Question 716 of 953
Configure and manage automation of taskshardMultiple ChoiceObjective-mapped

Quick Answer

The correct answer is to deploy an Azure Automation account in each region with a PowerShell runbook that uses the BACKUP TO URL command to back up each database to a local blob container, then copies the files to a central storage account using AzCopy, scheduled for 10 PM local time. This approach directly addresses the need to automate sql managed instance backup to blob storage while ensuring regional resiliency, as each Automation account operates independently within its own region, and the runbook can handle failures by retrying or failing over. On the DP-300 exam, this scenario tests your understanding that native backup retention on Managed Instance is limited to 7 days, so long-term retention requires custom automation, and that SQL Agent or Elastic Database Jobs are either too cumbersome or unsupported. A common trap is choosing Azure Backup for SQL Server, which only works for IaaS VMs, not Managed Instances. Memory tip: think “Automation for Automation”—Azure Automation is the only PaaS scheduler that works across regions for Managed Instance backups.

DP-300 Configure and manage automation of tasks Practice Question

This DP-300 practice question tests your understanding of configure and manage automation of tasks. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

You are a database administrator for a financial services company. The company has multiple Azure SQL Managed Instances in different regions for disaster recovery. Each Managed Instance hosts several databases. You need to automate the process of backing up all databases and copying the backup files to a central Azure Blob Storage account for long-term retention. The backup must be taken daily at 10 PM local time for each region. The solution must be resilient to regional outages and must not use native backup retention more than 7 days. Additionally, you must ensure that backup files are encrypted at rest and in transit. What should you do?

Question 1hardmultiple choice
Read the full NAT/PAT explanation →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Create an Azure Automation account in each region with a PowerShell runbook that connects to the local Managed Instance, performs a full database backup to a local blob container, and then copies the backup file to the central storage account using AzCopy. Schedule the runbook to run daily at 10 PM local time.

Option A is correct. Azure Automation runbooks with PowerShell can schedule backup commands using the BACKUP TO URL command (which supports native SQL Server backup to Azure Blob Storage). This allows you to copy backups to a central storage account. Using Azure Automation ensures resiliency and can be scheduled per region. Option B is incorrect because SQL Agent is available on Managed Instance, but it would require managing schedules across instances. Option C is incorrect because Elastic Database Jobs is not available for Managed Instance. Option D is incorrect because Azure Backup for SQL Server is for IaaS VMs, not Managed Instance.

Key principle: NAT direction and interface roles matter as much as the IP address mapping. Inside/outside designation controls which traffic is translated.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Configure a SQL Agent job on each Managed Instance to perform backups to the central storage account directly using BACKUP TO URL.

    Why it's wrong here

    SQL Agent jobs are local and not resilient to regional outages.

  • Create an Azure Automation account in each region with a PowerShell runbook that connects to the local Managed Instance, performs a full database backup to a local blob container, and then copies the backup file to the central storage account using AzCopy. Schedule the runbook to run daily at 10 PM local time.

    Why this is correct

    Azure Automation runbooks can be scheduled per region and provide resiliency.

    Related concept

    Static NAT maps one inside address to one outside address.

  • Use Elastic Database Jobs to schedule backups across all databases in all Managed Instances.

    Why it's wrong here

    Elastic Database Jobs is not supported for Managed Instance.

  • Enable Azure Backup for SQL Server in Azure Backup vault and configure backup policies for each Managed Instance.

    Why it's wrong here

    Azure Backup for SQL Server is for SQL Server on Azure VMs, not Managed Instance.

Common exam traps

Common exam trap: NAT rules depend on direction and matching traffic

NAT is not only about the public address. The inside/outside interface roles and the ACL or rule that matches traffic are just as important.

Detailed technical explanation

How to think about this question

NAT questions usually test address translation, overload/PAT behaviour, static mappings and whether the right traffic is being translated. Read the interface direction and address terms carefully.

KKey Concepts to Remember

  • Static NAT maps one inside address to one outside address.
  • PAT allows many inside hosts to share one public address using ports.
  • Inside local and inside global describe the private and translated addresses.
  • NAT ACLs identify traffic for translation, not always security filtering.

TExam Day Tips

  • Identify inside and outside interfaces first.
  • Check whether the scenario needs static NAT, dynamic NAT or PAT.
  • Do not confuse NAT matching ACLs with normal packet-filtering intent.

Key takeaway

NAT direction and interface roles matter as much as the IP address mapping. Inside/outside designation controls which traffic is translated.

Real-world example

How this comes up in practice

A media company stores terabytes of video archives that are accessed once a year for audit purposes. Moving these objects to a cold storage tier (Azure Archive, S3 Glacier, or Google Nearline) costs a fraction of hot storage. Questions like this test whether you understand storage tiers, access frequency tradeoffs, and retrieval latency requirements.

What to study next

Got this wrong? Here's your next step.

Review the four NAT address types (inside local, inside global, outside local, outside global), PAT port overload, and static vs dynamic NAT use cases. Then practise related DP-300 NAT questions on configuration and troubleshooting.

Related practice questions

Related DP-300 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Practice this exam

Start a free DP-300 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this DP-300 question test?

Configure and manage automation of tasks — This question tests Configure and manage automation of tasks — Static NAT maps one inside address to one outside address..

What is the correct answer to this question?

The correct answer is: Create an Azure Automation account in each region with a PowerShell runbook that connects to the local Managed Instance, performs a full database backup to a local blob container, and then copies the backup file to the central storage account using AzCopy. Schedule the runbook to run daily at 10 PM local time. — Option A is correct. Azure Automation runbooks with PowerShell can schedule backup commands using the BACKUP TO URL command (which supports native SQL Server backup to Azure Blob Storage). This allows you to copy backups to a central storage account. Using Azure Automation ensures resiliency and can be scheduled per region. Option B is incorrect because SQL Agent is available on Managed Instance, but it would require managing schedules across instances. Option C is incorrect because Elastic Database Jobs is not available for Managed Instance. Option D is incorrect because Azure Backup for SQL Server is for IaaS VMs, not Managed Instance.

What should I do if I get this DP-300 question wrong?

Review the four NAT address types (inside local, inside global, outside local, outside global), PAT port overload, and static vs dynamic NAT use cases. Then practise related DP-300 NAT questions on configuration and troubleshooting.

What is the key concept behind this question?

Static NAT maps one inside address to one outside address.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 21, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.