Administering Microsoft Azure SQL Solutions DP-300 Practice Test 40
Question 390
Given the Azure SQL condition "A production restore is prepared for a nonproduction environment used by a third-party vendor", the proposed change is "Restore under a secure target identity and sanitize confidential data before release". Which explanation BEST supports the change?
- Azure SQL LTR provides retention beyond normal point-in-time restore windows for eligible full backups
- Backups carry source data and access risk into every restored copy
- PITR and long-term retention serve different restore windows and types
- SQL Server RESTORE sequence must preserve log sequence continuity until final recovery
Explanation
Correct Answer
B:Backups carry source data and access risk into every restored copy. This is the mechanism that makes the proposed change, restore under a secure target identity and sanitize confidential data before release, appropriate to the database environment described. The key limitation is that treating nonproduction restored databases as anonymous by default can expose customer details. A concrete confirmation is that a verified sanitized copy has minimum access controls and no unapproved sensitive records.
Incorrect Answers
A:Azure SQL LTR provides retention beyond normal point-in-time restore windows for eligible full backups is a valid distinction for a different database situation, for example when a regulator requires Azure SQL database backup copies retained for seven years. Here the determining mechanism is that backups carry source data and access risk into every restored copy. The alternative does not explain why the selected solution addresses this requirement.
C:PITR and long-term retention serve different restore windows and types is a valid distinction for a different database situation, for example when a disaster recovery plan assumes Azure SQL automated point-in-time backups exist for unlimited years. Here the determining mechanism is that backups carry source data and access risk into every restored copy. The alternative does not explain why the selected solution addresses this requirement.
D:SQL Server RESTORE sequence must preserve log sequence continuity until final recovery is a valid distinction for a different database situation, for example when a DBA must restore a database from a full backup plus several log backups after a server failure. Here the determining mechanism is that backups carry source data and access risk into every restored copy. The alternative does not explain why the selected solution addresses this requirement.
Question 391
For the requirement "An Always On Availability Group secondary accumulates large redo queues during batch workloads", the proposed remediation is "Analyze log send and redo throughput and the replication health before forcing failover". Which result BEST demonstrates success?
- Replica connections establish and log send and redo queues decrease
- An authorized failover causes the application to reconnect through the listener successfully
- Replica state and data movement queues meet the documented controlled failover criteria
- The recovered application authenticates and runs its business queries after regional switchover
Explanation
Correct Answer
C:Replica state and data movement queues meet the documented controlled failover criteria. This observation tests the actual effect of analyze log send and redo throughput and the replication health before forcing failover instead of assuming that a configuration change alone was successful. The underlying database behavior is that aG data movement uses send and redo stages whose lag affects secondary recovery readiness. The control matters because forcing failover during severe asynchronous lag can increase potential data loss.
Incorrect Answers
A:Replica connections establish and log send and redo queues decrease could validate a separate fix, for example when a SQL Server VM Availability Group is unhealthy because replica endpoint traffic is blocked between nodes. Here the required proof is that replica state and data movement queues meet the documented controlled failover criteria. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
B:An authorized failover causes the application to reconnect through the listener successfully could validate a separate fix, for example when a business wants a stable endpoint during planned regional failovers for two Azure SQL databases. Here the required proof is that replica state and data movement queues meet the documented controlled failover criteria. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
D:The recovered application authenticates and runs its business queries after regional switchover could validate a separate fix, for example when a failover group between Azure SQL Regions remains healthy but application logins fail after an actual failover. Here the required proof is that replica state and data movement queues meet the documented controlled failover criteria. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
Question 392
The team plans to Evaluate Azure SQL Managed Instance against the documented SQL Server instance-level dependencies in response to "An ERP migration requires near-instance compatibility including SQL Agent jobs and cross-database features". Which technical principle BEST explains this approach?
