cert
cert-1
cert-2

Pass Microsoft DP-300 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
DP-300 Exam - Verified By Experts
DP-300 Premium Bundle
$29.98

DP-300 Premium Bundle

$79.99
$109.97
  • Premium File 470 Questions & Answers. Last update: Nov 10, 2026
  • Training Course 130 Video Lectures
  • Study Guide 672 Pages
 
$109.97
$79.99
accept 43 downloads in last 7 days
block-screenshots
Purchase Microsoft DP-300 Exam Training Products Individually
Microsoft DP-300 Premium File
Premium File 470 Q&A
$76.99$69.99
Microsoft DP-300 Video Training Course
Training Course 130 Lectures
$21.99 $19.99
Microsoft DP-300 PDF Study Guide
Study Guide 672 Pages
$21.99 $19.99
Microsoft DP-300 Practice Test 8

Question 70

An administrator plans to switch old partitions out nightly but builds a nonaligned index that blocks efficient partition switching. Which observable result BEST proves the database administration requirement is satisfied?

  1. The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover.
  2. The migrated service opens with consistent data, working identities and restored application workflows within the agreed maintenance period.
  3. The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations.
  4. Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead.

Explanation

Correct Answer

D:

Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead. This is the observable database and application outcome rather than merely a saved setting. Partitioning alone does not make every query faster; indexes and predicate alignment determine pruning and compression may trade CPU for IO.

Incorrect Answers

A:

The migration plan explicitly maps each source feature to a supported destination behavior and documented remediation before cutover. This would validate Azure SQL migration assessment and feature compatibility, but it does not establish the required outcome here. Verify instead: Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead.

B:

The migrated service opens with consistent data, working identities and restored application workflows within the agreed maintenance period. This would validate Offline migration and post-migration verification, but it does not establish the required outcome here. Verify instead: Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead.

C:

The chosen tier or pool absorbs expected peaks with measured response times while avoiding waste from persistently idle dedicated allocations. This would validate Azure SQL Database service tiers and elastic pools, but it does not establish the required outcome here. Verify instead: Queries and retention maintenance operate on intended partitions with predictable execution plans, storage growth and acceptable CPU overhead.

Question 71

After offline migration all tables exist, yet stored credentials map to orphaned users and scheduled ETL fails during the first production cycle. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state.
  2. Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target.
  3. Inspect backup format, target offering limits, export size, authentication mapping, integrity checks, DBCC findings, workload baselines and cutover test results.
  4. Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows.

Explanation

Correct Answer

C:

Inspect backup format, target offering limits, export size, authentication mapping, integrity checks, DBCC findings, workload baselines and cutover test results. This is the discriminating system or configuration evidence for the case. A BACPAC export captures schema and data for applicable databases but is not an instance backup that automatically recreates all server features and jobs. Corresponding approach: Use supported backup/restore, BACPAC or database-copy methods based on source/target compatibility and offline downtime budget, then validate security, consistency and performance after migration.

Incorrect Answers

A:

Inspect migration replication health, source change rate, lag, database compatibility, authentication, connection-string cutover and residual transaction state. These checks primarily test Online migration with controlled cutover and validation instead of the critical system behavior in this case. Examine: Inspect backup format, target offering limits, export size, authentication mapping, integrity checks, DBCC findings, workload baselines and cutover test results.

B:

Inventory SQL Agent, cross-database dependencies, instance features, latency, licensing, OS access and application connection requirements before choosing a target. These checks primarily test Choosing Azure SQL Database versus Managed Instance versus SQL VM instead of the critical system behavior in this case. Examine: Inspect backup format, target offering limits, export size, authentication mapping, integrity checks, DBCC findings, workload baselines and cutover test results.

D:

Measure vCore pressure, memory grants, data and log latency, tempdb contention, IOPS ceilings, disk caching, VM SKU caps and scaling windows. These checks primarily test Managed Instance and SQL VM compute storage scaling instead of the critical system behavior in this case. Examine: Inspect backup format, target offering limits, export size, authentication mapping, integrity checks, DBCC findings, workload baselines and cutover test results.

Question 72

A service principal script changes the default subscription context and unintentionally resizes an unrelated Azure SQL database in another environment. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns.
  2. Use Az PowerShell or Azure CLI in authenticated deployment workflows with the minimum Azure RBAC rights and explicit resource/subscription selection to manage approved SQL resources.
  3. Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently.
  4. Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources.

Explanation

Correct Answer

B:

Use Az PowerShell or Azure CLI in authenticated deployment workflows with the minimum Azure RBAC rights and explicit resource/subscription selection to manage approved SQL resources. This is the supported administration mechanism for the described workload. Azure RBAC permissions to create an Azure SQL server do not imply arbitrary T-SQL data access to every user database. Verify with: Review subscription context, service principal or managed identity, Azure RBAC role, API response, database resource state and script error handling.

Incorrect Answers

A:

Investigate SQL Agent job-step execution context, timing and dependencies before retrying, and make destructive maintenance operations safe for partial reruns. This addresses SQL Agent job troubleshooting and idempotent maintenance, not the controlling requirement here. Retrying a failed job without tracking committed work can create duplicate actions; application and SQL job state must be reconciled. Prefer: Use Az PowerShell or Azure CLI in authenticated deployment workflows with the minimum Azure RBAC rights and explicit resource/subscription selection to manage approved SQL resources.

C:

Automate supported Azure SQL operational tasks with an appropriately scoped schedule or runbook and route failures into measurable alert channels while handling retries idempotently. This addresses Azure database task automation alerts and retries, not the controlling requirement here. An Azure automation runbook reporting successful execution does not prove its database command succeeded or that an alert was delivered. Prefer: Use Az PowerShell or Azure CLI in authenticated deployment workflows with the minimum Azure RBAC rights and explicit resource/subscription selection to manage approved SQL resources.

D:

Monitor Azure resource deployments and resolve failed dependencies or policy denials using logs and change review, with safe rollback plans for data-bearing SQL resources. This addresses Deployment monitoring rollback and drift reconciliation, not the controlling requirement here. Rolling back an infrastructure template is not identical to restoring committed database transactions, and destructive replacements require explicit protection. Prefer: Use Az PowerShell or Azure CLI in authenticated deployment workflows with the minimum Azure RBAC rights and explicit resource/subscription selection to manage approved SQL resources.

Question 73

A team proposes a range comparison on randomized encrypted values without checking whether its target and enclave configuration support the operation. Which diagnostic evidence should the database administrator check FIRST?

  1. Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures.
  2. Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation.
  3. Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode.
  4. Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions.

Explanation

Correct Answer

D:

Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions. This is the discriminating system or configuration evidence for the case. Always Encrypted is distinct from TDE; queries and operations may be constrained without supported enclave capabilities and drivers. Corresponding approach: Use Always Encrypted to protect selected columns with client-side cryptography and evaluate secure enclaves for supported confidential computations and richer query operations.

Incorrect Answers

A:

Review key hierarchy, certificate availability, encrypted payload format, authorized decryption path, T-SQL function usage, rotation and backup procedures. These checks primarily test Object-level encryption and database cryptographic controls instead of the critical system behavior in this case. Examine: Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions.

B:

Check effective permission using EXECUTE AS, user/database role membership, ownership chain, DENY overrides, T-SQL GRANT statements and precise failed operation. These checks primarily test Least-privilege SQL roles and ownership chaining instead of the critical system behavior in this case. Examine: Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions.

C:

Inspect login/user mapping, server principals, password policy, Entra admin configuration, directory identity, database containment and connection string authentication mode. These checks primarily test SQL authentication versus Entra and managed-instance principals instead of the critical system behavior in this case. Examine: Inspect encrypted column metadata, column master and encryption keys, driver feature support, enclave attestation where applicable and key store permissions.

