Administering Microsoft Azure SQL Solutions DP-300 Practice Test 57
Question 560
This database condition remains unresolved: A SQL Managed Instance failover group setup fails because its paired secondary subnet has a conflicting network configuration. What is the MOST direct operational or security risk?
- A read-only secondary cannot be treated as an ordinary multi-writer active primary
- Hardcoded logical server names can cause clients to target the former primary after a failover
- A healthy replica state cannot overcome blocked or stale client listener network configuration
- Linking two arbitrary instance IDs without required network support cannot complete geo-failover
Explanation
Correct Answer
D:Linking two arbitrary instance IDs without required network support cannot complete geo-failover. This concern directly arises because geo-secondary Managed Instance configuration requires supported networking and instance compatibility. The appropriate remediation is to repair Managed Instance peer subnet and connectivity prerequisites before creating the pair. A successful control check would show that a prerequisite validation passes and the managed failover group is established.
Incorrect Answers
A:A read-only secondary cannot be treated as an ordinary multi-writer active primary can matter in a separate case, such as when an Azure SQL Database needs an independently readable secondary in another Region for business reporting. In this question, the principal consequence is that linking two arbitrary instance IDs without required network support cannot complete geo-failover. That different risk does not best characterize the missing control in the given scenario.
B:Hardcoded logical server names can cause clients to target the former primary after a failover can matter in a separate case, such as when a business wants a stable endpoint during planned regional failovers for two Azure SQL databases. In this question, the principal consequence is that linking two arbitrary instance IDs without required network support cannot complete geo-failover. That different risk does not best characterize the missing control in the given scenario.
C:A healthy replica state cannot overcome blocked or stale client listener network configuration can matter in a separate case, such as when a SQL Server Always On AG listener DNS name resolves but connection fails after moving the primary. In this question, the principal consequence is that linking two arbitrary instance IDs without required network support cannot complete geo-failover. That different risk does not best characterize the missing control in the given scenario.
Question 561
An Azure database operations team observes the following condition: A regulated application must log SQL access events to an organization-controlled destination. Which change is MOST appropriate?
- Configure Azure SQL auditing with approved storage or event ingestion and retention
- Configure row-level security with an approved predicate and security policy
- Use supported change tracking or change data capture appropriate to the workload
- Store and verify ledger digests in an appropriately protected trust location
Explanation
Correct Answer
A:Configure Azure SQL auditing with approved storage or event ingestion and retention. The deciding requirement in this SQL platform scenario is addressed because database auditing produces security-relevant activity records separately from application logs. Without the change, relying only on frontend access logs cannot show direct administrative database changes. Confirm the outcome through a controlled validation where a test privileged query appears in the retained audit destination with actor and timestamp.
Incorrect Answers
B:Configure row-level security with an approved predicate and security policy would instead apply to another SQL platform issue, such as when a SaaS database shares a customer table among tenants but must isolate visible rows by caller. The present requirement calls for configure Azure SQL auditing with approved storage or event ingestion and retention; this alternative changes a different control and does not directly resolve the stated database issue.
C:Use supported change tracking or change data capture appropriate to the workload would instead apply to another SQL platform issue, such as when a compliance report needs to identify which customer fields changed between two audit periods. The present requirement calls for configure Azure SQL auditing with approved storage or event ingestion and retention; this alternative changes a different control and does not directly resolve the stated database issue.
D:Store and verify ledger digests in an appropriately protected trust location would instead apply to another SQL platform issue, such as when a ledger database publishes digests but the verification job never checks them against an external trusted record. The present requirement calls for configure Azure SQL auditing with approved storage or event ingestion and retention; this alternative changes a different control and does not directly resolve the stated database issue.
Question 562
Given the Azure SQL condition "A migration requires a large partitioned table to support monthly archival with minimal downtime", the proposed change is "Plan range boundaries and partition-switch requirements before production rollout". Which explanation BEST supports the change?
