View Full Microsoft DP-800 Exam Dumps and Practice Test Dumps.

 

Question 301

Which Azure SQL Database feature provides automatic failover capabilities between databases in different Azure regions?

1. Azure SQL Auditing
2. Auto-failover groups
3. Query Store
4. Elastic pools

Correct Answer: 2

Explanation

Auto-failover groups are designed to manage disaster recovery between Azure SQL databases in different regions. They provide a listener endpoint that applications can use to connect to the current primary database. During a regional failure or planned failover, databases can be switched to the secondary region. This reduces the need to change application connection strings manually. Administrators should configure failover groups according to recovery objectives and test failover procedures regularly.

Question 302

Which Azure SQL Database feature provides a secondary database that can be used for read workloads and disaster recovery?

1. Active geo-replication
2. Dynamic Data Masking
3. Database auditing
4. Data compression

Correct Answer: 1

Explanation

Active geo-replication creates one or more readable secondary databases in different Azure regions. Changes from the primary database are replicated to the secondary database asynchronously. The secondary can support disaster recovery and, depending on application design, read-only workloads. Administrators can initiate a failover when required. Because replication is asynchronous, there can be some replication lag, so administrators should consider the possible amount of data loss when defining recovery objectives.

Question 303

Which Azure SQL Database availability option helps protect a database from a failure affecting an individual availability zone?

1. Zone redundancy
2. Query Store
3. Elastic pool
4. BACPAC

Correct Answer: 1

Explanation

Zone redundancy distributes supported database resources across availability zones within an Azure region. This helps protect the database from certain failures affecting a single availability zone. Zone redundancy is different from geo-replication because it focuses on resilience within a region rather than maintaining a database copy in another region. Administrators should select availability options according to workload requirements, service-tier support, regional availability, recovery objectives, and cost considerations.

Question 304

Which recovery objective defines the maximum acceptable amount of data that can be lost after a failure?

1. RTO
2. RPO
3. SLA
4. MTTR

Correct Answer: 2

Explanation

Recovery Point Objective (RPO) defines the maximum amount of data loss that an organization is willing to accept after a failure. For example, an RPO of 15 minutes means the organization aims to recover with no more than approximately 15 minutes of data loss. Backup frequency, replication technology, and transaction-log protection can influence RPO. Administrators should establish RPO requirements with business stakeholders before designing backup and disaster recovery solutions.

Question 305

Which recovery objective defines the maximum acceptable time required to restore a service after a failure?

1. RPO
2. RTO
3. SLA
4. Recovery point

Correct Answer: 2

Explanation

Recovery Time Objective (RTO) defines how quickly a service or database should be restored after an outage. For example, an organization with an RTO of one hour expects the database service to be recovered within that target. Different recovery solutions provide different recovery times, so administrators must select technologies based on business requirements. Testing restores and failovers is also important because a documented recovery procedure does not guarantee that the target RTO can actually be achieved.

Question 306

Which Azure SQL Database capability can restore a database to a selected point within the available backup retention period?

1. Point-in-time restore
2. Query Store
3. Database auditing
4. Index rebuild

Correct Answer: 1

Explanation

Point-in-time restore allows administrators to create a restored database from automated backups at a selected time within the supported retention period. This is useful after accidental data deletion, incorrect updates, or application problems. The restored database can represent the state of the original database at the selected recovery point. Administrators should verify retention settings and regularly test restoration procedures to ensure that the required recovery points are actually available when needed.

Question 307

Which Azure SQL Database capability is designed to preserve backups for compliance or long-term retention requirements?

1. Long-term retention
2. Query Store
3. Automatic tuning
4. Private Endpoint

Correct Answer: 1

Explanation

Long-term retention allows Azure SQL Database backups to be preserved for extended periods. Organizations can use this capability when regulations, auditing requirements, or internal policies require backups to remain available for months or years. LTR is different from normal short-term backup retention and should be planned according to business requirements. Administrators should also consider storage costs, retention policies, data residency requirements, and the process for restoring an archived backup.

Question 308

Which Azure SQL Database option provides private network connectivity without exposing the database through its public endpoint?

1. Private Endpoint
2. Public firewall rule
3. Query Store
4. Database snapshot

Correct Answer: 1

Explanation

A Private Endpoint provides a private IP address for accessing supported Azure services from an Azure virtual network. For Azure SQL Database, this allows applications to connect through private network connectivity instead of using the public database endpoint. Administrators should also configure appropriate DNS resolution and network access controls. Private endpoints are useful when organizations want to reduce public exposure and enforce network isolation for applications and database services.

Question 309

Which Azure networking technology provides private connectivity to Azure services by using private endpoints?

1. Azure Private Link
2. Azure Advisor
3. Azure Monitor
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Private Link provides private connectivity to supported Azure services through private endpoints. Traffic can remain within Azure’s private networking infrastructure instead of traversing the public internet. For Azure SQL Database, Private Link can be used with a private endpoint to provide private access from an Azure virtual network. Administrators should configure DNS and network security correctly so applications resolve the database hostname to the appropriate private IP address.

Question 310

Which Azure SQL Database setting can prevent connections through the public endpoint?

1. Public network access disabled
2. Query Store enabled
3. Automatic tuning enabled
4. Long-term retention enabled

Correct Answer: 2

Explanation

Disabling public network access prevents access to the database through its public endpoint. Applications can instead use supported private connectivity, such as a private endpoint, when private access is required. This configuration can significantly reduce the public attack surface. Administrators should verify that required applications and management processes can reach the database through the private network before disabling public access, because an incorrect network configuration can unintentionally block legitimate connections.

Question 311

Which Azure SQL Database authentication method uses a username and password stored as SQL database credentials?

1. Microsoft Entra authentication
2. SQL authentication
3. Managed identity only
4. Certificate authentication

Correct Answer: 2

Explanation

SQL authentication uses a SQL login name and password to authenticate users or applications. It is a traditional authentication method supported by Azure SQL services. Administrators must protect SQL credentials carefully and follow strong password and security practices. Where possible, Microsoft Entra authentication or managed identities can reduce the need to manage passwords. Regardless of the authentication method, database permissions should follow the principle of least privilege.

Question 312

Which authentication approach is generally preferred when an Azure application needs to access Azure SQL without storing a password?

1. Managed identity
2. SQL authentication with a hard-coded password
3. Anonymous authentication
4. Guest account

Correct Answer: 3

Explanation

A managed identity allows an Azure resource to authenticate to supported services without storing a password or client secret in application code. Azure manages the identity credentials, reducing credential-management risks. Administrators can grant the managed identity only the database permissions it requires. This approach is especially useful for Azure applications accessing Azure SQL Database, Key Vault, Storage, and other Azure services. Proper authorization is still required after authentication succeeds.

Question 313

Which Azure SQL Database component can contain multiple databases under the same logical management boundary?

1. Logical server
2. Database snapshot
3. Table
4. Schema

Correct Answer: 1

Explanation

An Azure SQL logical server can contain multiple Azure SQL databases and provides a management boundary for those databases. It also provides the server endpoint used for connections and can hold settings such as firewall configuration. A logical server should not be confused with a traditional SQL Server instance because Azure SQL Database is a platform service rather than a server that administrators manage at the operating-system level. The logical server is primarily an Azure management and connectivity concept.

Question 314

Which Azure SQL service generally requires integration with an Azure virtual network?

1. Azure SQL Managed Instance
2. Azure SQL Database
3. Azure Storage
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure SQL Managed Instance is deployed within an Azure virtual network and requires appropriate subnet networking configuration. This design supports many instance-level SQL Server capabilities and provides network integration suitable for enterprise workloads. Administrators must consider subnet configuration, routing, DNS, and network security when deploying Managed Instance. Azure SQL Database uses a different architecture and does not require administrators to deploy the database itself into a customer-managed virtual network.

Question 315

Which Azure SQL service provides the closest compatibility with traditional SQL Server instance-level workloads while remaining a managed service?

1. Azure SQL Managed Instance
2. Azure SQL Database serverless
3. Azure Storage
4. Azure Cosmos DB

Correct Answer: 4

Explanation

Azure SQL Managed Instance provides a managed SQL Server environment with broad compatibility for traditional SQL Server workloads. It supports many instance-level features and capabilities that make migration easier for applications that depend on features beyond a single Azure SQL Database. Microsoft manages the infrastructure, patching, and platform operations. Administrators still manage databases, security, configuration, and workload performance. Managed Instance is often selected when minimizing application changes is an important migration goal.

Question 316

Which Azure option gives an administrator the greatest control over the Windows operating system running SQL Server?

1. Azure SQL Database
2. Azure SQL Managed Instance
3. SQL Server on Azure Virtual Machines
4. Azure Synapse Analytics

Correct Answer: 3

Explanation

SQL Server on Azure Virtual Machines provides operating-system-level control because the SQL Server instance runs on a customer-managed Azure virtual machine. Administrators can manage the operating system, SQL Server installation, configuration, file locations, and many other settings. This flexibility also creates additional management responsibilities, including operating system patching and SQL Server maintenance. Organizations often choose this option when applications require specific SQL Server or operating-system configurations unavailable in fully managed services.

Question 317

Which Azure SQL service is best suited when an organization wants Microsoft to manage the operating system and database platform infrastructure?

1. SQL Server on Azure VM
2. Azure SQL Database
3. Self-hosted SQL Server
4. SQL Server on a physical server

Correct Answer: 2

Explanation

Azure SQL Database is a platform-as-a-service offering in which Microsoft manages the underlying infrastructure and many administrative tasks. Administrators do not need to maintain the operating system or install SQL Server manually. Instead, they focus on database configuration, security, performance, connectivity, and application requirements. This reduces operational overhead compared with SQL Server running on a virtual machine. Azure SQL Database is appropriate when the workload can operate within the capabilities of the managed database platform.

Question 318

Which Azure service can provide centralized storage for SQL Server encryption keys and certificates?

1. Azure Key Vault
2. Azure Monitor
3. Azure Advisor
4. Azure DNS

Correct Answer: 1

Explanation

Azure Key Vault provides secure storage and management for cryptographic keys, secrets, and certificates. SQL Server and Azure SQL-related solutions can integrate with Key Vault for supported encryption scenarios. Centralizing key management can improve security because sensitive cryptographic material does not need to be stored directly in application code or ordinary configuration files. Administrators should use appropriate identity permissions and access policies to ensure that only authorized services and users can access keys.

Question 319

Which security principle requires database users and applications to receive only the permissions they actually need?

1. Least privilege
2. Maximum privilege
3. Shared access
4. Anonymous access

Correct Answer: 3

Explanation

The principle of least privilege means users and applications should receive only the permissions necessary to perform their required tasks. This reduces the potential impact if an account is compromised or an application behaves unexpectedly. For example, an application that only needs to read data should not automatically receive permissions to modify or delete tables. Administrators can implement least privilege using database roles, specific GRANT permissions, Microsoft Entra identities, and carefully designed application accounts.

Question 320

Which T-SQL statement grants a user or role permission to perform a specific database operation?

1. DENY
2. REVOKE
3. GRANT
4. DROP

Correct Answer: 3

Explanation

The GRANT statement gives a user, role, or other principal permission to perform a specific database operation. For example, an administrator can grant SELECT permission on a table or EXECUTE permission on a stored procedure. DENY explicitly prevents a permission, while REVOKE removes a previously granted or denied permission in the applicable permission hierarchy. Administrators should use GRANT carefully and follow least-privilege principles when designing database security.