Question 74

A procedure executes quickly for a small branch but spills tempdb when a national branch passes a very different parameter distribution. Which diagnostic evidence should the database administrator check FIRST?

  1. Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.
  2. Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention.
  3. Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions.
  4. Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

Explanation

Correct Answer

A:

Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings. This is the discriminating system or configuration evidence for the case. Intelligent recommendations require contextual validation; SQL intelligent query processing features depend on engine version, database compatibility and workload shape. Corresponding approach: Correlate Azure SQL Intelligent Insights or Query Store evidence with parameter sensitivity and memory grant patterns, selecting documented plan or query changes instead of blindly upgrading SKU.

Incorrect Answers

B:

Review database watcher configuration and targets, query and instance samples, CPU, data/log IO, wait statistics, alert scope and time-series retention. These checks primarily test Database watcher and Azure SQL monitoring baseline instead of the critical system behavior in this case. Examine: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

C:

Inspect Query Store capture mode, runtime statistics, plan IDs, compatibility level, force-plan failure reasons and workload parameter distributions. These checks primarily test Query Store plan regressions and forced plans instead of the critical system behavior in this case. Examine: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

D:

Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics. These checks primarily test Resource Governor and scoped compute configuration instead of the critical system behavior in this case. Examine: Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.

Question 75

A DBA adds a dozen covering indexes from DMV hints and discovers each write now updates many indexes while response time barely improves. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.
  2. Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings.
  3. The captured evidence explains the failing operation at the right time with sufficient context and acceptable overhead, without recording unrestricted sensitive payloads.
  4. Use Query Store to compare query runtime and plan history, identify a genuine plan regression, and force a known suitable plan only with ongoing validation and rollback.
  5. Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification.

Explanation

Correct Answers

A:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This is the supported administration mechanism for the described workload. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Verify with: Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification. It supplies the implementation portion of this complementary answer.

E:

Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification. This is the discriminating system or configuration evidence for the case. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Corresponding approach: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Inspect diagnostic recommendations, Query Store plan variability, runtime skew, parameter compilation, memory grant feedback and database compatibility settings. This choice pertains to Intelligent Insights and parameter-sensitive query analysis, not the needed response/evidence pair. Use: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. Check: Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification.

C:

The captured evidence explains the failing operation at the right time with sufficient context and acceptable overhead, without recording unrestricted sensitive payloads. This choice pertains to Extended Events and workload-specific incident evidence, not the needed response/evidence pair. Use: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. Check: Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification.

D:

Use Query Store to compare query runtime and plan history, identify a genuine plan regression, and force a known suitable plan only with ongoing validation and rollback. This choice pertains to Query Store plan regressions and forced plans, not the needed response/evidence pair. Use: Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. Check: Inspect scans/seeks, key lookup counts, implicit conversions, estimated-versus-actual rows, missing-index recommendations and write amplification.

Question 76

A business dashboard slows despite low CPU, but diagnostic snapshots show dozens of sessions blocked behind one long-running transaction. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment.
  2. Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.
  3. Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware.
  4. Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

Explanation

Correct Answer

B:

Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources. This is the supported administration mechanism for the described workload. One wait type alone is not a universal diagnosis; waits, plan behavior, request duration and resource data must be read together. Verify with: Compare CPU versus runnable tasks, WRITELOG, PAGEIOLATCH, resource governance, connection counts, tempdb usage, storage latency and times of workload change.

Incorrect Answers

A:

Configure supported metrics, diagnostic settings and alerts for Azure SQL resources to detect real performance or availability regressions with correct thresholds and missing-data treatment. This addresses Azure Monitor alerts diagnostics and resource metrics, not the controlling requirement here. A low CPU value does not mean an app is healthy; incorrect aggregation or missing telemetry can hide blocked sessions and failures. Prefer: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

C:

Review actual execution plans, predicate sargability, cardinality estimates and suitable index designs before adding indexes or scaling hardware. This addresses Execution plans cardinality and indexing improvements, not the controlling requirement here. A missing-index suggestion is a starting hypothesis, not a license to create every suggested index; SARGable predicates and accurate estimates matter. Prefer: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

D:

Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. This addresses Resource Governor and scoped compute configuration, not the controlling requirement here. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Prefer: Distinguish compute, data IO, log IO, memory and blocking contention using correlated counters, wait types and workload-specific thresholds before changing resources.

Question 77

An Azure VM SQL Server job writes .bak files to Blob but the SAS token expires and backup failures go unnoticed for several weeks. Which Azure SQL or SQL Server administrative approach is MOST appropriate?

  1. Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs.
  2. Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode.
  3. Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.
  4. Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs.

Explanation

Correct Answer

C:

Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets. This is the supported administration mechanism for the described workload. A backup file's existence or a VERIFYONLY success does not replace a tested full restoration and end-to-end workload check. Verify with: Inspect backup URL, SAS or managed identity support by SQL version, container permissions, encryption/certificate material, backup headers and RESTORE VERIFYONLY caveats.

Incorrect Answers

A:

Use supported SQL Server failover cluster instances on Azure virtual machines with compatible shared storage and cluster quorum instead of treating FCIs as data-replication AGs. This addresses SQL Server failover cluster instances shared storage constraints, not the controlling requirement here. An FCI moves SQL Server instance ownership over shared storage but does not automatically provide a separate cross-region copy of database files. Prefer: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

B:

Build and monitor supported SQL Server Always On availability groups on Azure VMs and understand SQL MI link behavior, verifying cluster quorum, replica health, endpoint access and synchronization mode. This addresses Always On availability groups on SQL Server VMs and SQL MI links, not the controlling requirement here. An AG protects replicated user databases and requires cluster/listener configuration; it does not automatically synchronize every SQL Agent job or server-level login. Prefer: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

D:

Use Azure SQL automated backups and configured point-in-time retention or long-term retention policy for supported managed offerings, choosing the correct restore workflow and retention costs. This addresses Azure SQL automatic PITR and long-term retention, not the controlling requirement here. Point-in-time restore usually creates a separate database and does not undo production writes in place; retention is constrained by service-specific limits. Prefer: Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

Question 78

A DBA increases max degree of parallelism without checking query workload and unexpectedly saturates worker resources during report bursts. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.
  2. Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows.
  3. Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable.
  4. Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes.
  5. Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS.

Explanation

Correct Answers

A:

Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics. This is the discriminating system or configuration evidence for the case. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Corresponding approach: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. It supplies the evidence portion of this complementary answer.

E:

Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. This is the supported administration mechanism for the described workload. Resource Governor is not uniformly offered on every Azure SQL service, and workload isolation cannot be achieved simply by setting an unrelated database-scoped knob. Verify with: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics. It supplies the implementation portion of this complementary answer.

Incorrect Answers

B:

Inspect index page counts, fragmentation relevance, row modification counters, statistics age, update thresholds, DBCC CHECKDB results and blocking windows. This choice pertains to Index and statistics maintenance with targeted cadence, not the needed response/evidence pair. Use: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. Check: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

C:

Alerts fire for meaningful sustained database risk while log delivery and missing-metric gaps are independently observable. This choice pertains to Azure Monitor alerts diagnostics and resource metrics, not the needed response/evidence pair. Use: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. Check: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

D:

Use supported Azure SQL automatic tuning or IQP features with monitoring and safety controls; verify supported recommendations and their observed effect before treating them as universal fixes. This choice pertains to Automatic tuning and intelligent query processing guardrails, not the needed response/evidence pair. Use: Use Resource Governor on supported SQL Server platforms for workload classification and resource controls, while choosing Azure SQL compute tier and database-scoped settings appropriately for PaaS. Check: Inspect supported platform, classifier function, workload groups, CPU and memory caps, connection routing, database-scoped settings and compute metrics.

