DP-300 Plan and implement data platform resources Practice Test 8 — 15 Questions

Question 1

You are designing an Azure SQL Managed Instance deployment for a mission-critical application. The application requires read-only workloads to be offloaded to a secondary replica without affecting the primary's performance. You need to ensure that the secondary replica is automatically provisioned and that connections to it are routed appropriately. What should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable the Business Critical service tier and configure the application to use the read-only listener endpoint.. In Azure SQL Managed Instance, the Business Critical service tier includes a built-in secondary replica that can be used for read-only workloads. The read-only listener endpoint automatically routes connections to the secondary replica, providing read-scale without impacting the primary. General Purpose does not have a local secondary, active geo-replication is for cross-region disaster recovery, and Hyperscale is not available for managed instance.

Answer

Configure active geo-replication to a secondary managed instance in the same region and direct read-only connections to that instance.

Answer

Enable the Hyperscale service tier and use the built-in read-scale replicas.

Answer

Deploy a General Purpose service tier instance and create a readable secondary by using auto-failover groups.

Question 2

You are designing a geo-disaster recovery strategy for a business-critical Azure SQL Database. The database is in the East US region and must be able to fail over to a secondary region with an RPO of less than 5 seconds and an RTO of less than 30 seconds. You need to minimize data loss and downtime. What should you implement?

Accepted Answer

Configure a failover group with automatic failover policy on the Azure SQL Database.. Failover groups provide automatic failover with low RPO and RTO, making them ideal for business-critical applications requiring cross-region disaster recovery. They support automatic failover policies and allow grouping of databases for coordinated failover. This meets the requirement for minimal data loss and downtime.

Answer

Enable zone-redundant configuration for the Azure SQL Database.

Answer

Configure active geo-replication with a readable secondary in the West US region.

Answer

Create a copy of the database in the West US region using the database copy operation.

Question 3

You are planning to deploy an Azure SQL Database using the vCore purchasing model. The database must support up to 20 concurrent read-only queries that run during business hours, while the primary workload performs heavy transactional processing. You want to minimize cost and administrative overhead. You need to configure the database to meet these requirements. Which two actions should you perform? (Choose two.)

Accepted Answer

Enable read scale-out on the database.. To support concurrent read-only queries while minimizing cost and overhead, use the Business Critical service tier and enable read scale-out. Business Critical provides a built-in read-only replica at no extra cost, and read scale-out routes read-only connections to it. This meets the concurrency requirement without impacting the primary transactional workload. Other options either add unnecessary cost, complexity, or are not optimized for the stated requirements.

Answer

Create a geo-secondary replica and direct read-only queries to it.

Answer

Configure active geo-replication with a readable secondary in a different region.

Answer

Use the Hyperscale service tier with one read-only replica.

Question 4

You are deploying a new Azure SQL Database for a line-of-business application. The database must remain online during maintenance windows and must survive a single datacenter outage without any application connection string changes. You need to choose the service tier that provides a built-in zone-redundant high availability configuration. Which service tier should you use?

Accepted Answer

Business Critical. Business Critical is the only Azure SQL Database service tier that includes a built-in availability group with a secondary replica for local failover. This architecture allows the database to remain online during maintenance and survive a zone-level datacenter outage without requiring application connection string changes. General Purpose, Hyperscale, and Basic do not provide the same local failover replica design.

Answer

Hyperscale

Answer

Basic

Answer

General Purpose

Question 5

You are a database administrator for a retail company that uses Azure SQL Managed Instance. The company requires that all connections to the managed instance be encrypted and that the instance be accessible only from within a specific virtual network subnet. You need to configure network security. What should you do?

Accepted Answer

Deploy Azure SQL Managed Instance in a dedicated subnet and configure a network security group to restrict inbound traffic.. SQL Managed Instance is deployed into a dedicated subnet and automatically enforces TLS for all connections. To restrict access to only a specific subnet, you use a network security group on the subnet to control inbound and outbound traffic. This combination satisfies both the encryption and network isolation requirements.

Answer

Enable a private endpoint for the managed instance and configure Azure Private Link.

Answer

Configure a firewall rule on the managed instance to allow only the specific subnet and enable 'Enforce SSL connection'.

Answer

Configure a network security group (NSG) on the subnet to allow traffic only from the specific subnet and enforce TLS.

Question 6

You are configuring an Azure SQL Database for a new application. The application requires that the database be isolated from other Azure tenants and that all data be encrypted at rest using a key that your organization controls and can revoke. You need to implement the required security features. Which two actions should you perform? (Choose two.)

Accepted Answer

Configure the database to use a customer-managed key for Transparent Data Encryption (TDE).. The requirements are encryption at rest with organization-controlled keys and the ability to revoke them. This is achieved by using Transparent Data Encryption (TDE) with a customer-managed key stored in Azure Key Vault. Enabling TDE with CMK and configuring the database to use that CMK are both necessary steps to implement the feature. Other options address network isolation, authentication, or in-use encryption, which do not meet the stated encryption-at-rest and key control requirements.

Answer

Enable Azure AD authentication for the Azure SQL Database.

Answer

Enable Always Encrypted with secure enclaves for the database.

Answer

Configure a private endpoint for the Azure SQL Database.

Question 7

You are deploying an Azure SQL Managed Instance to support a lift-and-shift migration of several on-premises SQL Server databases. You need to ensure that the instance can communicate with other Azure services and on-premises resources securely. You must also enable features that require specific network configurations. Which two actions should you perform? (Choose two.)

Accepted Answer

Deploy the managed instance into a dedicated subnet within an Azure virtual network.. SQL Managed Instance requires deployment into a dedicated subnet within a virtual network, and you must configure network security group rules to allow necessary traffic. These two actions ensure secure communication with other Azure services and on-premises resources, and enable features that depend on VNet integration.

Answer

Create a private endpoint for the managed instance in a separate subnet.

Answer

Enable a public endpoint on the managed instance to allow access from the internet.

Answer

Configure a service endpoint for Azure SQL Database on the subnet.

Question 8

You are configuring an Azure SQL Database for a new application. The application requires read-only access to the database from a reporting tool that runs on an Azure virtual machine. You need to ensure that the reporting tool can connect to a read-only replica of the database without affecting the performance of the primary database. What should you configure?

Accepted Answer

Configure the application intent as ReadOnly in the connection string and use the built-in read-only replica.. Azure SQL Database offers a built-in read-only replica in the Business Critical and Premium tiers. By specifying ApplicationIntent=ReadOnly in the connection string, clients are automatically routed to the read-only replica, allowing read-only workloads to run without impacting the primary database's performance. This is the simplest and most cost-effective solution for same-region read offloading.

Answer

Create a database copy and configure the reporting tool to connect to the copy.

Answer

Enable geo-replication and direct the reporting tool to the secondary database.

Answer

Use active geo-replication to create a readable secondary in the same region.

Question 9

You are deploying a new Azure SQL Database for a reporting workload that runs a single large nightly aggregation query. The query benefits from a high degree of parallelism and the workload does not need to scale out across multiple databases. You need to choose a purchasing model and service tier that provides the required compute resources with the lowest cost. What should you do?

Accepted Answer

Use the vCore purchasing model with the General Purpose service tier and the Provisioned compute tier.. The vCore purchasing model with General Purpose and the Provisioned compute tier provides dedicated vCores and memory, enabling the high degree of parallelism the nightly aggregation query needs. It avoids the premium storage and replica costs of Business Critical and the scale limits of the DTU model. Because the workload is predictable and does not scale out, Provisioned compute is the most cost-effective fit.

Answer

Use the DTU purchasing model with the Standard service tier and scale up the DTUs.

Answer

Use the vCore purchasing model with the Hyperscale service tier and configure one named replica.

Answer

Use the vCore purchasing model with the Business Critical service tier and configure zone redundancy.

Question 10

You are planning to deploy a new Azure SQL Database for a mission-critical application that requires business continuity across Azure regions. You need to configure active geo-replication. (Choose two.)

Accepted Answer

The primary database must be in a service tier other than Basic.. Active geo-replication requires the primary database to be in a non-Basic service tier and supports up to four readable secondaries in different regions. Failover groups are optional, and secondaries must be in different regions. These constraints ensure that the configuration provides cross-region redundancy and read scalability.

Answer

The secondary databases must be in the same Azure region as the primary.

Answer

The primary database must be in the General Purpose service tier.

