cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 59

Question 580

The Azure SQL service is under log IO pressure, but application engineers inspect only front-end HTTP response times and miss database metrics. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  2. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.
  3. Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.
  4. Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

Explanation

Correct Answer

D:

Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time. This is the supported administration mechanism for the described workload. Database watcher and Azure Monitor observe resource activity but do not by themselves repair a bad execution plan or guarantee metrics are complete. Verify with: Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.

Incorrect Answers

A:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This addresses Azure Monitor alerts diagnostics and resource metrics, not the controlling requirement here. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Prefer: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

B:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This addresses Execution plans cardinality and indexing improvements, not the controlling requirement here. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Prefer: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

C:

Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. This addresses Resource Governor and scoped compute configuration, not the controlling requirement here. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Prefer: Create a workload baseline and enable appropriate Azure SQL monitoring, including database watcher where supported, to correlate query behavior with resource saturation over time.

Question 581

A finance application permits under five minutes of data loss and must recover region-wide outages within an hour, but the chosen solution has no tested secondary region. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements.
  2. Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.
  3. The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name.
  4. Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.
  5. Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.

Explanation

Correct Answers

D:

Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map. This is the discriminating system or configuration evidence for the case. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets. Corresponding approach: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. It supplies the evidence portion of this complementary answer.

E:

Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. This is the supported administration mechanism for the described workload. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets. Verify with: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Choose Azure SQL failover groups or active geo-replication according to group-level endpoint continuity, supported replication topology, read scale and application reconnect requirements. This choice pertains to Azure SQL failover groups versus active geo replication decisions, not the needed response/evidence pair. Use: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. Check: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

B:

Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay. This choice pertains to Log shipping health and recovery orchestration, not the needed response/evidence pair. Use: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. Check: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

C:

The SQL Server instance restarts on an eligible node using accessible shared data and log storage while the application resolves the cluster virtual network name. This choice pertains to SQL Server failover cluster instances shared storage constraints, not the needed response/evidence pair. Use: Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. Check: Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.

Question 582

A new private endpoint reaches the SQL server but the client disables certificate validation to mask an unrelated authentication error. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect SESSION_CONTEXT usage, predicate function logic, policy state, object permissions, execution plans and cross-tenant test accounts.
  2. Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.
  3. Examine audit destinations, retention and access, captured event classes, Change Tracking version retention, CDC capture jobs, ledger digest verification and application expectations.
  4. Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.

Explanation

Correct Answer

B:

Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation. This is the discriminating system or configuration evidence for the case. A Private Endpoint does not provide correct DNS records automatically in every custom network; name resolution and access policy require separate verification. Corresponding approach: Design Azure SQL firewall policies and Private Link or approved service endpoints at the required scope, enforcing TLS and minimizing public endpoint exposure.

Incorrect Answers

A:

Inspect SESSION_CONTEXT usage, predicate function logic, policy state, object permissions, execution plans and cross-tenant test accounts. These checks primarily test Row-level security and ownership predicates instead of the critical system behavior in this case. Examine: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

C:

Examine audit destinations, retention and access, captured event classes, Change Tracking version retention, CDC capture jobs, ledger digest verification and application expectations. These checks primarily test Azure SQL auditing ledger and change tracking distinctions instead of the critical system behavior in this case. Examine: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

D:

Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures. These checks primarily test Object-level encryption and database cryptographic controls instead of the critical system behavior in this case. Examine: Inspect server-level and database-level firewall rules, private endpoint approval and DNS, VNet/subnet routing, public network access status and certificate validation.

Question 583

An encrypted SQL database is copied to a new host without validating the certificate or key material needed to open it after restore. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data.
  2. Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.
  3. Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning.
  4. The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features.
  5. Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints.

Explanation

Correct Answers

A:

Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. This is the supported administration mechanism for the described workload. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration. Verify with: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map. It supplies the implementation portion of this complementary answer.

B:

Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map. This is the discriminating system or configuration evidence for the case. Successful schema import does not prove that instance-level jobs, security identities and linked dependencies survive a migration. Corresponding approach: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. It supplies the evidence portion of this complementary answer.

Incorrect Answers

C:

Compare database offering capabilities, deployment parameters, identity, networking, Fabric integration support, source control and tenant governance before provisioning. This choice pertains to Azure SQL deployment automation and Fabric SQL integration boundary, not the needed response/evidence pair. Use: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. Check: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

D:

The deployed database meets compatibility and service-management requirements without unnecessary virtual-machine maintenance or unsupported instance features. This choice pertains to Choosing Azure SQL Database versus Managed Instance versus SQL VM, not the needed response/evidence pair. Use: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. Check: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

E:

Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints. This choice pertains to Online migration with controlled cutover and validation, not the needed response/evidence pair. Use: Use a current migration assessment to inventory database dependencies, unsupported features, downtime constraints and target platform compatibility before moving data. Check: Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.

Question 584

A planned regional disaster exercise fails because the restoration account lacks rights to access stored TDE key protectors. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  2. Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map.
  3. Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.
  4. Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

Explanation

Correct Answer

D:

Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence. This is the discriminating system or configuration evidence for the case. A failover button clicking successfully is not proof the application, authentication, jobs and downstream services all recovered end to end. Corresponding approach: Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective.

Incorrect Answers

A:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. These checks primarily test SQL Server failover cluster instances shared storage constraints instead of the critical system behavior in this case. Examine: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

B:

Inspect recovery objectives, replication modes, failure domains, backup frequencies, availability SLA, network and DNS cutover plus application dependency map. These checks primarily test RPO RTO strategy and availability versus recovery instead of the critical system behavior in this case. Examine: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

C:

Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity. These checks primarily test Managed Instance hybrid recovery and operational readiness instead of the critical system behavior in this case. Examine: Examine failover runbook owner, replica health, DNS and application retry time, last confirmed transaction, validation queries and restore evidence.

Question 585

An organization proposes SQL Managed Instance link for a migration but its source SQL Server version and network requirements were not checked against the feature support matrix. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective.
  2. The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions.
  3. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.
  4. Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests.
  5. Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

Explanation

Correct Answers

C:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This is the supported administration mechanism for the described workload. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Verify with: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity. It supplies the implementation portion of this complementary answer.

E:

Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity. This is the discriminating system or configuration evidence for the case. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Corresponding approach: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. It supplies the evidence portion of this complementary answer.

Incorrect Answers

A:

Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. This choice pertains to HA DR tabletop and destructive failure testing, not the needed response/evidence pair. Use: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. Check: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

B:

The intended database replicas transition primary role as designed and application connections reach the listener without unsupported database or instance assumptions. This choice pertains to Always On availability groups on SQL Server VMs and SQL MI links, not the needed response/evidence pair. Use: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. Check: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

D:

Inspect shared disk or supported file-share topology, Windows cluster validation, storage permissions, listener name, resource ownership and node failover tests. This choice pertains to SQL Server failover cluster instances shared storage constraints, not the needed response/evidence pair. Use: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. Check: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

Question 586

A retail platform permits only a ten-minute maintenance window but engineers select a one-time offline backup restore that takes several hours. Which diagnostic evidence should the database administrator check FIRST?

  1. Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map.
  2. Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target.
  3. Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows.
  4. Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state.

Explanation

Correct Answer

D:

Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state. This is the discriminating system or configuration evidence for the case. Online migration reduces downtime but is not automatically zero-downtime; final synchronization, traffic redirection and application tests still matter. Corresponding approach: Choose a supported online migration path with ongoing data synchronization when a tight outage window requires it, and plan explicit final cutover, validation and rollback checkpoints.

Incorrect Answers

A:

Collect source version, compatibility level, blockers, logins, SQL Agent jobs, linked servers, TDE key dependencies, storage size and application integration map. These checks primarily test Azure SQL migration assessment and feature compatibility instead of the critical system behavior in this case. Examine: Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state.

B:

Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target. These checks primarily test Choosing Azure SQL Database versus Managed Instance versus SQL VM instead of the critical system behavior in this case. Examine: Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state.

C:

Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows. These checks primarily test Managed Instance and SQL VM compute storage scaling instead of the critical system behavior in this case. Examine: Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state.

Question 587

An application in SIMPLE recovery experiences a midday deletion and its owner expects point-in-time recovery through nonexistent transaction-log backups. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective.
  2. Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.
  3. A documented exercise demonstrates recovery within measured time and data-loss objectives and reveals unmet application dependencies before production emergencies.
  4. Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination.
  5. Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

Explanation

Correct Answers

A:

Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. This is the supported administration mechanism for the described workload. A full backup without subsequent transaction-log backups cannot recover every later transaction; SIMPLE recovery changes log backup support. Verify with: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target. It supplies the implementation portion of this complementary answer.

B:

Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target. This is the discriminating system or configuration evidence for the case. A full backup without subsequent transaction-log backups cannot recover every later transaction; SIMPLE recovery changes log backup support. Corresponding approach: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. It supplies the evidence portion of this complementary answer.

Incorrect Answers

C:

A documented exercise demonstrates recovery within measured time and data-loss objectives and reveals unmet application dependencies before production emergencies. This choice pertains to HA DR tabletop and destructive failure testing, not the needed response/evidence pair. Use: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. Check: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.

D:

Check service tier, available restore points, retention setting, logical server and database permissions, LTR vault policy and restore destination. This choice pertains to Azure SQL automatic PITR and long-term retention, not the needed response/evidence pair. Use: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. Check: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.

