# DP-300 Azure SQL DBA Exam Prep: Security, Tuning and HA/DR Labs

> Prepare for DP-300 with the October 27, 2026 skills measured: domain weights, a five-week plan and labs for Azure SQL security, performance, HA/DR and automation.

Source: https://www.epifive.com/blog/dp-300-study-guide-azure-sql-administrator · Published 2026-10-25 · EpiFive

## Key takeaways

- DP-300 spreads weight across five domains, with security, performance and HA/DR each at 20-25 percent and no single domain dominating.
- The outline covers Azure SQL Database, SQL Managed Instance, SQL Server on Azure VMs and on-premises SQL Server, so study all four.
- The outline includes database watcher, ledger in Azure SQL, Always Encrypted with secure enclaves and Azure Arc-enabled SQL services.
- Set up Query Store, read execution plans and diagnose blocking yourself, since performance topics reward hands-on practice.
- The exam lasts 100 minutes with a pass mark of 700, and the Azure Database Administrator Associate certification renews every 12 months.

DP-300 is the exam for the Microsoft Certified: Azure Database Administrator Associate certification, and the best way to prepare is to work through the five weighted domains in Microsoft's skills outline, practising each on Azure SQL Database, Azure SQL Managed Instance and SQL Server on a virtual machine. Security, monitoring and optimization, and high availability and disaster recovery (HA/DR) each carry 20-25%, so no single area can be skipped. This guide follows the outline labelled "Skills measured as of October 27, 2026".

## Who this is for and what you will have at the end

This guide is for DBAs moving from on-premises SQL Server to Azure, for cloud engineers who inherited databases, and for developers who want operational depth. Microsoft's audience profile describes a database administrator who manages cloud and on-premises databases built with Azure SQL services and SQL Server, and who uses T-SQL and other tools to automate daily work. You will leave with a domain checklist, a five-week plan and a lab list aligned with each objective.

## Exam facts to confirm first

| Item | Value (Microsoft Learn, checked October 25, 2026) |
| --- | --- |
| Certification | Microsoft Certified: Azure Database Administrator Associate |
| Time allowed | 100 minutes |
| Passing score | 700 or greater |
| Retake after a fail | 24 hours after the first attempt; later retakes vary |
| Renewal | Every 12 months, free, via an online assessment |
| English update date | October 27, 2026 |
| Languages | English, Chinese (Simplified), Japanese, Korean, French, German, Portuguese (Brazil), Italian, Chinese (Traditional), Spanish |

Because the new outline takes effect two days after this article's date, study from the published guide and re-check its date before you schedule. The change log records a single minor revision, to the objective on security for data at rest and in transit.

## Skills measured, domain by domain

### Plan and implement data platform resources (15-20%)

- **Plan and deploy Azure SQL solutions.** Recommend an offering, choose an automated deployment method, identify use cases for Azure Arc-enabled SQL services and for Azure SQL Database in Microsoft Fabric, plan table partitioning, recommend sharding, deploy offerings including hybrid SQL Server, and apply patches for hybrid and IaaS deployments.
- **Configure resources for scale and performance.** Azure SQL Database, SQL Managed Instance and SQL Server on Azure VMs, plus table partitioning and data compression.
- **Plan and implement a migration strategy.** Evaluate requirements, choose offline or online, implement migrations to Azure and between Azure SQL services, copy and move for Managed Instance, and troubleshoot a migration.

### Implement a secure environment (20-25%)

- **Authentication and authorization.** Microsoft Entra authentication for Azure SQL Database, Managed Instance and SQL Server, security principals, users from Entra identities, permissions through graphical tools and T-SQL, least privilege, and troubleshooting.
- **Data at rest and in transit.** Transparent data encryption (TDE), object-level encryption, server and database firewall rules, Always Encrypted including secure enclaves, and private links and service endpoints.
- **Compliance controls.** Data classification, audits, change data tracking, dynamic data masking, ledger in Azure SQL and row-level security.

### Monitor, configure and optimize database resources (20-25%)

- **Monitor activity and performance.** Operational baselines, metric sources, interpreting metrics, database watcher and Extended Events.
- **Query performance.** Query Store configuration and monitoring, resolving blocking, dynamic management views (DMVs), index changes, query modifications, execution plans and Intelligent Insights.
- **Optimal performance.** Index and statistics maintenance, integrity checks, automatic tuning, server settings, Resource Governor, database-scoped configuration, scaling compute and storage, and intelligent query processing (IQP) features.

### Configure and manage automation of tasks (15-20%)

- **SQL Server Agent jobs.** Schedules, alerts and notifications, and troubleshooting.
- **Automated deployment.** ARM and Bicep templates, Azure PowerShell and Azure CLI, and monitoring and troubleshooting deployments.
- **Database tasks in Azure.** Elastic jobs, automation-based tasks, alerts and notifications, and troubleshooting.

### Plan and configure an HA/DR environment (20-25%)

- **Plan a strategy.** Recommend HA/DR from recovery point objective and recovery time objective (RPO/RTO) requirements, evaluate hybrid and Azure-specific solutions, and plan tests.
- **Backup and restore.** Strategy, native backup and restore, point-in-time restore, long-term retention, T-SQL backup and restore, and cloud storage.
- **Configure HA/DR.** Active geo-replication, Always On availability groups on Managed Instance and Azure VMs, failover groups, Always On Failover Cluster Instances on Azure VMs, log shipping, monitoring and troubleshooting.

## A five-week study plan

| Week | Focus | Practical outcome |
| --- | --- | --- |
| 1 | Platform selection, deployment and migration | One database in each offering and a written comparison; a migration plan with an offline and online option |
| 2 | Security | Entra authentication, firewall rules, TDE, dynamic data masking, row-level security and auditing configured |
| 3 | Monitoring and query tuning | Query Store enabled, a blocking scenario diagnosed, an execution plan read, an index added |
| 4 | Automation | A SQL Server Agent job, an elastic job and a Bicep or CLI deployment |
| 5 | HA/DR and practice | Point-in-time restore, a failover group, notes on availability groups and log shipping, then the free practice assessment |

## Labs to build

Use a sandbox subscription, pick the lowest tier that supports the feature, and delete resources afterwards. This guide does not quote prices, so check current pricing and free offers for each service first.

1. **Compare offerings.** Deploy an Azure SQL Database and, if budget allows, a Managed Instance and a SQL Server VM. List what is configured for you in each. The site's [comparison of the three offerings](https://www.epifive.com/blog/azure-sql-database-vs-managed-instance-vs-vm) is a useful reference.
2. **Entra authentication.** Set a Microsoft Entra admin, create a contained user from an Entra identity and test a sign-in. See [Azure SQL Entra authentication setup](https://www.epifive.com/blog/azure-sql-entra-authentication-setup).
3. **Network and data protection.** Configure server and database firewall rules, add a private endpoint, confirm TDE, and try dynamic data masking and row-level security on a sample table.
4. **Auditing and classification.** Turn on auditing and classify a sensitive column. Read what lands in the audit target.
5. **Query Store and blocking.** Enable Query Store, run a workload, open the top resource-consuming queries, then create blocking between two sessions and find the blocker through DMVs.
6. **Indexes and plans.** Run a slow query, read its execution plan, add an index, and compare. Review automatic tuning recommendations.
7. **Monitoring.** Try database watcher where available, an Extended Events session, and Azure Monitor alerts, and write down which metrics establish a baseline.
8. **Automation.** Create a SQL Server Agent job on a VM or Managed Instance, an elastic job for Azure SQL Database, and a Bicep template that deploys a database.
9. **Backup and recovery.** Perform a point-in-time restore and review long-term retention settings, following [Azure SQL backup, PITR and LTR](https://www.epifive.com/blog/azure-sql-database-backup-restore-pitr-ltr).
10. **Disaster recovery.** Configure a failover group and perform a test failover, using [Azure SQL failover groups configuration](https://www.epifive.com/blog/azure-sql-failover-groups-configuration) as a guide. Read about the Managed Instance link in [Managed Instance link migration](https://www.epifive.com/blog/azure-sql-managed-instance-link-migration).

## Troubleshooting your preparation

- **You only know one platform.** Questions name specific offerings. Build a table of features by offering and fill it from documentation.
- **HA/DR terms blur.** Write the RPO and RTO of each option as you learn it, and practise choosing from a stated requirement.
- **Performance feels abstract.** Generate a real workload, then use Query Store and DMVs on it. The outline is task-based.
- **You skip on-premises topics.** Log shipping, Failover Cluster Instances, Agent jobs and hybrid patching are in the outline.

## Final checklist before you book

- Each objective has a lab or notes, particularly security and HA/DR.
- You have used the free practice assessment and the exam sandbox.
- You have confirmed the October 27, 2026 update, price and language on the exam page.
- You know the certification renews every 12 months.

## References

- Study guide for Exam DP-300: https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/dp-300
- Microsoft Certified: Azure Database Administrator Associate: https://learn.microsoft.com/en-us/credentials/certifications/azure-database-administrator-associate/
- Azure SQL documentation (listed in the study guide): https://learn.microsoft.com/en-us/azure/azure-sql/

## Frequently asked questions

### How long is DP-300 and what score do I need?

The Microsoft Learn certification page says you have 100 minutes to complete the assessment, and the study guide says 700 or greater is required to pass. The exam is proctored and may include interactive components.

### What changes in the October 27, 2026 DP-300 outline?

The study guide's change log lists one change, a minor update to the "Implement security for data at rest and data in transit" objective. The certification page says the English version will be updated on October 27, 2026, so confirm the details in the study guide when you book.

### Which domains carry the most weight on DP-300?

Three domains are weighted 20-25 percent: Implement a secure environment, Monitor, configure and optimize database resources, and Plan and configure a high availability and disaster recovery environment. Plan and implement data platform resources and Configure and manage automation are each 15-20 percent.

### Do I need to know SQL Server on-premises as well as Azure SQL?

Yes. Microsoft's audience profile covers Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure Virtual Machines and SQL Server on-premises, and objectives such as hybrid deployments, log shipping and migrations assume you understand both.