EnglishDeutschFrançaisEspañolPortuguês

Microsoft · DP-800 · Associate

Microsoft SQL AI Developer Associate (DP-800) — Practice Questions and Mock Exam

DP-800 is Microsoft's exam for database developers who are being asked to add AI to a system they already own, rather than to move that data somewhere else first.

50Questions per Pass-IT mock exam
120minPass-IT mock exam time limit

Official DP-800 exam: 700 out of 1000 points to pass.

Checked against Microsoft · September 2026 · Current exam version

See what learning with Pass-IT is like.

Answer a DP-800 sample question and read the explanation with its source. Right here, with no sign-up.

Implement AI capabilities in database solutions1 / 5

A data platform team on SQL Server 2025 grants a developer the CREATE EXTERNAL MODEL database permission so that the developer can register an embedding endpoint. The team states that this grant is by itself enough for the same developer to call AI_GENERATE_EMBEDDINGS with the registered model. Is that statement supported by the CREATE EXTERNAL MODEL reference?

AlexFull explanation from Alex

The external model is a database object, and the reference gives it the same two-level permission story as other executable objects. Creating one, or altering an existing one, requires either the CREATE EXTERNAL MODEL or the ALTER ANY EXTERNAL MODEL database permission, which is the administrative side. Using it from a function such as AI_GENERATE_EMBEDDINGS requires an EXECUTE grant on that specific model, which is the consumption side and can be given to principals who do not create database objects themselves. The separation is useful in practice: a platform team registers and owns the endpoint definition, and application principals receive execute rights on exactly the models they need. The statement also has an owner, set by the AUTHORIZATION clause, and the current user becomes the owner when that clause is omitted. Read the stem for which of the two actions is being attempted.

Sourcelearn.microsoft.com

Design and develop database solutions2 / 5

A developer at a recruitment agency filters candidate names with REGEXP_LIKE and passes the two-character flags string ic, intending case-insensitive matching. According to the REGEXP_LIKE documentation, how is that flags string interpreted?

AlexFull explanation from Alex

The flags argument modifies how the pattern is interpreted rather than what it contains, and the supported modifiers cover case sensitivity, multi-line anchoring and whether the dot matches a newline. Because the argument is a string rather than a set of separate parameters, the engine has to resolve conflicts inside it, and it does so by letting the last character win, which makes the outcome deterministic but easy to get wrong when flags are assembled from configuration. A character outside the supported set is a hard error rather than a silent ignore, and an empty string is treated as the default. The practical habit is to build the flags string in one place and test the resolved behaviour, because a silently case-sensitive filter returns fewer rows rather than failing. Exam tip: contradictory flags resolve to the last one, and the default is case-sensitive.

Sourcelearn.microsoft.com

Secure, optimize, and deploy database solutions3 / 5

An order-processing web service running in Azure must connect to Azure SQL Database without any developer-managed credential. Which authentication method does the documentation describe as the passwordless option for a workload identity?

AlexFull explanation from Alex

Passwordless access to Azure SQL rests on the idea that a workload should prove what it is rather than what it knows. A managed identity is issued to an Azure resource, and the Azure Identity platform vouches for the link between the identity and that resource, so the application requests a token instead of presenting a secret. Nothing has to be stored, rotated or handed to a developer, which removes the largest single cause of leaked database credentials. The alternative for applications, a service principal with a client secret, still works but reintroduces a password that can be guessed or leaked, so the documentation marks it as not recommended. Human users take a different set of methods, including integrated authentication and multifactor authentication. Groups sit on top of all of this, letting permissions be managed once and inherited by many identities. Exam tip: workload plus passwordless means managed identity.

Sourcelearn.microsoft.com

Implement AI capabilities in database solutions4 / 5

A restaurant guide runs the combined sample from the vector and embeddings frequently asked questions, which filters by city, star rating and geographic distance while computing VECTOR_DISTANCE over the review embeddings. A developer records that this query performs an approximate nearest neighbor search. Do the frequently asked questions support that statement?

AlexFull explanation from Alex

The choice between exhaustive and approximate search shows up in the query text rather than in a setting. A query that computes a distance for the candidate rows and orders by it compares every row that survives the predicates, which is exhaustive and gives the true nearest neighbours. Approximate search is a different code path: it needs a vector index over the column and the search function that can use it, and it trades a little recall for speed. Filters matter too, because selective predicates can shrink the candidate set enough that an exhaustive comparison stays cheap. Exam tip: look for the index and the search function before calling a query approximate.

Sourcelearn.microsoft.com

Design and develop database solutions5 / 5

A developer at a hospital group writes a multi-statement table-valued function on SQL Server that calls the identifier-generating function to give each returned row a unique value. The statement is refused with a message about invalid use of a side-effecting operator. What does the documentation give as the workaround?

AlexFull explanation from Alex

The restriction here is narrower than a general rule about determinism. Determinism is a documented property of a function — deterministic functions return the same result any time they're called with a specific set of input values and given the same state of the database, while nondeterministic ones might return different results under those same conditions — and what that property governs is indexability: whether the Database Engine can index the results of the function, through indexes on computed columns that call it or through indexed views that reference it. A Transact-SQL user-defined function is not required to be deterministic. What the article forbids is a short, named list of nondeterministic built-ins inside a UDF body — NEWID, NEWSEQUENTIALID, RAND and TEXTPTR — and referencing one of them raises Msg 443, invalid use of a side-effecting operator within a function. That sits alongside the function's other limitations: it can't perform actions that modify the database state, can't contain an OUTPUT INTO clause with a table as its target, and can't make use of dynamic SQL or temp tables, though table variables are allowed. Side effects are the through-line the documentation draws: changes to a global state of the database, such as an update to a table, or to an external resource such as a file or the network, and functions that create them aren't recommended. The view workaround exists because a view is a query and the restriction is written against what a function body may reference directly: wrap the side-effecting function in a view and call the view from within the function. It is a documented escape hatch rather than an invitation, and a design that needs a new identifier per row can generate it in the calling statement instead.

Sourcelearn.microsoft.com

How to prepare for DP-800 with Pass-IT.

Currently 384 practice questions for DP-800, with new ones added regularly. Focus on what you still need to learn.

Get past difficult questions.

Understand why an answer is correct. Alex explains the concepts and answers your follow-up questions so you can apply what you learn to the next task.

Meet Alex →

Conversation preview · DP-800

External model permissions

  1. You

    Does permission to create an external model also let me call it?

  2. Alex · AI tutor

    Not by itself. Calling it with AI_GENERATE_EMBEDDINGS requires EXECUTE on that model.

    Read the Microsoft documentation ↗
  3. You

    Why separate those permissions?

  4. Alex · AI tutor

    A team can manage the model definition while applications receive only the rights needed to use it.

    Read the Microsoft documentation ↗

Make your study time count.

Practice at your level.
For new practice sessions, Pass-IT adjusts the difficulty based on your previous answers.

Learn from mistakes.
Incorrect answers automatically become flashcards. When you review them, you rate how confidently you remember; Pass-IT schedules the next review.

See how focused practice works →

Animated feature preview

Turn your mistakes into knowledge you can rely on.

How Pass-IT works

Your review

Answered a question incorrectly?

Pass-IT saves it for your review.

DP-800 · Question excerpt

External model permissions

View the full question

A data platform team on SQL Server 2025 grants a developer the CREATE EXTERNAL MODEL database permission so that the developer can register an embedding endpoint. The team states that this grant is by itself enough for the same developer to call AI_GENERATE_EMBEDDINGS with the registered model. Is that statement supported by the CREATE EXTERNAL MODEL reference?

Understand the correct answer.

False

Creating an external model and executing it are separate permission requirements.

Read the Microsoft documentation ↗

How confidently do you remember?

During review, you assess how well you still know the answer.

Correct after hesitating

Pass-IT schedules your next review.

The date depends on your self-assessment and previous reviews.

Simplified demonstration. No learning progress is saved.

Practice for the moment that counts.

Take a full mock exam with a time limit and find out whether you can finish in time.

