DP-300 Practice Test 11 — 15 Questions

Question 1

You are planning to deploy Azure SQL Database for a new application. The application requires a predictable performance with reserved resources and the ability to scale up during peak season. You want to minimize costs. Which purchasing model should you choose?

Accepted Answer

vCore-based purchasing model with reserved capacity. The vCore-based purchasing model with reserved capacity is correct because it allows you to reserve compute resources for a one- or three-year term, providing a significant discount (up to 40-60%) compared to pay-as-you-go pricing. This model also supports predictable performance with dedicated resources and the ability to scale up (e.g., increase vCores or storage) during peak seasons, while the reserved capacity commitment minimizes costs for the baseline workload.

Answer

DTU-based purchasing model

Answer

Hyperscale service tier

Answer

Serverless compute tier

Question 2

You are designing a disaster recovery strategy for an Azure SQL Database that supports a critical OLTP application. The database is currently deployed in the East US region. You need to ensure that failover occurs automatically with minimal data loss in the event of a regional outage. Which deployment option should you recommend?

Accepted Answer

Enable Active Geo-Replication with a readable secondary in West US.. Active Geo-Replication with a readable secondary in West US provides automatic, asynchronous replication of transactions to a secondary database in a paired region. In the event of a regional outage, you can initiate a manual or automated failover to the secondary with minimal data loss, as replication lag is typically seconds. This option meets the requirement for automatic failover and minimal data loss, whereas other options either lack automatic failover or introduce significant data loss.

Answer

Configure auto-failover groups between East US and West US.

Answer

Deploy a failover group with manual failover.

Answer

Use geo-restore to recover the database in West US.

Question 3

Your company has an Azure SQL Managed Instance that hosts multiple databases. You need to implement a solution to automatically detect and alert on potential SQL injection attacks. The solution must integrate with Microsoft Sentinel for incident response. What should you configure?

Accepted Answer

Enable Microsoft Defender for SQL on the Managed Instance. Microsoft Defender for SQL on Azure SQL Managed Instance provides built-in SQL injection detection and alerting, which can be integrated directly with Microsoft Sentinel for automated incident response and investigation. This is the correct solution because it offers native vulnerability assessment and threat detection tailored to SQL databases, meeting the requirement for both detection and Sentinel integration.

Answer

Enable Microsoft Purview Data Map for the Managed Instance

Answer

Configure Microsoft Defender XDR for SQL

Answer

Use Microsoft Intune to manage SQL security policies

Question 4

Your company is migrating an on-premises SQL Server database to Azure SQL Managed Instance. The database is 2 TB in size and has multiple logins, jobs, and SQL Server Agent alerts. You need to choose a migration method that minimizes downtime and preserves all server-level objects. Which approach should you recommend?

Accepted Answer

Use Azure Database Migration Service with online migration. Azure Database Migration Service (DMS) with online migration is the correct choice because it supports minimal downtime by continuously synchronizing changes from the source SQL Server to the target Azure SQL Managed Instance until cutover. It also automatically migrates server-level objects such as logins, jobs, and SQL Server Agent alerts, which are critical for preserving the full environment. This method is designed for large databases (2 TB) and provides a managed, resilient migration pipeline.

Answer

Export to BACPAC and import to Managed Instance

Answer

Use transactional replication

Answer

Back up to URL and restore to Managed Instance

Question 5

Your company is deploying a new application that will use Azure SQL Database. You need to ensure that all connections to the database use Microsoft Entra ID authentication. Which step is required to enable this?

Accepted Answer

Configure an Entra ID administrator for the Azure SQL logical server.. To enforce Microsoft Entra ID authentication for all connections to Azure SQL Database, you must first configure an Entra ID administrator at the logical server level. This step establishes the server’s trust relationship with the Entra ID tenant, enabling token-based authentication using OAuth 2.0. Without this administrator, Entra ID authentication cannot be used, and only SQL authentication would be available.

Answer

Enable the Azure SQL Database firewall to allow only Entra ID IP addresses.

Answer

Create a contained database user mapped to an Entra ID identity.

Answer

Set the database to read-only mode.

Question 6

You are migrating a large on-premises SQL Server database (5 TB) to Azure SQL Managed Instance. The network bandwidth between your on-premises data center and Azure is limited to 100 Mbps. You need to minimize the migration time. Which approach should you use?

Accepted Answer

Use Azure Data Box to physically transfer the data.. Azure Data Box is the correct approach because it physically transfers the 5 TB database via a secure storage device, bypassing the 100 Mbps network bottleneck. At 100 Mbps, a 5 TB transfer would take approximately 5.5 days continuously, while Data Box can complete the transfer in a few days including shipping, making it the fastest option for such a large dataset over a limited bandwidth link.

Answer

Use transaction log shipping to continuously sync changes.

Answer

Export as BACPAC and upload to Azure Blob Storage, then import.

Answer

Use Azure Database Migration Service (DMS) online migration.

Question 7

You are designing a disaster recovery solution for an Azure SQL Database in the Business Critical tier. You require automatic failover to a secondary region with zero data loss. Which configuration should you use?

Accepted Answer

Create a failover group with the Business Critical tier.. The Business Critical tier in Azure SQL Database supports failover groups, which provide automatic failover across regions with zero data loss by using synchronous replication at the primary region and asynchronous replication to the secondary region. Failover groups ensure that all committed transactions are preserved during a failover, meeting the zero data loss requirement for disaster recovery.

Answer

Configure geo-replication between two servers.

Answer

Enable read scale-out in a secondary region.

Answer

Use active geo-replication with manual failover.

Question 8

You are configuring security for an Azure SQL Database that will be accessed by multiple applications. Each application uses a separate service principal managed in Microsoft Entra ID. You need to ensure that each service principal has the minimum required permissions to access only its own set of tables. What should you implement?

Accepted Answer

Create a contained database user for each service principal and grant SELECT, INSERT, UPDATE, DELETE on specific tables.. Option B is correct because it creates a contained database user for each service principal (mapped to the Microsoft Entra ID identity) and grants only the specific table-level permissions (SELECT, INSERT, UPDATE, DELETE) required for that application. This follows the principle of least privilege by avoiding broad database roles and ensuring each service principal can only access its own set of tables.

Answer

Create a contained database user for each service principal and grant the db_owner role.

Answer

Create a server-level login for each service principal and assign db_datareader role in the database.

Answer

Configure a server-level firewall rule for each service principal IP address.

Question 9

You need to audit all successful and failed login attempts to an Azure SQL Database server for compliance. The audit logs must be stored in a Log Analytics workspace for analysis and retention. Which two actions should you perform? (Choose two.)

Accepted Answer

Enable auditing on the Azure SQL Database server and configure the audit destination as Log Analytics.. Option B is correct because Azure SQL Database server-level auditing can be configured to send audit logs directly to a Log Analytics workspace, which is required for compliance analysis and retention. This captures both successful and failed login attempts at the server level, meeting the audit requirement without needing per-database configuration.

Answer

Use SQL Server Audit to capture login events.

Answer

Enable auditing on each database individually.

Answer

Enable login auditing by running ALTER SERVER CONFIGURATION SET AUDIT_LOGIN_EVENTS.

Question 10

You are planning to migrate a 500 GB on-premises SQL Server database to Azure SQL Managed Instance. The database has high transaction volume and cannot tolerate more than 15 minutes of downtime. Which migration methods should you consider? (Choose TWO.)

Accepted Answer

Azure Database Migration Service (online mode). Azure Database Migration Service (DMS) online mode is correct because it uses continuous change data capture (CDC) to replicate ongoing transactions from the source to the target, allowing the source database to remain operational during migration. This minimizes downtime to a final cutover window, which can be under 15 minutes when properly orchestrated.

Answer

Back up to URL and restore

Answer

Export to BACPAC and import

Answer

Log shipping

Question 11

Which TWO of the following are valid options for migrating an on-premises SQL Server database to Azure SQL Database with minimal downtime?

Accepted Answer

Configure transactional replication between on-premises SQL Server and Azure SQL Database.. Transactional replication allows continuous synchronization of changes from the on-premises SQL Server publisher to the Azure SQL Database subscriber, enabling migration with minimal downtime by cutting over only after data is in sync. This is a supported hybrid scenario for Azure SQL Database.

Answer

Use BULK INSERT to export data from on-premises and import to Azure SQL Database.

Answer

Use SQL Server backup to URL and restore to Azure SQL Database.

Answer

Use the Generate Scripts wizard in SQL Server Management Studio.

Question 12

You are planning the migration of a large on-premises SQL Server database to Azure SQL Managed Instance. The database is 500 GB in size and has a high transaction rate. You need to minimize downtime during the migration. Which migration approach should you recommend?

Accepted Answer

Use Azure Database Migration Service with online migration mode.. Option D is correct because Azure Database Migration Service (DMS) with online migration mode uses transactional log shipping to continuously synchronize changes from the source SQL Server to Azure SQL Managed Instance, enabling near-zero downtime. This is essential for a 500 GB database with a high transaction rate, as it allows the source to remain operational during the migration and only requires a final cutover with minimal interruption.

Answer

Set up transactional replication to replicate data to SQL Managed Instance.

Answer

Perform an offline migration using Azure Database Migration Service.

Answer

Export the database as a BACPAC file and import to SQL Managed Instance.

Question 13

You are designing an Azure SQL Database solution for a SaaS application that will host multiple tenants. Each tenant has a dedicated database. You need to ensure that tenants are isolated and resource usage is optimized. Which two features should you use? (Choose TWO.)

Accepted Answer

DTU-based purchasing model. Option B (DTU-based purchasing model) is correct because it provides a simple, pre-configured bundle of compute, storage, and I/O resources, which is ideal for SaaS environments with multiple dedicated databases where predictable performance and isolation are needed. Option C (Elastic pool) is correct because it allows multiple databases to share a fixed pool of DTU resources, optimizing cost and resource utilization across tenants while maintaining logical isolation.

Answer

Serverless compute tier

Answer

Hyperscale service tier

Answer

vCore-based purchasing model

Question 14

Which TWO conditions must be met to use Azure SQL Database serverless compute tier?

Accepted Answer

The database must be a single database, not part of an elastic pool. Option C is correct because Azure SQL Database serverless compute tier is designed only for single databases, not for databases in elastic pools. The serverless tier auto-scales compute resources based on workload demand and pauses during idle periods, which is incompatible with the shared resource model of elastic pools where multiple databases share a fixed set of resources.

Answer

The database must use the DTU purchasing model

Answer

The database must be in the Hyperscale service tier

Answer

The database must be in the General Purpose service tier

Question 15

Which TWO of the following are supported high availability features in Azure SQL Managed Instance?

Accepted Answer

Zone-redundant deployment for Business Critical tier. Option A is correct because Azure SQL Managed Instance supports zone-redundant deployment for the Business Critical tier, which replicates the database across multiple Azure availability zones within the same region to protect against datacenter-level failures. Option C is correct because Azure SQL Managed Instance has built-in Always On Availability Groups technology that provides automatic failover and high availability at no additional cost, leveraging a quorum-based cluster under the hood.

Answer

Database mirroring

Answer

Log shipping to a secondary instance

Answer

Windows Server Failover Clustering