- Serverless compute can scale according to demand and may offer auto-pause under supported conditions
- SQL database in Fabric is integrated with Fabric experiences and has different platform boundaries
- Azure Arc can extend management and policy visibility to eligible external SQL Server resources
- Managed Instance preserves broad SQL Server instance compatibility while operating as a managed Azure service
Explanation
Correct Answer
D:Managed Instance preserves broad SQL Server instance compatibility while operating as a managed Azure service. This is the mechanism that makes the proposed change, evaluate Azure SQL Managed Instance against the documented SQL Server instance-level dependencies, appropriate to the database environment described. The key limitation is that moving the ERP directly to single-database PaaS can expose unsupported instance-dependent features. A concrete confirmation is that compatibility checks pass for required SQL Agent jobs and approved cross-database operations.
Incorrect Answers
A:Serverless compute can scale according to demand and may offer auto-pause under supported conditions is a valid distinction for a different database situation, for example when a platform architect must choose between Azure SQL Database serverless and provisioned compute for intermittent work. Here the determining mechanism is that managed Instance preserves broad SQL Server instance compatibility while operating as a managed Azure service. The alternative does not explain why the selected solution addresses this requirement.
B:SQL database in Fabric is integrated with Fabric experiences and has different platform boundaries is a valid distinction for a different database situation, for example when a development team uses SQL database in Microsoft Fabric and expects an Azure SQL logical server. Here the determining mechanism is that managed Instance preserves broad SQL Server instance compatibility while operating as a managed Azure service. The alternative does not explain why the selected solution addresses this requirement.
C:Azure Arc can extend management and policy visibility to eligible external SQL Server resources is a valid distinction for a different database situation, for example when a hybrid manufacturer needs to inventory and govern SQL Server instances outside Azure. Here the determining mechanism is that managed Instance preserves broad SQL Server instance compatibility while operating as a managed Azure service. The alternative does not explain why the selected solution addresses this requirement.
Question 393
A database administrator selects "Increase its supported maximum storage or service objective after checking usage" after observing "An Azure SQL Database reaches its configured data storage limit during nightly ingestion". What mechanism makes it appropriate?
- Provisioned storage quotas constrain how much database data can be stored independent of connection count
- Azure SQL service tiers differ in compute storage architecture and performance characteristics
- Some Azure SQL service tiers expose read-only secondary replicas for supported scale-out patterns
- SQL Server I/O patterns benefit from storage performance matched to transaction logging and temporary work
Explanation
Correct Answer
A:Provisioned storage quotas constrain how much database data can be stored independent of connection count. This is the mechanism that makes the proposed change, increase its supported maximum storage or service objective after checking usage, appropriate to the database environment described. The key limitation is that only increasing the number of connections cannot resolve a full database storage allocation. A concrete confirmation is that an ingestion replay succeeds and available storage headroom meets the forecast.
Incorrect Answers
B:Azure SQL service tiers differ in compute storage architecture and performance characteristics is a valid distinction for a different database situation, for example when a latency-sensitive transactional workload suffers read delays under the General Purpose tier. Here the determining mechanism is that provisioned storage quotas constrain how much database data can be stored independent of connection count. The alternative does not explain why the selected solution addresses this requirement.
C:Some Azure SQL service tiers expose read-only secondary replicas for supported scale-out patterns is a valid distinction for a different database situation, for example when an Azure SQL Database is write-heavy and a reader workload causes contention with transactions. Here the determining mechanism is that provisioned storage quotas constrain how much database data can be stored independent of connection count. The alternative does not explain why the selected solution addresses this requirement.
D:SQL Server I/O patterns benefit from storage performance matched to transaction logging and temporary work is a valid distinction for a different database situation, for example when a SQL Server VM has high read latency because data log and tempdb share unsuitable disks. Here the determining mechanism is that provisioned storage quotas constrain how much database data can be stored independent of connection count. The alternative does not explain why the selected solution addresses this requirement.
Question 394
In the scenario "A SQL Server database uses the FULL recovery model but no transaction log backups have run for several days", what should the database administrator do FIRST to address the stated requirement?
- Configure long-term backup retention policy within supported platform limits
- Start and monitor an appropriate transaction-log backup schedule with recovery-chain validation
- Restore the full backup in NORECOVERY mode and apply the complete ordered log chain
- Restore under a secure target identity and sanitize confidential data before release
Explanation
Correct Answer
B:Start and monitor an appropriate transaction-log backup schedule with recovery-chain validation. The deciding requirement in this SQL platform scenario is addressed because fULL recovery model relies on log backups for log reuse and fine-grained point recovery. Without the change, expecting checkpoints alone to truncate active log history under FULL recovery can cause disk exhaustion. Confirm the outcome through a controlled validation where a valid log backup chain is recorded and log usage follows the planned reuse behavior.
Incorrect Answers
A:Configure long-term backup retention policy within supported platform limits would instead apply to another SQL platform issue, such as when a regulator requires Azure SQL database backup copies retained for seven years. The present requirement calls for start and monitor an appropriate transaction-log backup schedule with recovery-chain validation; this alternative changes a different control and does not directly resolve the stated database issue.
C:Restore the full backup in NORECOVERY mode and apply the complete ordered log chain would instead apply to another SQL platform issue, such as when a DBA must restore a database from a full backup plus several log backups after a server failure. The present requirement calls for start and monitor an appropriate transaction-log backup schedule with recovery-chain validation; this alternative changes a different control and does not directly resolve the stated database issue.
D:Restore under a secure target identity and sanitize confidential data before release would instead apply to another SQL platform issue, such as when a production restore is prepared for a nonproduction environment used by a third-party vendor. The present requirement calls for start and monitor an appropriate transaction-log backup schedule with recovery-chain validation; this alternative changes a different control and does not directly resolve the stated database issue.
Question 395
For the case "A reporting query requests every column from a large table but displays only two", the team chooses "Select required columns and review the resulting execution plan and data transfer". Which database behavior justifies that choice?
- A covering index can avoid repeated lookups when selected attributes are stored in the index
- Missing index hints reflect possible gains for specific queries but not full workload tradeoffs
- Avoiding unnecessary wide result sets can reduce I/O and client transport overhead
- Poor cardinality estimates can drive inappropriate join strategies and memory allocation
Explanation
Correct Answer
C:Avoiding unnecessary wide result sets can reduce I/O and client transport overhead. This is the mechanism that makes the proposed change, select required columns and review the resulting execution plan and data transfer, appropriate to the database environment described. The key limitation is that adding more indexes does not always compensate for reading excess payload. A concrete confirmation is that actual page reads and returned byte counts fall after the query rewrite.
Incorrect Answers
A:A covering index can avoid repeated lookups when selected attributes are stored in the index is a valid distinction for a different database situation, for example when a query has excessive key lookups after a nonclustered index seek on a hot table. Here the determining mechanism is that avoiding unnecessary wide result sets can reduce I/O and client transport overhead. The alternative does not explain why the selected solution addresses this requirement.
B:Missing index hints reflect possible gains for specific queries but not full workload tradeoffs is a valid distinction for a different database situation, for example when an Azure SQL developer sees a missing index recommendation and wants to apply all suggested indexes immediately. Here the determining mechanism is that avoiding unnecessary wide result sets can reduce I/O and client transport overhead. The alternative does not explain why the selected solution addresses this requirement.
D:Poor cardinality estimates can drive inappropriate join strategies and memory allocation is a valid distinction for a different database situation, for example when a join between two large tables shows a wrong estimated row count and memory grant spills. Here the determining mechanism is that avoiding unnecessary wide result sets can reduce I/O and client transport overhead. The alternative does not explain why the selected solution addresses this requirement.
Question 396
The team plans to Use infrastructure-as-code change review and reconcile drift through the approved source in response to "A Bicep deployment keeps replacing a server setting because another team edits it manually". Which technical principle BEST explains this approach?
- Azure deployment secrets should avoid plaintext command arguments and committed files
- Azure management automation must match maintained command modules and resource provider APIs
- Secure infrastructure defaults can be enforced before resources are provisioned
- Declarative deployments express intended state and expose out-of-band configuration drift
Explanation
Correct Answer
D:Declarative deployments express intended state and expose out-of-band configuration drift. This is the mechanism that makes the proposed change, use infrastructure-as-code change review and reconcile drift through the approved source, appropriate to the database environment described. The key limitation is that fixing an individual portal field without updating the controlled template creates recurring drift. A concrete confirmation is that the next deployment leaves the resource at the reviewed and approved configuration.
Incorrect Answers
A:Azure deployment secrets should avoid plaintext command arguments and committed files is a valid distinction for a different database situation, for example when an Azure SQL deployment needs a secret but pipeline logs show the administrator password in plain text. Here the determining mechanism is that declarative deployments express intended state and expose out-of-band configuration drift. The alternative does not explain why the selected solution addresses this requirement.
B:Azure management automation must match maintained command modules and resource provider APIs is a valid distinction for a different database situation, for example when a SQL deployment script uses an old deprecated Azure PowerShell module command. Here the determining mechanism is that declarative deployments express intended state and expose out-of-band configuration drift. The alternative does not explain why the selected solution addresses this requirement.
C:Secure infrastructure defaults can be enforced before resources are provisioned is a valid distinction for a different database situation, for example when an automation workflow creates a database but accidentally exposes its logical server publicly. Here the determining mechanism is that declarative deployments express intended state and expose out-of-band configuration drift. The alternative does not explain why the selected solution addresses this requirement.
Question 397
An Azure database operations team observes the following condition: A software team uses an Azure SQL logical server and wants to compare CPU across five databases. Which change is MOST appropriate?
- Use per-database Azure SQL metrics with consistent aggregation and time windows
- Use available query and resource metrics to compare pre-change and post-change memory behavior
- Check database watcher targets identity data-store configuration and permissions
- Capture blocking sessions and waits with approved diagnostic tooling
Explanation
Correct Answer
A:Use per-database Azure SQL metrics with consistent aggregation and time windows. The deciding requirement in this SQL platform scenario is addressed because metrics scoped to logical servers and databases represent different resource perspectives. Without the change, aggregating unrelated databases without labels can hide a noisy tenant. Confirm the outcome through a controlled validation where dashboards identify which database drives the observed peak.
Incorrect Answers
B:Use available query and resource metrics to compare pre-change and post-change memory behavior would instead apply to another SQL platform issue, such as when an Azure SQL workload begins consuming more memory after a new query deployment. The present requirement calls for use per-database Azure SQL metrics with consistent aggregation and time windows; this alternative changes a different control and does not directly resolve the stated database issue.
C:Check database watcher targets identity data-store configuration and permissions would instead apply to another SQL platform issue, such as when a new Azure SQL database watcher deployment collects metrics but no records arrive in its store. The present requirement calls for use per-database Azure SQL metrics with consistent aggregation and time windows; this alternative changes a different control and does not directly resolve the stated database issue.
D:Capture blocking sessions and waits with approved diagnostic tooling would instead apply to another SQL platform issue, such as when a DBA needs to examine long-lived SQL blocking chains during a workload spike. The present requirement calls for use per-database Azure SQL metrics with consistent aggregation and time windows; this alternative changes a different control and does not directly resolve the stated database issue.
Question 398
Given the Azure SQL condition "A SQL Server VM backup encryption configuration is missing from a regulated recovery process", the proposed change is "Enable supported SQL Server backup encryption and secure certificate or asymmetric-key recovery". Which explanation BEST supports the change?
- External key and credential management decouples secret lifecycle from application binaries
- Native SQL backup encryption protects backup media when managed keys are retained for restore
- Customer-managed TDE keys allow the organization to govern database encryption protectors
- Restoring data carries sensitive content into the target security boundary unless separately controlled
Explanation
Correct Answer
B:Native SQL backup encryption protects backup media when managed keys are retained for restore. This is the mechanism that makes the proposed change, enable supported SQL Server backup encryption and secure certificate or asymmetric-key recovery, appropriate to the database environment described. The key limitation is that an encrypted backup without an available restore certificate may be unrecoverable. A concrete confirmation is that a controlled restore succeeds using the protected backup and required key material.
Incorrect Answers
A:External key and credential management decouples secret lifecycle from application binaries is a valid distinction for a different database situation, for example when a mobile app needs a secure secret that rotates without changing its compiled SQL client library. Here the determining mechanism is that native SQL backup encryption protects backup media when managed keys are retained for restore. The alternative does not explain why the selected solution addresses this requirement.