Question 79

A JDBC client points to the master database instead of its intended user database and reports a confusing login or default-schema failure. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles.
  2. Examine audit destinations, retention and access, captured event classes, Change Tracking version retention, CDC capture jobs, ledger digest verification and application expectations.
  3. Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.
  4. Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements.
  5. Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls.

Explanation

Correct Answers

A:

Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles. This is the supported administration mechanism for the described workload. Network allow rules cannot repair a database permission denial, and a valid directory group may still lack an associated database user. Verify with: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability. It supplies the implementation portion of this complementary answer.

C:

Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability. This is the discriminating system or configuration evidence for the case. Network allow rules cannot repair a database permission denial, and a valid directory group may still lack an associated database user. Corresponding approach: Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles. It supplies the evidence portion of this complementary answer.

Incorrect Answers

B:

Examine audit destinations, retention and access, captured event classes, Change Tracking version retention, CDC capture jobs, ledger digest verification and application expectations. This choice pertains to Azure SQL auditing ledger and change tracking distinctions, not the needed response/evidence pair. Use: Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles. Check: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.

D:

Low-trust users receive suitably masked results while sensitive storage and access controls still enforce separately tested privacy requirements. This choice pertains to Dynamic data masking classification and permission differences, not the needed response/evidence pair. Use: Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles. Check: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.

E:

Select Entra or SQL authentication deliberately for Azure SQL Database, Managed Instance and SQL Server VMs based on platform support, application constraints and security controls. This choice pertains to SQL authentication versus Entra and managed-instance principals, not the needed response/evidence pair. Use: Distinguish authentication from authorization using SQL error context, Entra membership and database principal mapping before changing firewall or granting elevated roles. Check: Review sign-in error number and state, selected database, Entra token principal, group claims, CREATE USER scope, role membership and firewall reachability.

Question 80

An operator restores a differential backup based on an older full backup from the wrong chain and SQL Server rejects it. Which TWO complementary actions provide the appropriate response AND evidence to verify it? Select TWO.

  1. Approved managed-instance failover or hybrid transition works after controlled traffic redirection, with required instance features and logins present.
  2. Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.
  3. Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective.
  4. Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior.
  5. Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets.

Explanation

Correct Answers

B:

Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target. This is the discriminating system or configuration evidence for the case. A full backup without subsequent transaction-log backups cannot recover every later transaction; SIMPLE recovery changes log backup support. Corresponding approach: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. It supplies the evidence portion of this complementary answer.

C:

Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. This is the supported administration mechanism for the described workload. A full backup without subsequent transaction-log backups cannot recover every later transaction; SIMPLE recovery changes log backup support. Verify with: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target. It supplies the implementation portion of this complementary answer.

Incorrect Answers

A:

Approved managed-instance failover or hybrid transition works after controlled traffic redirection, with required instance features and logins present. This choice pertains to Managed Instance hybrid recovery and operational readiness, not the needed response/evidence pair. Use: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. Check: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.

D:

Inspect replication state, endpoint listeners, failover policy, allowed data loss, application reconnect errors, secondary region capacity and DNS cache behavior. This choice pertains to Azure SQL Database active geo replication and failover groups, not the needed response/evidence pair. Use: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. Check: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.

E:

Back up supported SQL Server databases to Azure Blob storage through approved credential or managed identity patterns, then validate access, checksums and test restores from cloud targets. This choice pertains to Backup to Azure Blob URL and tested cloud restore, not the needed response/evidence pair. Use: Plan full, differential and transaction-log backups using appropriate SQL Server recovery model and restore order for the intended point-in-time objective. Check: Inspect database recovery model, complete backup-chain LSNs, log backup cadence, backup checksums, database state and recovery target.

Administering Microsoft Azure SQL Solutions (DP-300) Practice Tests