DP-300 Plan and implement data platform resources Practice Test 6 — 15 Questions

Question 1

You are planning to deploy Azure SQL Database for a new application. The application requires a predictable performance with reserved resources and the ability to scale up during peak season. You want to minimize costs. Which purchasing model should you choose?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

vCore-based purchasing model with reserved capacity. The vCore-based purchasing model with reserved capacity is correct because it allows you to reserve compute resources for a one- or three-year term, providing a significant discount (up to 40-60%) compared to pay-as-you-go pricing. This model also supports predictable performance with dedicated resources and the ability to scale up (e.g., increase vCores or storage) during peak seasons, while the reserved capacity commitment minimizes costs for the baseline workload.

Answer

DTU-based purchasing model

Answer

Hyperscale service tier

Answer

Serverless compute tier

Question 2

Your company has an Azure SQL Managed Instance that hosts multiple databases. You need to implement a solution to automatically detect and alert on potential SQL injection attacks. The solution must integrate with Microsoft Sentinel for incident response. What should you configure?

Accepted Answer

Enable Microsoft Defender for SQL on the Managed Instance. Microsoft Defender for SQL on Azure SQL Managed Instance provides built-in SQL injection detection and alerting, which can be integrated directly with Microsoft Sentinel for automated incident response and investigation. This is the correct solution because it offers native vulnerability assessment and threat detection tailored to SQL databases, meeting the requirement for both detection and Sentinel integration.

Answer

Enable Microsoft Purview Data Map for the Managed Instance

Answer

Configure Microsoft Defender XDR for SQL

Answer

Use Microsoft Intune to manage SQL security policies

Question 3

You are deploying Azure SQL Database for a multi-tenant SaaS application. Each tenant has its own database. You need to ensure that tenant data is isolated and that performance is predictable. Cost efficiency is important. Which deployment model should you use?

Accepted Answer

Use an elastic pool with one database per tenant. An elastic pool allows you to provision a shared set of resources (eDTUs or vCores) that is distributed across multiple databases, each representing a tenant. This provides logical isolation of tenant data (each tenant has its own database) while pooling resources to handle variable workloads cost-effectively. The elastic pool model is specifically designed for SaaS multi-tenant scenarios where predictable performance is achieved through resource governance, and cost efficiency comes from sharing resources among databases that do not all peak simultaneously.

Answer

Deploy a single Azure SQL Database per tenant

Answer

Use Azure SQL Managed Instance with multiple databases

Answer

Use a single large database with row-level security

Question 4

You need to migrate an on-premises SQL Server database to Azure SQL Database. The database uses SQL Server Integration Services (SSIS) packages for ETL. You want to continue using SSIS in the cloud with minimal changes. Which Azure service should you use?

Accepted Answer

Use Azure Data Factory with Azure-SSIS Integration Runtime. Azure Data Factory with Azure-SSIS Integration Runtime is the correct choice because it provides a fully managed service that lifts and shifts existing SSIS packages to the cloud with minimal changes. The Azure-SSIS IR runs a dedicated cluster of Azure VMs that host the SSIS engine, allowing you to deploy, execute, and manage your existing SSIS packages directly in Azure without rewriting code.

Answer

Deploy SSIS on Azure SQL Database

Answer

Migrate SSIS packages to Azure Databricks

Answer

Use Azure SQL Managed Instance to run SSIS

Question 5

Your company uses Azure SQL Database with Active Geo-Replication for disaster recovery. During a regional outage, you fail over to the secondary region. When the primary region recovers, you need to fail back with zero data loss. What should you do?

Accepted Answer

Perform a planned failover from the current primary to the original primary. A planned failover in Azure SQL Database with Active Geo-Replication ensures zero data loss by synchronizing all committed transactions from the current primary (secondary region) to the original primary before switching roles. This process uses synchronous replication during the final phase, guaranteeing that no transactions are lost when failing back to the recovered primary region.

Answer

Delete the secondary database and recreate it from the primary

Answer

Add a new secondary in the original primary region and then fail over

Answer

Fail over the original primary to become the primary again

Question 6

You are designing a solution for storing audit logs from Azure SQL Database. The logs must be retained for 7 years and must be immutable to prevent tampering. Which Azure service should you use?

Accepted Answer

Azure Blob Storage with immutable storage policy. Azure Blob Storage with an immutable storage policy (WORM – Write Once, Read Many) is the correct choice because it ensures that audit logs cannot be modified or deleted for a specified retention period (7 years). This meets the immutability and retention requirements for compliance with regulations such as SOX or HIPAA. Azure SQL Database audit logs can be directly streamed to Azure Blob Storage, making it a seamless and secure storage solution.

Answer

Use Azure Files share with read-only permissions

Answer

Send logs to Azure Log Analytics workspace

Answer

Store logs in an audit table in Azure SQL Database

Question 7

You are deploying Azure SQL Database for a new application. You need to ensure that connections from Azure services use a private IP address and do not traverse the public internet. What should you configure?

Accepted Answer

Use Azure Private Link for Azure SQL Database. Azure Private Link creates a private endpoint in a virtual network, mapping the Azure SQL Database logical server to a private IP address within that VNet. Traffic from Azure services (e.g., VMs, App Service) to the database uses Microsoft's backbone network via the private endpoint, never traversing the public internet. This meets the requirement for private, non-internet-routed connectivity.

Answer

Enable Virtual Network service endpoints for Azure SQL Database

Answer

Configure the Azure SQL Database firewall to allow Azure services

Answer

Deploy Azure SQL Database inside a virtual network

Question 8

You are planning a migration of on-premises SQL Server databases to Azure SQL Managed Instance. Which TWO tools or services can you use to assess compatibility and identify potential migration blockers? (Select TWO.)

Accepted Answer

Data Migration Assistant (DMA). Data Migration Assistant (DMA) is the correct tool because it performs a detailed assessment of on-premises SQL Server databases, identifying compatibility issues and migration blockers specifically for Azure SQL Managed Instance. It generates a report of feature parity, breaking changes, and behavior differences. Azure Migrate is also correct because it provides a unified migration assessment and discovery platform, including database assessment capabilities for Azure SQL targets. Both tools can assess compatibility and identify blockers before migration.

Answer

SQL Server Management Studio (SSMS) – Upgrade Data Tier Application wizard

Answer

Azure Database Migration Service (DMS)

Answer

Azure Data Studio – Migration Wizard

Question 9

You have an Azure SQL Database in the General Purpose tier. You need to implement high availability with automatic failover to a secondary database in a different Azure region. The solution must provide an RPO of 5 seconds and RTO of 1 hour. Which TWO components must you configure? (Select TWO.)

Accepted Answer

Configure active geo-replication. Active geo-replication (Option C) creates a readable secondary database in a different Azure region, supporting cross-region disaster recovery. When combined with an auto-failover group, it provides automatic failover with an RPO of 5 seconds and an RTO of 1 hour, meeting the requirements for a General Purpose tier database.

Answer

Change the service tier to Business Critical

Answer

Enable zone redundancy on the primary database

Answer

Create an auto-failover group

Question 10

Your company is deploying Azure SQL Database for a new application. The security policy requires that all queries be encrypted in transit and that the database be protected against accidental deletion. Which THREE configurations should you implement? (Select THREE.)

Accepted Answer

Set the minimum TLS version to 1.2. Setting the minimum TLS version to 1.2 ensures all connections are encrypted in transit. Enabling Microsoft Entra ID authentication provides secure identity-based access, a fundamental security practice even if not explicitly stated. A resource lock on the logical server prevents accidental deletion of the database and server.

Answer

Configure firewall rules to allow only specific IP addresses

Answer

Enable Transparent Data Encryption (TDE)

Question 11

You are deploying an Azure SQL Managed Instance for a sensitive healthcare application. The compliance requirement mandates that all data at rest be encrypted using a customer-managed key stored in Azure Key Vault. The key must be automatically rotated every 90 days. Which configuration should you implement?