E:

Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets. This choice pertains to Backup to Azure Blob URL and tested cloud restore, not the needed response/evidence pair. Use: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. Check: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.

Question 588

A team proposes a range comparison on randomized encrypted values without checking whether its target and enclave configuration support the operation. Which observable result BEST proves the database administration requirement is satisfied?

  1. Only approved SQL principals or application clients decrypt the intended data and key rotation retains tested recovery capability.
  2. Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly.
  3. Clients establish the intended authentication method without insecure credential sharing, and failed sign-ins can be tied to the correct principal and database.
  4. A previously failing user connects with the correct principal and performs only approved operations after a narrowly scoped corrective change.

Explanation

Correct Answer

B:

Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly. This is the observable database and application outcome rather than merely a saved setting. Always Encrypted is distinct from TDE; queries and operations may be constrained without supported enclave capabilities and drivers.

Incorrect Answers

A:

Only approved SQL principals or application clients decrypt the intended data and key rotation retains tested recovery capability. This would validate Object-level encryption and database cryptographic controls, but it does not establish the required outcome here. Verify instead: Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly.

C:

Clients establish the intended authentication method without insecure credential sharing, and failed sign-ins can be tied to the correct principal and database. This would validate SQL authentication versus Entra and managed-instance principals, but it does not establish the required outcome here. Verify instead: Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly.

D:

A previously failing user connects with the correct principal and performs only approved operations after a narrowly scoped corrective change. This would validate Diagnosing login failure and group-based access, but it does not establish the required outcome here. Verify instead: Approved applications can query protected columns with authorized client drivers while other SQL readers cannot obtain original plaintext directly.

Question 589

An organization proposes SQL Managed Instance link for a migration but its source SQL Server version and network requirements were not checked against the feature support matrix. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures.
  2. Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode.
  3. Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities.
  4. Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

Explanation

Correct Answer

D:

Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies. This is the supported administration mechanism for the described workload. Managed Instance includes built-in platform availability features, but customer responsibilities still include cross-region recovery plans and application connection design. Verify with: Check Managed Instance region pairing, VNet/DNS dependencies, SQL MI link prerequisites where used, migration and failover sequence, replication health and authentication continuity.

Incorrect Answers

A:

Configure supported active geo-replication or Azure SQL failover groups with clear primary-secondary roles, read-only routing, connection listeners and manual/automatic recovery procedures. This addresses Azure SQL Database active geo replication and failover groups, not the controlling requirement here. Geo-replication is normally asynchronous and does not guarantee all uncommitted or recently committed data survives a forced regional failover. Prefer: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

B:

Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode. This addresses Always On availability groups on SQL Server VMs and SQL MI links, not the controlling requirement here. An AG protects replicated user databases and requires cluster/listener configuration; it does not automatically synchronize every SQL Agent job or server-level login. Prefer: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

C:

Select a supported HA and disaster recovery architecture from business-defined RPO, RTO, region failure assumptions, planned failover steps and service-specific capabilities. This addresses RPO RTO strategy and availability versus recovery, not the controlling requirement here. High availability reduces some outages but cannot substitute for recoverable backups after corruption or human deletion; RPO and RTO are separate targets. Prefer: Assess Managed Instance service tiers, built-in availability, failover groups and supported SQL Managed Instance link scenarios for hybrid resilience without inventing unsupported topologies.

Question 590

A log shipping monitor shows restore delay increasing because a previous log file is missing and the team resumes from a later file, breaking the chain. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode.
  2. Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.
  3. Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective.
  4. Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective.

Explanation

Correct Answer

B:

Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs. This is the supported administration mechanism for the described workload. Log shipping is backup-copy-restore orchestration, not synchronous automatic database failover or a substitute for manual application cutover. Verify with: Inspect monitor-server history, last backup/copied/restored times, log chain continuity, share access, standby mode and restore delay.

Incorrect Answers

A:

Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode. This addresses Always On availability groups on SQL Server VMs and SQL MI links, not the controlling requirement here. An AG protects replicated user databases and requires cluster/listener configuration; it does not automatically synchronize every SQL Agent job or server-level login. Prefer: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.

C:

Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. This addresses SQL Server native backup chain and recovery model, not the controlling requirement here. A full backup without subsequent transaction-log backups cannot recover every later transaction; SIMPLE recovery changes log backup support. Prefer: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.

D:

Test availability and recovery plans with realistic but controlled primary outages, application write workload, backups and rollback exercises before claiming a recovery objective. This addresses HA DR tabletop and destructive failure testing, not the controlling requirement here. A failover button clicking successfully is not proof the application, authentication, jobs and downstream services all recovered end to end. Prefer: Configure SQL Server log shipping across supported instances with reliable log backup, copy and restore schedules, delay and standby policies, then test manual recovery and ownership of jobs.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests