cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 25

Question 240

A SaaS database slows every Friday while the team monitors only current CPU and has no representative hourly baseline for comparison. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Queries use appropriate access paths under representative parameters while maintenance and write overhead remain acceptable.
  2. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.
  3. Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.
  4. Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.
  5. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

Explanation

Correct Answers

B:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. This is the discriminating system or configuration evidence for the case. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Corresponding approach: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. It supplies the evidence portion of this complementary answer.

D:

Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. This is the supported administration mechanism for the described workload. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Verify with: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Queries use appropriate access paths under representative parameters while maintenance and write overhead remain acceptable. This choice pertains to Execution plans cardinality and indexing improvements, not the needed response/evidence pair. Use: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. Check: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

C:

Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows. This choice pertains to Index and statistics maintenance with targeted cadence, not the needed response/evidence pair. Use: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. Check: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

E:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This choice pertains to SQL operational baseline across waits locks and storage, not the needed response/evidence pair. Use: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. Check: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Question 241

An Azure SQL Database hits its connection worker ceiling while management claims the absence of CPU pressure rules out database resource limits. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.
  2. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  3. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.
  4. Schedule integrity checks, index and statistics maintenance based on measured fragmentation, modification rates and SLA rather than indiscriminately rebuilding every object each night.

Explanation

Correct Answer

C:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This is the supported administration mechanism for the described workload. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together. Verify with: Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.

Incorrect Answers

A:

Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. This addresses Intelligent Insights and parameter-sensitive query analysis, not the controlling requirement here. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Prefer: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

B:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This addresses Azure Monitor alerts diagnostics and resource metrics, not the controlling requirement here. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Prefer: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

D:

Schedule integrity checks, index and statistics maintenance based on measured fragmentation, modification rates and SLA rather than indiscriminately rebuilding every object each night. This addresses Index and statistics maintenance with targeted cadence, not the controlling requirement here. Small index fragmentation percentages do not automatically justify full rebuild; large rebuilds consume log space and can block workloads. Prefer: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

Question 242

An application reaches its database connection limit for ten minutes but the dashboard plots only daily average CPU and remains green. Which observable result BEST proves the database administration requirement is satisfied?

  1. Operators detect regressions against representative baseline periods and can link database symptoms to trustworthy collected performance evidence.
  2. Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.
  3. Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy.
  4. A problematic query recovers representative execution time without forcing a plan that fails under other parameter or schema conditions.

Explanation

Correct Answer

B:

Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable. This is the observable database and application outcome rather than merely a saved setting. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures.

Incorrect Answers

A:

Operators detect regressions against representative baseline periods and can link database symptoms to trustworthy collected performance evidence. This would validate Database watcher and Azure SQL monitoring baseline, but it does not establish the required outcome here. Verify instead: Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.

C:

Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy. This would validate Automatic tuning and intelligent query processing guardrails, but it does not establish the required outcome here. Verify instead: Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.

D:

A problematic query recovers representative execution time without forcing a plan that fails under other parameter or schema conditions. This would validate Query Store plan regressions and forced plans, but it does not establish the required outcome here. Verify instead: Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.

Question 243

A team migrates a database from an on-premises SQL instance to Azure SQL Database and discovers after cutover that an essential SQL Agent job never moved. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.
  2. Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS.
  3. Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints.
  4. Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects.

Explanation

Correct Answer

A:

Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. This is the supported administration mechanism for the described workload. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration. Verify with: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

Incorrect Answers

B:

Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS. This addresses Azure Arc-enabled SQL and hybrid fleet governance, not the controlling requirement here. Azure Arc projects management and governance into Azure; Arc onboarding is not equivalent to migration or replacing SQL Server backups and patching. Prefer: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.

C:

Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints. This addresses Online migration with controlled cutover and validation, not the controlling requirement here. Online migration reduces downtime but is not automatically zero-downtime; final synchronization, traffic redirection and application tests still matter. Prefer: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.

D:

Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects. This addresses Table partitioning compression and scale-out tradeoffs, not the controlling requirement here. Partitioning alone does not make every query faster; indexes and predicate alignment determine pruning and compression may trade CPU for IO. Prefer: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.

Question 244

A team migrates a database from an on-premises SQL instance to Azure SQL Database and discovers after cutover that an essential SQL Agent job never moved. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.
  2. Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.
  3. After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements.
  4. Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.
  5. Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

Explanation

Correct Answers

A:

Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. This is the supported administration mechanism for the described workload. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration. Verify with: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map. It supplies the implementation portion of this complementary answer.

E:

Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map. This is the discriminating system or configuration evidence for the case. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration. Corresponding approach: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration. This choice pertains to Offline migration and post-migration verification, not the needed response/evidence pair. Use: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. Check: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

C:

After resizing or tuning storage, relevant workload bottlenecks improve without breaching instance compatibility, availability or maintenance requirements. This choice pertains to Managed Instance and SQL VM compute storage scaling, not the needed response/evidence pair. Use: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. Check: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

D:

Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs. This choice pertains to Azure Arc-enabled SQL and hybrid fleet governance, not the needed response/evidence pair. Use: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. Check: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

Question 245

A reporting team deploys email-address masking and claims that a compromised privileged account cannot recover the underlying plaintext. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls.
  2. Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required.
  3. Implement Row-Level Security with a carefully tested predicate function and security policy for each tenant or business boundary, independent of form-level filtering.
  4. Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.

Explanation

Correct Answer

B:

Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required. This is the supported administration mechanism for the described workload. Dynamic Data Masking is not encryption or a complete defense against inference; administrators and UNMASK principals can still access original values. Verify with: Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.

Incorrect Answers

A:

Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. This addresses SQL authentication versus Entra and managed-instance principals, not the controlling requirement here. A login defined in one SQL Server instance is not automatically a contained user in another database or a globally valid Entra identity. Prefer: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required.

C:

Implement Row-Level Security with a carefully tested predicate function and security policy for each tenant or business boundary, independent of form-level filtering. This addresses Row-level security and ownership predicates, not the controlling requirement here. Client-side WHERE filters are not a database security boundary, and incorrectly scoped predicates can leak cross-tenant data. Prefer: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required.

D:

Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions. This addresses Microsoft Entra authentication with contained service identity, not the controlling requirement here. A successful token request is not sufficient if the database principal, scope or permissions are missing or the token targets the wrong resource. Prefer: Classify sensitive columns, apply supported Dynamic Data Masking only for presentation control, and use encryption or RLS when stronger confidentiality is required.

Question 246

An application reaches its database connection limit for ten minutes but the dashboard plots only daily average CPU and remains green. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  2. Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.
  3. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.
  4. Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed.
  5. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

Explanation

Correct Answers

A:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This is the supported administration mechanism for the described workload. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Verify with: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. It supplies the implementation portion of this complementary answer.

B:

Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. This is the discriminating system or configuration evidence for the case. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Corresponding approach: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. It supplies the evidence portion of this complementary answer.

Incorrect Answers

C:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. This choice pertains to Database watcher and Azure SQL monitoring baseline, not the needed response/evidence pair. Use: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. Check: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

D:

Long blocking chains shorten and transaction correctness remains valid after safe tuning, with deadlock retry policy and consistency requirements addressed. This choice pertains to Blocking deadlocks and isolation strategy, not the needed response/evidence pair. Use: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. Check: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

E:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This choice pertains to SQL operational baseline across waits locks and storage, not the needed response/evidence pair. Use: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. Check: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

Question 247

A recovery plan advertises zero data loss because a replica is configured async, while the actual last committed transaction never reached the replica before failover. Which observable result BEST proves the database administration requirement is satisfied?

  1. A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.
  2. The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior.
  3. Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability.
  4. A documented exercise demonstrates recovery within measured time and data-loss objectives and reveals unmet application dependencies before production emergencies.

Explanation

Correct Answer

C:

Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability. This is the observable database and application outcome rather than merely a saved setting. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets.

Incorrect Answers

A:

A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements. This would validate Backup to Azure Blob URL and tested cloud restore, but it does not establish the required outcome here. Verify instead: Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability.

B:

The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior. This would validate Azure SQL failover groups versus active geo replication decisions, but it does not establish the required outcome here. Verify instead: Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability.

D:

A documented exercise demonstrates recovery within measured time and data-loss objectives and reveals unmet application dependencies before production emergencies. This would validate HA DR tabletop and destructive failure testing, but it does not establish the required outcome here. Verify instead: Measured failover and restoration exercises meet agreed data loss and recovery time limits without confusing uptime redundancy with recoverability.

Question 248

A log shipping monitor shows restore delay increasing because a previous log file is missing and the team resumes from a later file, breaking the chain. Which observable result BEST proves the database administration requirement is satisfied?

  1. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.
  2. After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits.
  3. The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.
  4. A complete chain can be restored to the required point using valid full, differential and sequential log backups with proven integrity.

Explanation

Correct Answer

A:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This is the observable database and application outcome rather than merely a saved setting. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover.

Incorrect Answers

B:

After a planned or forced failover the intended database endpoint serves valid writes and read-only workloads under documented consistency limits. This would validate Azure SQL Database active geo replication and failover groups, but it does not establish the required outcome here. Verify instead: The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.

C:

The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions. This would validate Always On availability groups on SQL Server VMs and SQL MI links, but it does not establish the required outcome here. Verify instead: The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.

D:

A complete chain can be restored to the required point using valid full, differential and sequential log backups with proven integrity. This would validate SQL Server native backup chain and recovery model, but it does not establish the required outcome here. Verify instead: The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.

Question 249

A function app obtains an Azure token successfully but database connections fail because its managed identity was never created as a database user. Which observable result BEST proves the database administration requirement is satisfied?

  1. Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.
  2. Authorized workloads resolve the intended endpoint and connect over the required private or permitted path while unauthorized public sources are blocked.
  3. The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.
  4. Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

Explanation

Correct Answer

C:

The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries. This is the observable database and application outcome rather than merely a saved setting. A successful token request is not sufficient if the database principal, scope or permissions are missing or the token targets the wrong resource.

Incorrect Answers

A:

Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements. This would validate Dynamic data masking classification and permission differences, but it does not establish the required outcome here. Verify instead: The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.

B:

Authorized workloads resolve the intended endpoint and connect over the required private or permitted path while unauthorized public sources are blocked. This would validate Azure SQL private endpoints firewall and TLS boundary, but it does not establish the required outcome here. Verify instead: The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.

D:

Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly. This would validate Least-privilege SQL roles and ownership chaining, but it does not establish the required outcome here. Verify instead: The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.

Question 250

A company creates two SQL Server VMs with independent local disks and expects an FCI failover to expose the same database files on both hosts. Which observable result BEST proves the database administration requirement is satisfied?

  1. The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior.
  2. The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.
  3. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.
  4. The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

Explanation

Correct Answer

D:

The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name. This is the observable database and application outcome rather than merely a saved setting. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files.

Incorrect Answers

A:

The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior. This would validate Azure SQL failover groups versus active geo replication decisions, but it does not establish the required outcome here. Verify instead: The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

B:

The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions. This would validate Always On availability groups on SQL Server VMs and SQL MI links, but it does not establish the required outcome here. Verify instead: The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

C:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This would validate Log shipping health and recovery orchestration, but it does not establish the required outcome here. Verify instead: The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests