McAfee Secure

Exam Code: DP-800

Exam Name: Developing AI-Enabled Database Solutions

Certification Provider: Microsoft

Corresponding Certification: Microsoft Certified: SQL AI Developer Associate

Microsoft DP-800 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

101 Questions & Answers with Testing Engine

"Developing AI-Enabled Database Solutions Exam", also known as DP-800 exam, is a Microsoft certification exam.

Pass your tests with the always up-to-date DP-800 Exam Engine. Your DP-800 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Microsoft DP-800 Practice Test 13

Question 120

A developer assumes a SQL firewall rule alone authenticates callers to Azure SQL. Which ongoing control is MOST relevant after the issue is fixed?

  1. Scope identity permissions and review token failures.
  2. Verify exports and application caches do not persist unmasked values.
  3. Audit schema role memberships after every release.
  4. Keep firewall, identity and database grants under independent review.

Explanation

Correct Answer

D:

Keep firewall, identity and database grants under independent review. This guards against recurrence because network allowlisting does not establish user identity or object authorization. The direct remediation is: Require encrypted transport and a verified principal alongside network access restrictions.

Incorrect Answers

A:

Scope identity permissions and review token failures. The current task instead requires this action: keep firewall, identity and database grants under independent review.

B:

Verify exports and application caches do not persist unmasked values.

C:

Audit schema role memberships after every release. The current task instead requires this action: keep firewall, identity and database grants under independent review.

Question 121

A product record contains English and Arabic descriptions for different locales. What is the MOST appropriate immediate corrective approach?

  1. Select language-appropriate content and model capabilities while retaining locale as metadata.
  2. Keep rapidly changing structured quantities as filterable columns outside the descriptive embedding text.
  3. Use stable chunk IDs and content hashes to refresh only changed segments.
  4. Update the external model configuration through a validated change procedure.

Explanation

Correct Answer

A:

Select language-appropriate content and model capabilities while retaining locale as metadata. This targets the primary issue because embedding the wrong language source can degrade multilingual retrieval quality. Verification: A bilingual test set retrieves correct permitted items for each locale. Prevent recurrence: Evaluate per-language drift and fallback routing.

Incorrect Answers

B:

Frequent numeric fields add update cost and can weaken semantic relevance.

C:

Using stable chunk IDs and content hashes to refresh only changed segments would not correct a product record contains English and Arabic descriptions for different locales. Select language-appropriate content and model capabilities while retaining locale as metadata.

D:

External endpoint configuration can become stale independently of database code.

Question 122

An engineer uses personal GitHub Copilot credentials for a restricted company repository. What observed evidence would BEST confirm successful remediation?

  1. An approved SQL workspace exposes supported Copilot features for a licensed tester.
  2. A test session follows enterprise policy without exposing restricted repo content.
  3. Generated examples show placeholders and approved secret references.
  4. The session lists the current intended tools and returns valid metadata.

Explanation

Correct Answer

B:

A test session follows enterprise policy without exposing restricted repo content. This is the decisive observable evidence after implementing switch to an organization-approved identity and governed Copilot configuration. It tests the underlying requirement: Personal and enterprise assistants can have different retention and policy controls.

Incorrect Answers

A:

An approved SQL workspace exposes supported Copilot features for a licensed tester. However, that result would not establish the required outcome: a test session follows enterprise policy without exposing restricted repo content.

C:

Generated examples show placeholders and approved secret references. However, that result would not establish the required outcome: a test session follows enterprise policy without exposing restricted repo content.

D:

The session lists the current intended tools and returns valid metadata. However, that result would not establish the required outcome: a test session follows enterprise policy without exposing restricted repo content.

Question 123

A multitenant SQL application sometimes returns another tenant's invoices when a caller forgets a WHERE clause. What is the MOST relevant technical distinction in this situation?

  1. Session context is only safe as an authorization input when callers cannot impersonate other tenants.
  2. GraphQL relationship traversal can increase data exposure if access is too broad.
  3. RLS enforces row filtering in the database rather than relying on every query to remember a filter.
  4. Dynamic SQL may execute under a permission context different from static ownership chains.