- Supported serverless databases can reduce compute consumption during idle periods
- Metadata-based partition switching can move compatible partitions efficiently when schema constraints align
- Azure SQL provisioned compute tiers can be resized to meet measured workload resource demand
- SQL Server I/O patterns benefit from storage performance matched to transaction logging and temporary work
Explanation
Correct Answer
B:Metadata-based partition switching can move compatible partitions efficiently when schema constraints align. This is the mechanism that makes the proposed change, plan range boundaries and partition-switch requirements before production rollout, appropriate to the database environment described. The key limitation is that ignoring index alignment and constraint compatibility can cause partition switch operations to fail. A concrete confirmation is that a rehearsal switches a complete history partition under expected operational limits.
Incorrect Answers
A:Supported serverless databases can reduce compute consumption during idle periods is a valid distinction for a different database situation, for example when an intermittent development SQL workload runs 24 hours with almost no activity. Here the determining mechanism is that metadata-based partition switching can move compatible partitions efficiently when schema constraints align. The alternative does not explain why the selected solution addresses this requirement.
C:Azure SQL provisioned compute tiers can be resized to meet measured workload resource demand is a valid distinction for a different database situation, for example when an application has predictable CPU spikes but the vCore maximum is too small for peak traffic. Here the determining mechanism is that metadata-based partition switching can move compatible partitions efficiently when schema constraints align. The alternative does not explain why the selected solution addresses this requirement.
D:SQL Server I/O patterns benefit from storage performance matched to transaction logging and temporary work is a valid distinction for a different database situation, for example when a SQL Server VM has high read latency because data log and tempdb share unsuitable disks. Here the determining mechanism is that metadata-based partition switching can move compatible partitions efficiently when schema constraints align. The alternative does not explain why the selected solution addresses this requirement.
Question 563
For the requirement "An application moves from SQL Server on a VM to Azure SQL Database and uses three-part naming", the proposed remediation is "Rework unsupported or cross-database dependencies before choosing the destination". Which result BEST demonstrates success?
- A test move meets supported subscription region and instance eligibility criteria
- A rehearsal achieves the measured cutover RPO and business downtime target
- Cross-database operations are replaced by approved patterns and integration tests pass
- The cutover checklist confirms application routing write ownership and recovery steps
Explanation
Correct Answer
C:Cross-database operations are replaced by approved patterns and integration tests pass. This observation tests the actual effect of rework unsupported or cross-database dependencies before choosing the destination instead of assuming that a configuration change alone was successful. The underlying database behavior is that azure SQL Database feature boundaries can require application-level data access redesign. The control matters because assuming source instance semantics transfer unchanged may cause runtime query failures.
Incorrect Answers
A:A test move meets supported subscription region and instance eligibility criteria could validate a separate fix, for example when a project moves databases between Azure SQL Managed Instances and wants to avoid a full logical export. Here the required proof is that cross-database operations are replaced by approved patterns and integration tests pass. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
B:A rehearsal achieves the measured cutover RPO and business downtime target could validate a separate fix, for example when a large customer database must move from SQL Server with only minutes of planned downtime. Here the required proof is that cross-database operations are replaced by approved patterns and integration tests pass. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
D:The cutover checklist confirms application routing write ownership and recovery steps could validate a separate fix, for example when an organization is switching several databases to Azure SQL and needs an irreversible go-live decision. Here the required proof is that cross-database operations are replaced by approved patterns and integration tests pass. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
Question 564
This database condition remains unresolved: A security incident requires distinguishing SQL connection failures from query latency errors. What is the MOST direct operational or security risk?
- Assuming DTU percent is identical to CPU percent can misdiagnose the bottleneck
- Without threshold alerts a database may reach capacity before an operator intervenes
- A single slow query sample cannot show whether the environment is abnormal at that time
- A successful connection count alone cannot show that a transaction completed quickly
Explanation
Correct Answer
D:A successful connection count alone cannot show that a transaction completed quickly. This concern directly arises because authentication failures and SQL execution performance require different observability signals. The appropriate remediation is to collect connection success metrics and database error logs separately from query duration telemetry. A successful control check would show that the timeline identifies the connection-error spike separately from slow SQL execution.
Incorrect Answers
A:Assuming DTU percent is identical to CPU percent can misdiagnose the bottleneck can matter in a separate case, such as when a noisy report workload causes sudden DTU percentage spikes in an older Azure SQL database tier. In this question, the principal consequence is that a successful connection count alone cannot show that a transaction completed quickly. That different risk does not best characterize the missing control in the given scenario.
B:Without threshold alerts a database may reach capacity before an operator intervenes can matter in a separate case, such as when a Managed Instance team needs alerts when storage space approaches a configured ceiling. In this question, the principal consequence is that a successful connection count alone cannot show that a transaction completed quickly. That different risk does not best characterize the missing control in the given scenario.
C:A single slow query sample cannot show whether the environment is abnormal at that time can matter in a separate case, such as when a transaction database intermittently slows at noon but has no normal workload measurements. In this question, the principal consequence is that a successful connection count alone cannot show that a transaction completed quickly. That different risk does not best characterize the missing control in the given scenario.
Question 565
An Azure SQL review identifies this gap: An elastic job includes a destructive schema step that must not run against production tenants by accident. Which consequence BEST explains why it must be addressed?
- An indiscriminate target group can apply DDL to new databases lacking compatibility checks
- A higher database DTU tier alone cannot remove an elastic job agent concurrency bottleneck
- Treating the target application database as an automatically created job database may leave setup incomplete
- Attempting to enable the msdb SQL Agent service on an Azure SQL logical server is unsupported
Explanation
Correct Answer
A:An indiscriminate target group can apply DDL to new databases lacking compatibility checks. This concern directly arises because elastic job dynamic targeting must be governed to avoid including unsupported or protected databases. The appropriate remediation is to use explicit target exclusions and reviewable safety gates for elastic job target groups. A successful control check would show that the job selects only approved tenant targets and a protected test tenant remains untouched.
Incorrect Answers
B:A higher database DTU tier alone cannot remove an elastic job agent concurrency bottleneck can matter in a separate case, such as when a SQL elastic job is configured with too many parallel target databases for its agent tier. In this question, the principal consequence is that an indiscriminate target group can apply DDL to new databases lacking compatibility checks. That different risk does not best characterize the missing control in the given scenario.
C:Treating the target application database as an automatically created job database may leave setup incomplete can matter in a separate case, such as when a new elastic job agent exists but cannot create jobs because no supporting job database is configured. In this question, the principal consequence is that an indiscriminate target group can apply DDL to new databases lacking compatibility checks. That different risk does not best characterize the missing control in the given scenario.
D:Attempting to enable the msdb SQL Agent service on an Azure SQL logical server is unsupported can matter in a separate case, such as when an Azure SQL Database deployment needs recurring processing but does not support SQL Server Agent. In this question, the principal consequence is that an indiscriminate target group can apply DDL to new databases lacking compatibility checks. That different risk does not best characterize the missing control in the given scenario.
Question 566
In the scenario "A SQL Agent job processes the same batch twice because the scheduler was accidentally duplicated", what should the database administrator do FIRST to address the stated requirement?
- Configure a supported Agent alert response tied to the relevant SQL error and operator
- Review job schedules and enforce idempotent processing where appropriate
- Inspect the job step flow and on-success or on-failure branching settings
- Create a scheduled SQL Server Agent job with an approved execution identity
Explanation
Correct Answer
B:Review job schedules and enforce idempotent processing where appropriate. The deciding requirement in this SQL platform scenario is addressed because scheduling frequency and job idempotency jointly determine safe repeated execution. Without the change, simply raising the job timeout cannot prevent overlapping duplicate batch updates. Confirm the outcome through a controlled validation where job history shows one controlled run and duplicate processing does not recur.
Incorrect Answers
A:Configure a supported Agent alert response tied to the relevant SQL error and operator would instead apply to another SQL platform issue, such as when a DBA wants recurring alerts when a SQL Server Agent step exits with a defined error severity. The present requirement calls for review job schedules and enforce idempotent processing where appropriate; this alternative changes a different control and does not directly resolve the stated database issue.
C:Inspect the job step flow and on-success or on-failure branching settings would instead apply to another SQL platform issue, such as when a SQL Server Agent backup job appears successful but the database backup step was skipped. The present requirement calls for review job schedules and enforce idempotent processing where appropriate; this alternative changes a different control and does not directly resolve the stated database issue.
D:Create a scheduled SQL Server Agent job with an approved execution identity would instead apply to another SQL platform issue, such as when a managed SQL instance must run a stored procedure nightly without relying on a logged-in administrator. The present requirement calls for review job schedules and enforce idempotent processing where appropriate; this alternative changes a different control and does not directly resolve the stated database issue.
Question 567
For the case "A backup succeeds on SQL Server VM but the team cannot recover because the encryption certificate was lost", the team chooses "Back up and protect the encryption certificate or key material alongside backup chain procedures". Which database behavior justifies that choice?
- Recoverability requires demonstrating that retained backups can produce a usable database
- FULL recovery model relies on log backups for log reuse and fine-grained point recovery
- Encrypted native SQL backup restoration requires appropriate decryption key access
- Backups carry source data and access risk into every restored copy
Explanation
Correct Answer
C:Encrypted native SQL backup restoration requires appropriate decryption key access. This is the mechanism that makes the proposed change, back up and protect the encryption certificate or key material alongside backup chain procedures, appropriate to the database environment described. The key limitation is that a backup file's existence does not guarantee it is restorable after key loss. A concrete confirmation is that a sandbox restores the encrypted backup using retrieved protected key material.
Incorrect Answers
A:Recoverability requires demonstrating that retained backups can produce a usable database is a valid distinction for a different database situation, for example when a database uses append-only financial tables but a failed restore would violate the recovery objective. Here the determining mechanism is that encrypted native SQL backup restoration requires appropriate decryption key access. The alternative does not explain why the selected solution addresses this requirement.
B:FULL recovery model relies on log backups for log reuse and fine-grained point recovery is a valid distinction for a different database situation, for example when a SQL Server database uses the FULL recovery model but no transaction log backups have run for several days. Here the determining mechanism is that encrypted native SQL backup restoration requires appropriate decryption key access. The alternative does not explain why the selected solution addresses this requirement.
D:Backups carry source data and access risk into every restored copy is a valid distinction for a different database situation, for example when a production restore is prepared for a nonproduction environment used by a third-party vendor. Here the determining mechanism is that encrypted native SQL backup restoration requires appropriate decryption key access. The alternative does not explain why the selected solution addresses this requirement.
Question 568
The team plans to Investigate replication health and restore or reseed the secondary using supported procedures in response to "A SQL Server disaster recovery replica cannot recover because its availability databases have diverged after unsupported manual writes". Which technical principle BEST explains this approach?
- Database geo-replication alone does not guarantee every external authentication dependency is available
- Always On AG replica communication requires reachable supported database mirroring endpoints
- Failover Cluster Instances require storage reachable by the current active cluster node
- HA secondaries require a consistent data movement state and controlled role ownership
Explanation
Correct Answer
D:HA secondaries require a consistent data movement state and controlled role ownership. This is the mechanism that makes the proposed change, investigate replication health and restore or reseed the secondary using supported procedures, appropriate to the database environment described. The key limitation is that bypassing managed role transitions to write to a stale secondary can break recovery alignment. A concrete confirmation is that a supported reseed rejoins the replica and synchronization health is restored.
Incorrect Answers
A:Database geo-replication alone does not guarantee every external authentication dependency is available is a valid distinction for a different database situation, for example when a failover group between Azure SQL Regions remains healthy but application logins fail after an actual failover. Here the determining mechanism is that hA secondaries require a consistent data movement state and controlled role ownership. The alternative does not explain why the selected solution addresses this requirement.
B:Always On AG replica communication requires reachable supported database mirroring endpoints is a valid distinction for a different database situation, for example when a SQL Server VM Availability Group is unhealthy because replica endpoint traffic is blocked between nodes. Here the determining mechanism is that hA secondaries require a consistent data movement state and controlled role ownership. The alternative does not explain why the selected solution addresses this requirement.
C:Failover Cluster Instances require storage reachable by the current active cluster node is a valid distinction for a different database situation, for example when a SQL Server VM FCI stops during cluster failover because shared storage is unavailable on the survivor. Here the determining mechanism is that hA secondaries require a consistent data movement state and controlled role ownership. The alternative does not explain why the selected solution addresses this requirement.
Question 569
The team corrects "An Azure SQL workload begins consuming more memory after a new query deployment" by applying "Use available query and resource metrics to compare pre-change and post-change memory behavior". Which validation is MOST convincing?
- The affected statement and its memory grant change are identified in diagnostics
- A query retrieves historical resource measurements through the required retention window
- A monitored database produces new samples in the approved watcher destination
- Measured log write volume correlates with the write workload and capacity planning
Explanation
Correct Answer
A:The affected statement and its memory grant change are identified in diagnostics. This observation tests the actual effect of use available query and resource metrics to compare pre-change and post-change memory behavior instead of assuming that a configuration change alone was successful. The underlying database behavior is that query plan choices and memory grants influence database resource pressure. The control matters because rebuilding every index without examining query changes may be unnecessary and disruptive.
Incorrect Answers
B:A query retrieves historical resource measurements through the required retention window could validate a separate fix, for example when a DBA requests 30 days of historical performance for a database whose current dashboard shows only a week. Here the required proof is that the affected statement and its memory grant change are identified in diagnostics. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
C:A monitored database produces new samples in the approved watcher destination could validate a separate fix, for example when a new Azure SQL database watcher deployment collects metrics but no records arrive in its store. Here the required proof is that the affected statement and its memory grant change are identified in diagnostics. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
D:Measured log write volume correlates with the write workload and capacity planning could validate a separate fix, for example when a DBA wants a time series of database log throughput to assess write growth. Here the required proof is that the affected statement and its memory grant change are identified in diagnostics. The alternative tests another database behavior and cannot establish whether the stated issue was corrected.
Question 570
In the scenario "A SQL Server VM Availability Group is unhealthy because replica endpoint traffic is blocked between nodes", what should the database administrator do FIRST to address the stated requirement?
- Analyze log send and redo throughput and the replication health before forcing failover
- Permit the documented availability replica endpoint traffic through approved network controls
- Configure supported active geo-replication and connect reports to the secondary
- Repair Managed Instance peer subnet and connectivity prerequisites before creating the pair
Explanation
Correct Answer
B:Permit the documented availability replica endpoint traffic through approved network controls. The deciding requirement in this SQL platform scenario is addressed because always On AG replica communication requires reachable supported database mirroring endpoints. Without the change, a healthy Windows failover cluster alone does not prove availability data movement can occur. Confirm the outcome through a controlled validation where replica connections establish and log send and redo queues decrease.
Incorrect Answers
A:Analyze log send and redo throughput and the replication health before forcing failover would instead apply to another SQL platform issue, such as when an Always On Availability Group secondary accumulates large redo queues during batch workloads. The present requirement calls for permit the documented availability replica endpoint traffic through approved network controls; this alternative changes a different control and does not directly resolve the stated database issue.
C:Configure supported active geo-replication and connect reports to the secondary would instead apply to another SQL platform issue, such as when an Azure SQL Database needs an independently readable secondary in another Region for business reporting. The present requirement calls for permit the documented availability replica endpoint traffic through approved network controls; this alternative changes a different control and does not directly resolve the stated database issue.
D:Repair Managed Instance peer subnet and connectivity prerequisites before creating the pair would instead apply to another SQL platform issue, such as when a SQL Managed Instance failover group setup fails because its paired secondary subnet has a conflicting network configuration. The present requirement calls for permit the documented availability replica endpoint traffic through approved network controls; this alternative changes a different control and does not directly resolve the stated database issue.