nerdexam
Microsoft

DP-300 · Question #330

Case Study 5 - ADatum Corporation Overview ADatum Corporation is a financial services company that has a main office in New York City. Existing Environment Licensing Agreement ADatum has a Microsoft V

The correct answer is C. Create database-scoped credentials in DB3.. Explanation Creating database-scoped credentials in DB3 must happen first because elastic jobs require a target database to have credentials that the job agent can use to authenticate and execute tasks - without these credentials already existing in DB3, the elastic job framework

Submitted by femi9· Mar 6, 2026Configure and manage automation of tasks

Question

Case Study 5 - ADatum Corporation Overview ADatum Corporation is a financial services company that has a main office in New York City. Existing Environment Licensing Agreement ADatum has a Microsoft Volume Licensing agreement that includes Software Assurance. Network Infrastructure ADatum has an on-premises datacenter and an Azure subscription named Sub1. Sub1 contains a virtual network named Network1 in the East US Azure region. The datacenter is connected to Network1 by using a Site-to-Site (S2S) VPN. Identity Environment The on-premises network contains an Active Directory Domain Services (AD DS) forest. The forest contains a single domain named corp.adatum.com. The corp.adatum.com domain syncs with a Microsoft Entra tenant named adatum.com. Database Environment The datacenter contains the servers shown in the following table. DB1 and DB2 are used for transactional and analytical workloads by an application named App1. App1 runs on Microsoft Entra hybrid joined servers that run Windows Server 2022. App1 uses Kerberos authentication. DB3 stores compliance data used by two applications named App2 and App3. DB3 performance is monitored by using Extended Events sessions, with the event_file target set to a file share on a local disk of SVR3. Resource allocation for DB3 is managed by using Resource Governor. Requirements Planned Changes ADatum plans to implement the following changes: - Deploy an Azure SQL managed instance named Instance1 to Network1. - Migrate DB1 and DB2 to Instance1. - Migrate DB3 to Azure SQL Database. - Following the migration of DB1 and DB2, hand over database development to remote developers who use Microsoft Entra joined Windows 11 devices. - Following the migration of DB3, configure the database to be part of an auto-failover group. Availability Requirements ADatum identifies the following post-migration availability requirements: - For DB1 and DB2, offload analytical workloads to a read-only database replica in the same Azure region. - Ensure that if a regional disaster occurs, DB1 and DB2 can be recovered from backups. - After the migration, App1 must maintain access to DB1 and DB2. - For DB3, manage potential performance issues caused by resource demand changes by App2 and App3. - Ensure that DB3 will still be accessible following a planned failover. - Ensure that DB3 can be restored if the logical server is deleted. - Minimize downtime during the migration of DB1 and DB2. Security Requirements ADatum identifies the following security requirements for after the migration: - Ensure that only designated developers who use Microsoft Entra joined Windows 11 devices can access DB1 and DB2 remotely. - Ensure that all changes to DB3, including ones within individual transactions, are audited and recorded. Management Requirements ADatum identifies the following post-migration management requirements: - Continue using Extended Events to monitor DB3. - In Azure SQL Database, automate the management of DB3 by using elastic jobs that have database-scoped credentials. Business Requirements ADatum identifies the following business requirements: - Minimize costs whenever possible, without affecting other requirements. - Minimize administrative effort. You need to recommend a process to automate the management of DB3. The solution must meet the management requirements. What should be the first step of the process?

Exhibits

DP-300 question #330 exhibit 1
DP-300 question #330 exhibit 2

Options

  • AConfigure Microsoft Entra authentication for the logical server that hosts DB3.
  • BConfigure a private endpoint for connectivity to DB3.
  • CCreate database-scoped credentials in DB3.
  • DCreate a database that has database-scoped credentials.

How the community answered

(20 responses)
  • A
    10% (2)
  • B
    5% (1)
  • C
    85% (17)

Explanation

Explanation

Creating database-scoped credentials in DB3 must happen first because elastic jobs require a target database to have credentials that the job agent can use to authenticate and execute tasks - without these credentials already existing in DB3, the elastic job framework has nothing to connect to. Option D is incorrect because it describes creating credentials in the elastic job database (the control database), not in DB3 itself, and you must first establish credentials on the target before configuring the controller. Option A (Microsoft Entra authentication) is a security configuration that is not a prerequisite for elastic jobs using database-scoped credentials, which rely on SQL authentication rather than Entra identities. Option B (private endpoint) addresses network connectivity but is not a management automation step and does not need to precede credential creation.

Memory Tip: Think of it as "set up the destination before the departure" - you must prepare DB3 (the target) with credentials before configuring the elastic job agent (the controller) to connect to it. The sequence is always: target credentials → job credentials → job agent → jobs.

Topics

#Azure SQL Database#Elastic Jobs#Database-scoped credentials#Automation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-300 Practice