cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 4

Question 30

Fifty small tenant databases peak at different times but are each provisioned with dedicated high-capacity compute that sits mostly idle. Which diagnostic evidence should the database administrator check FIRST?

  1. Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.
  2. Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows.
  3. Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.
  4. Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs.

Explanation

Correct Answer

C:

Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits. This is the discriminating system or configuration evidence for the case. Elastic pools share resources across eligible Azure SQL databases; adding a pool cannot eliminate an individual database's workload or resource configuration limits. Corresponding approach: Choose database vCore or DTU purchasing models, compute tier and elastic-pool membership from measured resource patterns, isolation needs and predictable workload peaks.

Incorrect Answers

A:

Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning. These checks primarily test Azure SQL deployment automation and Fabric SQL integration boundary instead of the critical system behavior in this case. Examine: Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.

B:

Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows. These checks primarily test Managed Instance and SQL VM compute storage scaling instead of the critical system behavior in this case. Examine: Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.

D:

Inspect installed Arc agent/extensions, SQL resource inventory, policy assignments, supported assessment features, connectivity and data residency needs. These checks primarily test Azure Arc-enabled SQL and hybrid fleet governance instead of the critical system behavior in this case. Examine: Inspect CPU, data IO, log write, storage, concurrent sessions, DTU/vCore utilization, pool-level pressure and per-database limits.

Question 31

Members of an Entra group sign into an application but one database lacks the expected group user and role association. Which diagnostic evidence should the database administrator check FIRST?

  1. Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.
  2. Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.
  3. Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions.
  4. Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures.

Explanation

Correct Answer

A:

Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability. This is the discriminating system or configuration evidence for the case. Network allow rules cannot repair a database permission denial, and a valid directory group may still lack an associated database user. Corresponding approach: Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles.

Incorrect Answers

B:

Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities. These checks primarily test Dynamic data masking classification and permission differences instead of the critical system behavior in this case. Examine: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.

C:

Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions. These checks primarily test Always Encrypted client-side protection and enclaves instead of the critical system behavior in this case. Examine: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.

D:

Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures. These checks primarily test Microsoft Entra authentication with contained service identity instead of the critical system behavior in this case. Examine: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.

Question 32

An application moves from SQL Server on a VM to Azure SQL Database but keeps an integrated-Windows login assumption with no Entra identity design. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls.
  2. Authorized workloads resolve the intended endpoint and connect over the required private or permitted path while unauthorized public sources are blocked.
  3. Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode.
  4. Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles.
  5. Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures.

Explanation

Correct Answers

A:

Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. This is the supported administration mechanism for the described workload. A login defined in one SQL Server instance is not automatically a contained user in another database or a globally valid Entra identity. Verify with: Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode. It supplies the implementation portion of this complementary answer.

C:

Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode. This is the discriminating system or configuration evidence for the case. A login defined in one SQL Server instance is not automatically a contained user in another database or a globally valid Entra identity. Corresponding approach: Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Authorized workloads resolve the intended endpoint and connect over the required private or permitted path while unauthorized public sources are blocked. This choice pertains to Azure SQL private endpoints firewall and TLS boundary, not the needed response/evidence pair. Use: Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. Check: Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode.

D:

Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles. This choice pertains to Diagnosing login failure and group-based access, not the needed response/evidence pair. Use: Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. Check: Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode.

E:

Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures. This choice pertains to Microsoft Entra authentication with contained service identity, not the needed response/evidence pair. Use: Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. Check: Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode.

Question 33

A disaster test forces cross-region failover while the replica is lagging and business owners incorrectly expect synchronous zero-loss recovery. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.
  2. Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.
  3. Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements.
  4. The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.
  5. Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

Explanation

Correct Answers

B:

Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling. This is the discriminating system or configuration evidence for the case. Asynchronous cross-region replication may lose recent commits on forced failover; automatic failover behavior differs by service and configuration. Corresponding approach: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. It supplies the evidence portion of this complementary answer.

C:

Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. This is the supported administration mechanism for the described workload. Asynchronous cross-region replication may lose recent commits on forced failover; automatic failover behavior differs by service and configuration. Verify with: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This choice pertains to Managed Instance hybrid recovery and operational readiness, not the needed response/evidence pair. Use: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. Check: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

D:

The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name. This choice pertains to SQL Server failover cluster instances shared storage constraints, not the needed response/evidence pair. Use: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. Check: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

E:

Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. This choice pertains to Log shipping health and recovery orchestration, not the needed response/evidence pair. Use: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. Check: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

Question 34

A 2 TB OLTP database rebuilds all indexes nightly, filling its transaction log and delaying morning transactions without measured benefit. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.
  2. Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.
  3. Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.
  4. Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification.

Explanation

Correct Answer

C:

Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows. This is the discriminating system or configuration evidence for the case. Small index fragmentation percentages do not automatically justify full rebuild; large rebuilds consume log space and can block workloads. Corresponding approach: Schedule integrity checks, index and statistics maintenance based on measured fragmentation, modification rates and SLA rather than indiscriminately rebuilding every object each night.

Incorrect Answers

A:

Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. These checks primarily test Blocking deadlocks and isolation strategy instead of the critical system behavior in this case. Examine: Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.

B:

Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events. These checks primarily test Automatic tuning and intelligent query processing guardrails instead of the critical system behavior in this case. Examine: Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.

D:

Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification. These checks primarily test Execution plans cardinality and indexing improvements instead of the critical system behavior in this case. Examine: Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.

Question 35

A compliance team assumes enabling TDE also prevents privileged database operators from reading sensitive salary values. Which observable result BEST proves the database administration requirement is satisfied?

  1. Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations.
  2. Authorized workloads resolve the intended endpoint and connect over the required private or permitted path while unauthorized public sources are blocked.
  3. A previously failing user connects with the correct principal and performs only approved operations after a narrowly scoped corrective change.
  4. Each authorized tenant sees only its records through SQL and API queries, while unauthorized predicate bypass attempts return no rows.

Explanation

Correct Answer

A:

Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations. This is the observable database and application outcome rather than merely a saved setting. TDE encrypts storage at rest but does not hide column values from authorized SQL queries or replace end-to-end TLS.

Incorrect Answers

B:

Authorized workloads resolve the intended endpoint and connect over the required private or permitted path while unauthorized public sources are blocked. This would validate Azure SQL private endpoints firewall and TLS boundary, but it does not establish the required outcome here. Verify instead: Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations.

C:

A previously failing user connects with the correct principal and performs only approved operations after a narrowly scoped corrective change. This would validate Diagnosing login failure and group-based access, but it does not establish the required outcome here. Verify instead: Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations.

D:

Each authorized tenant sees only its records through SQL and API queries, while unauthorized predicate bypass attempts return no rows. This would validate Row-level security and ownership predicates, but it does not establish the required outcome here. Verify instead: Database files and supported backups remain encrypted with accessible protectors, and rotation or failover does not block required recovery operations.

Question 36

A finance application permits under five minutes of data loss and must recover region-wide outages within an hour, but the chosen solution has no tested secondary region. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.
  2. Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.
  3. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  4. Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures.

Explanation

Correct Answer

B:

Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. This is the supported administration mechanism for the described workload. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets. Verify with: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

Incorrect Answers

A:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This addresses Managed Instance hybrid recovery and operational readiness, not the controlling requirement here. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Prefer: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

C:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This addresses Log shipping health and recovery orchestration, not the controlling requirement here. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Prefer: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

D:

Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures. This addresses Azure SQL Database active geo replication and failover groups, not the controlling requirement here. Geo-replication is normally asynchronous and does not guarantee all uncommitted or recently committed data survives a forced regional failover. Prefer: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

Question 37

An analytics team routes heavy reports to a readable geo-secondary but assumes writes submitted to the secondary will be accepted. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective.
  2. Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements.
  3. Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.
  4. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  5. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.

Explanation

Correct Answers

B:

Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. This is the supported administration mechanism for the described workload. Asynchronous cross-region replication may lose recent commits on forced failover; automatic failover behavior differs by service and configuration. Verify with: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling. It supplies the implementation portion of this complementary answer.

C:

Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling. This is the discriminating system or configuration evidence for the case. Asynchronous cross-region replication may lose recent commits on forced failover; automatic failover behavior differs by service and configuration. Corresponding approach: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. This choice pertains to HA DR tabletop and destructive failure testing, not the needed response/evidence pair. Use: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. Check: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

D:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. This choice pertains to SQL Server failover cluster instances shared storage constraints, not the needed response/evidence pair. Use: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. Check: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

E:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This choice pertains to Log shipping health and recovery orchestration, not the needed response/evidence pair. Use: Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. Check: Inspect replica role, readable secondary capacity, asynchronous replication lag, failover-group listener endpoint, DNS TTL and connection retry handling.

Question 38

Azure SQL surfaces an Intelligent Insights regression alert and operators immediately double compute without reviewing the changed query plan. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.
  2. Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production.
  3. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.
  4. Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests.

Explanation

Correct Answer

A:

Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. This is the supported administration mechanism for the described workload. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Verify with: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

Incorrect Answers

B:

Use Extended Events sessions to capture targeted SQL events and wait/blocking evidence with bounded collection and a safe target rather than enabling excessive full-query traces in production. This addresses Extended Events and workload-specific incident evidence, not the controlling requirement here. Extended Events supports focused diagnostic collection; an unfiltered high-volume session can itself increase production overhead and leak query text. Prefer: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.

C:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This addresses Execution plans cardinality and indexing improvements, not the controlling requirement here. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Prefer: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.

D:

Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. This addresses Blocking deadlocks and isolation strategy, not the controlling requirement here. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Prefer: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.

Question 39

An on-premises SQL engine is configured as though every Azure SQL automatic-tuning option exists identically on that engine and version. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.
  2. Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.
  3. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.
  4. Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

Explanation

Correct Answer

A:

Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes. This is the supported administration mechanism for the described workload. Automatic tuning may need time to evaluate evidence and can reverse actions; feature availability is platform and compatibility-level dependent. Verify with: Check automatic tuning mode, automatic plan correction state, index create/drop recommendations, plan verification, workload compatibility level and rollback events.

Incorrect Answers

B:

Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. This addresses Intelligent Insights and parameter-sensitive query analysis, not the controlling requirement here. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Prefer: Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.

C:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This addresses Execution plans cardinality and indexing improvements, not the controlling requirement here. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Prefer: Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.

D:

Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. This addresses Resource Governor and scoped compute configuration, not the controlling requirement here. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Prefer: Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.

Question 40

An encrypted SQL database is copied to a new host without validating the certificate or key material needed to open it after restore. Which observable result BEST proves the database administration requirement is satisfied?

  1. The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.
  2. The destination is consistent at an accepted cutover point, applications use the intended endpoint, and rollback criteria are documented before retirement of source.
  3. New environment deployments match approved SKU, networking and identities while Fabric access follows supported synchronization and permission boundaries.
  4. Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations.

Explanation

Correct Answer

A:

The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover. This is the observable database and application outcome rather than merely a saved setting. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration.

Incorrect Answers

B:

The destination is consistent at an accepted cutover point, applications use the intended endpoint, and rollback criteria are documented before retirement of source. This would validate Online migration with controlled cutover and validation, but it does not establish the required outcome here. Verify instead: The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.

C:

New environment deployments match approved SKU, networking and identities while Fabric access follows supported synchronization and permission boundaries. This would validate Azure SQL deployment automation and Fabric SQL integration boundary, but it does not establish the required outcome here. Verify instead: The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.

D:

Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations. This would validate Azure Arc-enabled SQL and hybrid fleet governance, but it does not establish the required outcome here. Verify instead: The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests