McAfee Secure

Exam Code: DP-800

Exam Name: Developing AI-Enabled Database Solutions

Certification Provider: Microsoft

Corresponding Certification: Microsoft Certified: SQL AI Developer Associate

Microsoft DP-800 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

101 Questions & Answers with Testing Engine

"Developing AI-Enabled Database Solutions Exam", also known as DP-800 exam, is a Microsoft certification exam.

Pass your tests with the always up-to-date DP-800 Exam Engine. Your DP-800 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Microsoft DP-800 Practice Test 3

Question 20

A pipeline deploys to production immediately after any branch push. What maintenance or governance control BEST reduces recurrence of this problem?

  1. Keep ownership mapping updated when teams change.
  2. Keep toolchain versions documented and patched.
  3. Automate object inventory comparisons in CI.
  4. Audit pipeline changes and approval records.

Explanation

Correct Answer

D:

Audit pipeline changes and approval records. This guards against recurrence because automated execution without authorization can promote unreviewed schema changes. The direct remediation is: Use protected branch triggers, environment approval gates and deployment-specific identities.

Incorrect Answers

A:

Keep ownership mapping updated when teams change. The current task instead requires this action: audit pipeline changes and approval records.

B:

Keep toolchain versions documented and patched. The current task instead requires this action: audit pipeline changes and approval records.

C:

Automate object inventory comparisons in CI. The current task instead requires this action: audit pipeline changes and approval records.

Question 21

An AI completion recommends sending full customer rows to a third-party LLM for debugging. What should the SQL developer do FIRST to address the specific issue?

  1. Mask or synthesize sensitive data and confirm approved data-handling contracts.
  2. Review the generated diff, run it in an isolated test database, and require approval.
  3. Update and validate the MCP connection and available tool schema in the client.
  4. Remove secret references from instructions and require environment-injected credentials.

Explanation

Correct Answer

A:

Mask or synthesize sensitive data and confirm approved data-handling contracts. This targets the primary issue because development convenience does not override privacy, residency or retention duties. Verification: Test prompts contain representative synthetic values, not real identifiers. Prevent recurrence: Use data-classification and DLP controls on AI-assisted development.

Incorrect Answers

B:

Reviewing the generated diff, run it in an isolated test database, and require approval would not correct an AI completion recommends sending full customer rows to a third-party LLM for debugging. Mask or synthesize sensitive data and confirm approved data-handling contracts.

C:

Updating and validate the MCP connection and available tool schema in the client would not correct an AI completion recommends sending full customer rows to a third-party LLM for debugging. Mask or synthesize sensitive data and confirm approved data-handling contracts.

D:

Instructions are prompt context and can unintentionally expose confidential values.

Question 22

A pull request contains table renames and a developer approves it using only line counts. Which acceptance check is MOST directly related to this scenario?

  1. An unapproved pull request cannot merge to the protected branch.
  2. A staging publish preserves expected historical data and references.
  3. Both environments contain the same expected currency code set.
  4. A test release with a failing security check is blocked.

Explanation

Correct Answer

B:

A staging publish preserves expected historical data and references. This is the decisive observable evidence after implementing review migration impact, data retention and dependent object behavior before approval. It tests the underlying requirement: DDL diffs have operational consequences beyond text formatting.

Incorrect Answers

A:

An unapproved pull request cannot merge to the protected branch. However, that result would not establish the required outcome: a staging publish preserves expected historical data and references.

C:

Both environments contain the same expected currency code set. However, that result would not establish the required outcome: a staging publish preserves expected historical data and references.

D:

A test release with a failing security check is blocked. However, that result would not establish the required outcome: a staging publish preserves expected historical data and references.

Question 23

A developer routes a confidential schema prompt through an unapproved external model selection. Which technical property or constraint MOST directly matters here?

  1. Tool scope governs what the model can invoke beyond ordinary chat text.
  2. A malicious or compromised MCP server may exfiltrate data or supply unsafe tool behavior.
  3. Different model endpoints can have different data governance and retention arrangements.
  4. Generated code can violate least privilege even if it appears syntactically correct.

Explanation

Correct Answer

C:

Different model endpoints can have different data governance and retention arrangements. This explains why the corrective action is to select an organization-approved model and review data-routing settings before sending schema text. Confirm the diagnosis when an audit shows requests use the intended approved endpoint.

Incorrect Answers

A:

Tool scope governs what the model can invoke beyond ordinary chat text. The actual technical constraint is that different model endpoints can have different data governance and retention arrangements.

B:

A malicious or compromised MCP server may exfiltrate data or supply unsafe tool behavior. The actual technical constraint is that different model endpoints can have different data governance and retention arrangements.

D:

Generated code can violate least privilege even if it appears syntactically correct. The actual technical constraint is that different model endpoints can have different data governance and retention arrangements.

Question 24

Two writers use rowversion checks but ignore the affected-row count on UPDATE. Which preventive practice BEST addresses the underlying risk over time?

  1. Use a nonnegative stock CHECK and retry-safe transaction design.
  2. Use secure diagnostic access and preserve plan evidence.
  3. Combine query data with Azure Monitor and service limits.
  4. Use explicit retry or user merge flow on conflicts.

Explanation

Correct Answer

D:

Use explicit retry or user merge flow on conflicts. This guards against recurrence because optimistic concurrency only works if conflicts are detected, not silently overwritten. The direct remediation is: Require an expected rowversion predicate and verify rows affected before confirming success.

Incorrect Answers

A:

Use a nonnegative stock CHECK and retry-safe transaction design. The current task instead requires this action: use explicit retry or user merge flow on conflicts.

B:

Use secure diagnostic access and preserve plan evidence. The current task instead requires this action: use explicit retry or user merge flow on conflicts.

C:

Combine query data with Azure Monitor and service limits. The current task instead requires this action: use explicit retry or user merge flow on conflicts.

Question 25

A customer API returns all 500,000 sales rows in one response and clients time out. What should the SQL developer do FIRST to address the specific issue?

  1. Configure controlled pagination, sorting and maximum page size for the DAB entity.
  2. Use an appropriate DAB cache TTL or disable cache for volatile inventory fields.
  3. Expose the stored procedure via a restricted DAB stored-procedure entity with execute rights.
  4. Configure supported network access, managed identity and database permissions.

Explanation

Correct Answer

A:

Configure controlled pagination, sorting and maximum page size for the DAB entity. This targets the primary issue because unbounded result sets waste bandwidth and can overload SQL and API memory. Verification: Page requests return stable bounded records without gaps. Prevent recurrence: Use consistent ordering and monitor costly filters.

Incorrect Answers

B:

Response caching trades freshness for latency and may serve obsolete facts.

C:

DAB can surface declared stored procedures without granting arbitrary query execution.

D:

Publishing the API does not grant the host network or SQL access automatically.

Question 26

A developer swallows every SQL exception and returns success to upstream callers. Which acceptance check is MOST directly related to this scenario?

  1. The same request ID produces one ledger effect across repeated calls.
  2. A simulated constraint error reaches the caller with no false success.
  3. Test values return the intended code or an explicit missing result.
  4. A sample network returns the known minimal path when explicitly requested.

Explanation

Correct Answer

B:

A simulated constraint error reaches the caller with no false success. This is the decisive observable evidence after implementing use CATCH to log safely and rethrow meaningful failures rather than masking them. It tests the underlying requirement: Silently suppressed exceptions create false evidence of committed work.

Incorrect Answers

A:

The same request ID produces one ledger effect across repeated calls. However, that result would not establish the required outcome: a simulated constraint error reaches the caller with no false success.

C:

Test values return the intended code or an explicit missing result. However, that result would not establish the required outcome: a simulated constraint error reaches the caller with no false success.

D:

A sample network returns the known minimal path when explicitly requested. However, that result would not establish the required outcome: a simulated constraint error reaches the caller with no false success.

Question 27

A report uses a scalar function on every row and has unexpected CPU cost. Which technical property or constraint MOST directly matters here?

  1. T-SQL UDFs have restrictions on side effects and cannot be arbitrary transactional commands.
  2. Synchronous trigger work participates in the calling transaction and can increase latency.
  3. Per-row scalar function calls may create expensive repeated execution on some workloads.
  4. A DELETE trigger exposes removed rows via deleted, not inserted.

Explanation

Correct Answer

C:

Per-row scalar function calls may create expensive repeated execution on some workloads. This explains why the corrective action is to inspect the function execution mode and consider set-based expressions or eligible scalar UDF inlining. Confirm the diagnosis when a measured rewrite returns identical values with lower CPU.

Incorrect Answers

A:

T-SQL UDFs have restrictions on side effects and cannot be arbitrary transactional commands. The actual technical constraint is that per-row scalar function calls may create expensive repeated execution on some workloads.

B:

Synchronous trigger work participates in the calling transaction and can increase latency. The actual technical constraint is that per-row scalar function calls may create expensive repeated execution on some workloads.

D:

A DELETE trigger exposes removed rows via deleted, not inserted. The actual technical constraint is that per-row scalar function calls may create expensive repeated execution on some workloads.

Question 28

Several related tables need unique identifiers from one coordinated numeric source. Following remediation, what safeguard BEST prevents a repeat of this specific failure?

  1. Use a dedicated serialized legal numbering process if gaplessness is mandatory.
  2. Reject unknown fields and bound payload size before committing.
  3. Avoid replacing lookup-heavy OLTP rowstore access without workload tests.
  4. Do not treat allocation order as committed business transaction order.

Explanation

Correct Answer

D:

Do not treat allocation order as committed business transaction order. This guards against recurrence because a sequence can allocate numbers independently of one table identity property. The direct remediation is: Use a shared SQL SEQUENCE with NEXT VALUE FOR in supported database environments.

Incorrect Answers

A:

Use a dedicated serialized legal numbering process if gaplessness is mandatory.

B:

Reject unknown fields and bound payload size before committing. The current task instead requires this action: do not treat allocation order as committed business transaction order.

C:

Avoid replacing lookup-heavy OLTP rowstore access without workload tests. The current task instead requires this action: do not treat allocation order as committed business transaction order.

Question 29

A team wants a readable multi-step T-SQL query that filters and then aggregates customer orders. Which technical action BEST resolves the primary problem?

  1. Use a nonrecursive CTE as a named query expression in the next SELECT.
  2. Validate acyclic parent relationships and bound recursion depth.
  3. Use SUM(amount) OVER(PARTITION BY AccountId ORDER BY PostedAt ROWS UNBOUNDED PRECEDING).
  4. Test JARO_WINKLER_DISTANCE or related supported fuzzy metric against a reference dataset.

Explanation

Correct Answer

A:

Use a nonrecursive CTE as a named query expression in the next SELECT. This targets the primary issue because a CTE improves query readability but is not automatically materialized into a persistent table. Verification: The rewritten SELECT yields the same verified totals. Prevent recurrence: Inspect plans when a CTE is referenced repeatedly.

Incorrect Answers

B:

A cycle can repeatedly regenerate the same nodes in a recursive CTE.

C:

A window aggregate preserves individual rows while computing an ordered cumulative value.

D:

Jaro-Winkler-style measures can treat transpositions and prefixes differently from raw edits.

Question 30

A REST client needs filtering on a public product type but must never filter private margin columns. Which test result BEST demonstrates that the intended solution is working?

  1. Page requests return stable bounded records without gaps.
  2. A permitted category filter works but margin fields remain inaccessible.
  3. Integration tests pass separately for the selected REST and GraphQL operations.
  4. Staging resolves its own Azure SQL endpoint and local development still works.

Explanation

Correct Answer

B:

A permitted category filter works but margin fields remain inaccessible. This is the decisive observable evidence after implementing configure entity fields, authorization and supported filter behavior to expose only permitted fields. It tests the underlying requirement: DAB entity projection and permissions determine the API data surface.

Incorrect Answers

A:

Page requests return stable bounded records without gaps. However, that result would not establish the required outcome: a permitted category filter works but margin fields remain inaccessible.

C:

Integration tests pass separately for the selected REST and GraphQL operations. However, that result would not establish the required outcome: a permitted category filter works but margin fields remain inaccessible.

D:

Staging resolves its own Azure SQL endpoint and local development still works. However, that result would not establish the required outcome: a permitted category filter works but margin fields remain inaccessible.

Developing AI-Enabled Database Solutions (DP-800) Practice Tests