McAfee Secure

Exam Code: DP-800

Exam Name: Developing AI-Enabled Database Solutions

Certification Provider: Microsoft

Corresponding Certification: Microsoft Certified: SQL AI Developer Associate

Questions & Answers

Microsoft DP-800 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

Questions & Answers

101 Questions & Answers with Testing Engine

"Developing AI-Enabled Database Solutions Exam", also known as DP-800 exam, is a Microsoft certification exam.

Pass your tests with the always up-to-date DP-800 Exam Engine. Your DP-800 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Microsoft DP-800 Practice Test 45

Question 440

A GraphQL endpoint permits nested queries that return customer records from unauthorized tenants. Which technical reason BEST explains the proposed correction?

  1. API generation does not automatically imply that exposed data is appropriately authorized.
  2. Dynamic SQL may execute under a permission context different from static ownership chains.
  3. Dynamic masking is evaluated at query output rather than permanently altering storage.
  4. GraphQL relationship traversal can increase data exposure if access is too broad.

Explanation

Correct Answer

D:

GraphQL relationship traversal can increase data exposure if access is too broad. This explains why the corrective action is to enforce tenant-aware authorization, bounded query complexity and back-end SQL row security. Confirm the diagnosis when cross-tenant nested queries return no unauthorized records in negative tests.

Incorrect Answers

A:

API generation does not automatically imply that exposed data is appropriately authorized. The actual technical constraint is that graphQL relationship traversal can increase data exposure if access is too broad.

B:

Dynamic SQL may execute under a permission context different from static ownership chains. The actual technical constraint is that graphQL relationship traversal can increase data exposure if access is too broad.

C:

Dynamic masking is evaluated at query output rather than permanently altering storage. The actual technical constraint is that graphQL relationship traversal can increase data exposure if access is too broad.

Question 441

A GraphQL query must return a customer's orders and related items without manual N+1 calls. Which preventive practice BEST addresses the underlying risk over time?

  1. Enforce SQL row-level security against cross-customer traversal.
  2. Validate input parameters and avoid excessive execution privileges.
  3. Keep deployment artifacts and change history.
  4. Bound query depth and verify field-level permissions.

Explanation

Correct Answer

A:

Enforce SQL row-level security against cross-customer traversal. This guards against recurrence because correct GraphQL relationship metadata enables nested retrieval of related records. The direct remediation is: Configure DAB entity relationships with matching source/target keys.

Incorrect Answers

B:

Validate input parameters and avoid excessive execution privileges. The current task instead requires this action: enforce SQL row-level security against cross-customer traversal.

C:

Keep deployment artifacts and change history. The current task instead requires this action: enforce SQL row-level security against cross-customer traversal.

D:

Bound query depth and verify field-level permissions. The current task instead requires this action: enforce SQL row-level security against cross-customer traversal.

Question 442

A model-serving endpoint is reachable publicly with no strong caller authentication. What should the SQL developer do FIRST to address the specific issue?

  1. Configure distinct least-privilege grants on model and search resources.
  2. Require approved identity authentication and network controls for the inference endpoint.
  3. Grant narrowly scoped schema/DDL permissions to its nonproduction identity.
  4. Grant SELECT on the approved view and validate ownership-chain and execution context behavior.

Explanation

Correct Answer

B:

Require approved identity authentication and network controls for the inference endpoint. This targets the primary issue because an open endpoint may expose inputs, outputs or costly compute to unauthorized callers. Verification: Anonymous calls fail while authorized SQL workloads succeed. Prevent recurrence: Add rate limiting and request audit trails.

Incorrect Answers

A:

Identity permission at one Azure service does not imply access to adjacent resources.

C:

Database roles and schema grants can bound an automation's change surface.

D:

Exposing a constrained view can limit data surface without broad base-table rights.

Question 443

A developer publishes a production DACPAC using staging variables and connects to the wrong database. Which acceptance check is MOST directly related to this scenario?

  1. After publish, the target contains the intended index and tested workload improves.
  2. DACPAC inspection contains the new approved procedure.
  3. Preflight reports match the authorized database identity and schema.
  4. The same source builds reproducibly on local and CI hosts.

Explanation

Correct Answer

C:

Preflight reports match the authorized database identity and schema. This is the decisive observable evidence after implementing bind deployment environment, endpoint and credentials to explicit approved pipeline controls. It tests the underlying requirement: Mis-targeted deployments can damage production regardless of SQL correctness.

Incorrect Answers

A:

After publish, the target contains the intended index and tested workload improves. However, that result would not establish the required outcome: preflight reports match the authorized database identity and schema.

B:

DACPAC inspection contains the new approved procedure. However, that result would not establish the required outcome: preflight reports match the authorized database identity and schema.

D:

The same source builds reproducibly on local and CI hosts. However, that result would not establish the required outcome: preflight reports match the authorized database identity and schema.

Question 444

New shipments lack a creation timestamp whenever one integration omits the field. Which technical property or constraint MOST directly matters here?

  1. Referential integrity prevents orphan children unless cascade or other actions are deliberately configured.
  2. Temporal history captures prior row versions when system versioning is enabled.
  3. Partition elimination can reduce scanned partitions when predicates are sargable.
  4. A default supplies a value on omission, not a guarantee against explicit bad values.

Explanation

Correct Answer

D:

A default supplies a value on omission, not a guarantee against explicit bad values. This explains why the corrective action is to configure a suitable DEFAULT constraint with a UTC expression when required by the schema. Confirm the diagnosis when an insert omitting the field records an acceptable UTC creation time.

Incorrect Answers

A:

Referential integrity prevents orphan children unless cascade or other actions are deliberately configured. The actual technical constraint is that a default supplies a value on omission, not a guarantee against explicit bad values.

B:

Temporal history captures prior row versions when system versioning is enabled. The actual technical constraint is that a default supplies a value on omission, not a guarantee against explicit bad values.

C:

Partition elimination can reduce scanned partitions when predicates are sargable. The actual technical constraint is that a default supplies a value on omission, not a guarantee against explicit bad values.

Question 445

A model sometimes produces markdown instead of the requested JSON object for an automated workflow. Which preventive practice BEST addresses the underlying risk over time?

  1. Implement safe fallback or manual review.
  2. Preserve source IDs and show uncertainty where values cannot be verified.
  3. Audit outbound data scope and access context.
  4. Cap retries and alert on repeated model service failures.

Explanation

Correct Answer

A:

Implement safe fallback or manual review. This guards against recurrence because generated output is not guaranteed to follow instructions unless independently checked. The direct remediation is: Validate structured model output against a strict schema and reject invalid responses.

Incorrect Answers

B:

Preserve source IDs and show uncertainty where values cannot be verified.

C:

Audit outbound data scope and access context. The current task instead requires this action: implement safe fallback or manual review.

D:

Cap retries and alert on repeated model service failures. The current task instead requires this action: implement safe fallback or manual review.

Question 446

A teammate ships malformed DAB JSON with a misspelled source object name. What should the SQL developer do FIRST to address the specific issue?

  1. Parameterize the DAB data source using supported environment variables or secret integration.
  2. Run dab validate and a connection smoke test before publishing.
  3. Test protocol-specific behavior and configure supported methods deliberately.
  4. Configure a GraphQL endpoint and modeled relationships for approved entities.

Explanation

Correct Answer

B:

Run dab validate and a connection smoke test before publishing. This targets the primary issue because syntactic JSON validity alone does not prove a mapped SQL object exists. Verification: A staging start resolves each declared source without runtime errors. Prevent recurrence: Keep config schema and object references versioned together.

Incorrect Answers

A:

Configuration must resolve the correct database per environment without leaking secrets.

C:

The two interfaces expose related data but have different query syntax and operation models.

D:

GraphQL can request related fields through a typed schema rather than repeated round trips.

Question 447

A team adds two retrieval methods but simply concatenates results and duplicates many documents. Which acceptance check is MOST directly related to this scenario?

  1. Both code-number and conceptual test queries find correct passages.
  2. The known penalty clause ranks in a held-out test query.
  3. Results contain one entry per source passage in a stable ranking.
  4. A simple manual calculation matches fusion output.

Explanation

Correct Answer

C:

Results contain one entry per source passage in a stable ranking. This is the decisive observable evidence after implementing deduplicate candidates by stable source ID and apply a documented fusion strategy. It tests the underlying requirement: Independent retrieval branches can produce overlapping hits and uncalibrated scores.

Incorrect Answers

A:

Both code-number and conceptual test queries find correct passages. However, that result would not establish the required outcome: results contain one entry per source passage in a stable ranking.

B:

The known penalty clause ranks in a held-out test query. However, that result would not establish the required outcome: results contain one entry per source passage in a stable ranking.

D:

A simple manual calculation matches fusion output. However, that result would not establish the required outcome: results contain one entry per source passage in a stable ranking.

Question 448

An employee should be prevented from inserting a row assigned to a different department. Which technical principle BEST explains the relevant design decision?

  1. Session context is only safe as an authorization input when callers cannot impersonate other tenants.
  2. Azure identity authentication and database authorization are distinct checks.
  3. API generation does not automatically imply that exposed data is appropriately authorized.
  4. Read filtering alone does not necessarily stop unauthorized DML that changes row ownership.

Explanation

Correct Answer

D:

Read filtering alone does not necessarily stop unauthorized DML that changes row ownership. This explains why the corrective action is to add an RLS block predicate in addition to any required filter predicate. Confirm the diagnosis when a mismatched department INSERT or UPDATE fails under the test role.

Incorrect Answers

A:

Session context is only safe as an authorization input when callers cannot impersonate other tenants. The actual technical constraint is that read filtering alone does not necessarily stop unauthorized DML that changes row ownership.

B:

Azure identity authentication and database authorization are distinct checks. The actual technical constraint is that read filtering alone does not necessarily stop unauthorized DML that changes row ownership.

C:

API generation does not automatically imply that exposed data is appropriately authorized. The actual technical constraint is that read filtering alone does not necessarily stop unauthorized DML that changes row ownership.

Question 449

A DBA enables RLS but bulk export uses a high privilege or bypass identity. Following remediation, what safeguard BEST prevents a repeat of this specific failure?

  1. Monitor service-principal grants and run negative authorization tests.
  2. Reset pooled connections and validate context on each request.
  3. Document leakage tradeoffs before enabling secure enclaves.
  4. Rehearse key recovery and avoid distributing keys in scripts.

Explanation

Correct Answer

A:

Monitor service-principal grants and run negative authorization tests. This guards against recurrence because security enforcement must be tested with the exact executing principal. The direct remediation is: Verify RLS behavior under every service principal and prohibit unnecessary bypass roles.

Incorrect Answers

B:

Reset pooled connections and validate context on each request. The current task instead requires this action: monitor service-principal grants and run negative authorization tests.

C:

Document leakage tradeoffs before enabling secure enclaves. The current task instead requires this action: monitor service-principal grants and run negative authorization tests.

D:

Rehearse key recovery and avoid distributing keys in scripts. The current task instead requires this action: monitor service-principal grants and run negative authorization tests.

Question 450

A model endpoint returns a JSON envelope but the application saves the entire envelope as the business answer. Which technical action BEST resolves the primary problem?

  1. Validate structured model output against a strict schema and reject invalid responses.
  2. Parse the supported response schema and extract the correct generated content field.
  3. Project only required columns into a controlled JSON payload.
  4. Use deterministic SQL aggregation for arithmetic and add RAG only for explanatory source text if needed.

Explanation

Correct Answer

B:

Parse the supported response schema and extract the correct generated content field. This targets the primary issue because HTTP response metadata and generated text are different parts of the payload. Verification: A fixture response yields the expected text without transport headers. Prevent recurrence: Version and validate provider schemas.

Incorrect Answers

A:

Generated output is not guaranteed to follow instructions unless independently checked.

C:

Data minimization reduces prompt exposure and cost without losing relevant context.

D:

Numeric reconciliation is a structured calculation, not a reason to hallucinate an answer from documents.

Developing AI-Enabled Database Solutions (DP-800) Practice Tests