| Implement a secure environment | Entra ID authentication for Azure SQL Database, Managed Instance and SQL on VMs, least-privilege permissions in T-SQL, TDE, object-level encryption, Always Encrypted with VBS enclaves, private links, firewall rules, data classification, audits, dynamic data masking, ledger, and row-level security. | 20 to 25% |
| Monitor, configure, and optimize database resources | Performance baselines, database watcher, Extended Events, Query Store, session blocking, DMVs, index and statistics maintenance, execution plans, Intelligent Insights, automatic tuning, Resource Governor, and intelligent query processing (IQP) use cases. | 20 to 25% |
| Plan and configure a high availability and disaster recovery (HA/DR) environment | HA/DR strategy against RPO/RTO targets, backup and restore with native tools and T-SQL including point-in-time restore and long-term retention, active geo-replication, failover groups, Always On availability groups and failover cluster instances, and log shipping. | 20 to 25% |
| Plan and implement data platform resources | The smallest domain. Choosing between database offerings, Azure Arc-enabled SQL, Azure SQL Database in Microsoft Fabric, table partitioning, sharding, hybrid deployments, scale configuration, data compression, and offline vs online migration strategies. | 15 to 20% |
| Configure and manage automation of tasks | SQL Server Agent jobs, schedules, alerts and notifications, deployment automation with ARM templates, Bicep, Azure PowerShell and Azure CLI, elastic jobs, and troubleshooting automated database tasks. | 15 to 20% |