McAfee Secure

Exam Code: DP-800

Exam Name: Developing AI-Enabled Database Solutions

Certification Provider: Microsoft

Corresponding Certification: Microsoft Certified: SQL AI Developer Associate

Microsoft DP-800 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

101 Questions & Answers with Testing Engine

"Developing AI-Enabled Database Solutions Exam", also known as DP-800 exam, is a Microsoft certification exam.

Pass your tests with the always up-to-date DP-800 Exam Engine. Your DP-800 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Microsoft DP-800 Practice Test 56

Question 550

A pricing table admits negative unit prices despite a documented positive-price rule. What maintenance or governance control BEST reduces recurrence of this problem?

  1. Review cascading deletes for unintended financial data loss.
  2. Retest constraints after bulk imports and schema changes.
  3. Protect history access and plan retention and schema migration.
  4. Measure cardinality and maintain customer-selective indexes.

Explanation

Correct Answer

B:

Retest constraints after bulk imports and schema changes. This guards against recurrence because application-layer validation alone can be bypassed by other writers. The direct remediation is: Use a CHECK constraint expressing the supported business condition.

Incorrect Answers

A:

Review cascading deletes for unintended financial data loss. The current task instead requires this action: retest constraints after bulk imports and schema changes.

C:

Protect history access and plan retention and schema migration. The current task instead requires this action: retest constraints after bulk imports and schema changes.

D:

Measure cardinality and maintain customer-selective indexes. The current task instead requires this action: retest constraints after bulk imports and schema changes.

Question 551

Auditors need to query the historical values of invoice rows as they existed last quarter. Which implementation decision BEST addresses this requirement?

  1. Assess external tables and supported connector or virtualization capabilities for the deployed engine.
  2. Review SEQUENCE data type, MAXVALUE and cycle policy before changing generation.
  3. Choose a system-versioned temporal table with properly managed history and retention.
  4. Evaluate range partitioning with boundary values aligned to retention and typical filters.

Explanation

Correct Answer

C:

Choose a system-versioned temporal table with properly managed history and retention. This targets the primary issue because temporal history captures prior row versions when system versioning is enabled. Verification: A point-in-time query returns the former invoice values after an update. Prevent recurrence: Protect history access and plan retention and schema migration.

Incorrect Answers

A:

External tables abstract remote data but do not automatically remove network or predicate-pushdown costs.

B:

Finite ranges exhaust and enabling CYCLE without safety checks may repeat identifiers.

D:

Partition elimination can reduce scanned partitions when predicates are sargable.

Question 552

A developer tries to audit deleted rows using only the inserted pseudo-table. Which measurable outcome BEST verifies that the requirement is satisfied?

  1. A test UPDATE completes once with expected values and no recursion error.
  2. Representative joins show improved estimates and correct results.
  3. Attack strings are treated as data and queries return only intended rows.
  4. The audit records exact old values in multirow deletion tests.

Explanation

Correct Answer

D:

The audit records exact old values in multirow deletion tests. This is the decisive observable evidence after implementing use the deleted pseudo-table correctly for DELETE and before-image values. It tests the underlying requirement: A DELETE trigger exposes removed rows via deleted, not inserted.

Incorrect Answers

A:

A test UPDATE completes once with expected values and no recursion error. However, that result would not establish the required outcome: the audit records exact old values in multirow deletion tests.

B:

Representative joins show improved estimates and correct results. However, that result would not establish the required outcome: the audit records exact old values in multirow deletion tests.

C:

Attack strings are treated as data and queries return only intended rows. However, that result would not establish the required outcome: the audit records exact old values in multirow deletion tests.

Question 553

A compliance team cannot identify who edited a high-value contract row. Which technical property or constraint MOST directly matters here?

  1. Audit collection adds actor, operation and time evidence but does not itself block changes.
  2. Tamper-resistant off-host retention is stronger evidence than only local logs.
  3. Column key hierarchy and client metadata must agree for encrypted column access.
  4. Network allowlisting does not establish user identity or object authorization.

Explanation

Correct Answer

A:

Audit collection adds actor, operation and time evidence but does not itself block changes. This explains why the corrective action is to enable supported SQL audit events covering relevant principals and DML operations. Confirm the diagnosis when a test UPDATE appears in protected audit storage with correct identity.

Incorrect Answers

B:

Tamper-resistant off-host retention is stronger evidence than only local logs. The actual technical constraint is that audit collection adds actor, operation and time evidence but does not itself block changes.

C:

Column key hierarchy and client metadata must agree for encrypted column access. The actual technical constraint is that audit collection adds actor, operation and time evidence but does not itself block changes.

D:

Network allowlisting does not establish user identity or object authorization. The actual technical constraint is that audit collection adds actor, operation and time evidence but does not itself block changes.

Question 554

A high-throughput transaction queue suffers from latch contention on a hot disk-based staging table. Which preventive practice BEST addresses the underlying risk over time?

  1. Protect history access and plan retention and schema migration.
  2. Check memory capacity and unsupported features before migration.
  3. Benchmark maintenance overhead and verify deployment-specific feature support.
  4. Measure write overhead and index usage before adopting more indexes.

Explanation

Correct Answer

B:

Check memory capacity and unsupported features before migration. This guards against recurrence because memory-optimized OLTP can reduce contention but adds feature and durability constraints. The direct remediation is: Evaluate memory-optimized tables where the specific SQL engine and workload support them.

Incorrect Answers

A:

Protect history access and plan retention and schema migration. The current task instead requires this action: check memory capacity and unsupported features before migration.

C:

Benchmark maintenance overhead and verify deployment-specific feature support. The current task instead requires this action: check memory capacity and unsupported features before migration.

D:

Measure write overhead and index usage before adopting more indexes.

Question 555

An AI assistant suggests disabling row-level security to make a join work. What should the SQL developer do FIRST to address the specific issue?

  1. Remove and rotate exposed secrets; use approved enterprise AI surfaces and sanitized prompts.
  2. Keep static SQL checks, pull-request review and least-privilege deployment despite instructions.
  3. Treat generated SQL as untrusted and require security review before execution.
  4. Keep Copilot as an authoring assistant; execute changes through reviewed SQL project deployment.

Explanation

Correct Answer

C:

Treat generated SQL as untrusted and require security review before execution. This targets the primary issue because generated code can violate least privilege even if it appears syntactically correct. Verification: The final query respects RLS while returning the caller's permitted rows. Prevent recurrence: Protect branches with required security code review.

Incorrect Answers

A:

AI chat providers and extensions may retain shared content outside the database boundary.

B:

Prompt instructions influence suggestions but are not mandatory security policies.

D:

Keeping Copilot as an authoring assistant; execute changes through reviewed SQL project deployment would not correct an AI assistant suggests disabling row-level security to make a join work. Treat generated SQL as untrusted and require security review before execution.

Question 556

A deployment runs under a broad shared service principal with unlimited Azure privileges. Which acceptance check is MOST directly related to this scenario?

  1. A simulated failed job produces no usable passwords in logs.
  2. Repository scans show no live credentials while seed records remain deterministic.
  3. The same source builds reproducibly on local and CI hosts.
  4. The pipeline reaches only its intended staging database and resource group.

Explanation

Correct Answer

D:

The pipeline reaches only its intended staging database and resource group. This is the decisive observable evidence after implementing use dedicated scoped workload identity with least-privilege resource grants. It tests the underlying requirement: Shared overly privileged credentials increase blast radius across systems.

Incorrect Answers

A:

A simulated failed job produces no usable passwords in logs. However, that result would not establish the required outcome: the pipeline reaches only its intended staging database and resource group.

B:

Repository scans show no live credentials while seed records remain deterministic. However, that result would not establish the required outcome: the pipeline reaches only its intended staging database and resource group.

C:

The same source builds reproducibly on local and CI hosts. However, that result would not establish the required outcome: the pipeline reaches only its intended staging database and resource group.

Question 557

A service principal can run a procedure but receives SELECT permission errors inside dynamic SQL. Which technical property or constraint MOST directly matters here?

  1. Dynamic SQL may execute under a permission context different from static ownership chains.
  2. Least-privilege object permissions reduce exposed DDL and direct data paths.
  3. DDM changes what unauthorized queries display; it is not data encryption.
  4. Dynamic masking is evaluated at query output rather than permanently altering storage.

Explanation

Correct Answer

A:

Dynamic SQL may execute under a permission context different from static ownership chains. This explains why the corrective action is to review execution context and grant only required underlying object rights securely. Confirm the diagnosis when the legitimate procedure succeeds while unrelated objects remain inaccessible.

Incorrect Answers

B:

Least-privilege object permissions reduce exposed DDL and direct data paths. The actual technical constraint is that dynamic SQL may execute under a permission context different from static ownership chains.

C:

DDM changes what unauthorized queries display; it is not data encryption. The actual technical constraint is that dynamic SQL may execute under a permission context different from static ownership chains.

D:

Dynamic masking is evaluated at query output rather than permanently altering storage. The actual technical constraint is that dynamic SQL may execute under a permission context different from static ownership chains.

Question 558

A developer receives a VECTOR value but needs to inspect its number of dimensions in SQL. Which preventive practice BEST addresses the underlying risk over time?

  1. Do not assume normalization is right for every model/metric.
  2. Validate runtime-specific function availability.
  3. Reassess costs as the corpus grows.
  4. Keep identifier search separate from semantic descriptions.

Explanation

Correct Answer

B:

Validate runtime-specific function availability. This guards against recurrence because vector metadata functions describe representation without parsing serialized JSON arrays. The direct remediation is: Use supported VECTORPROPERTY to obtain relevant vector metadata.

Incorrect Answers

A:

Do not assume normalization is right for every model/metric. The current task instead requires this action: validate runtime-specific function availability.

C:

Reassess costs as the corpus grows. The current task instead requires this action: validate runtime-specific function availability.

D:

Keep identifier search separate from semantic descriptions. The current task instead requires this action: validate runtime-specific function availability.

Question 559

An API fails after a move from local SQL Server to Azure SQL because a fixed connection string remains in source control. What should the SQL developer do FIRST to address the specific issue?

  1. Run dab validate and a connection smoke test before publishing.
  2. Harden ingress, authentication, rate limiting and query bounds before production exposure.
  3. Parameterize the DAB data source using supported environment variables or secret integration.
  4. Configure entity fields, authorization and supported filter behavior to expose only permitted fields.

Explanation

Correct Answer

C:

Parameterize the DAB data source using supported environment variables or secret integration. This targets the primary issue because configuration must resolve the correct database per environment without leaking secrets. Verification: Staging resolves its own Azure SQL endpoint and local development still works. Prevent recurrence: Block accidental production connection strings in repository review.

Incorrect Answers

A:

Syntactic JSON validity alone does not prove a mapped SQL object exists.

B:

Autoscaling the API does not eliminate downstream database exhaustion or unauthorized access.

D:

DAB entity projection and permissions determine the API data surface.

Question 560

An encryption team rotates a column master key but app clients still use outdated metadata. Which test result BEST demonstrates that the intended solution is working?

  1. Supported equality or enclave test cases behave as designed without broad plaintext exposure.
  2. A test role change creates an alertable audit record.
  3. A simulated service administrator cannot erase the retained central record.
  4. Authorized clients read/write after rotation and revoked keys no longer work.

Explanation

Correct Answer

D:

Authorized clients read/write after rotation and revoked keys no longer work. This is the decisive observable evidence after implementing perform supported key rotation and client configuration changes as a coordinated migration. It tests the underlying requirement: Column key hierarchy and client metadata must agree for encrypted column access.

Incorrect Answers

A:

Supported equality or enclave test cases behave as designed without broad plaintext exposure. However, that result would not establish the required outcome: authorized clients read/write after rotation and revoked keys no longer work.

B:

A test role change creates an alertable audit record. However, that result would not establish the required outcome: authorized clients read/write after rotation and revoked keys no longer work.

C:

A simulated service administrator cannot erase the retained central record. However, that result would not establish the required outcome: authorized clients read/write after rotation and revoked keys no longer work.

Developing AI-Enabled Database Solutions (DP-800) Practice Tests