CertifyDeckCargando contenido…
DP-300 · Sample questions
10 real questions from the CertifyDeck DP-300 bank, spread across the domains of the official Microsoft Certified: Azure Database Administrator Associate skills outline, with the correct answer and a full explanation of why the other options are wrong. They are original questions written from the public syllabus, not exam dumps, and they are the same style you will find in the practice tests and mock exams.
Correct answer: C. Connect each SQL Server instance to Azure Arc
SQL Server enabled by Azure Arc extends Azure management to instances hosted outside Azure, in data centers, edge sites or other clouds, and gives a single inventory that you can query with Azure Resource Graph Explorer. The SQL IaaS Agent extension is tempting, but it manages SQL Server on Azure virtual machines, not servers outside Azure. A Managed Instance link replicates databases to Azure SQL Managed Instance; it does not inventory instances.
Correct answer: C. Disable Automated Patching, then enable Azure Update Manager with Microsoft updates
Azure Update Manager installs SQL Server Cumulative Updates on a schedule, while Automated Patching installs only Windows and SQL Server updates marked Important or Critical. You should use one tool or the other, not both, because enabling both can cause scheduling conflicts and changes outside the maintenance windows, so Automated Patching must be disabled first. Defender for SQL detects vulnerabilities and threats; it doesn't install updates.
Correct answer: C. az sql vm validate-azure-ad-auth with the same client ID
The az sql vm validate-azure-ad-auth command is run before enabling Microsoft Entra authentication to confirm, among other checks, that the managed identity has the necessary permissions. The az sql vm show --expand * command only reports whether Entra authentication is already enabled. Update-AzSqlVM with an identity type actually enables Entra authentication, so it changes the configuration, and az sql server ad-admin list reads the Entra admin of a logical server.
Correct answer: D. A security policy with a filter predicate function
Row-level security uses CREATE SECURITY POLICY with an inline table-valued predicate function to filter rows in the database tier, which is the documented pattern for separating tenants that share one table. Dynamic data masking hides column values but still returns every row. Column-level permissions control which columns a user can read, not which rows.
Correct answer: A. Add ApplicationIntent=ReadOnly to the reporting connection string
The Business Critical tier of SQL Managed Instance keeps secondary replicas using Always On availability group technology, and Read Scale-Out redirects read-only connections to one of those replicas when the connection declares read-only intent. A failover group would also offer a readable secondary, but it requires a second managed instance in another region, which the requirement forbids. Zone redundancy only spreads the replicas across availability zones and does not route reads, and the Managed Instance link replicates from SQL Server, not within one managed instance.
Correct answer: A. A distributed network name (DNN) listener
In a single subnet, an availability group on Azure VMs needs either a VNN listener with an Azure Load Balancer or a DNN listener, and the DNN routes traffic to the primary without any load balancer. Both VNN choices, internal or external, depend on an Azure Load Balancer, which the requirement rules out. The database mirroring connection string only fits an availability group with one non-readable secondary, not three replicas with readable secondaries.
Correct answer: A. Set the Runbook Name dimension of the alert condition to Rebuild-Indexes.
The Total Jobs metric has Runbook Name and Status dimensions, and when no runbook name is specified the alert fires for any runbook that meets the status criteria, including hidden system runbooks. Selecting Rebuild-Indexes in the Runbook Name dimension limits the alert to that runbook. Severity doesn't filter anything because alerts are treated the same regardless of severity, a shorter period only changes the time window, and diagnostic settings for Log Analytics don't change how a metric alert evaluates.
Correct answer: C. Another execution of the same job step was still running on the same target.
The Skipped lifecycle means the execution was skipped because another execution of the same job step was already running on the same target, which happens when a run takes longer than the five-minute interval. A step that exceeds @step_timeout_seconds ends as TimedOut, and a step that exhausts its retries ends as Failed. A refresh credential is what lets the agent connect to master and enumerate a server's databases, which is unrelated to what the Skipped state describes.
Correct answer: C. CrmDb uses the automatic tuning configuration of its parent server.
INHERIT makes the database take its automatic tuning configuration from the parent logical server, which is the recommended way to manage many databases. AUTO is the value that applies the Azure defaults, so it is the tempting but wrong reading of this statement. CUSTOM is the value that requires manual configuration of each option, and INHERIT does not by itself turn on all three options.
Correct answer: A. ALTER DATABASE SCOPED CONFIGURATION SET IDENTITY_CACHE = OFF;
Identity caching improves insert performance but can leave gaps in identity values after an unexpected restart or a failover; disabling IDENTITY_CACHE avoids those gaps at the database level. LAST_QUERY_PLAN_STATS controls collection of the last actual plan, ELEVATE_RESUMABLE makes supported DDL resumable, and QUERY_OPTIMIZER_HOTFIXES enables optimizer fixes; none of them affects identity values.
Answer each question before opening the explanation, and write down why you discarded the other options. On DP-300, most mistakes come from choosing an option that is technically possible but does not meet every requirement in the scenario.
These 10 questions are a taste of the format, not a diagnostic. To know which domains you fail, practice by domain for free and take a timed mock exam that mirrors the official weights and duration.
Start for free, no sign-up or card. Every question includes an explanation like the ones above, and the mock exam reproduces the official DP-300 format.