- Exam Blueprint Overview
- Domain 1: Plan and Implement Data Platform Resources
- Domain 2: Implement a Secure Environment
- Domain 3: Monitor, Configure, and Optimize Database Resources
- Domain 4: Configure and Manage Automation of Tasks
- Domain 5: Plan and Configure HA/DR
- How the Exam Tests These Domains
- Sequencing Your Prep Around the Domains
- Who Hires for These Skills
- FAQ
- DP-300 has five domains, and three of them - security, monitoring/performance, and HA/DR - are joint-largest at 20-25% each.
- Domain weights are published as ranges, not fixed percentages, so treat every number as approximate.
- The exam covers Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure VMs, on-premises SQL Server, and T-SQL administration.
- Passing requires a scaled score of at least 700 out of 1000, not a raw 70% count of questions.
Exam Blueprint Overview
Administering Microsoft Azure SQL Solutions (DP-300) is organized around five skill domains that map directly to what an Azure database administrator does day to day: provisioning platforms, locking down access, keeping databases healthy, automating repetitive work, and preparing for failure. Microsoft publishes these as weighted ranges rather than exact percentages, which means the exam pulls a proportional but not identical number of questions from each area every time you sit the test.
Before diving into the five domains individually, it's worth understanding the shape of the whole exam. It's a proctored, computer-delivered assessment lasting 100 minutes, taken either at a Pearson VUE testing center or via OnVUE online proctoring. During the assessment you get restricted access to Microsoft Learn reference material while the timer is running - a detail that changes how you should prepare, since you can look up syntax but not concepts. For a full walkthrough of how the score is calculated, see the DP-300 Passing Score guide, and for a broader first-attempt strategy, check the DP-300 Study Guide.
| Domain | Official Weight | Core Focus |
|---|---|---|
| 1. Plan and implement data platform resources | 15-20% | Provisioning Azure SQL Database, Managed Instance, and SQL on Azure VMs |
| 2. Implement a secure environment | 20-25% | Authentication, authorization, auditing, encryption |
| 3. Monitor, configure, and optimize database resources | 20-25% | Performance tuning, query monitoring, resource management |
| 4. Configure and manage automation of tasks | 15-20% | Maintenance jobs, scripting, alerting |
| 5. Plan and configure HA/DR | 20-25% | Backups, failover groups, disaster recovery design |
Domain 1: Plan and Implement Data Platform Resources (15-20%)
This is the foundation domain - before you can secure, monitor, automate, or protect a database, you have to deploy it correctly. Expect scenario questions that ask you to choose the right deployment option (Azure SQL Database, Azure SQL Managed Instance, or SQL Server on an Azure VM) based on compatibility, licensing, or connectivity constraints described in a business scenario.
What Candidates Must Master
You need working knowledge across the full range of Azure SQL deployment models and the trade-offs between them.
- Selecting between Azure SQL Database, Managed Instance, and SQL Server on Azure VMs based on feature parity and migration needs
- Configuring compute tiers, service tiers, and storage options for the chosen deployment model
- Implementing Azure SQL Database elastic pools and understanding when pooling makes sense
- Migrating on-premises SQL Server workloads into Azure using appropriate tools and methods
- Configuring networking, firewall rules, and private endpoints for newly deployed instances
Because this domain sits at the entry point of nearly every exam scenario, weak fundamentals here tend to compound errors in later questions. If you're unsure how much time this domain typically eats into your prep schedule, the DP-300 difficulty guide breaks down where most candidates struggle.
Domain 2: Implement a Secure Environment (20-25%)
Security is one of the three joint-largest domains, and it shows up throughout the exam - not just in dedicated questions but embedded inside scenarios from other domains too. Expect to be tested on layered security models that span the network, the platform, and the data itself.
What Candidates Must Master
Security questions test both configuration steps and the reasoning behind choosing one control over another.
- Configuring Azure AD authentication alongside SQL authentication and understanding when each applies
- Implementing row-level security, dynamic data masking, and column-level encryption
- Configuring auditing at the server and database level, including where audit logs land
- Managing firewall rules, virtual network service endpoints, and private link connectivity
- Applying least-privilege access through database roles and custom permissions
Domain 3: Monitor, Configure, and Optimize Database Resources (20-25%)
This domain is where "keeping the lights on" becomes measurable. You're expected to know how to detect performance problems, interpret the signals, and apply the correct fix - whether that's a query rewrite, an index change, or a resource scaling decision.
What Candidates Must Master
Expect heavy use of monitoring tooling and T-SQL diagnostic queries in this domain.
- Using Query Store, Dynamic Management Views, and Extended Events to diagnose performance issues
- Interpreting wait statistics and identifying blocking or deadlocking scenarios
- Configuring and reading Azure Monitor metrics and alerts for SQL resources
- Applying intelligent performance features such as automatic tuning recommendations
- Managing indexes, statistics, and query plans to resolve performance regressions
T-SQL fluency matters a great deal here - you'll need to read and sometimes complete queries against system views, not just recognize GUI menu options. This is one of the domains where hands-on lab time pays off far more than passive reading, a point covered in more depth in the DP-300 Study Guide.
Domain 4: Configure and Manage Automation of Tasks (15-20%)
Automation questions test whether you can reduce manual DBA work through scripting, scheduled jobs, and policy-based management. This domain tends to be less visually complex than security or performance but still requires precise knowledge of tool selection.
What Candidates Must Master
Focus on the mechanics of scheduling, alerting, and script deployment across the different Azure SQL platforms.
- Creating and managing SQL Agent jobs, Elastic Database Jobs, and Azure Automation runbooks
- Configuring maintenance plans for index rebuilds, statistics updates, and integrity checks
- Setting up alerts for job failures and operational thresholds
- Automating deployment of database schema changes using scripts or DevOps pipelines
- Managing Policy-Based Management to enforce configuration standards across instances
Because this domain overlaps conceptually with monitoring, many candidates study them together. Cross-reference weak points using the DP-300 Cheat Sheet as a quick-recall companion once you've done the deeper reading.
Domain 5: Plan and Configure HA/DR (20-25%)
The third joint-largest domain, HA/DR, tests your ability to design resilient database architectures and to actually execute failover and recovery procedures - not just describe them theoretically.
What Candidates Must Master
Expect scenario-based questions comparing recovery objectives against available Azure features.
- Configuring backup and restore strategies, including point-in-time restore, for each deployment model
- Implementing auto-failover groups and active geo-replication for Azure SQL Database
- Configuring Always On availability groups for SQL Server on Azure VMs
- Interpreting recovery point objective (RPO) and recovery time objective (RTO) requirements to select the right HA/DR pattern
- Performing and validating failover, failback, and disaster recovery drills
Key Takeaway
Because Domains 2, 3, and 5 each sit at 20-25%, together they can represent well over half the exam. Prioritize deep, hands-on practice in security, performance monitoring, and HA/DR before polishing the smaller domains.
How the Exam Tests These Domains
DP-300 is a proctored, computer-delivered exam that may include interactive components alongside traditional multiple-choice and multiple-response items. Rather than testing isolated facts, many questions embed a business scenario - a company migrating a workload, a compliance requirement, a performance incident - and ask you to select the configuration or T-SQL approach that satisfies every constraint mentioned.
Two exam-day mechanics are worth internalizing early in your prep:
- You have restricted access to Microsoft Learn documentation during the exam, but the 100-minute timer keeps running while you consult it - so practice using references efficiently rather than treating them as a safety net.
- If you take a break during the exam, previously viewed questions lock and cannot be revisited, so pace yourself deliberately across all five domains rather than rushing early sections to "save time" for later ones.
Passing requires a scaled score of at least 700 on a 1-1000 scale - this is not the same as answering 70% of raw questions correctly, since item difficulty is weighted. For the exact mechanics of how that scaled score works, see the DP-300 Passing Score breakdown. If you want to gauge realistically how challenging this format is compared to other associate-level exams, the difficulty guide and pass rate analysis are useful companion reads.
Sequencing Your Prep Around the Domains
Because three domains carry the heaviest weight, a smart study sequence front-loads them without neglecting the smaller two. A simple domain-anchored schedule looks like this:
Domain 1 Foundations
- Deploy Azure SQL Database, Managed Instance, and a SQL Server VM in a sandbox subscription
- Compare service tiers and networking options hands-on
Domain 2 Security Deep Dive
- Configure Azure AD auth, auditing, and dynamic data masking on your sandbox instances
- Practice permission and role scenarios until they feel automatic
Domain 3 Monitoring & Performance
- Run Query Store and DMV exercises against a loaded test database
- Practice reading wait statistics and fixing induced performance problems
Domains 4 and 5
- Build SQL Agent jobs and Elastic Database Jobs, then test failover groups and Always On configurations
- Review weaker domains and run a full timed practice exam
This structure isn't a generic weekly template - it's ordered specifically because Domain 1 unlocks the sandbox environment you need for every later domain, and the three 20-25% domains each get a full dedicated week before automation and HA/DR are combined in the final push.
Who Hires for These Skills
The domain structure of DP-300 mirrors real hiring expectations for Azure database administrator and database engineer roles. Organizations running production workloads on Azure SQL Database, Managed Instance, or SQL Server on Azure VMs look for candidates who can demonstrate the exact competencies covered in the five domains: secure configuration, performance troubleshooting, automated maintenance, and disaster recovery readiness. If you're evaluating whether this credential aligns with your career path, the DP-300 Jobs overview and the ROI analysis go deeper into role types and market positioning.
Before registering, it's also worth reviewing eligibility and prerequisites and the current pricing breakdown, since exam fees and scheduling windows can affect when you should book your attempt relative to your domain-by-domain readiness.
Once certified, remember that validity lasts 12 months, with a free, open-book online renewal assessment available in the six months before expiration - passing it extends validity another year from the original expiration date, not from the renewal date. You can practice full-length, domain-weighted simulations on our practice test platform to see how your readiness maps across all five areas before you schedule the real thing. Our home page also links out to updated domain trackers as Microsoft revises the skills outline over time.
FAQ
Domain 1 (Plan and implement data platform resources) is a practical starting point because it gets your Azure SQL Database, Managed Instance, and VM environments running, which you'll need for hands-on practice in every other domain.
No. Microsoft publishes them as ranges, such as 20-25% for security, monitoring, and HA/DR. Treat these as approximate proportions rather than a fixed question count on any single exam form.
Yes, each domain is represented on every form within its stated weight range, though the exact questions and their difficulty will vary between attempts.
You get restricted access to Microsoft Learn reference material during the exam, but the 100-minute timer keeps running while you use it, and outside notes or the open internet are not permitted.
The skills measured here reflect the outline as of April 24, 2026. Microsoft periodically updates exam skills outlines, so always cross-check the official DP-300 study guide before your exam date.