Database for managed database-level PaaS needs, Azure SQL Managed Instance when near-instance compatibility is required, or SQL Server on Azure VMs for OS and instance control. This is the supported administration mechanism for the described workload. A managed database offering does not necessarily expose every SQL Server instance feature; platform responsibility differs from SQL Server on a VM. Verify with: Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target.

Incorrect Answers

A:

Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration. This addresses Offline migration and post-migration verification, not the controlling requirement here. A BACPAC export captures schema and data for applicable databases but is not an instance backup that automatically recreates all server features and jobs. Prefer: Select Azure SQL Database for managed database-level PaaS needs, Azure SQL Managed Instance when near-instance compatibility is required, or SQL Server on Azure VMs for OS and instance control.

B:

Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent. This addresses Azure SQL deployment automation and Fabric SQL integration boundary, not the controlling requirement here. Using Fabric with Azure SQL does not remove operational security responsibilities or grant unsupported cross-service transactional semantics. Prefer: Select Azure SQL Database for managed database-level PaaS needs, Azure SQL Managed Instance when near-instance compatibility is required, or SQL Server on Azure VMs for OS and instance control.

D:

Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS. This addresses Azure Arc-enabled SQL and hybrid fleet governance, not the controlling requirement here. Azure Arc projects management and governance into Azure; Arc onboarding is not equivalent to migration or replacing SQL Server backups and patching. Prefer: Select Azure SQL Database for managed database-level PaaS needs, Azure SQL Managed Instance when near-instance compatibility is required, or SQL Server on Azure VMs for OS and instance control.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests