Free Microsoft DP-300 Exam Dumps Questions & Answers


Exam Code/Number:	DP-300Join the discussion
Exam Name:	Administering Relational Databases on Microsoft Azure
Certification:	Microsoft
Free Question Number:	503
Publish Date:	Aug 11, 2026
# of views:	12552
Rating 100%

Page: 1 / 101
Total 503 questions

Question 1

SIMULATION
You need to encrypt the LastName column of the SalesLT.Customer table in db1 by using Always Encrypted. You must use the Windows Certificate Store.
You may need to use SQL Server Management Studio and the Azure portal.

Correct Answer:

Solution 1 [Less complex]
Configure column encryption using Always Encrypted Wizard
The Always Encrypted Wizard is a powerful tool that allows you to set the desired Always Encrypted configuration for selected database columns. Depending on the current configuration and the desired target configuration, the wizard can encrypt a column, decrypt it (remove encryption), or re-encrypt it (for example, using a new column encryption key or an encryption type that is different from the current type, configured for the column). Multiple columns can be configured in a single run of the wizard.
Step 1: Open the Always Encrypted Wizard
You can launch the wizard at three different levels:
At a database level - if you want to encrypt multiple columns located in different tables.
At a table level - if you want to encrypt multiple columns located in the same table.
*-> At a column level - if you want to encrypt one specific column. [This option here] Step 2: Connect to your SQL Server with the Object Explorer component of SQL Server Management Studio.
Step 3: To encrypt an individual column, navigate to the column, right-click on it, and then select Encrypt Columns. [Select the LastName column of the SalesLT.Customer table in db1] Step 4: Column Selection page In this page, you select columns you want to encrypt, re-encrypt, or decrypt, and you define the target encryption configuration for the selected columns.
Step 5: If you want the wizard to encrypt or re-encrypt one or more columns using a new column encryption key, pick a key containing (New) in its name. The wizard will generate the key.
Step 6: Master Key Configuration page
If you have selected an autogenerated column encryption key for any column on the previous page, in this page you need to either select an existing column master key or configure a new column master key that will encrypt the column encryption key.
When configuring a new column master key, you can either pick an existing key in Windows Certificate Store or in Azure Key Vault and have the wizard to create just a metadata object for the key in the database, or you can choose to generate both the key and the metadata object describing the key in the database.
Step 7: Click "Next" and follow the wizard's instructions to complete the process.
Solution 2 [A bit more complex. Use for reference]
To encrypt a specific column using Always Encrypted with a Windows Certificate Store, you'll first need to set up a Column Master Key (CMK) [Task 1] and a Column Encryption Key (CEK) [Task
2]. The CMK will be protected by a certificate in the Windows Certificate Store, and the CEK will then be used to encrypt the data in your chosen column.
Task 1: Set up a Column Master Key (CMK)
Create a self-signed certificate using SQL Server Management Studio (SSMS) Provision Column Master Keys with the New Column Master Key Dialog The New Column Master Key dialog allows you to generate a column master key or pick an existing key in a key store, and create column master key metadata for the created or selected key in the database.
Step 1: Using Object Explorer, navigate to the Security -> Always Encrypted Keys node under your database.
Step 2: Right-click on the Column Master Keys node and select New Column Master Key....
Step 3: In the New Column Master Key dialog, enter the name of the column master key metadata object.
Step 4: Select a key store:
*-> Certificate Store - Current User - indicates the Current User certificate store location in the Windows Certificate Store, which is your personal store. [Select this one] Certificate Store - Local computer Azure Key Vault Etc.
Step 5: If you're using SQL Server 2019 (15.x) and your SQL Server instance is configured with a secure enclave, you can select the Allow enclave computations checkbox to make the master key enclave-enabled. [Skip] Step 6: Pick an existing key in your key store, or click the Generate Key or Generate Certificate button, to create a key in the key store. [Pick existing] Step 7: Click OK and the new key appears in the list.
Task 2: Create a Column Encryption Key (CEK)
1. In SSMS, navigate to "Always Encrypted Keys" -> "Column Encryption Keys".
2. Right-click and select "New Column Encryption Key".
3. Give the CEK a name.
4. Select the CMK you just created. [Created in Stage 1]
5. Click "OK".
Task 3: Encrypt the data in your chosen column.
1. Right-click on the specific column you want to encrypt in Object Explorer. [Select the LastName column of the SalesLT.Customer table in db1]
2. Select "Tasks" -> "Encrypt Columns".
3. The Always Encrypted Wizard will guide you through the process:
4. Select the column you want to encrypt. [Select the LastName column of the SalesLT.Customer table in db1]
5. Choose the encryption type (Deterministic or Randomized).
6. Select the CEK you created. [Created in Stage 2]
7. Click "Next" and follow the wizard's instructions to complete the process.
Reference:
https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-wizard
https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/create-and-store-column-master-keys-always-encrypted

Question 2

Drag and Drop Question
You have an Azure virtual machine named VM1 that runs Red Hat Enterprise Linux (RHEL).
You need to install and configure Microsoft SQL Server 2022 Standard on VM1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 3

Case Study 2 - Contoso, Ltd
Overview
General Overview
Contoso, Ltd. is a financial data company that has 100 employees. The company delivers financial data to customers.
Physical Locations
Contoso has a datacenter in Los Angeles and an Azure subscription. All Azure resources are in the US West 2 Azure region. Contoso has a 10-Gb ExpressRoute connection to Azure.
The company has customers worldwide.
Existing Environment
Active Directory
Contoso has a hybrid Azure Active Directory (Azure AD) deployment that syncs to on-premises Active Directory.
Database Environment
Contoso has SQL Server 2017 on Azure virtual machines shown in the following table.

SQL1 and SQL2 are in an Always On availability group and are actively queried. SQL3 runs jobs, provides historical data, and handles the delivery of data to customers.
The on-premises datacenter contains a PostgreSQL server that has a 50-TB database.
Current Business Model
Contoso uses Microsoft SQL Server Integration Services (SSIS) to create flat files for customers.
The customers receive the files by using FTP.
Requirements
Planned Changes
Contoso plans to move to a model in which they deliver data to customer databases that run as platform as a service (PaaS) offerings. When a customer establishes a service agreement with Contoso, a separate resource group that contains an Azure SQL database will be provisioned for the customer. The database will have a complete copy of the financial data. The data to which each customer will have access will depend on the service agreement tier. The customers can change tiers by changing their service agreement.
The estimated size of each PaaS database is 1 TB.
Contoso plans to implement the following changes:
* Move the PostgreSQL database to Azure Database for PostgreSQL during the next six months.
* Upgrade SQL1, SQL2, and SQL3 to SQL Server 2019 during the next few months.
* Start onboarding customers to the new PaaS solution within six months.
Business Goals
Contoso identifies the following business requirements:
* Use built-in Azure features whenever possible.
* Minimize development effort whenever possible.
* Minimize the compute costs of the PaaS solutions.
* Provide all the customers with their own copy of the database by using the PaaS solution.
* Provide the customers with different table and row access based on the customer's service agreement.
* In the event of an Azure regional outage, ensure that the customers can access the PaaS solution with minimal downtime. The solution must provide automatic failover.
* Ensure that users of the PaaS solution can create their own database objects but he prevented from modifying any of the existing database objects supplied by Contoso.
Technical Requirements
Contoso identifies the following technical requirements:
* Users of the PaaS solution must be able to sign in by using their own corporate Azure AD credentials or have Azure AD credentials supplied to them by Contoso. The solution must avoid using the internal Azure AD of Contoso to minimize guest users.
* All customers must have their own resource group, Azure SQL server, and Azure SQL database. The deployment of resources for each customer must be done in a consistent fashion.
* Users must be able to review the queries issued against the PaaS databases and identify any new objects created.
* Downtime during the PostgreSQL database migration must be minimized.
Monitoring Requirements
Contoso identifies the following monitoring requirements:
* Notify administrators when a PaaS database has a higher than average CPU usage.
* Use a single dashboard to review security and audit data for all the PaaS databases.
* Use a single dashboard to monitor query performance and bottlenecks across all the PaaS databases.
* Monitor the PaaS databases to identify poorly performing queries and resolve query performance issues automatically whenever possible.
PaaS Prototype
During prototyping of the PaaS solution in Azure, you record the compute utilization of a customer's Azure SQL database as shown in the following exhibit.

Role Assignments
For each customer's Azure SQL Database server, you plan to assign the roles shown in the following exhibit.

Hotspot Question
You are evaluating the role assignments.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Question 4

Hotspot Question
You have an Azure SQL database named DB1 that is hosted on a SQL server named Server1.
You need to restore DB1. The solution must only restore data that is older than 36 hours.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 5

You have an Azure subscription linked to an Azure Active Directory (Azure AD) tenant. The subscription contains 10 virtual machines that run Windows Server 2019 and host Microsoft SQL Server 2019 instances.
You need to ensure that you can manage the SQL Server instances by using a single user account.
What should you do first?

A.Deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain.
B.Enable a system-assigned managed identity on each virtual machine.
C.Enable a user-assigned managed identity on each virtual machine.
D.Join the virtual machines to the Azure AD tenant.

DP-300 Dumps Other Version	QA's	Publish Date
Microsoft.DP-300.v2026-03-26.q314	314	Mar 26, 2026
Microsoft.DP-300.v2025-11-10.q467	467	Nov 10, 2025
Microsoft.DP-300.v2025-09-23.q328	328	Sep 23, 2025
Microsoft.DP-300.v2025-01-20.q271	271	Jan 20, 2025
Microsoft.DP-300.v2024-11-13.q305	305	Nov 13, 2024
Microsoft.DP-300.v2024-05-19.q334	334	May 19, 2024
Microsoft.DP-300.v2023-12-29.q108	108	Dec 29, 2023
Microsoft.DP-300.v2023-05-24.q170	170	May 24, 2023
Microsoft.DP-300.v2023-01-16.q233	233	Jan 16, 2023
Microsoft.DP-300.v2022-09-10.q107	107	Sep 10, 2022
Microsoft.DP-300.v2022-05-27.q188	188	May 27, 2022