DP-300 logo
Focused certification exam prep
Start practice

DP-300 Exam Domains 2026: Complete Guide to All 5 Content Areas

TL;DR
  • DP-300 has five domains, and three of them - security, monitoring/performance, and HA/DR - are joint-largest at 20-25% each.
  • Domain weights are published as ranges, not fixed percentages, so treat every number as approximate.
  • The exam covers Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure VMs, on-premises SQL Server, and T-SQL administration.
  • Passing requires a scaled score of at least 700 out of 1000, not a raw 70% count of questions.

Exam Blueprint Overview

Administering Microsoft Azure SQL Solutions (DP-300) is organized around five skill domains that map directly to what an Azure database administrator does day to day: provisioning platforms, locking down access, keeping databases healthy, automating repetitive work, and preparing for failure. Microsoft publishes these as weighted ranges rather than exact percentages, which means the exam pulls a proportional but not identical number of questions from each area every time you sit the test.

Before diving into the five domains individually, it's worth understanding the shape of the whole exam. It's a proctored, computer-delivered assessment lasting 100 minutes, taken either at a Pearson VUE testing center or via OnVUE online proctoring. During the assessment you get restricted access to Microsoft Learn reference material while the timer is running - a detail that changes how you should prepare, since you can look up syntax but not concepts. For a full walkthrough of how the score is calculated, see the DP-300 Passing Score guide, and for a broader first-attempt strategy, check the DP-300 Study Guide.

Why Ranges Matter: Because Microsoft lists domain weights as ranges (for example, 20-25%), no two exam forms are identical. Don't over-optimize for a single fixed percentage - instead, prioritize the domains at the top of the range and treat the rest as consistently important.
DomainOfficial WeightCore Focus
1. Plan and implement data platform resources15-20%Provisioning Azure SQL Database, Managed Instance, and SQL on Azure VMs
2. Implement a secure environment20-25%Authentication, authorization, auditing, encryption
3. Monitor, configure, and optimize database resources20-25%Performance tuning, query monitoring, resource management
4. Configure and manage automation of tasks15-20%Maintenance jobs, scripting, alerting
5. Plan and configure HA/DR20-25%Backups, failover groups, disaster recovery design

Domain 1: Plan and Implement Data Platform Resources (15-20%)

This is the foundation domain - before you can secure, monitor, automate, or protect a database, you have to deploy it correctly. Expect scenario questions that ask you to choose the right deployment option (Azure SQL Database, Azure SQL Managed Instance, or SQL Server on an Azure VM) based on compatibility, licensing, or connectivity constraints described in a business scenario.

What Candidates Must Master

You need working knowledge across the full range of Azure SQL deployment models and the trade-offs between them.

  • Selecting between Azure SQL Database, Managed Instance, and SQL Server on Azure VMs based on feature parity and migration needs
  • Configuring compute tiers, service tiers, and storage options for the chosen deployment model
  • Implementing Azure SQL Database elastic pools and understanding when pooling makes sense
  • Migrating on-premises SQL Server workloads into Azure using appropriate tools and methods
  • Configuring networking, firewall rules, and private endpoints for newly deployed instances

Because this domain sits at the entry point of nearly every exam scenario, weak fundamentals here tend to compound errors in later questions. If you're unsure how much time this domain typically eats into your prep schedule, the DP-300 difficulty guide breaks down where most candidates struggle.

Domain 2: Implement a Secure Environment (20-25%)

Security is one of the three joint-largest domains, and it shows up throughout the exam - not just in dedicated questions but embedded inside scenarios from other domains too. Expect to be tested on layered security models that span the network, the platform, and the data itself.

What Candidates Must Master

Security questions test both configuration steps and the reasoning behind choosing one control over another.

  • Configuring Azure AD authentication alongside SQL authentication and understanding when each applies
  • Implementing row-level security, dynamic data masking, and column-level encryption
  • Configuring auditing at the server and database level, including where audit logs land
  • Managing firewall rules, virtual network service endpoints, and private link connectivity
  • Applying least-privilege access through database roles and custom permissions
Exam Tip: Security questions often present a scenario with multiple plausible-looking answers where only one satisfies both the compliance requirement and the operational constraint stated in the prompt. Read every qualifier in the scenario before selecting an option.

Domain 3: Monitor, Configure, and Optimize Database Resources (20-25%)

This domain is where "keeping the lights on" becomes measurable. You're expected to know how to detect performance problems, interpret the signals, and apply the correct fix - whether that's a query rewrite, an index change, or a resource scaling decision.

What Candidates Must Master

Expect heavy use of monitoring tooling and T-SQL diagnostic queries in this domain.

  • Using Query Store, Dynamic Management Views, and Extended Events to diagnose performance issues
  • Interpreting wait statistics and identifying blocking or deadlocking scenarios
  • Configuring and reading Azure Monitor metrics and alerts for SQL resources
  • Applying intelligent performance features such as automatic tuning recommendations
  • Managing indexes, statistics, and query plans to resolve performance regressions

T-SQL fluency matters a great deal here - you'll need to read and sometimes complete queries against system views, not just recognize GUI menu options. This is one of the domains where hands-on lab time pays off far more than passive reading, a point covered in more depth in the DP-300 Study Guide.

Domain 4: Configure and Manage Automation of Tasks (15-20%)

Automation questions test whether you can reduce manual DBA work through scripting, scheduled jobs, and policy-based management. This domain tends to be less visually complex than security or performance but still requires precise knowledge of tool selection.

What Candidates Must Master

Focus on the mechanics of scheduling, alerting, and script deployment across the different Azure SQL platforms.

  • Creating and managing SQL Agent jobs, Elastic Database Jobs, and Azure Automation runbooks
  • Configuring maintenance plans for index rebuilds, statistics updates, and integrity checks
  • Setting up alerts for job failures and operational thresholds
  • Automating deployment of database schema changes using scripts or DevOps pipelines
  • Managing Policy-Based Management to enforce configuration standards across instances

Because this domain overlaps conceptually with monitoring, many candidates study them together. Cross-reference weak points using the DP-300 Cheat Sheet as a quick-recall companion once you've done the deeper reading.

Domain 5: Plan and Configure HA/DR (20-25%)

The third joint-largest domain, HA/DR, tests your ability to design resilient database architectures and to actually execute failover and recovery procedures - not just describe them theoretically.

What Candidates Must Master

Expect scenario-based questions comparing recovery objectives against available Azure features.

  • Configuring backup and restore strategies, including point-in-time restore, for each deployment model
  • Implementing auto-failover groups and active geo-replication for Azure SQL Database
  • Configuring Always On availability groups for SQL Server on Azure VMs
  • Interpreting recovery point objective (RPO) and recovery time objective (RTO) requirements to select the right HA/DR pattern
  • Performing and validating failover, failback, and disaster recovery drills

Key Takeaway

Because Domains 2, 3, and 5 each sit at 20-25%, together they can represent well over half the exam. Prioritize deep, hands-on practice in security, performance monitoring, and HA/DR before polishing the smaller domains.

How the Exam Tests These Domains

DP-300 is a proctored, computer-delivered exam that may include interactive components alongside traditional multiple-choice and multiple-response items. Rather than testing isolated facts, many questions embed a business scenario - a company migrating a workload, a compliance requirement, a performance incident - and ask you to select the configuration or T-SQL approach that satisfies every constraint mentioned.

Two exam-day mechanics are worth internalizing early in your prep:

  • You have restricted access to Microsoft Learn documentation during the exam, but the 100-minute timer keeps running while you consult it - so practice using references efficiently rather than treating them as a safety net.
  • If you take a break during the exam, previously viewed questions lock and cannot be revisited, so pace yourself deliberately across all five domains rather than rushing early sections to "save time" for later ones.

Passing requires a scaled score of at least 700 on a 1-1000 scale - this is not the same as answering 70% of raw questions correctly, since item difficulty is weighted. For the exact mechanics of how that scaled score works, see the DP-300 Passing Score breakdown. If you want to gauge realistically how challenging this format is compared to other associate-level exams, the difficulty guide and pass rate analysis are useful companion reads.

Sequencing Your Prep Around the Domains

Because three domains carry the heaviest weight, a smart study sequence front-loads them without neglecting the smaller two. A simple domain-anchored schedule looks like this:

Week 1

Domain 1 Foundations

  • Deploy Azure SQL Database, Managed Instance, and a SQL Server VM in a sandbox subscription
  • Compare service tiers and networking options hands-on
Week 2

Domain 2 Security Deep Dive

  • Configure Azure AD auth, auditing, and dynamic data masking on your sandbox instances
  • Practice permission and role scenarios until they feel automatic
Week 3

Domain 3 Monitoring & Performance

  • Run Query Store and DMV exercises against a loaded test database
  • Practice reading wait statistics and fixing induced performance problems
Week 4

Domains 4 and 5

  • Build SQL Agent jobs and Elastic Database Jobs, then test failover groups and Always On configurations
  • Review weaker domains and run a full timed practice exam

This structure isn't a generic weekly template - it's ordered specifically because Domain 1 unlocks the sandbox environment you need for every later domain, and the three 20-25% domains each get a full dedicated week before automation and HA/DR are combined in the final push.

Who Hires for These Skills

The domain structure of DP-300 mirrors real hiring expectations for Azure database administrator and database engineer roles. Organizations running production workloads on Azure SQL Database, Managed Instance, or SQL Server on Azure VMs look for candidates who can demonstrate the exact competencies covered in the five domains: secure configuration, performance troubleshooting, automated maintenance, and disaster recovery readiness. If you're evaluating whether this credential aligns with your career path, the DP-300 Jobs overview and the ROI analysis go deeper into role types and market positioning.

Before registering, it's also worth reviewing eligibility and prerequisites and the current pricing breakdown, since exam fees and scheduling windows can affect when you should book your attempt relative to your domain-by-domain readiness.

Retake Planning: If you don't pass on the first attempt, you must wait 24 hours before retaking, and 14 days for each attempt after that, with a maximum of five attempts within 12 months of your first sitting. Plan your domain review priorities accordingly rather than rebooking immediately.

Once certified, remember that validity lasts 12 months, with a free, open-book online renewal assessment available in the six months before expiration - passing it extends validity another year from the original expiration date, not from the renewal date. You can practice full-length, domain-weighted simulations on our practice test platform to see how your readiness maps across all five areas before you schedule the real thing. Our home page also links out to updated domain trackers as Microsoft revises the skills outline over time.

FAQ

Which DP-300 domain should I study first?

Domain 1 (Plan and implement data platform resources) is a practical starting point because it gets your Azure SQL Database, Managed Instance, and VM environments running, which you'll need for hands-on practice in every other domain.

Are the DP-300 domain weights exact percentages?

No. Microsoft publishes them as ranges, such as 20-25% for security, monitoring, and HA/DR. Treat these as approximate proportions rather than a fixed question count on any single exam form.

Do all five domains appear on every exam attempt?

Yes, each domain is represented on every form within its stated weight range, though the exact questions and their difficulty will vary between attempts.

Can I use outside notes or the internet during the exam for domain-specific lookups?

You get restricted access to Microsoft Learn reference material during the exam, but the 100-minute timer keeps running while you use it, and outside notes or the open internet are not permitted.

How current is this domain breakdown?

The skills measured here reflect the outline as of April 24, 2026. Microsoft periodically updates exam skills outlines, so always cross-check the official DP-300 study guide before your exam date.

Ready to pass your DP-300 exam?

Put this into practice with free DP-300 questions across every exam domain.