C:Customer-managed TDE keys allow the organization to govern database encryption protectors is a valid distinction for a different database situation, for example when a payment database has a customer-managed TDE protector requirement. Here the determining mechanism is that native SQL backup encryption protects backup media when managed keys are retained for restore. The alternative does not explain why the selected solution addresses this requirement.
D:Restoring data carries sensitive content into the target security boundary unless separately controlled is a valid distinction for a different database situation, for example when a staging SQL database was restored from production and contains confidential values. Here the determining mechanism is that native SQL backup encryption protects backup media when managed keys are retained for restore. The alternative does not explain why the selected solution addresses this requirement.
Question 399
For the requirement "A ledger database publishes digests but the verification job never checks them against an external trusted record", the proposed remediation is "Store and verify ledger digests in an appropriately protected trust location". Which result BEST demonstrates success?
- A test privileged query appears in the retained audit destination with actor and timestamp
- A controlled update produces the required change identifiers or row history in the chosen feature
- A deliberate unauthorized history alteration fails trusted digest verification
- Negative tests for another region return no protected rows from direct database queries
Explanation
Correct Answer
C:A deliberate unauthorized history alteration fails trusted digest verification. This observation tests the actual effect of store and verify ledger digests in an appropriately protected trust location instead of assuming that a configuration change alone was successful. The underlying database behavior is that ledger integrity assurance depends on validating cryptographic digests outside the editable data path. The control matters because saving verification digests only beside writable database content weakens tamper detection.
Incorrect Answers
A:A test privileged query appears in the retained audit destination with actor and timestamp could validate a separate fix, for example when a regulated application must log SQL access events to an organization-controlled destination. Here the required proof is that a deliberate unauthorized history alteration fails trusted digest verification. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
B:A controlled update produces the required change identifiers or row history in the chosen feature could validate a separate fix, for example when a compliance report needs to identify which customer fields changed between two audit periods. Here the required proof is that a deliberate unauthorized history alteration fails trusted digest verification. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
D:Negative tests for another region return no protected rows from direct database queries could validate a separate fix, for example when a privacy review requires a restricted application identity to access only its region's customer records. Here the required proof is that a deliberate unauthorized history alteration fails trusted digest verification. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
Question 400
A database administrator must resolve this Azure SQL or SQL Server issue: A DBA needs to detect corruption regularly on a SQL Server virtual machine. What action BEST meets the requirement?
- Apply a documented ALTER DATABASE SCOPED CONFIGURATION setting after compatibility review
- Review MAXDOP and cost threshold settings with representative plan and CPU testing
- Evaluate a compatible service objective and memory-grant behavior before scaling
- Schedule DBCC CHECKDB using an approved resource and response plan
Explanation
Correct Answer
D:Schedule DBCC CHECKDB using an approved resource and response plan. The deciding requirement in this SQL platform scenario is addressed because database integrity checks detect structural inconsistencies not shown by successful login tests. Without the change, assuming automated backup completion proves the source database is corruption-free is incorrect. Confirm the outcome through a controlled validation where the documented CHECKDB execution completes and results are reviewed for integrity errors.
Incorrect Answers
A:Apply a documented ALTER DATABASE SCOPED CONFIGURATION setting after compatibility review would instead apply to another SQL platform issue, such as when a database-scoped setting needs to enable a supported optimizer behavior without changing all databases on an instance. The present requirement calls for schedule DBCC CHECKDB using an approved resource and response plan; this alternative changes a different control and does not directly resolve the stated database issue.
B:Review MAXDOP and cost threshold settings with representative plan and CPU testing would instead apply to another SQL platform issue, such as when a SQL Server on Azure VM has poor parallel query performance because MAXDOP differs from workload needs. The present requirement calls for schedule DBCC CHECKDB using an approved resource and response plan; this alternative changes a different control and does not directly resolve the stated database issue.
C:Evaluate a compatible service objective and memory-grant behavior before scaling would instead apply to another SQL platform issue, such as when an Azure SQL Database repeatedly peaks memory utilization under workloads with large concurrent hash joins. The present requirement calls for schedule DBCC CHECKDB using an approved resource and response plan; this alternative changes a different control and does not directly resolve the stated database issue.