View Full Microsoft DP-800 Exam Dumps and Practice Test Dumps.

 

Question 221

Which Azure SQL Database purchasing model allows administrators to select CPU and memory resources using vCores?

1. DTU-based model
2. vCore-based model
3. Storage-only model
4. Serverless-only model

Correct Answer: 2

Explanation

The vCore-based purchasing model allows administrators to select compute resources based on virtual CPU cores and memory. It provides more direct visibility into the compute resources allocated to the database and supports different hardware configurations and service tiers. This model is useful when workloads have specific CPU, memory, storage, or scalability requirements. Administrators can also use vCore-based pricing to better compare Azure SQL Database resources with existing on-premises SQL Server environments.

Question 222

Which Azure SQL Database purchasing model combines CPU, memory, and I/O resources into a single performance unit?

1. DTU-based model
2. vCore-based model
3. Serverless model
4. Hyperscale model

Correct Answer: 1

Explanation

The DTU-based purchasing model combines several database resources, including CPU, memory, and data I/O, into a single Database Transaction Unit (DTU) measure. Administrators select a service tier and DTU level according to the expected workload. Monitoring DTU percentage can help determine whether the selected performance level is sufficient. Although DTUs simplify purchasing, the vCore model can provide more direct control over compute resources and may be preferable for workloads requiring more granular resource selection.

Question 223

Which Azure SQL Database compute option can automatically scale compute resources based on workload demand?

1. Provisioned compute only
2. Serverless compute
3. Elastic Jobs
4. Database snapshots

Correct Answer: 2

Explanation

Azure SQL Database serverless compute automatically adjusts compute resources according to workload demand within configured limits. It is particularly useful for databases with intermittent or unpredictable usage because resources can scale based on activity. Serverless can also pause compute after a configured period of inactivity when the workload and configuration support auto-pause. Administrators should consider workload patterns carefully because frequently active databases may benefit more from provisioned compute.

Question 224

Which Azure SQL Database feature allows multiple databases to share a pool of compute resources?

1. Elastic pool
2. Database snapshot
3. BACPAC
4. Private Endpoint

Correct Answer: 1

Explanation

An Azure SQL Database elastic pool provides a shared set of compute resources for multiple databases. It is useful when databases have varying or unpredictable workloads and do not all require their maximum resources at the same time. Instead of provisioning each database independently for peak demand, the databases can share resources within the pool. This can improve resource utilization and potentially reduce costs for groups of databases with complementary workload patterns.

Question 225

Which Azure SQL Database service tier is designed to support very large databases and high scalability?

1. Basic
2. General Purpose
3. Hyperscale
4. Standard

Correct Answer: 3

Explanation

The Hyperscale service tier is designed for workloads that require very large database sizes and high scalability. It uses an architecture that separates compute from storage and provides capabilities designed for large and demanding workloads. Hyperscale can scale storage independently from compute, which is useful when database size grows significantly. Administrators should evaluate workload requirements, supported features, performance needs, and cost before selecting Hyperscale instead of another Azure SQL Database service tier.

Question 226

Which Azure service should you use to store SQL Server secrets such as passwords and encryption keys securely?

1. Azure Key Vault
2. Azure Monitor
3. Azure Advisor
4. Azure DNS

Correct Answer: 1

Explanation

Azure Key Vault is designed to securely store secrets, keys, and certificates. SQL administrators and applications can use Key Vault to avoid placing sensitive information directly in application code or configuration files. Access to Key Vault can be controlled using Azure identity and authorization mechanisms. Using a centralized secrets-management service improves security and makes it easier to manage credentials and cryptographic material without exposing them unnecessarily to developers or database administrators.

Question 227

Which identity allows an Azure resource to authenticate to another Azure service without storing a password in application code?

1. SQL login
2. Managed identity
3. Local Windows account
4. Database role

Correct Answer: 2

Explanation

A managed identity provides an Azure resource with an identity that can be used to authenticate to supported Azure services. The application does not need to store a password or client secret in its code. Azure manages the identity credentials automatically. Administrators can then assign appropriate permissions to that identity. Managed identities are useful for secure communication between Azure services, such as an application connecting to a database or retrieving secrets from Azure Key Vault.

Question 228

Which Azure service provides centralized monitoring and alerting for Azure resources, including Azure SQL databases?

1. Azure Monitor
2. Azure Storage
3. Azure Resource Manager
4. Azure Policy

Correct Answer: 1

Explanation

Azure Monitor collects and analyzes monitoring data from Azure resources and applications. For Azure SQL databases, administrators can use Azure Monitor to review metrics, configure alerts, and investigate resource usage. Metrics such as CPU, storage, connections, and workload-related measurements can help identify abnormal behavior. Administrators can create alert rules that notify teams when selected thresholds or conditions are reached, allowing potential issues to be investigated before they become major outages.

Question 229

Which query language is commonly used to analyze logs stored in an Azure Log Analytics workspace?

1. T-SQL
2. Kusto Query Language
3. PowerShell
4. JSON

Correct Answer: 2

Explanation

Kusto Query Language (KQL) is used to query and analyze data stored in services such as Azure Monitor Logs and Log Analytics workspaces. Administrators can use KQL to filter records, aggregate information, identify patterns, and investigate application or infrastructure issues. Although T-SQL is used for relational database queries, KQL is designed for large amounts of telemetry, log, and monitoring data. Understanding KQL is valuable when investigating Azure SQL monitoring information.

Question 230

Which Azure service can provide recommendations for improving the performance, reliability, security, and cost efficiency of Azure resources?

1. Azure Advisor
2. Azure DNS
3. Azure Data Factory
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resource configurations and usage and provides recommendations across areas such as cost, performance, reliability, security, and operational excellence. Database administrators can use Advisor recommendations to identify opportunities to improve Azure SQL deployments. For example, recommendations may highlight resource-sizing or configuration considerations. Advisor does not automatically replace database performance analysis; administrators should also use tools such as Query Store, Azure Monitor, and execution plans for detailed SQL workload investigation.

Question 231

Which Azure service helps administrators analyze and manage Azure spending?

1. Azure Cost Management
2. Azure Key Vault
3. Azure Monitor
4. Azure Virtual Network

Correct Answer: 1

Explanation

Azure Cost Management provides tools for monitoring, analyzing, and managing Azure spending. Administrators can review costs, create budgets, analyze usage trends, and identify areas where spending may be higher than expected. For Azure SQL environments, this can help compare different purchasing models and resource configurations. Cost analysis should be considered alongside performance and availability requirements so that databases are not unnecessarily over-provisioned or configured below the level required by the workload.

Question 232

Which Azure SQL Database feature helps maintain a readable secondary copy of a database in another region for disaster recovery?

1. Active geo-replication
2. Database firewall
3. Query Store
4. Dynamic Data Masking

Correct Answer: 1

Explanation

Active geo-replication creates a secondary readable database in another Azure region. Changes from the primary database are replicated to the secondary, allowing the secondary to be used for disaster recovery and, in some scenarios, read workloads. Administrators can initiate a planned or forced failover depending on the situation. Active geo-replication is different from geo-redundant backup because it maintains a continuously replicated database rather than simply storing backup copies in another region.

Question 233

What is the primary purpose of an Azure SQL Database failover group?

1. To automatically manage regional failover for databases
2. To create database indexes
3. To compress database tables
4. To replace firewall rules

Correct Answer: 1

Explanation

An Azure SQL Database failover group helps manage disaster recovery across Azure regions by grouping databases and providing a listener endpoint for applications. In the event of a regional outage or planned maintenance, the databases can be failed over to the secondary region. Applications can continue connecting through the failover group listener instead of being configured with a specific database server endpoint. This simplifies application connectivity during regional disaster recovery operations.

Question 234

Which Azure SQL Database feature provides a stable connection endpoint that can direct applications to the current primary database during failover?

1. Failover group listener
2. Storage endpoint
3. Private DNS zone only
4. Query Store

Correct Answer: 1

Explanation

A failover group listener provides a stable connection endpoint for applications participating in an Azure SQL Database failover group. When a failover occurs, the listener can direct connections to the appropriate primary database in the new region. This reduces the need to modify application connection strings during disaster recovery. Administrators should configure applications to use the appropriate read-write or read-only listener depending on whether the application needs access to the primary or secondary database.

Question 235

Which Azure SQL Database feature helps encrypt data at rest without requiring application changes?

1. Transparent Data Encryption
2. Dynamic Data Masking
3. Row-Level Security
4. SQL Server Audit

Correct Answer: 3

Explanation

Transparent Data Encryption (TDE) encrypts database files, backups, and related data at rest. Because the encryption and decryption process is handled by the database platform, applications generally do not need to be modified to use TDE. TDE helps protect stored data if underlying storage or backup files are accessed without authorization. It is different from Always Encrypted, which is designed to protect sensitive column data from database administrators and other unauthorized database access.

Question 236

Which security feature restricts users so they can see only the rows they are authorized to access?

1. Transparent Data Encryption
2. Row-Level Security
3. Data compression
4. Query Store

Correct Answer: 2

Explanation

Row-Level Security (RLS) controls access to individual rows in a database table based on the identity or role of the user. A security predicate determines which rows a particular user can access. This is useful in multi-tenant applications or environments where different users should see only their own organization’s data. RLS provides data-level authorization without requiring separate tables for every user or tenant, but administrators must carefully design and test the security predicates.

Question 237

Which Azure SQL security feature replaces sensitive data with masked values for users who do not need to see the original information?

1. Dynamic Data Masking
2. Transparent Data Encryption
3. Database partitioning
4. Query Store

Correct Answer: 1

Explanation

Dynamic Data Masking helps limit exposure of sensitive information by presenting masked values to users who do not have permission to view the original data. The underlying data remains unchanged in the database. For example, portions of an email address or phone number can be hidden from unauthorized users. Dynamic Data Masking is an additional security layer, not encryption, and it should not be treated as a replacement for proper authorization, encryption, or other database security controls.

Question 238

Which Azure SQL feature records database activity for auditing and compliance purposes?

1. Azure SQL Auditing
2. Elastic pools
3. Serverless compute
4. Database snapshots

Correct Answer: 1

Explanation

Azure SQL Auditing records database events and activities that can be used for security monitoring, compliance, and investigation. Audit information can help administrators understand who accessed data and what types of database operations occurred. Depending on the configuration, audit logs can be stored in supported Azure storage or monitoring destinations. Administrators should define appropriate retention and access controls for audit records because audit data itself may contain sensitive operational information.

Question 239

Which Azure SQL security service can detect suspicious database activities and provide advanced threat protection?

1. Microsoft Defender for SQL
2. Azure Advisor
3. Azure Cost Management
4. Azure DNS

Correct Answer: 4

Explanation

Microsoft Defender for SQL provides additional security capabilities for SQL Server and Azure SQL environments. It can help detect suspicious activities, potential vulnerabilities, and other security threats. Administrators can use its findings to investigate potentially harmful behavior and improve the security posture of database workloads. Defender for SQL complements other controls such as firewall rules, Microsoft Entra authentication, encryption, auditing, and least-privilege permissions rather than replacing them.

Question 240

Which Azure SQL Database feature helps retain historical versions of rows so administrators can query data as it existed at an earlier time?

1. Temporal tables
2. Firewall rules
3. Elastic pools
4. Database roles

Correct Answer: 1

Explanation

Temporal tables maintain historical versions of row data automatically when configured as system-versioned temporal tables. The database stores previous versions so administrators can query how data looked at an earlier point in time. This can be useful for auditing, troubleshooting, and analyzing historical changes. Temporal tables are different from backups because they focus on row history within the database rather than providing a complete database recovery mechanism.