cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 26

Question 250

A company creates two SQL Server VMs with independent local disks and expects an FCI failover to expose the same database files on both hosts. Which observable result BEST proves the database administration requirement is satisfied?

  1. The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior.
  2. The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.
  3. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.
  4. The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

Explanation

Correct Answer

D:

The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name. This is the observable database and application outcome rather than merely a saved setting. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files.

Incorrect Answers

A:

The application reconnects through the intended endpoint after a tested supported failover, with documented possible data loss and read/write behavior. This would validate Azure SQL failover groups versus active geo replication decisions, but it does not establish the required outcome here. Verify instead: The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

B:

The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions. This would validate Always On availability groups on SQL Server VMs and SQL MI links, but it does not establish the required outcome here. Verify instead: The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

C:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This would validate Log shipping health and recovery orchestration, but it does not establish the required outcome here. Verify instead: The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

Question 251

A team expects every Agent job and linked-server configuration to appear on a secondary AG replica without separately synchronizing those instance objects. Which observable result BEST proves the database administration requirement is satisfied?

  1. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.
  2. The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.
  3. A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.
  4. The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.

Explanation

Correct Answer

B:

The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions. This is the observable database and application outcome rather than merely a saved setting. An AG protects replicated user databases and requires cluster/listener configuration; it does not automatically synchronize every SQL Agent job or server-level login.

Incorrect Answers

A:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This would validate Log shipping health and recovery orchestration, but it does not establish the required outcome here. Verify instead: The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.

C:

A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements. This would validate Backup to Azure Blob URL and tested cloud restore, but it does not establish the required outcome here. Verify instead: The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.

D:

The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name. This would validate SQL Server failover cluster instances shared storage constraints, but it does not establish the required outcome here. Verify instead: The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.

Question 252

A recovery plan advertises zero data loss because a replica is configured async, while the actual last committed transaction never reached the replica before failover. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.
  2. Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.
  3. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  4. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

Explanation

Correct Answer

A:

Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. This is the supported administration mechanism for the described workload. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets. Verify with: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

Incorrect Answers

B:

Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets. This addresses Backup to Azure Blob URL and tested cloud restore, not the controlling requirement here. A backup file's existence or a VERIFYONLY success does not replace a tested full restoration and end-to-end workload check. Prefer: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

C:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This addresses Log shipping health and recovery orchestration, not the controlling requirement here. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Prefer: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

D:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This addresses Managed Instance hybrid recovery and operational readiness, not the controlling requirement here. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Prefer: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

Question 253

A new Azure SQL diagnostic setting points to a Log Analytics workspace but its access and retention requirements were never validated. Which observable result BEST proves the database administration requirement is satisfied?

  1. Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.
  2. A representative mix of small and large parameter executions achieves stable resource use, with intelligent feature effects monitored over time.
  3. Operators detect regressions against representative baseline periods and can link database symptoms to trustworthy collected performance evidence.
  4. Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy.

Explanation

Correct Answer

A:

Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable. This is the observable database and application outcome rather than merely a saved setting. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures.

Incorrect Answers

B:

A representative mix of small and large parameter executions achieves stable resource use, with intelligent feature effects monitored over time. This would validate Intelligent Insights and parameter-sensitive query analysis, but it does not establish the required outcome here. Verify instead: Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.

C:

Operators detect regressions against representative baseline periods and can link database symptoms to trustworthy collected performance evidence. This would validate Database watcher and Azure SQL monitoring baseline, but it does not establish the required outcome here. Verify instead: Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.

D:

Performance improvements persist under measured production workloads and failed recommendations are reversed or disabled according to policy. This would validate Automatic tuning and intelligent query processing guardrails, but it does not establish the required outcome here. Verify instead: Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.

Question 254

A web API times out when a batch transaction keeps an update lock open for minutes and the team increases command timeout to an hour. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests.
  2. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.
  3. Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.
  4. Competing workloads respect their configured limits and critical requests retain service within documented platform and resource constraints.
  5. Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.

Explanation

Correct Answers

A:

Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. This is the supported administration mechanism for the described workload. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Verify with: Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. It supplies the implementation portion of this complementary answer.

E:

Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. This is the discriminating system or configuration evidence for the case. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Corresponding approach: Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. This choice pertains to Database watcher and Azure SQL monitoring baseline, not the needed response/evidence pair. Use: Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. Check: Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.

C:

Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. This choice pertains to Intelligent Insights and parameter-sensitive query analysis, not the needed response/evidence pair. Use: Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. Check: Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.

D:

Competing workloads respect their configured limits and critical requests retain service within documented platform and resource constraints. This choice pertains to Resource Governor and scoped compute configuration, not the needed response/evidence pair. Use: Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. Check: Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.

Question 255

A new private endpoint reaches the SQL server but the client disables certificate validation to mask an unrelated authentication error. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.
  2. Configure database auditing for activity accountability, select Change Tracking or Change Data Capture for supported data-change synchronization, and use ledger only when tamper-evidence requirements justify it.
  3. Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.
  4. Use Always Encrypted to protect selected columns with client-side cryptography and evaluate secure enclaves for supported confidential computations and richer query operations.

Explanation

Correct Answer

C:

Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. This is the supported administration mechanism for the described workload. A Private Endpoint does not provide correct DNS records automatically in every custom network; name resolution and access policy require separate verification. Verify with: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

Incorrect Answers

A:

Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions. This addresses Microsoft Entra authentication with contained service identity, not the controlling requirement here. A successful token request is not sufficient if the database principal, scope or permissions are missing or the token targets the wrong resource. Prefer: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.

B:

Configure database auditing for activity accountability, select Change Tracking or Change Data Capture for supported data-change synchronization, and use ledger only when tamper-evidence requirements justify it. This addresses Azure SQL auditing ledger and change tracking distinctions, not the controlling requirement here. SQL auditing, change tracking, CDC and ledger answer different questions; enabling one does not guarantee identical transaction history or immutable external evidence. Prefer: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.

D:

Use Always Encrypted to protect selected columns with client-side cryptography and evaluate secure enclaves for supported confidential computations and richer query operations. This addresses Always Encrypted client-side protection and enclaves, not the controlling requirement here. Always Encrypted is distinct from TDE; queries and operations may be constrained without supported enclave capabilities and drivers. Prefer: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.

Question 256

An enterprise wants one inventory of licensed SQL Server instances across branches but believes Arc onboarding will automatically migrate their MDF files to Azure. Which observable result BEST proves the database administration requirement is satisfied?

  1. The migrated service opens with consistent data, working identities and restored application workflows within the agreed maintenance period.
  2. The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.
  3. The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features.
  4. Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations.

Explanation

Correct Answer

D:

Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations. This is the observable database and application outcome rather than merely a saved setting. Azure Arc projects management and governance into Azure; Arc onboarding is not equivalent to migration or replacing SQL Server backups and patching.

Incorrect Answers

A:

The migrated service opens with consistent data, working identities and restored application workflows within the agreed maintenance period. This would validate Offline migration and post-migration verification, but it does not establish the required outcome here. Verify instead: Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations.

B:

The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations. This would validate Azure SQL Database service tiers and elastic pools, but it does not establish the required outcome here. Verify instead: Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations.

C:

The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features. This would validate Choosing Azure SQL Database versus Managed Instance versus SQL VM, but it does not establish the required outcome here. Verify instead: Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations.

Question 257

An operator checks that a Blob container contains yesterday's full backup but never verifies log chain completeness or the target RTO through restore testing. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode.
  2. Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.
  3. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  4. Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective.

Explanation

Correct Answer

B:

Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets. This is the supported administration mechanism for the described workload. A backup file's existence or a VERIFYONLY success does not replace a tested full restoration and end-to-end workload check. Verify with: Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.

Incorrect Answers

A:

Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode. This addresses Always On availability groups on SQL Server VMs and SQL MI links, not the controlling requirement here. An AG protects replicated user databases and requires cluster/listener configuration; it does not automatically synchronize every SQL Agent job or server-level login. Prefer: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

C:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This addresses Log shipping health and recovery orchestration, not the controlling requirement here. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Prefer: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

D:

Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. This addresses SQL Server native backup chain and recovery model, not the controlling requirement here. A full backup without subsequent transaction-log backups cannot recover every later transaction; SIMPLE recovery changes log backup support. Prefer: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

Question 258

An Azure SQL Database owner attempts to create an ordinary SQL Agent job on its logical server to purge staging rows each night. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.
  2. Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state.
  3. Configure SQL Server Agent notifications, operators and error handling so failed backups and maintenance tasks generate actionable alerts without leaking sensitive details.
  4. Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks.

Explanation

Correct Answer

A:

Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. This is the supported administration mechanism for the described workload. SQL Server Agent is supported on relevant instance-level offerings but is not the native scheduling mechanism inside a standalone Azure SQL Database. Verify with: Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database.

Incorrect Answers

B:

Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. This addresses Azure SQL Database elastic jobs for fleet maintenance, not the controlling requirement here. Elastic jobs are a separate managed job-agent service and should not be confused with SQL Server Agent jobs inside Azure SQL Database. Prefer: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

C:

Configure SQL Server Agent notifications, operators and error handling so failed backups and maintenance tasks generate actionable alerts without leaking sensitive details. This addresses SQL Agent alerts operators and failure notifications, not the controlling requirement here. A green schedule and enabled operator are not evidence that email delivery or failure handling works unless the notification path is tested. Prefer: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

D:

Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. This addresses ARM and Bicep declarative Azure SQL provisioning, not the controlling requirement here. A valid ARM deployment may still produce unsafe security settings if templates use broad defaults or incorrect resource group/subscription targets. Prefer: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

Question 259

An administrator selects shared storage for a SQL FCI but neglects its cross-zone or multi-region support limits while claiming disaster recovery. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.
  2. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  3. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  4. Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs.
  5. A restore to the required historical point completes into a supported database target and data plus dependent identities are validated.

Explanation

Correct Answers

C:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. This is the discriminating system or configuration evidence for the case. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files. Corresponding approach: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. It supplies the evidence portion of this complementary answer.

D:

Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. This is the supported administration mechanism for the described workload. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files. Verify with: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats. This choice pertains to Backup to Azure Blob URL and tested cloud restore, not the needed response/evidence pair. Use: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. Check: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

B:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This choice pertains to Log shipping health and recovery orchestration, not the needed response/evidence pair. Use: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. Check: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

E:

A restore to the required historical point completes into a supported database target and data plus dependent identities are validated. This choice pertains to Azure SQL automatic PITR and long-term retention, not the needed response/evidence pair. Use: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. Check: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

Question 260

A technician removes explicit GRANT rights but fails to notice that a broad database role still allows unrestricted updates. Which observable result BEST proves the database administration requirement is satisfied?

  1. Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.
  2. Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.
  3. Clients establish the intended authentication method without insecure credential sharing, and failed sign-ins can be tied to the correct principal and database.
  4. The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.

Explanation

Correct Answer

A:

Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly. This is the observable database and application outcome rather than merely a saved setting. GRANT on one schema or stored procedure does not automatically confer arbitrary permissions on all underlying cross-database resources.

Incorrect Answers

B:

Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements. This would validate Dynamic data masking classification and permission differences, but it does not establish the required outcome here. Verify instead: Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

C:

Clients establish the intended authentication method without insecure credential sharing, and failed sign-ins can be tied to the correct principal and database. This would validate SQL authentication versus Entra and managed-instance principals, but it does not establish the required outcome here. Verify instead: Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

D:

The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries. This would validate Microsoft Entra authentication with contained service identity, but it does not establish the required outcome here. Verify instead: Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests