Domain 2: Secure, optimize, and deploy database solutions

Domain 2 takes a working solution to production. It covers Microsoft Entra authentication and authorization, network security, and dynamic data masking; backup and restore, multi-region reads and writes with conflict resolution, and partition failover; query and index performance metrics, end-to-end latency, Azure Monitor alerts, and diagnostic logs in Log Analytics; and fleets for throughput management and monitoring across many accounts and subscriptions.

30–35%Of the exam

4Objectives

36Practice questions

7Official exercises

Skills measured

Objectives and skills below are quoted from the official study guide. The count beside each skill is how many exam simulator questions test it.

2.1 Implement database security controls

Configure authentication mechanisms3
Configure authorization controls3
Configure network security2
Configure dynamic data masking2

2.2 Implement availability and recovery solutions

Configure backup and restore solutions2
Implement multi-region read and write configurations5
Configure partition failover solutions2

2.3 Optimize and remediate database performance

Optimize query performance5
Analyze query performance metrics1
Analyze index performance metrics1
Monitor end-to-end latency against service objectives2
Configure Azure Monitor alerts2
Analyze diagnostic logs in Log Analytics1

2.4 Implement Fleet management and monitoring across multiple accounts and subscriptions

Configure Fleet level throughput management3
Configure Fleet monitoring with fleet analytics2

Official training and documentation

Microsoft Learn modules and product documentation for each objective, chosen for the current skills measured. Module durations are Microsoft's estimates.

2.1 Implement database security controls

Microsoft Learn modules