DP-300 Tests Matching Each Task to the Right Azure SQL Platform
For DBAs running SQL Server workloads on Azure SQL Database, Managed Instance and Azure VMs. Many wrong answers name a real feature that exists only on another platform, so identify the target first.
Check Your Readiness →Most candidates understand Administering Microsoft Azure SQL Solutions (DP-300) concepts — and still fail. This exam tests how you apply knowledge under pressure.
Most items are platform-sensitive: the same goal, such as scheduling, firewalling or cross-region DR, has a different answer on Azure SQL Database, Managed Instance and SQL Server on VMs. Expect RPO and RTO figures, T-SQL and DMV output to interpret. 100 minutes; question count not published.
Export a BACPAC and import it into Managed Instance
BACPAC is offline and slow at terabyte scale. Use the Managed Instance link, built on distributed availability groups, or Log Replay Service restoring a backup chain from blob storage, then cut over with the final log.
Use randomized Always Encrypted on the column
Randomized encryption blocks equality comparisons. Choose deterministic Always Encrypted for equality filters and joins, or enable secure enclaves for range queries and pattern matching. Enclaves still never expose the keys to DBAs.
Kill the session with the longest wait time
Follow blocking_session_id to the head blocker, the session holding the locks, and resolve it; ending waiters leaves the chain intact. Read committed snapshot, on by default in Azure SQL Database, already stops readers blocking writers.
Point the connection string at the primary server name
Create an availability group listener so clients follow the new primary. On Azure VMs, plan cluster, quorum and listener connectivity together; a failover cluster instance shares one storage copy and offers no readable secondary.
Add a server-level IP firewall rule to the instance
Managed Instance has no server-level IP firewall rules. Access is controlled by its VNet subnet, NSGs and the choice of private or public endpoint. Server and database firewall rules belong to Azure SQL Database logical servers.
Agent exists only on Managed Instance and SQL Server on VMs. Azure SQL Database uses an elastic job agent with target groups, whose identity needs a user and permissions in every target. On Managed Instance, built-in Agent beats elastic jobs.
Active geo-replication, with up to four readable secondaries, is an Azure SQL Database feature. Managed Instance uses failover groups for cross-region DR, which also provide stable listener endpoints; logins and Agent jobs on the secondary must be created separately.
TDE encrypts data, log and backup files at rest, but queries still return plaintext. Dynamic data masking is bypassed by administrators and UNMASK holders. Keeping values from DBAs and cloud operators needs Always Encrypted, where keys never reach the engine.
A sudden rise after a release or statistics update usually means a plan regression. Query Store shows the earlier good plan and can force it; automatic tuning with FORCE_LAST_GOOD_PLAN, on by default, applies that correction for you.
PITR retention runs 1 to 35 days, and every restore creates a new database rather than overwriting. Multi-year requirements use long-term retention, which keeps weekly, monthly or yearly full backups for up to 10 years per database.
Strengthen weak areas with exam-style practice questions and detailed explanations.
Simulate the real exam experience and assess your readiness under timed conditions.
Review key concepts, objectives, and exam topics in one place.
Get personalized explanations, learning recommendations, and instant answers.
Follow a structured learning path designed to help you prepare efficiently.
See whether you pick the right Azure SQL platform feature every time on DP-300.