Answer

You must configure a failover group to manage the replicas.

Question 11

You are deploying an Azure SQL Database for a new application. The application requires the database to be isolated from other Azure resources and to have its own dedicated compute and storage resources. You need to ensure that the database cannot be affected by noisy neighbors. Which deployment option should you choose?

Accepted Answer

Azure SQL Database single database with the Hyperscale service tier.. The Hyperscale service tier for Azure SQL Database single database provides dedicated compute and storage resources, isolating the database from other workloads. It is designed for applications that require high performance and isolation, and it scales compute and storage independently. Other options either share resources (General Purpose, elastic pools) or are not single database deployments (Managed Instance). Hyperscale is the correct choice for dedicated resources and isolation.

Answer

Azure SQL Database elastic pool with the Business Critical service tier.

Answer

Azure SQL Managed Instance with the Business Critical service tier.

Answer

Azure SQL Database single database with the General Purpose service tier.

Question 12

You are planning to deploy an Azure SQL Database for a mission-critical application that requires 99.995% availability and the ability to perform read-only queries on a secondary replica in a different Azure region without impacting the primary workload. You need to configure a high availability and disaster recovery solution that meets these requirements. What should you implement?

Accepted Answer

Configure active geo-replication for the Azure SQL Database.. Active geo-replication allows you to create readable secondary databases in different Azure regions, enabling read-only queries on the secondary without impacting the primary. It is the appropriate feature for a single database requiring cross-region read scale-out and disaster recovery. Other options either provide only intra-region high availability, require multiple databases, or do not support readable secondaries in the same way.

Answer

Configure auto-failover groups with read-write and read-only listeners.

Answer

Configure a failover group for the Azure SQL Database.

Answer

Configure zone-redundant deployment for the Azure SQL Database.

Question 13

You are deploying an Azure SQL Managed Instance in a virtual network. You need to ensure that the managed instance can be accessed from an on-premises network via a site-to-site VPN. You also need to minimize latency for the application that connects to the managed instance. Which two actions should you perform? (Choose two.)

Accepted Answer

Create a virtual network gateway and configure a site-to-site VPN connection to the on-premises network.. To enable on-premises connectivity to a managed instance via site-to-site VPN, you must deploy the managed instance into a delegated subnet with an NSG allowing required traffic and set up a virtual network gateway with a site-to-site VPN connection. These two actions provide secure, low-latency private connectivity.

Answer

Configure Azure Private Link for the managed instance to allow access from the on-premises network.

Answer

Enable a public endpoint on the managed instance and configure a firewall rule to allow the on-premises public IP address.

Answer

Deploy the managed instance to a subnet that is not delegated and configure a route table to force traffic through a network virtual appliance.

Question 14

You are configuring an Azure SQL Database for a new application. The application requires that the database be able to scale compute resources automatically based on workload demand, and you want to minimise the administrative effort for scaling. You also need to ensure that the database supports up to 4 TB of storage. Which service tier and compute model should you choose?

Accepted Answer

Hyperscale with provisioned compute. The question requires automatic scaling based on workload demand and support for up to 4 TB storage. The serverless compute tier in General Purpose automatically scales compute and supports up to 4 TB storage, making it the correct choice. Hyperscale supports larger storage but does not automatically scale compute. Business Critical and provisioned General Purpose require manual scaling. Therefore, General Purpose with serverless compute is the best fit.

Answer

Business Critical with provisioned compute

Answer

General Purpose with provisioned compute

Answer

General Purpose with serverless compute

Question 15

You are planning to deploy an Azure SQL Database using the vCore purchasing model. You need to ensure that the database supports zone redundancy and that you can independently scale compute and storage. Which two actions should you perform? (Choose two.)

Accepted Answer

Select the Business Critical service tier.. To achieve zone redundancy in Azure SQL Database with the vCore model, you must select a service tier that supports it, such as Business Critical, and explicitly enable the zone redundancy option. The Business Critical tier provides the necessary architecture, and enabling zone redundancy ensures replicas are spread across availability zones. Other options either do not provide the required architecture or are not sufficient on their own.

Answer

Deploy the database to a region that supports availability zones.

Answer

Set the maximum storage size independently from the vCore count.

Answer

Configure the database to use the Hyperscale service tier.