Accepted Answer

Enable Transparent Data Encryption (TDE) with a customer-managed key in Azure Key Vault and set a key rotation policy.. Transparent Data Encryption (TDE) with a customer-managed key (CMK) stored in Azure Key Vault is the correct choice because it encrypts the entire database at rest using a key that the customer controls and rotates. Azure SQL Managed Instance supports TDE with CMK, and you can configure automatic key rotation by setting a key rotation policy in Azure Key Vault (e.g., every 90 days). This satisfies the compliance requirement for customer-managed encryption and automated rotation.

Answer

Use dynamic data masking with a masking function that encrypts sensitive data.

Answer

Implement row-level security to restrict access to sensitive data.

Answer

Enable Always Encrypted with column master key stored in Azure Key Vault and configure automatic key rotation.

Question 12

Your company plans to migrate several on-premises SQL Server databases to Azure SQL Database. The databases are used by different applications, each with varying performance requirements. You need to choose a deployment option that provides the most cost-effective solution while allowing for independent scaling of each database. Which option should you choose?

Accepted Answer

Create an Azure SQL Database elastic pool and add databases to the pool.. Azure SQL Database elastic pools allow multiple databases to share a fixed set of resources (eDTUs or vCores), enabling cost savings by pooling underutilized databases while providing the ability to independently scale each database's resource consumption within the pool. This meets the requirement for independent scaling and cost-effectiveness, as opposed to single databases that each require their own dedicated resources.

Answer

Install SQL Server on Azure Virtual Machines and host all databases on a single instance.

Answer

Migrate all databases to a single Azure SQL Managed Instance.

Answer

Deploy each database as a single Azure SQL Database with its own DTU-based tier.

Question 13

You are configuring Azure SQL Database for a new e-commerce application that must support high read throughput for product catalog queries. The application uses Entity Framework Core and requires that read-only queries be offloaded to a secondary replica to reduce load on the primary. Which feature should you enable?

Accepted Answer

Enable read scale-out and configure the application to use read-only intent.. Read scale-out in Azure SQL Database allows you to offload read-only workloads to a readable secondary replica by setting the application connection string's `ApplicationIntent=ReadOnly`. This reduces load on the primary replica, which is essential for high read throughput in an e-commerce catalog scenario. Entity Framework Core can use this by specifying `ReadOnly` in the connection string or via a custom interceptor.

Answer

Enable Query Performance Insights and create indexes for frequent queries.

Answer

Configure Active Geo-Replication with a readable secondary in a different region.

Answer

Enable automatic tuning to force parameterization of queries.

Question 14

You need to audit all successful and failed login attempts to an Azure SQL Database server for compliance. The audit logs must be stored in a Log Analytics workspace for analysis and retention. Which two actions should you perform? (Choose two.)

Accepted Answer

Enable auditing on the Azure SQL Database server and configure the audit destination as Log Analytics.. Azure SQL Database server-level auditing can be configured to send audit logs directly to a Log Analytics workspace, which is required for compliance analysis and retention. This captures both successful and failed login attempts at the server level, meeting the audit requirement without needing per-database configuration.

Answer

Use SQL Server Audit to capture login events.

Answer

Enable auditing on each database individually.

Answer

Enable login auditing by running ALTER SERVER CONFIGURATION SET AUDIT_LOGIN_EVENTS.

Question 15

You are planning the migration of a large on-premises SQL Server database to Azure SQL Managed Instance. The database is 500 GB in size and has a high transaction rate. You need to minimize downtime during the migration. Which migration approach should you recommend?

Accepted Answer

Use Azure Database Migration Service with online migration mode.. Azure Database Migration Service (DMS) with online migration mode uses transactional log shipping to continuously synchronize changes from the source SQL Server to Azure SQL Managed Instance, enabling near-zero downtime. This is essential for a 500 GB database with a high transaction rate, as it allows the source to remain operational during the migration and only requires a final cutover with minimal interruption.

Answer

Set up transactional replication to replicate data to SQL Managed Instance.

Answer

Perform an offline migration using Azure Database Migration Service.

Answer

Export the database as a BACPAC file and import to SQL Managed Instance.