Certifications & careers

DP-300 Azure SQL DBA Exam Prep: Security, Tuning and HA/DR Labs

Prepare for DP-300 with the October 27, 2026 skills measured: domain weights, a five-week plan and labs for Azure SQL security, performance, HA/DR and automation.

By EpiFive Editorial TeamReviewed/updated 7 min readHow we check articles
On this page

DP-300 is the exam for the Microsoft Certified: Azure Database Administrator Associate certification, and the best way to prepare is to work through the five weighted domains in Microsoft's skills outline, practising each on Azure SQL Database, Azure SQL Managed Instance and SQL Server on a virtual machine. Security, monitoring and optimization, and high availability and disaster recovery (HA/DR) each carry 20-25%, so no single area can be skipped. This guide follows the outline labelled "Skills measured as of October 27, 2026".

Who this is for and what you will have at the end

This guide is for DBAs moving from on-premises SQL Server to Azure, for cloud engineers who inherited databases, and for developers who want operational depth. Microsoft's audience profile describes a database administrator who manages cloud and on-premises databases built with Azure SQL services and SQL Server, and who uses T-SQL and other tools to automate daily work. You will leave with a domain checklist, a five-week plan and a lab list aligned with each objective.

Exam facts to confirm first

ItemValue (Microsoft Learn, checked October 25, 2026)
CertificationMicrosoft Certified: Azure Database Administrator Associate
Time allowed100 minutes
Passing score700 or greater
Retake after a fail24 hours after the first attempt; later retakes vary
RenewalEvery 12 months, free, via an online assessment
English update dateOctober 27, 2026
LanguagesEnglish, Chinese (Simplified), Japanese, Korean, French, German, Portuguese (Brazil), Italian, Chinese (Traditional), Spanish

Because the new outline takes effect two days after this article's date, study from the published guide and re-check its date before you schedule. The change log records a single minor revision, to the objective on security for data at rest and in transit.

Skills measured, domain by domain

Plan and implement data platform resources (15-20%)

  • Plan and deploy Azure SQL solutions. Recommend an offering, choose an automated deployment method, identify use cases for Azure Arc-enabled SQL services and for Azure SQL Database in Microsoft Fabric, plan table partitioning, recommend sharding, deploy offerings including hybrid SQL Server, and apply patches for hybrid and IaaS deployments.
  • Configure resources for scale and performance. Azure SQL Database, SQL Managed Instance and SQL Server on Azure VMs, plus table partitioning and data compression.
  • Plan and implement a migration strategy. Evaluate requirements, choose offline or online, implement migrations to Azure and between Azure SQL services, copy and move for Managed Instance, and troubleshoot a migration.

Implement a secure environment (20-25%)

  • Authentication and authorization. Microsoft Entra authentication for Azure SQL Database, Managed Instance and SQL Server, security principals, users from Entra identities, permissions through graphical tools and T-SQL, least privilege, and troubleshooting.
  • Data at rest and in transit. Transparent data encryption (TDE), object-level encryption, server and database firewall rules, Always Encrypted including secure enclaves, and private links and service endpoints.
  • Compliance controls. Data classification, audits, change data tracking, dynamic data masking, ledger in Azure SQL and row-level security.

Monitor, configure and optimize database resources (20-25%)

  • Monitor activity and performance. Operational baselines, metric sources, interpreting metrics, database watcher and Extended Events.
  • Query performance. Query Store configuration and monitoring, resolving blocking, dynamic management views (DMVs), index changes, query modifications, execution plans and Intelligent Insights.
  • Optimal performance. Index and statistics maintenance, integrity checks, automatic tuning, server settings, Resource Governor, database-scoped configuration, scaling compute and storage, and intelligent query processing (IQP) features.

Configure and manage automation of tasks (15-20%)

  • SQL Server Agent jobs. Schedules, alerts and notifications, and troubleshooting.
  • Automated deployment. ARM and Bicep templates, Azure PowerShell and Azure CLI, and monitoring and troubleshooting deployments.
  • Database tasks in Azure. Elastic jobs, automation-based tasks, alerts and notifications, and troubleshooting.

Plan and configure an HA/DR environment (20-25%)

  • Plan a strategy. Recommend HA/DR from recovery point objective and recovery time objective (RPO/RTO) requirements, evaluate hybrid and Azure-specific solutions, and plan tests.
  • Backup and restore. Strategy, native backup and restore, point-in-time restore, long-term retention, T-SQL backup and restore, and cloud storage.
  • Configure HA/DR. Active geo-replication, Always On availability groups on Managed Instance and Azure VMs, failover groups, Always On Failover Cluster Instances on Azure VMs, log shipping, monitoring and troubleshooting.

A five-week study plan

WeekFocusPractical outcome
1Platform selection, deployment and migrationOne database in each offering and a written comparison; a migration plan with an offline and online option
2SecurityEntra authentication, firewall rules, TDE, dynamic data masking, row-level security and auditing configured
3Monitoring and query tuningQuery Store enabled, a blocking scenario diagnosed, an execution plan read, an index added
4AutomationA SQL Server Agent job, an elastic job and a Bicep or CLI deployment
5HA/DR and practicePoint-in-time restore, a failover group, notes on availability groups and log shipping, then the free practice assessment

Labs to build

Use a sandbox subscription, pick the lowest tier that supports the feature, and delete resources afterwards. This guide does not quote prices, so check current pricing and free offers for each service first.

  1. Compare offerings. Deploy an Azure SQL Database and, if budget allows, a Managed Instance and a SQL Server VM. List what is configured for you in each. The site's comparison of the three offerings is a useful reference.
  2. Entra authentication. Set a Microsoft Entra admin, create a contained user from an Entra identity and test a sign-in. See Azure SQL Entra authentication setup.
  3. Network and data protection. Configure server and database firewall rules, add a private endpoint, confirm TDE, and try dynamic data masking and row-level security on a sample table.
  4. Auditing and classification. Turn on auditing and classify a sensitive column. Read what lands in the audit target.
  5. Query Store and blocking. Enable Query Store, run a workload, open the top resource-consuming queries, then create blocking between two sessions and find the blocker through DMVs.
  6. Indexes and plans. Run a slow query, read its execution plan, add an index, and compare. Review automatic tuning recommendations.
  7. Monitoring. Try database watcher where available, an Extended Events session, and Azure Monitor alerts, and write down which metrics establish a baseline.
  8. Automation. Create a SQL Server Agent job on a VM or Managed Instance, an elastic job for Azure SQL Database, and a Bicep template that deploys a database.
  9. Backup and recovery. Perform a point-in-time restore and review long-term retention settings, following Azure SQL backup, PITR and LTR.
  10. Disaster recovery. Configure a failover group and perform a test failover, using Azure SQL failover groups configuration as a guide. Read about the Managed Instance link in Managed Instance link migration.

Troubleshooting your preparation

  • You only know one platform. Questions name specific offerings. Build a table of features by offering and fill it from documentation.
  • HA/DR terms blur. Write the RPO and RTO of each option as you learn it, and practise choosing from a stated requirement.
  • Performance feels abstract. Generate a real workload, then use Query Store and DMVs on it. The outline is task-based.
  • You skip on-premises topics. Log shipping, Failover Cluster Instances, Agent jobs and hybrid patching are in the outline.

Final checklist before you book

  • Each objective has a lab or notes, particularly security and HA/DR.
  • You have used the free practice assessment and the exam sandbox.
  • You have confirmed the October 27, 2026 update, price and language on the exam page.
  • You know the certification renews every 12 months.

References

Questions people ask

How long is DP-300 and what score do I need?

The Microsoft Learn certification page says you have 100 minutes to complete the assessment, and the study guide says 700 or greater is required to pass. The exam is proctored and may include interactive components.

What changes in the October 27, 2026 DP-300 outline?

The study guide's change log lists one change, a minor update to the "Implement security for data at rest and data in transit" objective. The certification page says the English version will be updated on October 27, 2026, so confirm the details in the study guide when you book.

Which domains carry the most weight on DP-300?

Three domains are weighted 20-25 percent: Implement a secure environment, Monitor, configure and optimize database resources, and Plan and configure a high availability and disaster recovery environment. Plan and implement data platform resources and Configure and manage automation are each 15-20 percent.

Do I need to know SQL Server on-premises as well as Azure SQL?

Yes. Microsoft's audience profile covers Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure Virtual Machines and SQL Server on-premises, and objectives such as hybrid deployments, log shipping and migrations assume you understand both.

DP-300Azure SQLSQL Managed InstanceSQL Server
  1. DP-900 Azure Data Fundamentals Study Guide: Skills Measured and Labs

    Prepare for DP-900 with the July 2026 skills measured: domain weights, a three-week plan, free-tier labs and a quick reference for core data concepts.

  2. AWS Cloud Practitioner CLF-C02 Study Guide: Domains, Free Labs and Exam Tips

    Plan your AWS Cloud Practitioner (CLF-C02) study using the official exam guide: domain weights, task statements, free AWS resources, a four-week plan and exam-day tips.

  3. AZ-700 Azure Network Engineer Exam: Skills, Weights and Plan

    Plan your AZ-700 preparation from Microsoft's skills outline: the five domains and weights, exam format, free Microsoft Learn resources, hands-on labs and a six-week study plan.

  4. CISSP vs Security+: Which Security Certification to Take First

    Compare CompTIA Security+ and ISC2 CISSP on experience requirements, exam format, renewal and career stage, then decide which one to take first.

  5. CompTIA A+ Study Guide: Core 1 and Core 2 Objectives and Study Plan

    CompTIA A+ needs two exams, Core 1 (220-1201) and Core 2 (220-1202). See the domains and weights, exam format, free resources and an eight-week study plan.

  6. CompTIA Network+ N10-009 Study Guide: Domains, Free Labs, 6-Week Plan

    Network+ N10-009 has five domains, up to 90 questions and a 720 passing score. See the weights, free resources, hands-on labs and a six-week study plan.