DP-300 Question #361: Real Exam Question with Answer & Explanation

Question

You have two Azure virtual machines named Server1 and Server2 that run Windows Server 2022 and are joined to an Active Directory Domain Services (AD DS) domain named contoso.com. Both virtual machines have a default instance of Microsoft SQL Server 2019 installed. Server1 is configured as a master server, and Server2 is configured as a target server. On Server1, you create a proxy account named contoso\sqlproxy. You need to ensure that the SQL Server Agent job steps can be downloaded from Server1 and run on Server2. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

• AOn Server2, grant the contoso\sqlproxy account the Impersonate a client after authentication user
• BOn Server2, grant the contoso\sqlproxy account the Access this computer from the network user
• COn Server2, create a proxy account.
• DOn Server1, set the AllowDownloadedJobsToMatchProxyName registry entry to 1.
• EOn Server2, set the AllowDownloadedJobsToMatchProxyName registry entry to 1.

Explanation

To enable SQL Server Agent job steps to be downloaded from Server1 (master) and executed on Server2 (target) using the contoso\sqlproxy account, specific configurations are needed on the target server.

Common mistakes.

• B. While network access is generally needed for remote operations, granting Access this computer from the network is not the specific permission required for a proxy account to impersonate and run job steps locally on the target server.
• C. The question implies using the proxy account created on Server1. The solution for multi-server jobs often involves leveraging the AllowDownloadedJobsToMatchProxyName setting and appropriate Windows user rights on the target, rather than creating a duplicate proxy account object on Server2.
• D. The AllowDownloadedJobsToMatchProxyName registry entry must be set on the target server (Server2), not the master server (Server1), to allow it to process downloaded jobs using a specified proxy account.

Concept tested. SQL Server Agent multi-server jobs and proxy accounts

Reference. https://learn.microsoft.com/en-us/troubleshoot/sql/database-engine/sql-server-agent/run-jobs-target-server-proxy-account

No community discussion yet for this question.