Q01 - Question
Your organization participates in the Microsoft Software Assurance (SA) program. It already owns a valid SQL Server license for its on-premises servers. You plan to deploy a SQL Server VM in Azure and apply the existing license to it. Which approach should you use?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. Deploy an Azure Marketplace image that contains a preconfigured SQL Server and pay per minute.
- B. Deploy a VM that doesn't contain a preconfigured SQL Server instance, apply the existing license (BYOL), and report the license usage to Microsoft within 10 days.
- C. Reserve the VM for one to three years and rely on the reservation to cover the SQL Server license.
- D. Apply Azure Hybrid Benefit for Windows Server to cover the SQL Server license.
B is correct.
Explanation: With SA, you can bring your own license (BYOL) when you deploy a VM that doesn't contain a preconfigured SQL Server instance. You must report the license usage to Microsoft by using the License Mobility verification form within 10 days of implementing the VM. You can install SQL Server manually from media or upload a VM image.
A is incorrect: A Marketplace image with a preconfigured SQL Server uses the pay-per-minute model. The SQL Server license cost is included in the VM cost, so it doesn't apply your existing license.
C is incorrect: A one-to-three-year VM reservation is a cost-saving option for persistent workloads. It doesn't license SQL Server.
D is incorrect: Azure Hybrid Benefit applies Windows Server licenses that you already own. It doesn't apply a SQL Server license.
Q02 - Question
A company must enable the public endpoint on Azure SQL Managed Instance for data communication. Security policy requires separation of duties between the database administrator and the network administrator. The database administrator has already run the PowerShell script that enables the public endpoint. What must happen next?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. The database administrator opens port 1433 on the network security group (NSG).
- B. A network administrator with permissions in scope Microsoft.Network/* opens port 3342 on the NSG and provides a user-defined route (UDR) to avoid asymmetric routing.
- C. A network administrator opens port 445 outbound on the managed instance subnet to reach the Azure file share.
- D. The database administrator, with permissions in scope Microsoft.Sql/managedInstances/*, opens port 3342 on the NSG.
B is correct.
Explanation: Enabling the public endpoint takes two steps by two separate roles. The database administrator runs the PowerShell script. A network administrator with permissions in scope Microsoft.Network/* opens port 3342 on the NSG and provides a UDR route to avoid asymmetric routing.
A is incorrect: Port 1433 is not the port that the public endpoint uses. Port 1433 outbound is a transactional replication requirement when the publisher or distributor is on a managed instance and the subscriber is on-premises.
C is incorrect: Port 445 outbound provides access to the Azure file share that transactional replication uses. It does not open the public endpoint.
D is incorrect: The database administrator role is scoped to Microsoft.Sql/managedInstances/*, which does not include network permissions. Separation of duties requires a separate network administrator for the NSG and route changes.
Q03 - Question
You are designing a new software as a service application. Each tenant has its own copy of the database, and the workload of individual tenants is unpredictable. You want to share compute resources across the tenant databases to reduce cost. Which deployment option should you choose?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. An Azure SQL Database elastic pool that contains the tenant databases.
- B. Single databases, one for each tenant, each with its own dedicated resources.
- C. One Azure SQL Database Hyperscale database that is sized for the largest tenant.
- D. An Azure SQL Managed Instance that hosts a database for each tenant.
A is correct.
Explanation: An elastic pool shares CPU, memory, and storage among the databases in the pool. It is a good fit for multitenant databases where each tenant has its own database. A database that needs more resources can use them, up to the set limits. Balance the workload across databases so that one database doesn't use most of the pool's resources.
B is incorrect: Each single database has its own dedicated resources, even on the same logical server. You scale and manage each database individually, so resources aren't shared.
C is incorrect: Hyperscale addresses large database size and independent scaling of compute and storage. It adds a per terabyte storage cost and doesn't address sharing resources across tenant databases.
D is incorrect: SQL Managed Instance is described as the best option for most migration scenarios. This is a new application, and the requirement is to share resources across databases in a pool.
Q04 - Question
Your team must deploy an Azure SQL logical server and database repeatedly across environments. The team wants the most granular control over the resources and wants to start from templates that Microsoft publishes on GitHub. Which deployment method should you use?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. Use the Azure portal Create wizard and accept the default compute and storage settings.
- B. Use Azure PowerShell to run New-AzSqlDatabase with the S0 service objective.
- C. Use the Azure CLI to run az sql db create with the GeneralPurpose edition.
- D. Use an Azure Resource Manager template from the Azure-Quickstart-Templates repository.
D is correct.
Explanation: A Resource Manager template gives you the most granular control over your resources. Microsoft hosts Resource Manager templates in the Azure-Quickstart-Templates GitHub repository, and you can reference them in your deployments.
A is incorrect: The portal wizard is a manual process, and its default compute setting is Gen5, 2 vCore, with 32 GB of storage. It isn't the method that provides the most granular control.
B is incorrect: PowerShell can create a server, database, and firewall rule, but the evidence identifies Resource Manager templates, not individual cmdlets, as the method with the most granular control.
C is incorrect: The Azure CLI can deploy a database from a script, but the evidence identifies Resource Manager templates as the method with the most granular control and the source of published templates.
Q05 - Question
A vendor application installs its own software on the same server as SQL Server. The installer needs direct access to the operating system. The application also uses Active Directory authentication instead of Microsoft Entra ID authentication. You plan to move the application to Azure. Which deployment option should you choose?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. Azure SQL Database
- B. Azure SQL Managed Instance
- C. SQL Server on Azure Virtual Machines
- D. Azure Arc-enabled SQL Server
C is correct.
Explanation: SQL Server on Azure Virtual Machines is an IaaS offering. It gives you access to the operating system, virtual storage, virtual networking, and any software you install in the VM. It also supports Active Directory authentication. You are responsible for OS patching and for SQL Server installation and configuration.
A is incorrect: Azure SQL Database is a PaaS offering. Direct access to the operating system isn't supported in a PaaS model, so the vendor installer can't run.
B is incorrect: Azure SQL Managed Instance is also a PaaS offering. Microsoft manages the operating system, and direct operating system access isn't supported.
D is incorrect: Azure Arc-enabled SQL Server extends Azure management to on-premises or multicloud SQL Servers. It is not a deployment option for moving an application to Azure.
Q06 - Question
You are migrating an on-premises application to SQL Server on Azure VMs. The application requires high availability for the entire SQL Server instance within a single Azure region. The team accepts the added deployment complexity of shared storage. Which solution should you implement?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. An Always On availability group
- B. Azure Site Recovery
- C. An availability set
- D. A SQL Server Failover Cluster Instance (FCI)
D is correct.
Explanation: An FCI provides high availability for an entire instance in a single region. It requires shared storage, which you can provide with shared file storage or Storage Spaces Direct on Windows Server. An FCI doesn't provide disaster recovery unless you combine it with another feature such as availability groups or log shipping.
A is incorrect: The unit of failover for an availability group is a group of databases, not the entire instance. Availability groups are preferred for newer deployments, but they don't protect the whole instance.
B is incorrect: Azure Site Recovery performs block-level replication of a VM. It is best used for stateless environments, and with SQL Server you must set a higher recovery point, which means potential data loss.
C is incorrect: An availability set places VMs on different servers and racks in a data center. It doesn't provide instance-level failover for SQL Server.
Q07 - Question
You export a SQL Server database to a .bacpac file and plan to import it into a new Azure SQL database in a production environment. You want the import to run as fast as possible. Which approach should you use?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. Use SqlPackage to import the BACPAC file, scale the database to a higher service tier for the import, and scale down after the import completes.
- B. Use the Import database option in the Azure portal, and keep the database at the lowest compute size until the import completes.
- C. Configure transactional replication to apply the contents of the .bacpac file to the target database.
- D. Import the BACPAC file by using the Azure portal, and scale up the database only after the import completes.
A is correct.
Explanation: SqlPackage is recommended for optimal scale and performance in production environments, and it is faster than the Azure portal. You can scale the database to a higher service tier and compute size during the import, and then scale down to the size you need.
B is incorrect: The Azure portal import is slower than SqlPackage. A low compute size also limits the resources available to the import.
C is incorrect: Transactional replication is a separate migration method. It does not import a .bacpac file.
D is incorrect: Scaling up after the import does not speed up the import. Scale up before the import starts, and scale down after it completes.
Q08 - Question
A manufacturing company has a SQL Server instance that is enabled by Azure Arc. The team plans to migrate its databases to Azure SQL Managed Instance by using the Azure portal. The team changed several database features this week and needs a current migration readiness result before the next weekend. What should the team do?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. Trigger an assessment manually in the Azure portal.
- B. Wait for the weekend, because assessments can run only on that schedule.
- C. Skip the assessment and start the data migration, because the assessment is optional.
- D. Create the target SQL Managed Instance first, because an assessment can run only after target selection.
A is correct.
Explanation: For a SQL Server instance that is enabled by Azure Arc, discovery and readiness reports run automatically every weekend. You can also trigger an assessment manually at any time. The assessment evaluates feature compatibility and identifies potential migration blockers.
B is incorrect: The weekend run is the automatic schedule, but it is not the only option. A manual assessment can run at any time.
C is incorrect: The assessment identifies migration blockers and provides right-sized recommendations for the target configuration. Starting the migration without current results leaves those items unchecked.
D is incorrect: Assessing the source instance is the first stage. Selecting the target is the second stage, so the assessment does not depend on it.
Q09 - Question
A 3 TB database in Azure SQL Database is expected to grow beyond the 4 TB limit. A colleague proposes converting it to the Hyperscale service tier. Which statement should you include in the plan?
Domain: Plan and implement data platform resources (15–20%) Type: Single choice
- A. You can revert the database to a standard Azure SQL Database if Hyperscale doesn't meet your needs.
- B. Backup time increases in proportion to the data volume, so schedule backups in a maintenance window.
- C. Conversion to Hyperscale can't be reverted, so confirm the decision before you convert.
- D. Hyperscale has no extra storage cost, because its cost is the same as Azure SQL Database.
C is correct.
Explanation: Once a database is converted to Hyperscale, it can't be reverted to a standard Azure SQL Database. Confirm that Hyperscale meets your requirements before you convert.
A is incorrect: Reverting a converted database to a standard Azure SQL Database isn't possible.
B is incorrect: Hyperscale backups use file snapshots stored in Azure Blob storage. The time for backups and scaling operations doesn't depend on data volume.
D is incorrect: The cost of Hyperscale is similar to Azure SQL Database, but there is an extra per terabyte storage cost.
Q10 - Question
You are planning the storage layout for a production SQL Server VM in Azure. The workload is performance-sensitive, and the data files and transaction log files must be durable. Which two actions should you take? Select two.
Domain: Plan and implement data platform resources (15–20%) Type: Multi-select
- A. Store the transaction log files on the VM temporary disk to get low latency.
- B. Store the data files in their own pool of pooled Premium disks, and enable read caching on the Azure disks.
- C. Store the data files on Standard HDD data disks to reduce cost.
- D. Store the transaction log files in their own pool of disks without caching.
B and D are correct.
Explanation: Pooled Premium disks increase IOPS and storage capacity. Data files should be in their own pool with read caching on the Azure disks. Transaction log files don't benefit from that caching, so they should be in their own pool without caching.
A is incorrect: The temporary disk is for data that doesn't need to be durable. Transaction log files stored there are lost during VM maintenance or a reboot.
C is incorrect: Standard HDD is best for backups and non-critical workloads. It has the lowest maximum IOPS and throughput of the disk types, so it doesn't fit a performance-sensitive workload.