DP-300 Exam 2026: Your Complete Azure SQL Administrator Guide
The Microsoft DP-300: Administering Microsoft Azure SQL Solutions exam is the single requirement to earn the Azure Database Administrator Associate badge. It validates that you can plan, deploy, secure, monitor, optimize, automate, and protect SQL Server workloads on Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure VMs, and SQL Server on-premises.
The April 24, 2026 skills outline introduced two important shifts that almost every blog still has wrong: HA/DR was promoted to its own 20–25% domain (it used to be folded inside automation), and Hyperscale + Azure SQL Database in Microsoft Fabric are now explicit assessment targets under "Plan and deploy Azure SQL solutions." Studying from a 2024-era blog or video course will leave you blind on roughly 25% of the questions.
This guide walks you through the new 5-domain split, the Hyperscale / Fabric / VBS enclaves topics that competitors miss, exam logistics ($165 USD, 700/1000 passing score, 100 minutes, 1-year renewal), the DP-300 vs DP-203 vs DP-700 decision, a 6-week FREE study plan, common traps, and the post-cert salary trajectory.
Start Your FREE DP-300 Prep Today
Our free DP-300 prep mirrors the real Microsoft case-study and multi-select format with AI-generated explanations grounded in the latest April 2026 skills outline. 100% FREE, no credit card.
DP-300 Exam Format at a Glance
| Spec | Detail |
|---|---|
| Exam code | DP-300 |
| Title | Administering Microsoft Azure SQL Solutions |
| Certification earned | Azure Database Administrator Associate |
| Questions | 40–60 (typically ~45) |
| Time | 100 minutes (core); ~120 min seat time |
| Passing score | 700 of 1000 (scaled — not 70%) |
| Question types | Multiple choice, multiple answer, drag-drop, case study, build-list, hot area, T-SQL fill-in |
| Fee (US) | $165 USD |
| Languages | English, Chinese (Simplified), Chinese (Traditional), Japanese, Korean, French, German, Italian, Portuguese (Brazil), Spanish — 10 total (Microsoft Learn) |
| Validity | 1 year — renewed FREE on Microsoft Learn |
| Skills outline date | April 24, 2026 (Microsoft Learn) |
| Delivery | Pearson VUE test center or online proctored |
| Prerequisites | None — but T-SQL + 1 year SQL admin experience strongly recommended |
Important scoring nuance: Microsoft uses a scaled score from 1–1000, not a percentage. 700 is the pass mark, but a raw 70% does not equal 700 — questions are weighted by difficulty. You can miss several easy questions and still pass if you nail the case study, and vice-versa.
What Changed in the April 2026 Skills Outline
The DP-300 skills outline received its most material revision since the exam launched. Most third-party study guides — including the top-3 Google results as of April 2026 — still reflect the old 4-domain structure. Here is what is actually on the exam now:
1. HA/DR is now its own 20–25% domain (was folded into automation)
In the previous outline, backup/restore and Always On lived inside "Configure and manage automation." The April 2026 outline carved out "Plan and configure a high availability and disaster recovery (HA/DR) environment" as a standalone 20–25% domain, putting it on equal footing with security and monitoring. Expect 8–12 questions specifically on RPO/RTO modeling, geo-replication, failover groups, and Always On Failover Cluster Instances on Azure VMs.
2. Hyperscale is an explicit objective
The outline now lists "Configure Azure SQL Database for scale and performance" — and Microsoft Learn's reference modules for that bullet specifically cover Hyperscale service tier, including its 100 TB per database limit, near-instantaneous backups, geo-replication on Hyperscale (now GA), and named replicas. If you skipped Hyperscale because the 2024 outline only mentioned "General Purpose / Business Critical," you will miss several questions.
3. Azure SQL Database in Microsoft Fabric
The new "Identify use cases for Azure SQL Database in Microsoft Fabric" objective is a 2025/2026 addition. Fabric SQL DB shares the engine with Azure SQL Database but lives inside a Fabric workspace with Mirroring to OneLake automatically enabled. Know when Fabric SQL DB makes sense (analytics-adjacent OLTP that needs zero-ETL into OneLake) versus standalone Azure SQL DB (transactional workloads with no Fabric dependency).
4. Always Encrypted with VBS enclaves
The outline added "Implement Always Encrypted with VBS enclaves" as a distinct objective. VBS (Virtualization-Based Security) enclaves enable rich computations on encrypted data — pattern matching, range comparisons, sorting — that the original Always Encrypted (deterministic / randomized) could not perform. You must know that VBS enclaves require Azure SQL Database Premium, Business Critical, or Hyperscale tier.
5. Database Watcher (preview → GA)
The "Monitor by using database watcher" bullet refers to the new Azure portal-integrated database watcher that uses Azure Data Explorer for centralized cross-server monitoring. It supersedes (but does not retire) Query Performance Insight. Know the difference: Query Store is per-database, database watcher is fleet-wide.
The 5 DP-300 Domains (April 2026 Skills Outline)
| Domain | Weight | Focus |
|---|---|---|
| 1. Plan and implement data platform resources | 15–20% | Choose offering, deploy, migrate, scale, partition |
| 2. Implement a secure environment | 20–25% | AuthN/AuthZ, encryption, TDE, Always Encrypted, dynamic data masking |
| 3. Monitor, configure, and optimize database resources | 20–25% | Query Store, DMVs, indexes, Resource Governor, IQP |
| 4. Configure and manage automation of tasks | 15–20% | SQL Agent jobs, ARM/Bicep, PowerShell, elastic jobs |
| 5. Plan and configure a high availability and disaster recovery (HA/DR) environment | 20–25% | Backup/restore, geo-replication, Always On, log shipping |
Domains 2 and 3 together carry up to 50% of the exam — most candidates underweight Domain 5 (HA/DR) because it is new and underweight Domain 4 (automation) because it feels "easy." Both are traps.
DP-300 vs DP-203 vs DP-700: Pick the Right Microsoft Data Cert
Microsoft's data certification ladder has shifted in 2025–2026, and choosing the wrong one wastes $165 and several weeks. Here is the 2026 decision table:
| Cert | Code | Role | Stack | Best for |
|---|---|---|---|---|
| Azure Database Administrator Associate | DP-300 | DBA, SRE | Azure SQL DB / MI, SQL Server on VM, on-prem SQL | DBAs running OLTP / line-of-business databases on Azure |
| Azure Data Engineer Associate (legacy) | DP-203 | Data Engineer | Synapse, Data Factory, Databricks, ADLS Gen2 | Synapse-era data engineers (retiring March 31, 2026 — verify status) |
| Fabric Data Engineer Associate | DP-700 | Data Engineer | Microsoft Fabric (OneLake, Lakehouse, Warehouse, Real-Time Intelligence) | New 2025/2026-era data engineers — DP-203's successor |
Rule of thumb:
- If your job is to keep transactional databases healthy → DP-300
- If your job is to build pipelines and lakehouses → DP-700 (DP-203 is sunsetting)
- If you do both → DP-300 first, DP-700 second
DP-300 and DP-700 do not overlap heavily; ~15% of topics (security on Azure data services, Microsoft Entra auth) appear on both.
Try a FREE DP-300 Practice Question Set
Our FREE Microsoft-style question bank covers all 5 domains with detailed Microsoft Learn citations for every answer.
Domain 1 Deep-Dive: Plan and Implement Data Platform Resources (15–20%)
Recommend the right Azure SQL offering
Memorize this decision tree — it is asked verbatim in case studies:
| Need | Pick |
|---|---|
| Single, fully managed PaaS database; minimal admin | Azure SQL Database (single or elastic pool) |
| Lift-and-shift with Instance-level features (SQL Agent, cross-DB queries, CLR, linked servers) | Azure SQL Managed Instance |
| Full SQL Server admin control, custom OS-level tuning | SQL Server on Azure VM (IaaS) |
| Ultra-large OLTP up to 100 TB, fast backups, near-instant scaling | Azure SQL Database Hyperscale |
| OLTP that feeds Fabric / OneLake analytics with zero ETL | Azure SQL Database in Microsoft Fabric |
| On-prem SQL Server you want centrally governed by Azure | Azure Arc-enabled SQL Server |
Hyperscale specifics (new in 2026 outline)
- Storage up to 100 TB per database
- Page server architecture — storage is decoupled from compute
- Backups are near-instantaneous (not size-of-data) using snapshots of page servers
- Named replicas (up to 30) for read-scale-out without affecting primary
- Geo-replication on Hyperscale is GA in 2025 — supports up to 4 geo-secondaries
- Cannot revert to General Purpose or Business Critical once converted (one-way)
Migration paths
Know which tool fits which scenario:
| Source → Target | Recommended tool |
|---|---|
| On-prem SQL Server → Azure SQL DB / MI / VM | Azure Database Migration Service (DMS) |
| On-prem SQL Server → Azure SQL MI (online) | Azure SQL Migration extension for Azure Data Studio |
| Azure SQL MI → Azure SQL MI (cross-region) | Database Copy / Move (built-in MI feature) |
| Small on-prem DB → Azure SQL DB (offline) | BACPAC export/import via Data-tier Application |
Domain 2 Deep-Dive: Implement a Secure Environment (20–25%)
The largest single domain. Five pillars:
Authentication
- Microsoft Entra ID (formerly Azure AD) is now the recommended primary authentication mode for Azure SQL DB and MI
- SQL authentication is still supported but should be supplementary
- For SQL on Azure VMs, you can also use Microsoft Entra ID + Windows authentication via Azure AD Kerberos
Authorization
- Apply least privilege at all levels — server logins, database users, schemas, object grants
- Use fixed database roles (db_datareader, db_datawriter) only as a starting point — production workloads should use custom roles with explicit GRANT
- Row-level security (RLS) uses security predicates and a security policy; FILTER predicates are silent, BLOCK predicates raise an error
Encryption — data at rest
- Transparent Data Encryption (TDE) is on by default for new Azure SQL DB and MI; it encrypts the entire database, log, and backups
- Customer-managed keys (CMK / BYOK) are stored in Azure Key Vault
- Always Encrypted encrypts column-level data with keys held by the client driver (server never sees the plaintext)
- Always Encrypted with VBS enclaves (new objective) supports rich computations — pattern matching, range queries, sort/group — on encrypted data; requires Premium, Business Critical, or Hyperscale tier
Encryption — data in transit
- Force TLS 1.2+ (TLS 1.3 supported in 2025+)
- Private Endpoint (recommended) places SQL on a private IP in your VNet, blocking public access
- Service Endpoint keeps traffic on the Azure backbone but does not change the public endpoint
Compliance and auditing
- Server audit + database audit writes to Storage account, Event Hub, or Log Analytics
- Dynamic Data Masking (DDM) is presentation-layer only — the data is unchanged on disk
- Ledger in Azure SQL gives tamper-evidence with cryptographic hashes; append-only ledger tables vs updatable ledger tables
- Data classification uses sensitivity labels (Confidential, PII, etc.)
DP-300 Salary in 2026
| Role | US Median | Range |
|---|---|---|
| Junior Database Administrator (cloud) | $95,000 | $78k–$112k |
| Azure Database Administrator (DP-300 holder) | $135,000 | $115k–$160k |
| Senior Cloud DBA / Lead | $165,000 | $145k–$195k |
| Cloud Data Architect | $185,000 | $160k–$230k |
Source: Glassdoor, Payscale, Levels.fyi 2026 medians. DP-300 holders earn 15–22% more than uncertified Azure DBAs in the same role band, per Microsoft's 2025 IT certification value report.
Your 6-Week FREE DP-300 Study Plan
| Week | Focus | Hours | Tasks |
|---|---|---|---|
| 1 | Domain 1: Plan & deploy | 8–10 | Microsoft Learn path "Administer a SQL Server database infrastructure" Modules 1–3. Hands-on: deploy Azure SQL DB, MI, and SQL on VM in a free-tier subscription. |
| 2 | Domain 2: Security | 10–12 | Implement TDE with CMK in Key Vault. Configure Always Encrypted with VBS enclaves. Set up Microsoft Entra auth. Audit with Log Analytics. |
| 3 | Domain 3: Monitor & optimize | 10–12 | Master Query Store. Run Database Engine Tuning Advisor. Use DMVs (sys.dm_exec_query_stats, sys.dm_db_index_usage_stats). Practice IQP scenarios. |
| 4 | Domain 4: Automation | 6–8 | Build SQL Agent maintenance plans. Deploy DBs via Bicep + GitHub Actions. Configure elastic jobs across an MI pool. |
| 5 | Domain 5: HA/DR | 10–12 | Configure failover groups, active geo-replication, AG on Azure VMs. Practice point-in-time-restore. Map RPO/RTO to each option. |
| 6 | Mocks + weak-spot review | 8–10 | Take Microsoft's free Practice Assessment 3+ times. Take 2 third-party full-length mocks. Re-read change-log items in the 2026 outline. |
Total prep: 50–65 hours over 6 weeks — typical for someone with 1–2 years SQL Server experience. Brand-new DBAs need 80–100 hours.
Free Resources From Microsoft
- DP-300 Study Guide (April 2026 outline) — the only authoritative source
- Microsoft Learn DP-300 collection — 90+ free modules
- Free Practice Assessment for DP-300 — 50 questions, free, retakeable
- Exam Readiness Zone: Preparing for DP-300 — 5-part Microsoft-produced video series
- Azure SQL documentation — read the "Hyperscale" and "Always Encrypted with secure enclaves" sections specifically
- Free $200 Azure credit (new account) — enough to spin up DBs for hands-on labs
Take a FREE Full-Length DP-300 Mock Exam
Unlimited mock exams, AI-explained answers, and a personalized weak-spot dashboard — 100% FREE.
DP-300 Retake Policy and Cost-Saving Tips
Microsoft's official retake rules for DP-300 (and every role-based exam) are:
| Attempt | Wait time | Cost |
|---|---|---|
| 1st retake (after fail) | 24 hours | $165 USD (full price) |
| 2nd–5th retake | 14 days between attempts | $165 USD each |
| Maximum attempts in 12 months | 5 | — |
| If you fail 5 times | Wait 12 months from your first attempt | — |
Key rules from Microsoft Learn retake policy:
- You cannot retake an exam you have passed unless your certification has expired
- Waivers of the 14-day wait are granted only for documented internet/equipment failure with a Pearson VUE case number — "I forgot to study" does not qualify
- A passed beta exam counts toward certification; a failed beta does not, and the live retake follows the standard policy
Cost-saving moves
- Exam Replay — Microsoft sometimes bundles a discounted retake voucher with the original $165 purchase (~$33 add-on); buy this if you are unsure of passing first try
- Verified-student 50% discount — if you have a
.eduemail or other verified student status - Microsoft FastTrack vouchers — your employer's Microsoft account team may have free voucher allocations; ask before paying personally
- Free renewal forever — the 1-year renewal assessment is unproctored and free, so the $165 is genuinely a one-time cost if you renew on time
Hands-On Labs Checklist (Cannot Skip)
DP-300 is not a multiple-choice memorization exam — it tests whether you have actually built and operated Azure SQL infrastructure. Before sitting the exam, complete these labs end-to-end in a free-tier Azure subscription:
| # | Lab | Domain | Time |
|---|---|---|---|
| 1 | Deploy Azure SQL DB (single + elastic pool), Managed Instance, and SQL Server on Azure VM; connect via SSMS or Azure Data Studio | 1 | 2h |
| 2 | Migrate a local AdventureWorksLT database to Azure SQL DB using the Azure SQL Migration extension for Azure Data Studio | 1 | 1.5h |
| 3 | Configure Microsoft Entra ID authentication for Azure SQL DB and create users from Entra identities | 2 | 1h |
| 4 | Implement TDE with customer-managed key in Azure Key Vault, then rotate the key | 2 | 1h |
| 5 | Configure Always Encrypted with VBS enclaves on a Premium-tier Azure SQL DB; run a LIKE query on encrypted data | 2 | 1.5h |
| 6 | Configure server audit + database audit to Log Analytics; query the AzureDiagnostics table | 2 | 1h |
| 7 | Enable Query Store, capture a regression, force a plan via sp_query_store_force_plan | 3 | 1.5h |
| 8 | Use Database Engine Tuning Advisor + DMVs to identify a missing index, then create it | 3 | 1h |
| 9 | Build a SQL Agent maintenance plan for index defrag and statistics update on Managed Instance | 4 | 1h |
| 10 | Deploy an Azure SQL DB via Bicep template + GitHub Actions workflow | 4 | 2h |
| 11 | Configure active geo-replication between two regions; perform a controlled failover | 5 | 1.5h |
| 12 | Configure failover groups and test automatic failover; restore a database to a point in time | 5 | 1.5h |
Total: ~17 hands-on hours. Skip these labs and you will fail Domain 5 (HA/DR) and the T-SQL fill-in questions inside Domain 2.
Common DP-300 Mistakes (And How to Avoid Them)
Mistake 1: Treating 700/1000 as 70%
It is not. The score is scaled. Hard questions weight more, easy questions less. Two candidates with 32 of 45 raw correct can post different scaled scores. Do not aim for "70% raw" — aim for above 80% on practice tests before sitting the real one.
Mistake 2: Studying from a 2023/2024 outline
Two-year-old courses do not cover Hyperscale geo-replication GA, Fabric SQL DB, VBS enclaves, the new HA/DR domain, or database watcher. Always cross-check your study material against the April 24, 2026 outline date on Microsoft Learn.
Mistake 3: Underestimating T-SQL on the exam
DP-300 tests T-SQL fill-in-the-blank questions where you must complete CREATE / ALTER / GRANT / sys.dm_* statements. Reading docs is not enough — write the queries by hand at least 30 times during prep.
Mistake 4: Memorizing UI clicks
Microsoft questions often ask "Which two PowerShell cmdlets…" or "Which Bicep resource type…" rather than "Which portal blade…" Know the underlying ARM resource types, PowerShell modules (Az.Sql), and Azure CLI commands (az sql db).
Mistake 5: Skipping the case study
A single case study can carry 15–20% of your scaled score. Read the entire scenario before clicking the first answer. You cannot return to a case study after leaving it.
Test-Day Strategy: How to Pass DP-300 First Try
Before You Sit
- Score 820+ on the Microsoft free Practice Assessment three runs in a row
- Re-read the 2026 skills outline change log the morning of the exam
- Have your government ID and a quiet, well-lit room ready (online proctoring is strict — no second monitor, no notes, no phone)
During the 100 Minutes
- Case study first if it appears at the start (some forms put it last) — budget 25–30 minutes
- Mark and skip anything > 90 seconds; come back
- T-SQL fill-ins: read every CASE WHEN clause carefully — Microsoft loves substituting
>=for>to flip the answer - Last 10 minutes: review every flagged question; only change an answer if you can cite a Microsoft Learn doc in your head
After You Finish
You see your scaled score immediately. Pass and your Credly badge arrives within 24 hours, plus a one-year-out renewal reminder. Fail and you see your performance by domain — the most useful feedback you will get.
Renewing DP-300: Free, Forever
Unlike many vendor certs, Microsoft role-based certifications are renewed FREE. The DP-300 expires 1 year after pass date. Within the renewal window (6 months before expiration through 6 months after), you take a shorter, free, online, unproctored renewal assessment on Microsoft Learn. Pass it and your cert extends another year. Miss the window and you must retake the full $165 exam.
Tip: Set a calendar reminder 5 months out. The renewal assessment is open-book in practice (no proctor) and takes most candidates 30–45 minutes.
Begin Your DP-300 Journey Now
Join thousands of Azure DBA candidates using our 100% FREE prep — unlimited AI-generated questions matched to the April 2026 skills outline, Microsoft Learn–grounded explanations, and a personalized study dashboard. No credit card. No course fee. Start in under 60 seconds.