cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 5

Question 40

An encrypted SQL database is copied to a new host without validating the certificate or key material needed to open it after restore. Which observable result BEST proves the database administration requirement is satisfied?

  1. The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.
  2. The destination is consistent at an accepted cutover point, applications use the intended endpoint, and rollback criteria are documented before retirement of source.
  3. New environment deployments match approved SKU, networking and identities while Fabric access follows supported synchronization and permission boundaries.
  4. Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations.

Explanation

Correct Answer

A:

The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover. This is the observable database and application outcome rather than merely a saved setting. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration.

Incorrect Answers

B:

The destination is consistent at an accepted cutover point, applications use the intended endpoint, and rollback criteria are documented before retirement of source. This would validate Online migration with controlled cutover and validation, but it does not establish the required outcome here. Verify instead: The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.

C:

New environment deployments match approved SKU, networking and identities while Fabric access follows supported synchronization and permission boundaries. This would validate Azure SQL deployment automation and Fabric SQL integration boundary, but it does not establish the required outcome here. Verify instead: The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.

D:

Administrators can view authorized hybrid SQL inventory and policy findings while database files remain in their existing managed locations. This would validate Azure Arc-enabled SQL and hybrid fleet governance, but it does not establish the required outcome here. Verify instead: The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.

Question 41

An alert evaluates the wrong Managed Instance resource and pages operations for the staging environment while production latency rises. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions.
  2. Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.
  3. Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.
  4. Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.

Explanation

Correct Answer

B:

Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. This is the discriminating system or configuration evidence for the case. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Corresponding approach: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.

Incorrect Answers

A:

Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions. These checks primarily test Query Store plan regressions and forced plans instead of the critical system behavior in this case. Examine: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

C:

Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead. These checks primarily test Extended Events and workload-specific incident evidence instead of the critical system behavior in this case. Examine: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

D:

Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. These checks primarily test Blocking deadlocks and isolation strategy instead of the critical system behavior in this case. Examine: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

Question 42

A developer assumes encrypting a stored procedure definition also encrypts the sensitive values returned to any caller. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.
  2. Protect targeted sensitive objects through supported SQL encryption functions, key hierarchy and application threat model while distinguishing column encryption from network and storage encryption.
  3. Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.
  4. Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly.
  5. Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.

Explanation

Correct Answers

B:

Protect targeted sensitive objects through supported SQL encryption functions, key hierarchy and application threat model while distinguishing column encryption from network and storage encryption. This is the supported administration mechanism for the described workload. SQL object encryption can protect selected values, but compromised key access or overly broad SQL privileges undermine the intended isolation. Verify with: Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures. It supplies the implementation portion of this complementary answer.

C:

Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures. This is the discriminating system or configuration evidence for the case. SQL object encryption can protect selected values, but compromised key access or overly broad SQL privileges undermine the intended isolation. Corresponding approach: Protect targeted sensitive objects through supported SQL encryption functions, key hierarchy and application threat model while distinguishing column encryption from network and storage encryption. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. This choice pertains to Azure SQL private endpoints firewall and TLS boundary, not the needed response/evidence pair. Use: Protect targeted sensitive objects through supported SQL encryption functions, key hierarchy and application threat model while distinguishing column encryption from network and storage encryption. Check: Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.

D:

Approved users can execute only intended tables, views and procedures, while unauthorized writes and administrative operations fail reproducibly. This choice pertains to Least-privilege SQL roles and ownership chaining, not the needed response/evidence pair. Use: Protect targeted sensitive objects through supported SQL encryption functions, key hierarchy and application threat model while distinguishing column encryption from network and storage encryption. Check: Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.

E:

Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities. This choice pertains to Dynamic data masking classification and permission differences, not the needed response/evidence pair. Use: Protect targeted sensitive objects through supported SQL encryption functions, key hierarchy and application threat model while distinguishing column encryption from network and storage encryption. Check: Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.

Question 43

The Azure SQL service is under log IO pressure, but application engineers inspect only front-end HTTP response times and miss database metrics. Which diagnostic evidence should the database administrator check FIRST?

  1. Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.
  2. Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration.
  3. Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.
  4. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Explanation

Correct Answer

D:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. This is the discriminating system or configuration evidence for the case. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Corresponding approach: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

Incorrect Answers

A:

Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change. These checks primarily test SQL operational baseline across waits locks and storage instead of the critical system behavior in this case. Examine: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

B:

Inspect blocker/waiter SPIDs, wait_resource, open transactions, deadlock XML, isolation level, lock escalation and transaction duration. These checks primarily test Blocking deadlocks and isolation strategy instead of the critical system behavior in this case. Examine: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

C:

Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps. These checks primarily test Azure Monitor alerts diagnostics and resource metrics instead of the critical system behavior in this case. Examine: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Question 44

An application reaches its database connection limit for ten minutes but the dashboard plots only daily average CPU and remains green. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use Query Store to compare query runtime and plan history, identify a genuine plan regression, and force a known suitable plan only with ongoing validation and rollback.
  2. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  3. Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.
  4. Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests.

Explanation

Correct Answer

B:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This is the supported administration mechanism for the described workload. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Verify with: Inspect metric namespace, resource dimensions, aggregation periods, diagnostic destinations, alert scope, delivery permissions, action groups and sample timestamps.

Incorrect Answers

A:

Use Query Store to compare query runtime and plan history, identify a genuine plan regression, and force a known suitable plan only with ongoing validation and rollback. This addresses Query Store plan regressions and forced plans, not the controlling requirement here. Forcing a historical plan can mitigate a regression but does not make poor statistics or parameter sensitivity disappear and may fail after schema changes. Prefer: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.

C:

Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. This addresses Database watcher and Azure SQL monitoring baseline, not the controlling requirement here. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Prefer: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.

D:

Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. This addresses Blocking deadlocks and isolation strategy, not the controlling requirement here. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Prefer: Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.

Question 45

A tabletop recovery exercise assumes the database is available because its replica reports online, but the application continues using cached broken connections. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.
  2. Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective.
  3. The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails.
  4. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  5. Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

Explanation

Correct Answers

B:

Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. This is the supported administration mechanism for the described workload. A failover button clicking successfully is not proof the application, authentication, jobs and downstream services all recovered end to end. Verify with: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence. It supplies the implementation portion of this complementary answer.

E:

Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence. This is the discriminating system or configuration evidence for the case. A failover button clicking successfully is not proof the application, authentication, jobs and downstream services all recovered end to end. Corresponding approach: Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This choice pertains to Managed Instance hybrid recovery and operational readiness, not the needed response/evidence pair. Use: Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. Check: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

C:

The secondary replays the intended log sequence and can be recovered with documented RPO/RTO and acceptable data loss when primary fails. This choice pertains to Log shipping health and recovery orchestration, not the needed response/evidence pair. Use: Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. Check: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

D:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. This choice pertains to SQL Server failover cluster instances shared storage constraints, not the needed response/evidence pair. Use: Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. Check: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

Question 46

A compliance team assumes enabling TDE also prevents privileged database operators from reading sensitive salary values. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.
  2. Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.
  3. Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions.
  4. Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls.

Explanation

Correct Answer

B:

Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. This is the supported administration mechanism for the described workload. TDE encrypts storage at rest but does not hide column values from authorized SQL queries or replace end-to-end TLS. Verify with: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

Incorrect Answers

A:

Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. This addresses Azure SQL private endpoints firewall and TLS boundary, not the controlling requirement here. A Private Endpoint does not provide correct DNS records automatically in every custom network; name resolution and access policy require separate verification. Prefer: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.

C:

Configure supported Microsoft Entra authentication and database users or contained identities for Azure SQL, ensuring the application principal receives only required permissions. This addresses Microsoft Entra authentication with contained service identity, not the controlling requirement here. A successful token request is not sufficient if the database principal, scope or permissions are missing or the token targets the wrong resource. Prefer: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.

D:

Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. This addresses SQL authentication versus Entra and managed-instance principals, not the controlling requirement here. A login defined in one SQL Server instance is not automatically a contained user in another database or a globally valid Entra identity. Prefer: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.

Question 47

A log shipping monitor shows restore delay increasing because a previous log file is missing and the team resumes from a later file, breaking the chain. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Approved managed-instance failover or hybrid transition works after controlled traffic redirection, with required instance features and logins present.
  2. Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.
  3. Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs.
  4. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  5. Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.

Explanation

Correct Answers

B:

Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. This is the discriminating system or configuration evidence for the case. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Corresponding approach: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. It supplies the evidence portion of this complementary answer.

D:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This is the supported administration mechanism for the described workload. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Verify with: Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Approved managed-instance failover or hybrid transition works after controlled traffic redirection, with required instance features and logins present. This choice pertains to Managed Instance hybrid recovery and operational readiness, not the needed response/evidence pair. Use: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. Check: Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

C:

Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. This choice pertains to SQL Server failover cluster instances shared storage constraints, not the needed response/evidence pair. Use: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. Check: Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

E:

Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats. This choice pertains to Backup to Azure Blob URL and tested cloud restore, not the needed response/evidence pair. Use: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. Check: Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

Question 48

A recurring statistics update job overlaps itself during peak hours because the prior execution exceeded the scheduling interval. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.
  2. Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data.
  3. Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns.
  4. Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.
  5. Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.

Explanation

Correct Answers

A:

Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. This is the discriminating system or configuration evidence for the case. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Corresponding approach: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. It supplies the evidence portion of this complementary answer.

C:

Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. This is the supported administration mechanism for the described workload. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Verify with: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior. It supplies the implementation portion of this complementary answer.

Incorrect Answers

B:

Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data. This choice pertains to ARM and Bicep declarative Azure SQL provisioning, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

D:

Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. This choice pertains to SQL Server Agent schedules and job ownership, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

E:

Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health. This choice pertains to Deployment monitoring rollback and drift reconciliation, not the needed response/evidence pair. Use: Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. Check: Inspect step command, proxy token, connection defaults, deadlocks, Agent history output, last success timestamp and job rerun behavior.

Question 49

An Automation runbook starts successfully but silently skips the target database due to a missing SQL user role and exits with code zero. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration.
  2. Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions.
  3. Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health.
  4. Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state.

Explanation

Correct Answer

D:

Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state. This is the discriminating system or configuration evidence for the case. An Azure automation runbook reporting successful execution does not prove its database command succeeded or that an alert was delivered. Corresponding approach: Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently.

Incorrect Answers

A:

Inspect template parameters, deployment scope, what-if output, module dependencies, identity role assignments and post-deploy effective configuration. These checks primarily test ARM and Bicep declarative Azure SQL provisioning instead of the critical system behavior in this case. Examine: Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state.

B:

Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions. These checks primarily test Azure SQL Database elastic jobs for fleet maintenance instead of the critical system behavior in this case. Examine: Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state.

C:

Inspect deployment operation results, resource provider error codes, policy denials, what-if diffs, resource locks, template validation and database post-deploy health. These checks primarily test Deployment monitoring rollback and drift reconciliation instead of the critical system behavior in this case. Examine: Inspect automation account managed identity, runbook schedule, Azure Monitor action group, job output, retry policy, resource locks and target database state.

Question 50

A company needs an exact SQL Server instance configuration with native backup chains but chooses a lightweight schema/data export as its only rollback strategy. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Choose database vCore or DTU purchasing models, compute tier and elastic-pool membership from measured resource patterns, isolation needs and predictable workload peaks.
  2. Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.
  3. Size Managed Instance and SQL Server VM compute, storage latency and throughput using performance evidence, including correct storage-layout and platform support limits.
  4. Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.

Explanation

Correct Answer

D:

Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration. This is the supported administration mechanism for the described workload. A BACPAC export captures schema and data for applicable databases but is not an instance backup that automatically recreates all server features and jobs. Verify with: Inspect backup format, target offering limits, export size, authentication mapping, integrity checks, DBCC findings, workload baselines and cutover test results.

Incorrect Answers

A:

Choose database vCore or DTU purchasing models, compute tier and elastic-pool membership from measured resource patterns, isolation needs and predictable workload peaks. This addresses Azure SQL Database service tiers and elastic pools, not the controlling requirement here. Elastic pools share resources across eligible Azure SQL databases; adding a pool cannot eliminate an individual database's workload or resource configuration limits. Prefer: Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.

B:

Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. This addresses Azure SQL migration assessment and feature compatibility, not the controlling requirement here. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration. Prefer: Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.

C:

Size Managed Instance and SQL Server VM compute, storage latency and throughput using performance evidence, including correct storage-layout and platform support limits. This addresses Managed Instance and SQL VM compute storage scaling, not the controlling requirement here. Increasing CPU cannot fix a saturated log throughput budget or a storage path with high sustained write latency. Prefer: Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests