EnglishDeutschFrançaisEspañolPortuguês

Microsoft · DP-800 · Associate

Microsoft SQL AI Developer Associate (DP-800) — Practice Questions and Mock Exam

Prepare for DP-800 with original practice questions and clear answer explanations. Ask Alex, your AI tutor, when you need more detail, use your results to identify topics to review, and practice your pacing with timed mock exams.

50Mock exam questions
120minTime limit
700/ 1000Passing score

Checked against Microsoft · September 2026 · Current exam version

About the exam

DP-800 is Microsoft's exam for database developers who are being asked to add AI to a system they already own, rather than to move that data somewhere else first. It assumes you write T-SQL for a living and now have to put embeddings, vector search and a language model behind the same schema, on the same platform, under the same permissions. Microsoft scopes it across SQL Server, Azure SQL and SQL database in Microsoft Fabric.

Two thirds of the exam is not AI at all. It is the database craft the AI layer sits on: tables and programmability objects, advanced query writing, encryption and row-level access, performance read from execution plans and the Query Store, and a release path built on source-controlled database projects. Microsoft files the credential at the associate tier under its Developer role, and the audience it names already knows what an embedding is before opening the study guide.

Try five DP-800 questions

Try five practice questions from the app’s current Microsoft Certified: SQL AI Developer Associate question bank, with answers and explanations.

Implement AI capabilities in database solutions1 / 5

A data platform team on SQL Server 2025 grants a developer the CREATE EXTERNAL MODEL database permission so that the developer can register an embedding endpoint. The team states that this grant is by itself enough for the same developer to call AI_GENERATE_EMBEDDINGS with the registered model. Is that statement supported by the CREATE EXTERNAL MODEL reference?

AlexFull explanation from Alex

The external model is a database object, and the reference gives it the same two-level permission story as other executable objects. Creating one, or altering an existing one, requires either the CREATE EXTERNAL MODEL or the ALTER ANY EXTERNAL MODEL database permission, which is the administrative side. Using it from a function such as AI_GENERATE_EMBEDDINGS requires an EXECUTE grant on that specific model, which is the consumption side and can be given to principals who do not create database objects themselves. The separation is useful in practice: a platform team registers and owns the endpoint definition, and application principals receive execute rights on exactly the models they need. The statement also has an owner, set by the AUTHORIZATION clause, and the current user becomes the owner when that clause is omitted. Read the stem for which of the two actions is being attempted.

Sourcelearn.microsoft.com

Design and develop database solutions2 / 5

A developer at a recruitment agency filters candidate names with REGEXP_LIKE and passes the two-character flags string ic, intending case-insensitive matching. According to the REGEXP_LIKE documentation, how is that flags string interpreted?

AlexFull explanation from Alex

The flags argument modifies how the pattern is interpreted rather than what it contains, and the supported modifiers cover case sensitivity, multi-line anchoring and whether the dot matches a newline. Because the argument is a string rather than a set of separate parameters, the engine has to resolve conflicts inside it, and it does so by letting the last character win, which makes the outcome deterministic but easy to get wrong when flags are assembled from configuration. A character outside the supported set is a hard error rather than a silent ignore, and an empty string is treated as the default. The practical habit is to build the flags string in one place and test the resolved behaviour, because a silently case-sensitive filter returns fewer rows rather than failing. Exam tip: contradictory flags resolve to the last one, and the default is case-sensitive.

Sourcelearn.microsoft.com

Secure, optimize, and deploy database solutions3 / 5

An order-processing web service running in Azure must connect to Azure SQL Database without any developer-managed credential. Which authentication method does the documentation describe as the passwordless option for a workload identity?

AlexFull explanation from Alex

Passwordless access to Azure SQL rests on the idea that a workload should prove what it is rather than what it knows. A managed identity is issued to an Azure resource, and the Azure Identity platform vouches for the link between the identity and that resource, so the application requests a token instead of presenting a secret. Nothing has to be stored, rotated or handed to a developer, which removes the largest single cause of leaked database credentials. The alternative for applications, a service principal with a client secret, still works but reintroduces a password that can be guessed or leaked, so the documentation marks it as not recommended. Human users take a different set of methods, including integrated authentication and multifactor authentication. Groups sit on top of all of this, letting permissions be managed once and inherited by many identities. Exam tip: workload plus passwordless means managed identity.

Sourcelearn.microsoft.com

Implement AI capabilities in database solutions4 / 5

A restaurant guide runs the combined sample from the vector and embeddings frequently asked questions, which filters by city, star rating and geographic distance while computing VECTOR_DISTANCE over the review embeddings. A developer records that this query performs an approximate nearest neighbor search. Do the frequently asked questions support that statement?

AlexFull explanation from Alex

The choice between exhaustive and approximate search shows up in the query text rather than in a setting. A query that computes a distance for the candidate rows and orders by it compares every row that survives the predicates, which is exhaustive and gives the true nearest neighbours. Approximate search is a different code path: it needs a vector index over the column and the search function that can use it, and it trades a little recall for speed. Filters matter too, because selective predicates can shrink the candidate set enough that an exhaustive comparison stays cheap. Exam tip: look for the index and the search function before calling a query approximate.

Sourcelearn.microsoft.com

Design and develop database solutions5 / 5

A developer at a hospital group writes a multi-statement table-valued function on SQL Server that calls the identifier-generating function to give each returned row a unique value. The statement is refused with a message about invalid use of a side-effecting operator. What does the documentation give as the workaround?

AlexFull explanation from Alex

The restriction here is narrower than a general rule about determinism. Determinism is a documented property of a function — deterministic functions return the same result any time they're called with a specific set of input values and given the same state of the database, while nondeterministic ones might return different results under those same conditions — and what that property governs is indexability: whether the Database Engine can index the results of the function, through indexes on computed columns that call it or through indexed views that reference it. A Transact-SQL user-defined function is not required to be deterministic. What the article forbids is a short, named list of nondeterministic built-ins inside a UDF body — NEWID, NEWSEQUENTIALID, RAND and TEXTPTR — and referencing one of them raises Msg 443, invalid use of a side-effecting operator within a function. That sits alongside the function's other limitations: it can't perform actions that modify the database state, can't contain an OUTPUT INTO clause with a table as its target, and can't make use of dynamic SQL or temp tables, though table variables are allowed. Side effects are the through-line the documentation draws: changes to a global state of the database, such as an update to a table, or to an external resource such as a file or the network, and functions that create them aren't recommended. The view workaround exists because a view is a query and the restriction is written against what a function body may reference directly: wrap the side-effecting function in a view and call the view from within the function. It is a documented escape hatch rather than an invitation, and a design that needs a new identifier per row can generate it in the calling statement instead.

Sourcelearn.microsoft.com

384 practice questions

The Pass-IT question pool gives you material to practice for DP-800. A Pass-IT mock exam uses 50 questions and a 120-minute time limit; these are practice settings.

Pool details: DP-800

Exam details checked against MicrosoftSeptember 4, 2026

date of the last check against the official Microsoft source

Passing score700 / 1,000

as published by Microsoft

Objectives in the guide84 objectives listed in the official guide

across 3 domains in the official exam guide

Pool size384 questions

= The pool size is equivalent to 7 sets of 50 questions; this does not mean that each mock exam uses a separate set.

Blueprint domains3 domains in the exam blueprint

Design and develop database solutions 146 · Secure, optimize, and deploy database solutions 137 · Implement AI capabilities in database solutions 101

Recorded as checked against sources384 of 384

questions recorded as having their answer, options, and explanation checked against official Microsoft documentation

What's on the exam

Microsoft splits the exam three ways, and the two non-AI areas carry the same weight as each other. Designing and developing database solutions is 35-40%: objects, programmability, advanced T-SQL, and a smaller newer slice where GitHub Copilot is part of the toolchain. Securing, optimizing and deploying is the other 35-40%, and it is the broadest area by objective count: encryption, masking, row-level access and endpoint security, then performance diagnosis, then the whole CI/CD story on SQL Database Projects, then the seams to Azure Monitor, Data API builder and change-event handling. Implementing AI capabilities takes the remaining 25-30% and is the smallest of the three, which surprises people who read only the certification title. It covers external models and embedding maintenance, the choice between full-text, vector and hybrid search, and retrieval-augmented generation driven from inside the database.

Exam blueprint: DP-800

Design and develop database solutions35–40%

The schema and the code, before anyone worries about who may read it or how it ships. Objects first: ordinary tables and their specialised cousins that exist for one purpose each, columns that hold JSON documents rather than scalars, the constraints and sequences that keep values honest, and the partitioning that decides how a large table is physically carved up. Then the code that lives in the database rather than above it, as views, functions of two shapes, procedures and triggers. Then the T-SQL itself at a level past everyday querying: recursive and layered expressions, calculations that look sideways at neighbouring rows, functions that read and shred JSON, pattern matching over text, similarity scoring between two strings that are nearly but not quite equal, traversal across a graph structure, queries whose inner half depends on the outer, and error handling that turns a failure into something the caller can act on. The newest slice sits here too, and it is small but distinctive: writing this code with an AI assistant in the loop, deciding what the assistant may see, wiring it to tool endpoints, steering it with instruction files, and understanding what that convenience costs in exposure.

≈ 19 h
Secure, optimize, and deploy database solutions35–40%

Everything that stands between working code and a solution somebody is willing to run. It has four movements. Access control and confidentiality: which values are encrypted and where the keys live, which values are shown blurred to whom, which rows a given caller may see at all, which objects they may touch, how a connection authenticates without a password in it, what gets written to an audit trail, and how the newer endpoint surfaces are locked down when the database starts talking to model endpoints and to REST, GraphQL and protocol servers. Then performance, read from evidence rather than instinct: server and database settings, the isolation and concurrency choices that trade consistency against throughput, and the tooling that shows what a query actually did, including the diagnosis of one session waiting on another. Then the release path, built on database projects held in source control: tests, reference data, project models, branches and pull requests, secrets, and the detection of a target that has drifted away from the declared schema, all the way through to controlled deployment pipelines. Last, the seams to the rest of Azure: publishing database objects as APIs, watching the result, and reacting to changes in the data as events rather than by polling.

≈ 19 h
Implement AI capabilities in database solutions25–30%

The smallest share and the reason the exam exists. Three questions, in order. Which model, and how do the embeddings stay current: choosing between models on capability, language coverage, size and output shape; registering one so the engine can call it; deciding which columns are worth embedding at all; cutting long text into pieces that fit and still mean something; and picking the mechanism that regenerates an embedding when its source row changes, which is the part most designs get wrong. Then retrieval: keyword search, similarity search over vectors, or both fused into one ranking; how vector data is typed, indexed and sized; the exact-versus-approximate trade-off and what an approximate index costs in recall; and how to tell whether the result set is actually good. Last, generation grounded on what was retrieved: recognising the cases where retrieval-augmented generation is the right answer, calling an external endpoint from inside the database, shaping structured rows into something a language model can read, and getting a usable answer back out of the response.

≈ 13 h

Exam format and question types

Microsoft gives you 120 minutes for DP-800 and publishes no question count for this exam; across its certification exams the usual load is 40-60 questions. Scores run on a scale of 1 to 1,000, and 700 passes.

Expect mostly single-answer items with a solid share of multi-answer ones, plus yes/no problem-solution sets, drag-and-drop, ordered lists and dropdown-driven screens. Microsoft does not say in advance which formats any one exam uses; it demonstrates the whole set in a public sandbox instead. This is an associate role-based sitting, the tier where Microsoft says a live lab may appear and for which it deliberately publishes no list, so read the overview screens at the start. Microsoft Learn stays open to you throughout, on the same clock. Unscored trial items are mixed in and are never marked, so answer everything. You may break, but the clock keeps running and nothing you have already seen comes back.

Question types: DP-800

Multiple Choice49%

Select the single answer that best meets the question’s requirements.

Drag & Drop14%

Move items into the slots, groups, or sequence specified by the task.

Multiple Response12%

Select multiple answers. Follow the question’s instructions on how many to choose.

Ordering9%

Arrange the steps in the sequence needed to complete the process.

Dropdown9%

Choose options from dropdown menus to complete a statement or configuration.

True / False7%

Decide whether a statement is true or false, paying attention to its conditions and wording.

See Microsoft for official question-format information. The shares shown describe the Pass-IT practice pool; they do not establish the proportions on the official exam.

Preparing for DP-800

You book DP-800 through Pearson VUE and sit it under a proctor, online in most countries and regions or at a test centre. Microsoft offers this exam in English only. The certification is valid for one year and renews free through an online assessment on Microsoft Learn that opens six months before it expires.

Preparation and logistics: DP-800

Preparation

Illustrative study time30–75 h

illustrative planning range: 30 h with relevant experience to 75 h when starting out; your needs may fall outside this range

LevelAssociate
Recommended backgroundNo prior certification is required, and DP-800's study guide publishes no prerequisites section at all: the string "prerequisite" appears zero times on it and zero times on the certification page. What Microsoft does publish is an audience profile, and it is demanding. It expects subject matter expertise in designing and developing AI-enabled database solutions across SQL Server, Azure SQL and SQL database in Microsoft Fabric; hands-on experience writing T-SQL and developing databases on those platforms; familiarity with continuous integration and continuous deployment practice in GitHub; familiarity with AI-assisted development tools; and working knowledge of AI concepts such as embeddings, vectors and models. It is stated as background, not as a gate anyone checks at registration.

Taking and maintaining the certification

DeliveryProctored exam scheduled through Pearson VUE; an online proctored option is available in most countries and regions.
Retake policy24-hour wait after a failed first attempt, then a 14-day wait between all subsequent attempts (up to 5); no more than 5 attempts in the 12 months from the first one.
Certification validity1 year

Microsoft associate certifications are valid for one year. Renewal is free and runs as an online assessment on Microsoft Learn, which opens six months before the expiry date; passing another exam does not renew the credential, and an expired one has to be earned again.

Common pitfalls

Topics to review: DP-800

  1. 01Exact or approximate

    Reaching for an approximate vector index on a set small enough that exact distance calculation is both correct and simpler; the two paths are different functions with different guarantees, and the scenario's data volume decides which one belongs.

  2. 02Embeddings go stale

    Designing the generation step and leaving the maintenance step for later. Something has to notice that a source row changed and re-embed it, and choosing that mechanism is part of the design, not an operational detail.

  3. 03Semantic or literal

    Answering a keyword requirement with similarity search, or a meaning-based requirement with full-text search, when the wording of the scenario says plainly which one the user needs and when the answer is to fuse both.

  4. 04Three ways to protect a column

    Treating encryption, dynamic masking and row-level security as interchangeable. One keeps values unreadable to the engine, one hides them at presentation time, and one decides which rows exist for this caller at all.

  5. 05The assistant sees your schema

    Enabling AI-assisted development without accounting for what an instruction file, a tool configuration or a connected endpoint exposes, and to whom, once it is committed to the repository.

  6. 06Drift is not a deployment step

    Changing the target database by hand and letting the project file fall behind it, so the next pipeline run either overwrites the fix or fails on a difference nobody declared.

Frequently asked questions

How long is the Microsoft Certified: SQL AI Developer Associate exam?

The DP-800 exam has 50 questions and a 120-minute time limit.

What is the passing score for Microsoft Certified: SQL AI Developer Associate?

The passing score for the DP-800 exam is 700 / 1000.

Which pitfalls should I review when preparing for Microsoft Certified: SQL AI Developer Associate?

Topics to review include Exact or approximate, Embeddings go stale, Semantic or literal, Three ways to protect a column, The assistant sees your schema, Drift is not a deployment step. Work through examples to check that you understand the distinctions and can explain your answer.

Do you need a prior certification before taking DP-800?

No. The DP-800 study guide lists no prerequisites, and nothing is checked when you register. Microsoft does publish an audience profile, and it is demanding: expertise in designing AI-enabled database solutions across SQL Server, Azure SQL and SQL database in Microsoft Fabric, real T-SQL and database development work, familiarity with CI/CD in GitHub and with AI-assisted development tools, and a working grasp of embeddings, vectors and models. Treat that profile as the background the questions assume.

How is DP-800 weighted across its exam domains?

Microsoft publishes three domains and gives each one a range rather than a fixed figure. Design and develop database solutions carries 35-40%, Secure, optimize, and deploy database solutions also carries 35-40%, and Implement AI capabilities in database solutions carries 25-30%. The security, optimization and deployment domain holds the most objectives of the three, so give it study time in proportion.

What happens if you fail DP-800 on your first attempt?

You can book again after 24 hours. From the second retake onward, the wait between attempts is 14 days. Microsoft allows no more than five attempts at the same exam within the twelve months that follow your first one. Use each wait as targeted review time rather than a queue.

How do you keep the certification current after you pass?

The credential stays valid for one year. Six months before your expiry date, Microsoft opens a renewal assessment on Microsoft Learn that you take online. Passing a different exam does not extend it. If the date goes by, you have to earn the certification again through the exam.

Where and how do you sit DP-800?

The sitting is proctored and booked through Pearson VUE. Most countries and regions also offer an online proctored option, so you can take it from home if your space meets the rules. Either way, the same 120-minute limit applies.

Which certification makes sense after DP-800?

That depends on which side of the work you want to deepen. If you also carry the operational side of Azure SQL, DP-300 Administering Microsoft Azure SQL Solutions sits closest. If your data lives in Microsoft Fabric, DP-600 and DP-700 continue the analytics and data engineering paths. For the application layer above the database, AI-103 Developing AI Apps and Agents on Azure is the neighbouring associate exam.

One certification, 12 months

Practice for DP-800

Focus your practice on one certification, or choose Pro to practice across all certifications.

Start a free practice sessionTry the first 20 questions without a card to see whether the practice suits you.

For eligible purchases: money-back guarantee if you fail your exam.

View guarantee terms →