Microsoft DP-300: Administering Microsoft Azure SQL Solutions Practice Exam
Cover all five DP-300 skill areas — planning data platform resources, securing the environment, monitoring and optimizing, automating tasks, and high availability and disaster recovery — with scenario questions, immediate feedback in Learn mode, and full timed simulation in Exam mode.
Start 24-hour free trial →DP-300 exam at a glance
- Vendor
- Microsoft (Azure)
- Exam code
- DP-300 (Administering Microsoft Azure SQL Solutions)
- Certification
- Microsoft Certified: Azure Database Administrator Associate
- Level
- Associate (role-based; database administration)
- Blueprint
- Skills measured as of April 24, 2026 (current edition)
- Format
- Typically 40–60 questions; multiple choice, multiple response, drag-and-drop, and case studies
- Duration
- About 100–120 minutes
- Passing score
- 700 of 1000 (scaled, not a raw percentage)
- Delivery
- Pearson VUE test center or online proctored
- Recommended experience
- Hands-on administration of Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure VMs, and SQL Server on-premises, with strong T-SQL skills
- Cost (USD)
- $165 USD list price (associate tier; varies by region)
- Validity
- Valid one year; renewed free via an online assessment on Microsoft Learn
Source: Microsoft Learn — DP-300 study guide (skills measured) and the Azure Database Administrator Associate certification page. Verify current details with Microsoft before scheduling.
About the Microsoft Certified: Azure Database Administrator Associate certification
DP-300 validates that you can administer Microsoft Azure SQL solutions — managing the operational aspects of cloud-native and hybrid data platforms built on Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure Virtual Machines, and SQL Server on-premises. It is a database administrator exam: expect deep, scenario-based questions on provisioning and scaling, security and encryption, performance monitoring and query tuning, automation, and high availability and disaster recovery, with heavy use of T-SQL. A single exam earns the Azure Database Administrator Associate certification.
DP-300 is an active exam (current edition dated April 24, 2026, with only minor changes from the prior version). Note that while Microsoft retired some data-track exams in 2026 — for example, the DP-100 data-scientist exam retired June 1, 2026 — DP-300 remains current. It is not an entry point: Microsoft expects real database administration experience. If you are new to Azure data services, start with DP-900 Azure Data Fundamentals first, and AZ-900 Azure Fundamentals covers the underlying cloud platform.
Every PowerKram practice question maps to one of the five DP-300 skill areas and links to the specific Microsoft Learn page it was derived from, so your weak spots become a focused reading list rather than a guess.
DP-300 skill areas and weights
Five skill areas, with three tied as heaviest at 20–25% — securing the environment, monitoring and optimizing, and high availability and disaster recovery. Microsoft published each area as a weighting range rather than an exact percentage; the ranges below are reproduced as Microsoft stated them in the current edition.
Recommend and deploy Azure SQL offerings (Azure SQL Database, Managed Instance, SQL Server on Azure VMs, Azure Arc-enabled SQL, SQL in Microsoft Fabric); configure for scale and performance (partitioning, data compression); and plan and implement migration strategies (online and offline, between Azure SQL services and from on-premises).
Configure authentication and authorization (Microsoft Entra ID, security principals, least privilege, T-SQL); implement security for data at rest and in transit (transparent data encryption, Always Encrypted with VBS enclaves, firewall rules, private links); and implement compliance controls (data classification, auditing, dynamic data masking, ledger, row-level security).
Monitor resource activity and performance (baselines, metrics, database watcher, Extended Events); monitor and optimize query performance (Query Store, blocking, DMVs, index changes, execution plans, Intelligent Insights); and configure databases for optimal performance (index and statistics maintenance, automatic tuning, Resource Governor, intelligent query processing).
Create and manage SQL Server Agent jobs (schedules, alerts, notifications, troubleshooting); automate deployment of database resources with ARM and Bicep templates, Azure PowerShell, and Azure CLI; and create and manage database tasks in Azure, including elastic jobs and automation-driven tasks.
Plan an HA/DR strategy from RPO/RTO requirements (hybrid and Azure-specific solutions, testing); plan and perform backup and restore (native tools, point-in-time restore, long-term retention, T-SQL, cloud storage); and configure HA/DR (active geo-replication, Always On availability groups, failover groups, Failover Cluster Instances, log shipping).
Source: Microsoft Learn — DP-300 study guide (skills measured, as of April 24, 2026). Microsoft published weightings as ranges; securing the environment, monitoring and optimizing, and HA/DR are tied as the heaviest areas.
Who DP-300 is for
Azure Database Administrator Associate is aimed at data professionals who manage SQL-based data platforms:
- Database administrators managing Azure SQL Database, Azure SQL Managed Instance, and SQL Server on Azure VMs and on-premises.
- Data platform engineers responsible for security, performance, automation, and availability of SQL workloads.
- Infrastructure and operations staff running hybrid SQL Server environments and migrations to Azure.
- T-SQL practitioners automating and optimizing day-to-day database operations.
DP-300 is not an entry point — Microsoft expects real database administration experience and strong T-SQL. If you are new to Azure data services, the DP-900 Azure Data Fundamentals exam is the conceptual starting point, and AZ-900 Azure Fundamentals covers the cloud platform. For the roles this credential supports — with skills, tools, and salary ranges — see the Data Engineer career path.
What this DP-300 practice exam delivers
Learn mode
Get the correct answer, the reasoning, and a direct link to the exact Microsoft Learn page each question was derived from — immediately after each question. Built for the configuration and troubleshooting scenarios DP-300 tests across security, performance, automation, and HA/DR.
Exam mode
A timed run in the DP-300 shape — roughly 40 to 60 questions in about 100 to 120 minutes, including case studies — so you build pacing for the exam’s scenario-heavy format.
Source-linked explanations
Every answer cites the exact Microsoft Learn documentation page it was built from — so you can verify Azure SQL behavior and configuration, not just memorize.
Score by skill area
Results break down by the five DP-300 areas — planning, security, monitoring and optimization, automation, and HA/DR — so practice tells you exactly which area to revisit.
Sample DP-300 practice questions
Ten free questions across the five DP-300 skill areas, with full explanations and source links to the Microsoft Learn pages each is derived from. The complete bank is available with the 24-hour trial.
A team needs a fully managed Azure SQL option that supports near-100% SQL Server surface compatibility — including SQL Agent, cross-database queries, and CLR — for a lift-and-shift migration.
Which Azure SQL offering should you recommend?
- Azure SQL Managed Instance
- Azure SQL Database single database (serverless)
- Azure Blob Storage
- Azure Table Storage
Show answer & explanation
Correct: A — Azure SQL Managed Instance. Managed Instance is the fully managed PaaS option with near-complete SQL Server engine compatibility, including SQL Agent, cross-database queries, and CLR — exactly the lift-and-shift requirement described.
Why not the others: a single database (B) is fully managed but lacks instance-scoped features like SQL Agent and cross-database queries; Blob Storage (C) and Table Storage (D) are not relational SQL engines.
Source: Microsoft Learn — Azure SQL Managed Instance → Further reading: PowerKram — DP-900 Azure Data Fundamentals →You must move an on-premises SQL Server database to Azure SQL Managed Instance with the least possible downtime for a business-critical application.
Which migration approach should you choose?
- An offline migration during a long maintenance window
- An online migration that keeps the source available during transfer
- Exporting to CSV and re-importing manually
- Recreating the schema by hand
Show answer & explanation
Correct: B — an online migration that keeps the source available during transfer. Online migration continuously syncs changes so the source stays available until a brief final cutover, minimizing downtime — exactly the requirement for a business-critical app.
Why not the others: an offline migration (A) requires downtime for the whole transfer; CSV export/import (C) and hand-recreating schema (D) are error-prone and cause extended outages.
Source: Microsoft Learn — SQL Server to Azure SQL migration →A security policy requires that data files, backups, and transaction logs for an Azure SQL Database be encrypted at rest, transparently, with no application changes.
Which feature meets this requirement?
- Dynamic data masking
- Row-level security
- Transparent data encryption (TDE)
- A firewall rule
Show answer & explanation
Correct: C — transparent data encryption (TDE). TDE encrypts data files, backups, and transaction logs at rest transparently, requiring no application changes — exactly the requirement. It is on by default for Azure SQL Database.
Why not the others: dynamic data masking (A) obscures data in query results, not at rest; row-level security (B) filters rows by user; a firewall rule (D) controls network access, not encryption.
Source: Microsoft Learn — Transparent data encryption → Further reading: PowerKram — AZ-104 Azure Administrator →Sensitive columns such as credit card numbers must be encrypted so that even database administrators cannot see the plaintext, with encryption and decryption happening in the client driver.
Which feature should you implement?
- Transparent data encryption (TDE)
- Always Encrypted
- A server-level firewall rule
- Auditing
Show answer & explanation
Correct: B — Always Encrypted. Always Encrypted encrypts sensitive columns in the client driver so plaintext is never visible to the database engine or administrators — exactly the requirement. VBS enclaves extend it to richer operations.
Why not the others: TDE (A) encrypts at rest but administrators can still query plaintext; a firewall rule (C) controls access; auditing (D) records events. None hides plaintext from the DBA.
Source: Microsoft Learn — Always Encrypted →A support team needs to query a customer table, but email addresses should appear obfuscated to them while remaining intact in storage and for privileged users.
Which feature should you use?
- Transparent data encryption (TDE)
- Active geo-replication
- Dynamic data masking
- Query Store
Show answer & explanation
Correct: C — dynamic data masking. Dynamic data masking obscures sensitive values such as email addresses in query results for non-privileged users while leaving the stored data unchanged — exactly the requirement.
Why not the others: TDE (A) encrypts at rest; active geo-replication (B) is an HA/DR feature; Query Store (D) captures query performance history. None masks results by user.
Source: Microsoft Learn — Dynamic data masking → Further reading: PowerKram — DP-900 Azure Data Fundamentals →You need to identify which queries regressed after a recent change, comparing their execution plans and runtime statistics over time, and force a known-good plan.
Which Azure SQL feature should you use?
- Query Store
- Transparent data encryption
- A failover group
- Elastic jobs
Show answer & explanation
Correct: A — Query Store. Query Store captures query execution plans and runtime statistics over time, making plan regressions visible and allowing you to force a known-good plan — exactly the tuning scenario described.
Why not the others: TDE (B) encrypts at rest; a failover group (C) is HA/DR; elastic jobs (D) automate tasks across databases. None analyzes query-plan regressions.
Source: Microsoft Learn — Monitoring performance with Query Store →Users report intermittent slowness. You suspect one session is holding locks that block others and want to identify the blocking chain in real time.
Which approach best identifies the blocking session?
- Configuring long-term backup retention
- Enabling transparent data encryption
- Creating a failover group
- Querying dynamic management views (DMVs)
Show answer & explanation
Correct: D — querying dynamic management views (DMVs). DMVs expose live session, request, and waits information to identify blocking chains in real time — exactly the diagnostic approach DP-300 tests for session blocking.
Why not the others: long-term backup retention (A) is a recovery setting; TDE (B) encrypts at rest; a failover group (C) is HA/DR. None diagnoses live blocking.
Source: Microsoft Learn — Azure SQL Database monitoring → Further reading: PowerKram — AZ-104 Azure Administrator →You must run scheduled index maintenance and backups across many databases on an Azure SQL Managed Instance, with alerts on failure.
Which built-in tool should you use for scheduling these jobs?
- Azure Blob Storage lifecycle rules
- SQL Server Agent
- Transparent data encryption
- A private endpoint
Show answer & explanation
Correct: B — SQL Server Agent. SQL Server Agent (available on Managed Instance and SQL Server) schedules maintenance jobs like index rebuilds and backups, with alerts and notifications on failure — exactly the automation described.
Why not the others: Blob lifecycle rules (A) manage storage tiers; TDE (C) encrypts at rest; a private endpoint (D) provides private connectivity. None schedules database maintenance jobs.
Source: Microsoft Learn — SQL Managed Instance (SQL Agent) →A business-critical Azure SQL Database needs automatic regional failover with a stable connection string that applications keep using after a failover, without manual reconfiguration.
Which capability should you configure?
- A point-in-time restore
- Dynamic data masking
- Transparent data encryption
- A failover group
Show answer & explanation
Correct: D — a failover group. A failover group provides automatic regional failover with a stable read-write listener endpoint, so applications keep the same connection string after failover — exactly the requirement. It builds on active geo-replication.
Why not the others: a point-in-time restore (A) recovers to an earlier time but is not automatic regional failover; dynamic data masking (B) and TDE (C) are security features, not HA/DR.
Source: Microsoft Learn — Failover groups →You need a continuously synchronized, readable secondary copy of an Azure SQL Database in another region, which you can also fail over to for disaster recovery.
Which feature provides this?
- Log shipping only
- A SQL Server Agent job
- Active geo-replication
- Dynamic data masking
Show answer & explanation
Correct: C — active geo-replication. Active geo-replication maintains continuously synchronized, readable secondary replicas in other regions that you can fail over to for DR — exactly the requirement. Failover groups add automatic failover and a stable endpoint on top of it.
Why not the others: log shipping (A) is a SQL Server VM/on-prem technique, not the native Azure SQL Database feature described; a SQL Agent job (B) automates tasks; dynamic data masking (D) is a security feature.
Source: Microsoft Learn — Active geo-replication →Keep going: study & career resources
DP-300 is the database-administration credential on the Azure data track. Below it, the data-fundamentals exam builds the base — and the data-engineer career track shows where these SQL and platform skills lead.
Deep dive: DP-300 format, the five areas, renewal, and study path
Exam format and scoring
DP-300 delivers roughly 40 to 60 questions in about 100 to 120 minutes, with a passing score of 700 out of 1000 (scaled). It includes multiple choice, multiple response, drag-and-drop, and one or more case studies. It is a hands-on administration exam: expect scenarios about choosing the right Azure SQL offering, securing data, tuning queries, automating maintenance, and configuring HA/DR — often with T-SQL. There is no penalty for wrong answers. See the DP-900 Data Fundamentals path →
The five skill areas
Three areas are tied as heaviest at 20–25%: securing the environment (authentication, encryption, compliance controls), monitoring and optimizing (Query Store, DMVs, indexing, automatic tuning), and HA/DR (geo-replication, availability groups, failover groups, backup and restore). Planning and implementing resources and automating tasks each carry 15–20%. Knowing which Azure SQL offering and feature fits a requirement — and how to configure it with T-SQL — is the core DP-300 skill. See the AZ-104 Administrator path →
Azure SQL offerings
A recurring DP-300 theme is choosing among Azure SQL Database (single database and elastic pools), Azure SQL Managed Instance (near-full SQL Server compatibility), and SQL Server on Azure Virtual Machines (full control, IaaS). The exam tests when each fits — based on compatibility needs, management overhead, and features like SQL Agent or cross-database queries — and how to migrate between on-premises and these options with minimal downtime. See the DP-900 Data Fundamentals path →
Realistic study path
Most candidates come to DP-300 with SQL Server or Azure SQL administration experience and need four to eight weeks of focused study. Work through the official Microsoft Learn DP-300 learning path, build labs (an Azure SQL Database with TDE and Always Encrypted, a Managed Instance with SQL Agent jobs, a failover group across regions, Query Store tuning), then drill scenario questions in PowerKram’s Learn mode and finish with timed Exam-mode runs. Spend the most time on security, performance, and HA/DR, since together they are the bulk of the exam. See the AZ-900 Azure Fundamentals path →
Cost, renewal, and scheduling
List price is $165 USD (associate tier; regional pricing varies). The Azure Database Administrator Associate certification is valid for one year and is renewed free through an online assessment on Microsoft Learn during the six months before it expires. The exam is delivered through Pearson VUE at a test center or online with a proctor. Microsoft sometimes offers discounted or free vouchers through Virtual Training Day events. Azure Database Administrator Associate certification page →
Career outlook and next steps
DP-300 validates database-administration skills that map to database administrator, data platform engineer, and data engineer roles. It complements the AZ-104 Azure Administrator credential for infrastructure breadth and builds on DP-900 fundamentals. For SQL professionals moving to the cloud, it is a strong, in-demand credential across hybrid data estates. Career Hub — Data Engineer →
Microsoft DP-300 (Azure Database Administrator Associate) exam FAQ
What are the DP-300 skill areas and weights?
Is DP-300 still active?
Does DP-300 have prerequisites?
What is the DP-300 passing score and format?
Does the certification expire?
Start your free 24-hour DP-300 practice trial
Full access to the question bank, both study modes, source-linked explanations, and score-by-skill-area. No credit card required.
Start free trial →