cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 55

Question 540

A pilot deploys an Azure SQL offering through a portal wizard but cannot reproduce SKU and private connectivity settings for disaster recovery. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Size Managed Instance and SQL Server VM compute, storage latency and throughput using performance evidence, including correct storage-layout and platform support limits.
  2. Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS.
  3. Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints.
  4. Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent.

Explanation

Correct Answer

D:

Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent. This is the supported administration mechanism for the described workload. Using Fabric with Azure SQL does not remove operational security responsibilities or grant unsupported cross-service transactional semantics. Verify with: Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.

Incorrect Answers

A:

Size Managed Instance and SQL Server VM compute, storage latency and throughput using performance evidence, including correct storage-layout and platform support limits. This addresses Managed Instance and SQL VM compute storage scaling, not the controlling requirement here. Increasing CPU cannot fix a saturated log throughput budget or a storage path with high sustained write latency. Prefer: Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent.

B:

Use Azure Arc-enabled SQL Server to inventory and govern supported SQL Server instances outside Azure without assuming Arc moves their databases or turns them into PaaS. This addresses Azure Arc-enabled SQL and hybrid fleet governance, not the controlling requirement here. Azure Arc projects management and governance into Azure; Arc onboarding is not equivalent to migration or replacing SQL Server backups and patching. Prefer: Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent.

C:

Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints. This addresses Online migration with controlled cutover and validation, not the controlling requirement here. Online migration reduces downtime but is not automatically zero-downtime; final synchronization, traffic redirection and application tests still matter. Prefer: Deploy governed Azure SQL resources with repeatable infrastructure templates and evaluate Azure SQL Database in Fabric for supported analytics-connected workflows rather than assuming all workloads are equivalent.

Question 541

A DBA disables intelligent query processing globally because one query regressed after a compatibility-level change, without isolating the affected feature. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.
  2. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.
  3. The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load.
  4. Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead.
  5. Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

Explanation

Correct Answers

A:

Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. This is the supported administration mechanism for the described workload. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Verify with: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings. It supplies the implementation portion of this complementary answer.

E:

Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings. This is the discriminating system or configuration evidence for the case. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Corresponding approach: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This choice pertains to Execution plans cardinality and indexing improvements, not the needed response/evidence pair. Use: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. Check: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

C:

The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load. This choice pertains to SQL operational baseline across waits locks and storage, not the needed response/evidence pair. Use: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. Check: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

D:

Inspect event session predicates, event fields, ring buffer or event file targets, dropped events, blocked process reports and collection overhead. This choice pertains to Extended Events and workload-specific incident evidence, not the needed response/evidence pair. Use: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU. Check: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

Question 542

A service rotates its elastic job credential but forgets to update the referenced target permission, causing partial failure in several databases. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login.
  2. Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently.
  3. Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions.
  4. Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state.
  5. Review subscription context, service principal or managed identity, Azure RBAC role, API response, database resource state and script error handling.

Explanation

Correct Answers

C:

Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions. This is the discriminating system or configuration evidence for the case. Elastic jobs are a separate managed job-agent service and should not be confused with SQL Server Agent jobs inside Azure SQL Database. Corresponding approach: Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. It supplies the evidence portion of this complementary answer.

D:

Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. This is the supported administration mechanism for the described workload. Elastic jobs are a separate managed job-agent service and should not be confused with SQL Server Agent jobs inside Azure SQL Database. Verify with: Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login. This choice pertains to SQL Server Agent schedules and job ownership, not the needed response/evidence pair. Use: Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. Check: Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions.

B:

Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently. This choice pertains to Azure database task automation alerts and retries, not the needed response/evidence pair. Use: Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. Check: Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions.

E:

Review subscription context, service principal or managed identity, Azure RBAC role, API response, database resource state and script error handling. This choice pertains to Azure PowerShell and CLI operations with scoped automation identity, not the needed response/evidence pair. Use: Use Azure SQL elastic jobs for supported scheduled T-SQL maintenance across Azure SQL Database targets, managing target groups, credentials and job execution state. Check: Inspect elastic job agent setup, target server groups, database-scoped credentials, schedule, job version, execution history and permissions.

Question 543

A hot OLTP table is enabled for aggressive page compression without measuring decompression CPU during its busiest transaction window. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects.
  2. Inspect predicate selectivity, partition elimination, split/merge plans, aligned indexes, compression CPU overhead and real data size reduction.
  3. Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows.
  4. The destination is consistent at an accepted cutover point, applications use the intended endpoint, and rollback criteria are documented before retirement of source.
  5. Choose database vCore or DTU purchasing models, compute tier and elastic-pool membership from measured resource patterns, isolation needs and predictable workload peaks.

Explanation

Correct Answers

A:

Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects. This is the supported administration mechanism for the described workload. Partitioning alone does not make every query faster; indexes and predicate alignment determine pruning and compression may trade CPU for IO. Verify with: Inspect predicate selectivity, partition elimination, split/merge plans, aligned indexes, compression CPU overhead and real data size reduction. It supplies the implementation portion of this complementary answer.

B:

Inspect predicate selectivity, partition elimination, split/merge plans, aligned indexes, compression CPU overhead and real data size reduction. This is the discriminating system or configuration evidence for the case. Partitioning alone does not make every query faster; indexes and predicate alignment determine pruning and compression may trade CPU for IO. Corresponding approach: Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects. It supplies the evidence portion of this complementary answer.

Incorrect Answers

C:

Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows. This choice pertains to Managed Instance and SQL VM compute storage scaling, not the needed response/evidence pair. Use: Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects. Check: Inspect predicate selectivity, partition elimination, split/merge plans, aligned indexes, compression CPU overhead and real data size reduction.

D:

The destination is consistent at an accepted cutover point, applications use the intended endpoint, and rollback criteria are documented before retirement of source. This choice pertains to Online migration with controlled cutover and validation, not the needed response/evidence pair. Use: Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects. Check: Inspect predicate selectivity, partition elimination, split/merge plans, aligned indexes, compression CPU overhead and real data size reduction.

E:

Choose database vCore or DTU purchasing models, compute tier and elastic-pool membership from measured resource patterns, isolation needs and predictable workload peaks. This choice pertains to Azure SQL Database service tiers and elastic pools, not the needed response/evidence pair. Use: Implement supported partition functions and aligned partition schemes for lifecycle-aware large tables, and choose row, page or columnstore compression only after measuring query and maintenance effects. Check: Inspect predicate selectivity, partition elimination, split/merge plans, aligned indexes, compression CPU overhead and real data size reduction.

Question 544

A disaster exercise expects the log-shipping secondary to accept writes automatically after the primary VM becomes unavailable without a recovery step. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures.
  2. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  3. Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs.
  4. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

Explanation

Correct Answer

B:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This is the supported administration mechanism for the described workload. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Verify with: Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

Incorrect Answers

A:

Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures. This addresses Azure SQL Database active geo replication and failover groups, not the controlling requirement here. Geo-replication is normally asynchronous and does not guarantee all uncommitted or recently committed data survives a forced regional failover. Prefer: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.

C:

Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. This addresses SQL Server failover cluster instances shared storage constraints, not the controlling requirement here. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files. Prefer: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.

D:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This addresses Managed Instance hybrid recovery and operational readiness, not the controlling requirement here. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Prefer: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.

Question 545

An app is deployed into a VNet with an approved private endpoint, but it still resolves the public SQL hostname because the private DNS zone is not linked. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.
  2. Clients establish the intended authentication method without insecure credential sharing, and failed sign-ins can be tied to the correct principal and database.
  3. Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.
  4. Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.
  5. Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.

Explanation

Correct Answers

A:

Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation. This is the discriminating system or configuration evidence for the case. A Private Endpoint does not provide correct DNS records automatically in every custom network; name resolution and access policy require separate verification. Corresponding approach: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. It supplies the evidence portion of this complementary answer.

D:

Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. This is the supported administration mechanism for the described workload. A Private Endpoint does not provide correct DNS records automatically in every custom network; name resolution and access policy require separate verification. Verify with: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation. It supplies the implementation portion of this complementary answer.

Incorrect Answers

B:

Clients establish the intended authentication method without insecure credential sharing, and failed sign-ins can be tied to the correct principal and database. This choice pertains to SQL authentication versus Entra and managed-instance principals, not the needed response/evidence pair. Use: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. Check: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

C:

Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups. This choice pertains to Transparent data encryption keys and protector lifecycle, not the needed response/evidence pair. Use: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. Check: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

E:

Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures. This choice pertains to Object-level encryption and database cryptographic controls, not the needed response/evidence pair. Use: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure. Check: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

Question 546

A batch process runs when manually executed but not overnight because its schedule is disabled and the job is assigned to the wrong server. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.
  2. Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently.
  3. Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns.
  4. Configure SQL Server Agent notifications, operators and error handling so failed backups and maintenance tasks generate actionable alerts without leaking sensitive details.

Explanation

Correct Answer

A:

Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need. This is the supported administration mechanism for the described workload. SQL Server Agent is supported on relevant instance-level offerings but is not the native scheduling mechanism inside a standalone Azure SQL Database. Verify with: Inspect SQL Agent service state, job owner, proxy or credential, step subsystem, schedules, permissions, execution history and target database.

Incorrect Answers

B:

Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently. This addresses Azure database task automation alerts and retries, not the controlling requirement here. An Azure automation runbook reporting successful execution does not prove its database command succeeded or that an alert was delivered. Prefer: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

C:

Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. This addresses SQL Agent job troubleshooting and idempotent maintenance, not the controlling requirement here. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Prefer: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

D:

Configure SQL Server Agent notifications, operators and error handling so failed backups and maintenance tasks generate actionable alerts without leaking sensitive details. This addresses SQL Agent alerts operators and failure notifications, not the controlling requirement here. A green schedule and enabled operator are not evidence that email delivery or failure handling works unless the notification path is tested. Prefer: Configure SQL Server Agent schedules and job-step security on supported SQL Server or Managed Instance platforms, separating service credentials from the database data permissions they need.

Question 547

A reporting identity needs SELECT on three views but administrators assign db_owner because a single stored procedure was denied. Which diagnostic evidence should the database administrator check FIRST?

  1. Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.
  2. Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.
  3. Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities.
  4. Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures.

Explanation

Correct Answer

B:

Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation. This is the discriminating system or configuration evidence for the case. GRANT on one schema or stored procedure does not automatically confer arbitrary permissions on all underlying cross-database resources. Corresponding approach: Grant database and object rights to explicit roles, distinguish server-level from database permissions, and avoid applying sysadmin or db_owner as a workaround for every access error.

Incorrect Answers

A:

Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability. These checks primarily test Diagnosing login failure and group-based access instead of the critical system behavior in this case. Examine: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

C:

Inspect sensitivity labels, masking expressions, UNMASK permissions, privileged role membership and direct query behavior across application identities. These checks primarily test Dynamic data masking classification and permission differences instead of the critical system behavior in this case. Examine: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

D:

Inspect tenant and server Entra administrator settings, token audience, user mapping, group membership, service principal, role grants and sign-in failures. These checks primarily test Microsoft Entra authentication with contained service identity instead of the critical system behavior in this case. Examine: Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.

Question 548

An administrator creates a database watcher but omits the production target and interprets the empty dashboard as proof of no performance problem. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use Query Store to compare query runtime and plan history, identify a genuine plan regression, and force a known suitable plan only with ongoing validation and rollback.
  2. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.
  3. Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests.
  4. Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

Explanation

Correct Answer

D:

Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. This is the supported administration mechanism for the described workload. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Verify with: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Incorrect Answers

A:

Use Query Store to compare query runtime and plan history, identify a genuine plan regression, and force a known suitable plan only with ongoing validation and rollback. This addresses Query Store plan regressions and forced plans, not the controlling requirement here. Forcing a historical plan can mitigate a regression but does not make poor statistics or parameter sensitivity disappear and may fail after schema changes. Prefer: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

B:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This addresses SQL operational baseline across waits locks and storage, not the controlling requirement here. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together. Prefer: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

C:

Diagnose blocked and deadlocked sessions using live DMVs and deadlock graphs, then fix transaction scope, indexing or isolation behavior with concurrency tests. This addresses Blocking deadlocks and isolation strategy, not the controlling requirement here. Raising an app timeout does not remove a blocking root cause; snapshot isolation can reduce some reader/writer contention but changes version-store behavior. Prefer: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

Question 549

A compliance team assumes enabling TDE also prevents privileged database operators from reading sensitive salary values. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.
  2. Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.
  3. Inspect SESSION_CONTEXT usage, predicate function logic, policy state, object permissions, execution plans and cross-tenant test accounts.
  4. Examine audit destinations, retention and access, captured event classes, Change Tracking version retention, CDC capture jobs, ledger digest verification and application expectations.

Explanation

Correct Answer

A:

Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies. This is the discriminating system or configuration evidence for the case. TDE encrypts storage at rest but does not hide column values from authorized SQL queries or replace end-to-end TLS. Corresponding approach: Enable supported Transparent Data Encryption and choose managed or customer-managed protectors based on compliance, rotating keys without losing the ability to decrypt database backups.

Incorrect Answers

B:

Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation. These checks primarily test Azure SQL private endpoints firewall and TLS boundary instead of the critical system behavior in this case. Examine: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

C:

Inspect SESSION_CONTEXT usage, predicate function logic, policy state, object permissions, execution plans and cross-tenant test accounts. These checks primarily test Row-level security and ownership predicates instead of the critical system behavior in this case. Examine: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

D:

Examine audit destinations, retention and access, captured event classes, Change Tracking version retention, CDC capture jobs, ledger digest verification and application expectations. These checks primarily test Azure SQL auditing ledger and change tracking distinctions instead of the critical system behavior in this case. Examine: Inspect TDE state, Azure Key Vault or Managed HSM key permissions, protector version, key availability, rotation policy and restore dependencies.

Question 550

A nightly ingestion pipeline reports slow commits with high WRITELOG waits while the team recommends rebuilding unrelated nonclustered indexes first. Which observable result BEST proves the database administration requirement is satisfied?

  1. The captured evidence explains the failing operation at the right time with sufficient context and acceptable overhead, without recording unrestricted sensitive payloads.
  2. The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load.
  3. Competing workloads respect their configured limits and critical requests retain service within documented platform and resource constraints.
  4. Operators detect regressions against representative baseline periods and can link database symptoms to trustworthy collected performance evidence.

Explanation

Correct Answer

B:

The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load. This is the observable database and application outcome rather than merely a saved setting. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together.

Incorrect Answers

A:

The captured evidence explains the failing operation at the right time with sufficient context and acceptable overhead, without recording unrestricted sensitive payloads. This would validate Extended Events and workload-specific incident evidence, but it does not establish the required outcome here. Verify instead: The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load.

C:

Competing workloads respect their configured limits and critical requests retain service within documented platform and resource constraints. This would validate Resource Governor and scoped compute configuration, but it does not establish the required outcome here. Verify instead: The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load.

D:

Operators detect regressions against representative baseline periods and can link database symptoms to trustworthy collected performance evidence. This would validate Database watcher and Azure SQL monitoring baseline, but it does not establish the required outcome here. Verify instead: The identified bottleneck has a specific measured cause, and the chosen corrective action changes the relevant metric under representative load.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests