cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 3

Question 20

A disconnected factory needs compliance reporting for on-premises SQL Server and must design supported Arc connectivity without exposing production databases publicly. Which diagnostic evidence should the database administrator check FIRST?

  1. Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows.
  2. Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target.
  3. Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state.
  4. Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.

Explanation

Correct Answer

D:

Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs. This is the discriminating system or configuration evidence for the case. Azure Arc projects management and governance into Azure; Arc onboarding is not equivalent to migration or replacing SQL Server backups and patching. Corresponding approach: Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS.

Incorrect Answers

A:

Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows. These checks primarily test Managed Instance and SQL VM compute storage scaling instead of the critical system behavior in this case. Examine: Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.

B:

Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target. These checks primarily test Choosing Azure SQL Database versus Managed Instance versus SQL VM instead of the critical system behavior in this case. Examine: Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.

C:

Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state. These checks primarily test Online migration with controlled cutover and validation instead of the critical system behavior in this case. Examine: Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.

Question 21

A planned cluster failover completes only for the Windows role while SQL Server cannot open its shared data volumes because permissions differ across nodes. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.
  2. Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode.
  3. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  4. A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements.
  5. Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs.

Explanation

Correct Answers

C:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. This is the discriminating system or configuration evidence for the case. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files. Corresponding approach: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. It supplies the evidence portion of this complementary answer.

E:

Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. This is the supported administration mechanism for the described workload. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files. Verify with: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. This choice pertains to Log shipping health and recovery orchestration, not the needed response/evidence pair. Use: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. Check: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

B:

Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode. This choice pertains to Always On availability groups on SQL Server VMs and SQL MI links, not the needed response/evidence pair. Use: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. Check: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

D:

A recoverable backup is stored under controlled access and a real restore exercise proves the chain, keys and application consistency requirements. This choice pertains to Backup to Azure Blob URL and tested cloud restore, not the needed response/evidence pair. Use: Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. Check: Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.

Question 22

A new schema is deployed after role grants, and app users can query old objects but not a newly created table due to missing schema-level permissions. Which observable result BEST proves the database administration requirement is satisfied?

  1. The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries.
  2. Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.
  3. Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.
  4. Each authorized tenant sees only its records through SQL and API queries, while unauthorized predicate bypass attempts return no rows.

Explanation

Correct Answer

B:

Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly. This is the observable database and application outcome rather than merely a saved setting. GRANT on one schema or stored procedure does not automatically confer arbitrary permissions on all underlying cross-database resources.

Incorrect Answers

A:

The intended app authenticates through the managed identity or Entra principal without shared SQL passwords and can perform only its permitted queries. This would validate Microsoft Entra authentication with contained service identity, but it does not establish the required outcome here. Verify instead: Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

C:

Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements. This would validate Dynamic data masking classification and permission differences, but it does not establish the required outcome here. Verify instead: Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

D:

Each authorized tenant sees only its records through SQL and API queries, while unauthorized predicate bypass attempts return no rows. This would validate Row-level security and ownership predicates, but it does not establish the required outcome here. Verify instead: Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.

Question 23

An engineer attempts to fix a failed server property update by deleting and redeploying the SQL resource, risking irreversible data loss. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks.
  2. Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state.
  3. Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.
  4. Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.

Explanation

Correct Answer

D:

Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources. This is the supported administration mechanism for the described workload. Rolling back an infrastructure template is not identical to restoring committed database transactions, and destructive replacements require explicit protection. Verify with: Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.

Incorrect Answers

A:

Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. This addresses ARM and Bicep declarative Azure SQL provisioning, not the controlling requirement here. A valid ARM deployment may still produce unsafe security settings if templates use broad defaults or incorrect resource group/subscription targets. Prefer: Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.

B:

Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. This addresses Azure SQL Database elastic jobs for fleet maintenance, not the controlling requirement here. Elastic jobs are a separate managed job-agent service and should not be confused with SQL Server Agent jobs inside Azure SQL Database. Prefer: Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.

C:

Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. This addresses SQL Server Agent schedules and job ownership, not the controlling requirement here. SQL Server Agent is supported on relevant instance-level offerings but is not the native scheduling mechanism inside a standalone Azure SQL Database. Prefer: Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.

Question 24

A pilot deploys an Azure SQL offering through a portal wizard but cannot reproduce SKU and private connectivity settings for disaster recovery. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.
  2. Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.
  3. Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target.
  4. Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.

Explanation

Correct Answer

D:

Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning. This is the discriminating system or configuration evidence for the case. Using Fabric with Azure SQL does not remove operational security responsibilities or grant unsupported cross-service transactional semantics. Corresponding approach: Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent.

Incorrect Answers

A:

Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits. These checks primarily test Azure SQL Database service tiers and elastic pools instead of the critical system behavior in this case. Examine: Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.

B:

Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs. These checks primarily test Azure Arc-enabled SQL and hybrid fleet governance instead of the critical system behavior in this case. Examine: Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.

C:

Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target. These checks primarily test Choosing Azure SQL Database versus Managed Instance versus SQL VM instead of the critical system behavior in this case. Examine: Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.

Question 25

A cross-tenant automation requests a token with an incorrect audience and SQL rejects it even though Azure Resource Manager calls succeed. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure database auditing for activity accountability, select Change Tracking or Change Data Capture for supported data-change synchronization, and use ledger only when tamper-evidence requirements justify it.
  2. Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.
  3. Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls.
  4. Implement Row-Level Security with a carefully tested predicate function and security policy for each tenant or business boundary, independent of form-level filtering.

Explanation

Correct Answer

B:

Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions. This is the supported administration mechanism for the described workload. A successful token request is not sufficient if the database principal, scope or permissions are missing or the token targets the wrong resource. Verify with: Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures.

Incorrect Answers

A:

Configure database auditing for activity accountability, select Change Tracking or Change Data Capture for supported data-change synchronization, and use ledger only when tamper-evidence requirements justify it. This addresses Azure SQL auditing ledger and change tracking distinctions, not the controlling requirement here. SQL auditing, change tracking, CDC and ledger answer different questions; enabling one does not guarantee identical transaction history or immutable external evidence. Prefer: Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.

C:

Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. This addresses SQL authentication versus Entra and managed-instance principals, not the controlling requirement here. A login defined in one SQL Server instance is not automatically a contained user in another database or a globally valid Entra identity. Prefer: Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.

D:

Implement Row-Level Security with a carefully tested predicate function and security policy for each tenant or business boundary, independent of form-level filtering. This addresses Row-level security and ownership predicates, not the controlling requirement here. Client-side WHERE filters are not a database security boundary, and incorrectly scoped predicates can leak cross-tenant data. Prefer: Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.

Question 26

An Agent import job fails after inserting half the rows; an automatic retry imports the same batch again without an idempotency key. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation.
  2. Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns.
  3. Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.
  4. Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.
  5. Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.

Explanation

Correct Answers

B:

Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. This is the supported administration mechanism for the described workload. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Verify with: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. It supplies the implementation portion of this complementary answer.

D:

Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. This is the discriminating system or configuration evidence for the case. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Corresponding approach: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation. This choice pertains to Azure SQL Database elastic jobs for fleet maintenance, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

C:

Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. This choice pertains to SQL Server Agent schedules and job ownership, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

E:

Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health. This choice pertains to Deployment monitoring rollback and drift reconciliation, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

Question 27

Fifty small tenant databases peak at different times but are each provisioned with dedicated high-capacity compute that sits mostly idle. Which observable result BEST proves the database administration requirement is satisfied?

  1. New environment deployments match approved SKU, networking and identities while Fabric access follows supported synchronization and permission boundaries.
  2. Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead.
  3. The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features.
  4. The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.

Explanation

Correct Answer

D:

The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations. This is the observable database and application outcome rather than merely a saved setting. Elastic pools share resources across eligible Azure SQL databases; adding a pool cannot eliminate an individual database's workload or resource configuration limits.

Incorrect Answers

A:

New environment deployments match approved SKU, networking and identities while Fabric access follows supported synchronization and permission boundaries. This would validate Azure SQL deployment automation and Fabric SQL integration boundary, but it does not establish the required outcome here. Verify instead: The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.

B:

Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead. This would validate Table partitioning compression and scale-out tradeoffs, but it does not establish the required outcome here. Verify instead: The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.

C:

The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features. This would validate Choosing Azure SQL Database versus Managed Instance versus SQL VM, but it does not establish the required outcome here. Verify instead: The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.

Question 28

An engineer creates a template that provisions a SQL database with public network access enabled despite the organization requiring private endpoints. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.
  2. Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state.
  3. The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation.
  4. Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks.
  5. Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.

Explanation

Correct Answers

D:

Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. This is the supported administration mechanism for the described workload. A valid ARM deployment may still produce unsafe security settings if templates use broad defaults or incorrect resource group/subscription targets. Verify with: Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration. It supplies the implementation portion of this complementary answer.

E:

Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration. This is the discriminating system or configuration evidence for the case. A valid ARM deployment may still produce unsafe security settings if templates use broad defaults or incorrect resource group/subscription targets. Corresponding approach: Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources. This choice pertains to Deployment monitoring rollback and drift reconciliation, not the needed response/evidence pair. Use: Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. Check: Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.

B:

Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state. This choice pertains to Azure database task automation alerts and retries, not the needed response/evidence pair. Use: Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. Check: Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.

C:

The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation. This choice pertains to Azure SQL Database elastic jobs for fleet maintenance, not the needed response/evidence pair. Use: Use ARM or Bicep to define Azure SQL servers, databases, identity, networking and policy settings in source-controlled templates with environment parameters and gated deployment checks. Check: Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.

Question 29

A database deployment is declared complete after resource creation but its database identity and network policy are not validated before application cutover. Which observable result BEST proves the database administration requirement is satisfied?

  1. Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.
  2. The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.
  3. The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login.
  4. The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation.

Explanation

Correct Answer

A:

Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data. This is the observable database and application outcome rather than merely a saved setting. A valid ARM deployment may still produce unsafe security settings if templates use broad defaults or incorrect resource group/subscription targets.

Incorrect Answers

B:

The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords. This would validate Azure PowerShell and CLI operations with scoped automation identity, but it does not establish the required outcome here. Verify instead: Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.

C:

The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login. This would validate SQL Server Agent schedules and job ownership, but it does not establish the required outcome here. Verify instead: Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.

D:

The job runs on intended databases with controlled concurrency and job history that identifies any failed or skipped target for remediation. This would validate Azure SQL Database elastic jobs for fleet maintenance, but it does not establish the required outcome here. Verify instead: Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.

Question 30

Fifty small tenant databases peak at different times but are each provisioned with dedicated high-capacity compute that sits mostly idle. Which diagnostic evidence should the database administrator check FIRST?

  1. Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.
  2. Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows.
  3. Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.
  4. Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.

Explanation

Correct Answer

C:

Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits. This is the discriminating system or configuration evidence for the case. Elastic pools share resources across eligible Azure SQL databases; adding a pool cannot eliminate an individual database's workload or resource configuration limits. Corresponding approach: Choose database vCore or DTU purchasing models, compute tier and elastic-pool membership from measured resource patterns, isolation needs and predictable workload peaks.

Incorrect Answers

A:

Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning. These checks primarily test Azure SQL deployment automation and Fabric SQL integration boundary instead of the critical system behavior in this case. Examine: Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.

B:

Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows. These checks primarily test Managed Instance and SQL VM compute storage scaling instead of the critical system behavior in this case. Examine: Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.

D:

Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs. These checks primarily test Azure Arc-enabled SQL and hybrid fleet governance instead of the critical system behavior in this case. Examine: Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests