Skip to main content

DP-300 implementation playbook

This page walks every sub-topic in the official Microsoft Learn DP-300 Exam Readiness Zone (Sara El Sayed, FY25) and turns each one into ordered, platform-aware implementation steps. The exam tests what you would do and in what order; this page gives you that map for Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure VM, and SQL Server (box / on-prem).

๐Ÿง  How to read this page

Each sub-topic has one table. Rows are the mandatory steps. Columns are the platforms. If a cell says n/a the platform doesn't expose that capability; if it says "same as <X>" the platform inherits the steps from the column on its left. Skip commands โ€” the exam asks for the sequence, not the syntax.

Domain map and weightsโ€‹

#DomainWeightSub-topics
1Plan and implement data platform resources20โ€“25%1.1 deploy ยท 1.2 scale ยท 1.3 migrate
2Implement a secure environment15โ€“20%2.1 authN / authZ ยท 2.2 data protection ยท 2.3 compliance
3Monitor, configure, and optimize20โ€“25%3.1 resource monitoring ยท 3.2 query tuning ยท 3.3 db config
4Configure and manage automation15โ€“20%4.1 Agent jobs ยท 4.2 deployment ยท 4.3 Azure-side tasks
5Plan and configure HA/DR20โ€“25%5.1 strategy ยท 5.2 backup/restore ยท 5.3 configure

The five domains map 1:1 to Sara's five Exam Readiness Zone episodes. The sub-topic numbering below matches the official chapter markers.


Domain 1 โ€” Plan and implement data platform resourcesโ€‹

1.1 Plan and deploy Azure SQL database solutionsโ€‹

Reflex: pick the platform first, then the purchase model, then the service tier, then the deployment shape, then provision.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Confirm requirement fits PaaS DB scope (single DB or pool)Confirm requirement needs instance features (SQL Agent, cross-db, CLR, Service Broker)Confirm requirement needs OS / SQL feature not in PaaSConfirm on-prem is required (data residency, hardware control)
2Pick DTU or vCore purchase modelvCore onlyPick VM family (DSv5/Eds/Mds) and storage classSize hardware + storage RAID
3Pick service tier โ€” General Purpose, Business Critical, or HyperscalePick GP, BC, or Next-gen GP; pick hardware generationPick marketplace SQL image (preferred) or BYOLPick edition (Standard / Enterprise / Developer)
4Pick deployment shape โ€” single DB, elastic pool, serverlessProvision into a dedicated subnet of a VNet (delegated to MI)Provision VM + register with SQL IaaS Agent extension (full mode)Install Windows/Linux + latest CU
5Create the logical server (admin login, region, AAD admin)Pick proxy or redirect connection typeConfigure storage pools โ€” data, log, tempdb on separate disksConfigure instance โ€” tempdb files, max server memory, MAXDOP
6Configure server-level firewall, AAD admin, optional private endpointConfigure NSG, route table, optional public endpointApply patching mode + automated backup via the IaaS extensionConfigure SQL Agent, Database Mail, default backup paths
7Create the database; choose collation, backup storage redundancyCreate databases inside the instanceRestore / attach databaseCreate database with appropriate recovery model
๐ŸŽฏ Exam Focus

Exam trap: "needs SQL Agent" or "cross-database queries" โ†’ never Azure SQL Database. Default to Managed Instance before reaching for SQL VM.

1.2 Configure resources for scale and performanceโ€‹

Reflex: match the scaling axis the question describes (compute, storage, replicas, regions) to the feature the platform actually exposes.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Identify scaling axis โ€” vCore, storage, replicas, regions, burstsSameSameSame
2Choose shape โ€” single / elastic pool / serverless / HyperscaleChoose single instance or instance pool (preview where available)Resize VM SKU (compute) independently of disksAdd cores / memory; relicense if needed
3Scale compute by changing vCore / DTU (online)Scale vCore (online); storage scales independently in GPAdd or resize premium / ultra / Premium SSD v2 disks; restripe poolsAdd storage; rebalance filegroups
4Enable read scale-out on BC / HyperscaleEnable read-only replica on BCUse Always On AG with read-only routingSame as SQL VM
5Add Hyperscale named replicas for read isolationn/aAdd AG secondary replicasAdd AG secondary replicas
6Use auto-pause + auto-resume on serverless for spiky low workloadsn/aUse VM start/stop schedules for non-prodn/a
7Tune at DB scope โ€” automatic tuning, MAXDOP, compatibility levelTune at instance + DB scopeTune OS + SQL โ€” tempdb files per core, Lock Pages in Memory, IFISame as SQL VM
๐ŸŽฏ Exam Focus

Exam trap: Hyperscale is the answer when the database is large (>4 TB), needs fast restore, or needs many read replicas. It is not the answer when the requirement says in-memory OLTP โ€” that is Business Critical only.

1.3 Plan and implement a migration strategyโ€‹

Reflex: pick the target first (DB vs MI vs VM), assess with Azure Migrate / Data Migration Assistant, then pick online vs offline based on RPO and downtime tolerance.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box, as target)
1Run Data Migration Assistant (DMA) for compatibility issuesRun Azure Migrate: Database Assessment (formerly DMA) targeting MIRun DMA targeting SQL Server on Azure VMDMA against target version
2Fix blockers โ€” unsupported features, deprecated syntaxFix MI-specific blockers (e.g., trace flags, CLR if disabled)Fix only true blockers; SQL VM accepts most featuresFix breaking changes between versions
3Choose DMS (Azure Database Migration Service) online or offlineChoose DMS (online via Log Replay Service for native backups, or Managed Instance link)Choose DMS, backup/restore, or distributed AGBackup/restore or detach/attach
4Pre-create target server + DB; validate networkingPre-create instance + verify VNet line-of-sight to sourcePre-create VM + storage; install matching SQL versionPre-create instance
5Run schema migration (DMA or DACPAC)Run schema as part of backup restoreRestore full + diff + log chainSame
6Start data migration โ€” DMS online uses CDC; offline uses bulk copyRun continuous backup replay (LRS) or seed via MI linkApply log backups until cutoverApply log chain until cutover
7Cutover โ€” switch connection strings, verify users / logins, sync orphaned usersCutover โ€” repoint apps; failover MI link if usedCutover โ€” break log chain, redirect appsSame
๐ŸŽฏ Exam Focus

Exam trap: if the question requires minimum downtime to Managed Instance with near-zero RPO, the answer is Managed Instance link (or DMS online with LRS) โ€” not offline backup/restore.


Domain 2 โ€” Implement a secure environmentโ€‹

2.1 Configure database authentication and authorizationโ€‹

Reflex: authN = who (logins, users, AAD), authZ = what (roles, GRANT, RLS). Prefer Microsoft Entra ID identities over SQL logins on every Azure platform.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Set an Entra ID admin on the logical serverSet Entra ID admin on the instanceConfigure Entra ID authentication via Azure extension; join VMConfigure Windows / AD integration
2Create contained database users mapped to Entra identities (preferred)Create Entra logins at instance scope, users at DB scopeCreate AD-integrated logins; map DB usersSame
3Disable / rotate the server admin SQL login; use it only for break-glassSameUse AD groups for DBAs; rotate sa and disable where possibleSame
4Grant via fixed database roles first, custom roles secondSame; instance also has server rolesSame; full server-role surfaceSame
5Apply Row-Level Security (RLS) for tenant isolationSameSameSame
6Apply Dynamic Data Masking for low-privilege usersSameSameSame
7Audit access โ€” server / DB audit to Log Analytics or StorageSameConfigure auditing via SQL Server Audit or SQL IaaS extensionSQL Server Audit
๐Ÿ”€ Oracle โ†’ Azure

Oracle parallel: SQL contained DB users behind Entra ID map to enterprise users with an external identity store. Server roles are SQL's equivalent of Oracle system privileges; fixed DB roles map to common Oracle object privilege bundles.

2.2 Implement security for data at rest and data in transitโ€‹

Reflex: at rest = TDE (+ optional Always Encrypted), in transit = TLS + private network path. Customer-managed keys (CMK) live in Azure Key Vault (or Managed HSM).

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1TDE is on by default with service-managed keySameEnable TDE on each user databaseEnable TDE (Enterprise / Developer; Standard for newer versions)
2Optionally switch to TDE with CMK in Azure Key VaultSameUse EKM provider + Azure Key Vault for CMKUse EKM + on-prem HSM / Key Vault
3Enable Always Encrypted (with or without enclaves) for column-level secretsSameSameSame
4Enforce TLS 1.2 minimum on the logical serverEnforce on instanceConfigure SQL Server to require encrypted connections; force protocol via SQL Server Configuration ManagerSame
5Use private endpoint or service endpoint for app-to-DB trafficUse VNet + optional public endpoint (disabled by default)Use NSG + private IP only; deny public IPNetwork segmentation via firewall / VLAN
6Configure firewall rules at server and DB scopen/a โ€” network is VNet-scopedNSG rules at subnet and NICHost / perimeter firewall
7Rotate keys per policy; monitor with Defender for SQLSameSameSame
๐ŸŽฏ Exam Focus

Exam trap: Always Encrypted protects data from the DBA. TDE does not โ€” a DBA with db_owner can still read the data. If the scenario hides data from privileged users, the answer is Always Encrypted (use enclaves when comparisons / range queries are required).

2.3 Implement compliance controls for sensitive dataโ€‹

Reflex: classify โ†’ audit โ†’ detect โ†’ respond. The Azure toolset is Data Discovery & Classification โ†’ Auditing โ†’ Microsoft Defender for SQL โ†’ Purview.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Run Data Discovery & Classification to label columnsSameSame (SSMS classification or Defender)Same
2Enable SQL Auditing to Log Analytics / Storage / Event HubSameConfigure SQL Server Audit; ship to Log Analytics via IaaS extensionSQL Server Audit
3Enable Microsoft Defender for SQL (vulnerability assessment + threat detection)SameDefender for SQL on Azure VM via the SQL IaaS extensionn/a โ€” use third-party / Defender for Servers
4Schedule and review Vulnerability Assessment baselinesSameSameRun manual security best practice baselines
5Wire alerts to Logic Apps / Teams / ticketingSameSameSIEM integration
6Use Dynamic Data Masking + RLS to enforce least exposureSameSameSame
7Register source in Microsoft Purview for governance and lineageSameSameSame (Purview can scan box SQL)
๐ŸŽฏ Exam Focus

Exam trap: Defender for SQL is the answer for detection (anomalous logins, SQL injection patterns, exfiltration). Auditing is the answer for logging. They are not interchangeable.


Domain 3 โ€” Monitor, configure, and optimize database resourcesโ€‹

3.1 Monitor resource activity and performanceโ€‹

Reflex: Azure scope โ†’ SQL scope. Start in Azure Monitor / Database Watcher, then drop into DMVs / Query Store.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Open Azure Monitor metrics โ€” CPU %, log IO %, data IO %, sessionsSameOpen VM-level metrics (CPU, disk IOPS, network) and SQL-level metricsUse OS perfmon + SQL DMVs
2Enable Database Watcher (preview-to-GA) for low-latency telemetrySamen/a โ€” use SQL Insights or third-partyn/a
3Stream diagnostic logs to Log Analytics workspaceSameUse the SQL IaaS Agent extension to send logsForward logs to SIEM or Log Analytics agent
4Configure metric alerts โ€” static and dynamic thresholdsSameConfigure VM metric alerts + SQL Insights alertsUse third-party monitoring
5Use Intelligent Insights for AI-suggested issuesSamen/a directly; use SQL Insights / Database Watchern/a
6Drop into DMVs โ€” sys.dm_exec_*, sys.dm_os_wait_statsSameSameSame
7Inspect Extended Events sessions for deep divesSameSameSame
๐Ÿ”€ Oracle โ†’ Azure

Oracle parallel: Azure Monitor + Database Watcher โ‰ˆ Oracle Enterprise Manager / OEM. DMVs + Query Store โ‰ˆ AWR + ASH. Wait stats map almost 1:1.

3.2 Monitor and optimize query performanceโ€‹

Reflex: prove the cause with Query Store before you touch indexes. Plan regression is the most common "fast yesterday, slow today" scenario.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Confirm Query Store is on (default on Azure SQL)SameEnable Query Store per user databaseSame
2Find top regressed / top consumer queries in Query StoreSameSameSame
3Inspect actual + estimated plans; compare versions over timeSameSameSame
4Force a known good plan if the regression is plan-shapeSameSameSame
5Review missing index DMV suggestions; validate before applyingSameSameSame
6Update statistics; rebuild / reorganize only when fragmentation justifies itSameSameSame
7Test with automatic plan correction (Azure) or manual hints (box)Auto plan correction availableAuto plan correction availableManual hints / Query Store plan forcing
๐ŸŽฏ Exam Focus

Exam trap: the first answer for plan regression is force the last good plan in Query Store, not "rebuild indexes" and not "update statistics". Indexes and stats are downstream actions.

3.3 Configure database solutions for optimal performanceโ€‹

Reflex: configure the layer the bottleneck lives on โ€” instance settings, database settings, storage layout, or workload isolation.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Set DB-scoped config โ€” MAXDOP, parameter sniffing, legacy CESet at DB or instance scopeSet at instance + DB scopeSame
2Set compatibility level appropriate to workloadSameSameSame
3Configure tempdb โ€” n/a as a knob (managed)Tempdb is managed; pre-sized files per vCoreConfigure tempdb files = logical cores (max 8) on local SSDSame
4Use in-memory OLTP on Business Critical for latch hotspotsSameSame (Enterprise / Developer)Same
5Use columnstore for analytical workloadsSameSameSame
6Use Resource Governor โ€” n/aLimited Resource Governor supportFull Resource GovernorSame
7Enable automatic tuning โ€” force last good plan, create / drop indexSameSamen/a (manual)

Domain 4 โ€” Configure and manage automation of tasksโ€‹

4.1 Create and manage SQL Server Agent jobsโ€‹

Reflex: SQL Agent exists on Managed Instance, SQL VM, and box SQL Server. It does not exist on Azure SQL Database โ€” use Elastic Jobs there.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Use Elastic Jobs (job agent + DB) โ€” Agent is n/aEnable SQL Server Agent on the instanceEnable SQL Server Agent serviceSame
2Create target group of databases / serversCreate job with steps (T-SQL, OS, replication)SameSame
3Define job steps; pass credentials securelyDefine operators + alerts; configure Database MailSameSame
4Schedule jobs; track history in the job databaseSchedule jobs; review historySameSame
5Wire failure alerts to Logic Apps / Event GridWire alerts via Database Mail / DefenderSameSame
6Use Managed Identity where possible for authUse Entra-authenticated proxies where supportedSameUse Windows service accounts
7Audit / version control job definitions in sourceSameSameSame
๐ŸŽฏ Exam Focus

Exam trap: "I need to run a T-SQL maintenance job across 200 Azure SQL Databases" โ†’ Elastic Jobs, not SQL Agent, not Logic Apps.

4.2 Automate deployment of database resourcesโ€‹

Reflex: infrastructure with ARM / Bicep / Terraform, schema with DACPAC / SQL projects, end-to-end with pipelines.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Define logical server + DB in Bicep / ARM / TerraformDefine MI + VNet + subnet + delegationDefine VM + disks + extensions in BicepUse config management (DSC, Ansible) for OS / SQL install
2Parameterize tier, vCore, backup redundancyParameterize tier, hardware generation, license typeParameterize VM SKU, storage layout, SQL imageParameterize install options
3Build SQL project (SSDT / SQL Database Projects) โ†’ produce DACPACSameSameSame
4Deploy DACPAC via Azure DevOps / GitHub Actions pipelineSameSameSame
5Run post-deployment scripts (idempotent)SameSameSame
6Gate environments โ€” dev โ†’ test โ†’ prod with approvalsSameSameSame
7Drift detection โ€” compare schema vs source of truthSameSameSame
๐Ÿ”€ Oracle โ†’ Azure

Oracle parallel: DACPAC / SQL projects are equivalent to Oracle schema migrations via Liquibase / Flyway. The contract is the same: declarative schema in source control, deployed by pipeline.

4.3 Create and manage database tasks in Azureโ€‹

Reflex: if the task runs inside SQL, use Agent / Elastic Jobs. If it runs around SQL (start/stop, scale, orchestrate), use Automation runbooks, Logic Apps, Functions, or Data Factory.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Pick the right Azure runner โ€” Elastic Jobs, Automation runbook, Logic App, Function, or Data FactorySameSame; also SQL Agent for in-engine tasksn/a โ€” orchestrate from on-prem scheduler
2Use Managed Identity for the runner; grant least-privilege access to DBSameSame; or AD-authenticated SPN on the VMUse service accounts
3Store secrets in Azure Key Vault referenced by Managed IdentitySameSameUse on-prem secret store
4Schedule via Logic Apps recurrence or Automation scheduleSameSameUse Windows Task Scheduler
5Wire failure alerts to Action Groups โ†’ Teams / email / PagerDutySameSameSame via SIEM
6Track runs and outputs in Log AnalyticsSameSameSame
7Version runbooks / Logic Apps in source controlSameSameSame

Domain 5 โ€” Plan and configure HA/DRโ€‹

5.1 Plan an HA/DR strategy for database solutionsโ€‹

Reflex: RPO โ†’ backup strategy, RTO โ†’ failover topology. Pick features in that order; never the other way around.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Capture business RPO + RTO; pick a tier whose built-in HA matchesSameSame; HA is your responsibility (AG / FCI)Same; HA is your responsibility
2Pick service tier โ€” GP (zone HA add-on), BC / Hyperscale (replica-based HA)Pick GP or BC; BC has built-in zone-redundant replicasPick Always On AG, FCI, or log shipping as the HA topologySame
3Choose zone redundancy where available (BC, Hyperscale)Choose zone redundancy on BCPick availability zones for VM placementPick rack / site diversity
4For DR, pick failover group (single region pair)Same; FG at instance scopeBuild multi-region AG; consider Azure Site Recovery as a fallbackBuild multi-site AG with shared witness
5Decide on active geo-replication vs failover group based on app routingFailover groups (geo-replication is for SQL DB only)Define listener + read-only routingSame
6Define backup retention โ€” short term + LTR for complianceSameConfigure automated backup with the IaaS extension + LTR targetConfigure backup to URL / file share with retention policy
7Run game days โ€” fail over, validate, fail backSameSameSame
๐ŸŽฏ Exam Focus

Exam trap: active geo-replication is Azure SQL Database only. For MI, the equivalent is failover groups. SQL VM and box SQL Server use Always On Availability Groups.

5.2 Plan and perform backup and restore of a databaseโ€‹

Reflex: PaaS backups are automatic (PITR + LTR); your job is to set retention, validate, and know the restore path. IaaS / box = you own everything.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Confirm automated backups + storage redundancy (LRS / ZRS / GRS)SameConfigure automated backup to URL via SQL IaaS extension, or run native backupsConfigure FULL / DIFF / LOG backup chain
2Set PITR retention (1โ€“35 days)SameSet retention on the chosen backup targetSet retention per policy
3Configure Long-Term Retention (LTR) weekly / monthly / yearlySameConfigure LTR target in storage; manage lifecycleManage tape / object retention
4Test point-in-time restore to a new DBSame; restore to the same or another instanceRestore from URL / disk; consider head-of-log restoreSame
5Test geo-restore to a paired regionSameUse cross-region restore from geo-redundant backupsUse offsite copies
6Test restore from LTRSameSameSame
7Verify CHECKDB integrity after restoreSame (run on restored DB)SameSame
๐ŸŽฏ Exam Focus

Exam trap: PITR vs LTR โ€” PITR is for operational recovery (oops-table within 35 days). LTR is for compliance (weekly / monthly / yearly retained for years). They are not substitutes for each other.

5.3 Configure HA/DR for database solutionsโ€‹

Reflex: pick exactly one primary HA mechanism per platform and configure its listener / endpoint, quorum / witness, and monitoring in that order.

StepAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
1Pick zone-redundant deployment on BC / Hyperscale (HA) and failover group (DR)Pick zone redundancy on BC (HA) + failover group (DR)Pick Always On AG (HA + DR); cluster across zones / regionsSame; physical sites
2Configure failover group โ€” primary, secondary, listener endpointSame; instance-scoped listener endpointConfigure WSFC + AG listener; pick cloud witness for quorumConfigure WSFC + AG listener; file share or disk witness
3Choose read-write listener + read-only listenerSameConfigure read-only routing listSame
4Choose automatic or manual failover policy + grace periodSameConfigure availability mode โ€” synchronous (HA) + asynchronous (DR)Same
5Validate endpoint redirection in app connection stringsSameValidate that apps use the listener, not the node nameSame
6Monitor with Azure Monitor + failover group healthSameMonitor AG health via DMVs + Azure Monitor on the VMDMVs + Windows / Linux cluster monitoring
7Run a planned failover; verify app behavior and roll backSameRun manual failover (planned) and forced failover (DR drill)Same
๐Ÿ”€ Oracle โ†’ Azure

Oracle parallel: Always On AG โ‰ˆ Oracle Data Guard. Synchronous AG โ‰ˆ maximum availability mode; asynchronous AG โ‰ˆ maximum performance mode. Failover group for Azure SQL DB / MI โ‰ˆ a managed, single-button Data Guard switchover at the listener layer.


Cross-platform decision matrix (one table to memorize)โ€‹

Use this when the question reduces to "which platform supports it natively?".

CapabilityAzure SQL DatabaseSQL Managed InstanceSQL Server on Azure VMSQL Server (box)
SQL Server AgentโŒ (use Elastic Jobs)โœ…โœ…โœ…
Cross-database queriesโŒ (elastic query โ€” limited)โœ…โœ…โœ…
CLR / Service BrokerโŒโœ…โœ…โœ…
In-memory OLTPโœ… (BC only)โœ… (BC)โœ… (Enterprise / Developer)โœ…
Hyperscaleโœ…โŒ (NextGen GP overlaps some scenarios)โŒโŒ
Active geo-replicationโœ…โŒ (use failover groups)โŒ (use AG)โŒ (use AG)
Failover groupsโœ…โœ…โŒโŒ
Always On AGโŒโŒ (instance-internal HA only)โœ…โœ…
TDE (default on)โœ…โœ…โš ๏ธ enable per DBโš ๏ธ enable per DB
Always Encryptedโœ…โœ…โœ…โœ…
Built-in PITR (1โ€“35 days)โœ…โœ…โŒ (build it)โŒ (build it)
LTR (weeks / months / years)โœ…โœ…โŒ (build it)โŒ (build it)
Microsoft Defender for SQLโœ…โœ…โœ… (via IaaS extension)โŒ (use Defender for Servers / third-party)

Common exam trapsโ€‹

  • Cross-database queries on Azure SQL Database โ†’ not native; the answer is Managed Instance unless the question specifically asks for elastic query.
  • "SQL Agent on Azure SQL Database" โ†’ does not exist. Use Elastic Jobs.
  • "In-memory OLTP on Hyperscale" โ†’ not supported. Use Business Critical.
  • "Active geo-replication for MI / VM" โ†’ wrong product. MI uses failover groups; VM / box use Always On AG.
  • Plan regression first action โ†’ force the last good plan in Query Store, not index rebuild, not stats update.
  • TDE vs Always Encrypted โ†’ TDE protects data at rest from someone stealing the file. Always Encrypted protects data from the DBA.
  • PITR vs LTR โ†’ PITR is operational (โ‰ค35 days). LTR is compliance (years). They co-exist; they do not replace each other.
  • Private endpoint vs firewall rule โ†’ firewall rules still expose the public server endpoint. Only private endpoint removes the public data path.

Use this with the rest of the wikiโ€‹

  • For the recall sprint, pair this page with DP-300 exam cram kit.
  • For the gap audit vs the official skills measured, see DP-300 coverage map.
  • For Oracle-to-Azure crosswalks referenced in callouts above, see Oracle to Azure mapping and the glossary.
  • For deeper how-to pages, drill into the per-domain folders โ€” 01-plan-implement/, 02-security/, 03-monitor-optimize/, 04-automation/, 05-hadr/.

Referencesโ€‹

Flashcardsโ€‹

On Azure SQL Database, how do you schedule a T-SQL maintenance job that runs across 200 databases?
Click to reveal answer
Elastic Jobs โ€” create a job agent + control database, define a target group, and schedule the T-SQL step. SQL Server Agent is not available on Azure SQL Database.
1 / 6