Explanation

Correct Answer

C:

RLS enforces row filtering in the database rather than relying on every query to remember a filter. This explains why the corrective action is to implement an appropriate RLS security predicate tied to trusted tenant context. Confirm the diagnosis when cross-tenant test identities cannot read each other's invoice rows.

Incorrect Answers

A:

Session context is only safe as an authorization input when callers cannot impersonate other tenants. The actual technical constraint is that RLS enforces row filtering in the database rather than relying on every query to remember a filter.

B:

GraphQL relationship traversal can increase data exposure if access is too broad. The actual technical constraint is that RLS enforces row filtering in the database rather than relying on every query to remember a filter.

D:

Dynamic SQL may execute under a permission context different from static ownership chains. The actual technical constraint is that RLS enforces row filtering in the database rather than relying on every query to remember a filter.

Question 124

An embedding pipeline includes account passwords and credit card numbers in text sent to an external model. Which ongoing control is MOST relevant after the issue is fixed?

  1. Define embedding input contract and refresh triggers per field.
  2. Check supported modalities, retention and safety policy.
  3. Use deprecation windows and rollback references.
  4. Apply column allowlists and pre-inference DLP checks.

Explanation

Correct Answer

D:

Apply column allowlists and pre-inference DLP checks. This guards against recurrence because embedding inputs can expose or encode sensitive data without adding retrieval value. The direct remediation is: Exclude confidential credential fields and embed only approved relevant content.

Incorrect Answers

A:

Define embedding input contract and refresh triggers per field. The current task instead requires this action: apply column allowlists and pre-inference DLP checks.

B:

Check supported modalities, retention and safety policy. The current task instead requires this action: apply column allowlists and pre-inference DLP checks.

C:

Use deprecation windows and rollback references. The current task instead requires this action: apply column allowlists and pre-inference DLP checks.

Question 125

An engineer drops an external model while stored procedures still depend on it. What is the MOST appropriate immediate corrective approach?

  1. Inventory dependent objects and stage a compatible model transition.
  2. Restrict use through explicit database and endpoint permissions with audit monitoring.
  3. Use a source-change feed to refresh embeddings whenever catalog text changes.
  4. Include semantically meaningful title and content fields, with identifiers retained as metadata.

Explanation

Correct Answer

A:

Inventory dependent objects and stage a compatible model transition. This targets the primary issue because database objects referring to external model names may fail after removal. Verification: All dependent procedures run in staging against the new model. Prevent recurrence: Use deprecation windows and rollback references.

Incorrect Answers

B:

Model invocation can export inputs and incur charges, so object privileges matter.

C:

Embedding refresh solves stale vector content; it does not repair stored procedures that still reference a removed external model definition.

D:

IDs alone lack the natural-language signal needed for semantic retrieval.

Question 126

A REST API must execute an approved report stored procedure but not arbitrary SQL. Which measurable outcome BEST verifies that the requirement is satisfied?

  1. Partners read approved columns and cannot modify base tables.
  2. An authorized request runs the report and rejects unauthorized procedure calls.
  3. Load tests enforce limits and approved users retain service.
  4. Canary tests validate the new route and old clients have an agreed migration path.

Explanation

Correct Answer

B:

An authorized request runs the report and rejects unauthorized procedure calls. This is the decisive observable evidence after implementing expose the stored procedure via a restricted DAB stored-procedure entity with execute rights. It tests the underlying requirement: DAB can surface declared stored procedures without granting arbitrary query execution.

Incorrect Answers

A:

Partners read approved columns and cannot modify base tables. However, that result would not establish the required outcome: an authorized request runs the report and rejects unauthorized procedure calls.

C:

Load tests enforce limits and approved users retain service. However, that result would not establish the required outcome: an authorized request runs the report and rejects unauthorized procedure calls.

D:

Canary tests validate the new route and old clients have an agreed migration path. However, that result would not establish the required outcome: an authorized request runs the report and rejects unauthorized procedure calls.

Question 127

A DiskANN-style vector index returns low recall after a data distribution change. Which technical reason BEST explains the proposed correction?

  1. Index choice affects ingestion and maintenance as well as retrieval speed.
  2. Speed alone does not establish retrieval quality or fairness across intents.
  3. Approximate structures trade memory, speed and recall depending on data and configuration.
  4. Small synthetic benchmarks understate index and memory behavior at scale.

Explanation

Correct Answer

C:

Approximate structures trade memory, speed and recall depending on data and configuration. This explains why the corrective action is to benchmark supported ANN index tuning and rebuild/retraining options against exact KNN results. Confirm the diagnosis when recall improves on a holdout set while latency remains acceptable.

Incorrect Answers

A:

Index choice affects ingestion and maintenance as well as retrieval speed. The actual technical constraint is that approximate structures trade memory, speed and recall depending on data and configuration.

B:

Speed alone does not establish retrieval quality or fairness across intents. The actual technical constraint is that approximate structures trade memory, speed and recall depending on data and configuration.

D:

Small synthetic benchmarks understate index and memory behavior at scale. The actual technical constraint is that approximate structures trade memory, speed and recall depending on data and configuration.

Question 128

Two concurrent sessions read the same inventory stock and each sell the final item. What maintenance or governance control BEST reduces recurrence of this problem?

  1. Use explicit retry or user merge flow on conflicts.
  2. Preserve baseline settings and test in staging.
  3. Use secure diagnostic access and preserve plan evidence.
  4. Use a nonnegative stock CHECK and retry-safe transaction design.

Explanation

Correct Answer

D:

Use a nonnegative stock CHECK and retry-safe transaction design. This guards against recurrence because a read-then-write race can oversell without a concurrency constraint. The direct remediation is: Use appropriate locking or optimistic concurrency validation to make stock decrement atomic.

Incorrect Answers

A:

Use explicit retry or user merge flow on conflicts. The current task instead requires this action: use a nonnegative stock CHECK and retry-safe transaction design.

B:

Preserve baseline settings and test in staging. The current task instead requires this action: use a nonnegative stock CHECK and retry-safe transaction design.

C:

Use secure diagnostic access and preserve plan evidence. The current task instead requires this action: use a nonnegative stock CHECK and retry-safe transaction design.

Question 129

A support analyst must read a view but not query its underlying private tables directly. Which implementation decision BEST addresses this requirement?

  1. Grant SELECT on the approved view and validate ownership-chain and execution context behavior.
  2. Grant narrowly scoped schema/DDL permissions to its nonproduction identity.
  3. Configure authentication and per-entity role/operation permissions rather than public wildcard actions.
  4. Use targeted audit groups and evaluate performance and retention costs.

Explanation

Correct Answer

A:

Grant SELECT on the approved view and validate ownership-chain and execution context behavior. This targets the primary issue because exposing a constrained view can limit data surface without broad base-table rights. Verification: The test principal reads the approved view and fails direct private-table SELECT. Prevent recurrence: Review view definitions and permission chains.

Incorrect Answers

B:

Database roles and schema grants can bound an automation's change surface.

C:

API generation does not automatically imply that exposed data is appropriately authorized.

D:

High-volume blanket logging can impact throughput and reveal sensitive inputs.

Question 130

A product-description table updates frequently and embeddings must refresh asynchronously without heavy write transactions. Which measurable outcome BEST verifies that the requirement is satisfied?

  1. An updated row results in one current embedding after retries.
  2. Updated products receive new embeddings within the freshness SLA.
  3. A bilingual test set retrieves correct permitted items for each locale.
  4. A sampled outbound model request contains no restricted secrets.

Explanation

Correct Answer

B:

Updated products receive new embeddings within the freshness SLA. This is the decisive observable evidence after implementing use Change Tracking or CDC to identify changed records and process them in a background worker. It tests the underlying requirement: Asynchronous change-based updates decouple embedding cost from OLTP commit latency.

Incorrect Answers

A:

An updated row results in one current embedding after retries. However, that result would not establish the required outcome: updated products receive new embeddings within the freshness SLA.

C:

A bilingual test set retrieves correct permitted items for each locale. However, that result would not establish the required outcome: updated products receive new embeddings within the freshness SLA.

D:

A sampled outbound model request contains no restricted secrets. However, that result would not establish the required outcome: updated products receive new embeddings within the freshness SLA.

Developing AI-Enabled Database Solutions (DP-800) Practice Tests