Your DP-800 mock exam

Questions
50
Minutes
120

Illustration of an exam session

  1. Start
  2. Answer questions
  3. Finish

Length and time limit of the Pass-IT mock exam.

Go into your exam with more confidence.

Your Readiness Score helps you assess whether you are ready for the exam. Results by exam domain show you where you should keep practicing.

Your money back if you fail despite 80% Readiness.
If your Readiness Score is at least 80% when you take the exam and you still fail, we refund the Pass-IT purchase price for this certification.

For active, paid access. Submit proof of failing within 14 days.

Further guarantee conditions

You need at least 80% Readiness and active, paid access to the certification when you take the exam. Take the exam within your access period and submit official proof of failing within 14 days after the exam.

For purchases through Apple or Google, refunds are handled by the respective store. See the full terms for further details.

Read the guarantee terms →

The Readiness Score describes your practice progress, not a probability of passing.

Guarantee requirement

80%

At least 80% Readiness
when you take the exam

Money back if you fail

Question counts and mock exam settings from the current Pass-IT catalog.

What you practice for DP-800.

Exam topics, relevant practice and sources you can check.

Database structures and T-SQL35–40% of the exam146 QuestionsPass-IT questions

Build SQL objects and queries, including development with AI-assisted tools.

  • Design tables, types, indexes and partitions, including specialized tables and JSON columns and indexes, and enforce constraints and sequences.
  • Create views, scalar and table-valued functions, stored procedures and triggers.
  • Write T-SQL with common table expressions, window functions, JSON, regular expressions, fuzzy matching, graph and correlated queries, and error handling.
  • Configure Copilot models, instruction files and Model Context Protocol tools for SQL Server and Fabric, and assess the security impact of AI-assisted development.
Security, delivery and integration35–40% of the exam137 QuestionsPass-IT questions

Secure and optimize databases, deploy changes and expose data through Azure services.

  • Configure encryption, masking, row and object permissions, passwordless access and audits; secure model, REST, GraphQL and MCP endpoints with suitable identities.
  • Tune database configuration and transaction isolation, analyze execution plans and query metrics, and resolve blocking and deadlocks while preserving consistency.
  • Build and test SQL Database Projects, version models and reference data, manage branches and reviews, protect secrets, detect schema drift and enforce deployment pipeline controls.
  • Configure and deploy Data API builder to expose database objects through REST or GraphQL, including relationships, caching, pagination, search and filters.
  • Monitor with Application Insights and Log Analytics and process database changes through change tracking, capture or streaming, Functions or Logic Apps.
Embeddings, search and grounded generation25–30% of the exam101 QuestionsPass-IT questions

Add model calls, vector retrieval and generation grounded in database content.

  • Evaluate and configure external models, choose columns and chunks for embeddings, generate embeddings and keep them updated as data changes.
  • Compare and implement full-text, vector and hybrid search; configure vector types, indexes and metrics, choose approximate or exact neighbors, combine rankings with reciprocal rank fusion and evaluate performance.
  • Build retrieval-augmented generation flows, invoke external model endpoints with SQL, convert structured data to JSON and send results to a model and extract its response.
Question formats you can practice
Multiple Choice
Select one answer.
Multiple Response
Select multiple applicable answers.
True / False
Decide whether statements are true or false.
Drag & Drop
Match items to the appropriate targets.
Ordering
Put steps in the correct order.
Dropdown
Choose the appropriate entry from a dropdown list.

These are Pass-IT practice formats. Check the Microsoft certification page for the official exam information.

The ranges describe the weighting of exam topics. See Official Microsoft objectives for the current exam objectives.

Frequently asked questions

Your preparation

How much study time should I plan for DP-800?

For planning, Pass-IT estimates roughly 30–75 hours. Relevant experience may put you toward the lower end; starting from scratch may put you toward the higher end. Your needs may fall outside this range. This is not a time requirement from Microsoft or a promise that you will be exam-ready within that time.

Using Pass-IT

What language are Pass-IT questions in?

Questions in the app are currently in English. Translations of the sample questions on this page apply only to this preview. Check with Microsoft for the languages available for the official exam.

How long does my DP-800 access last?

Access covers this certification for 12 months. You pay once, with no automatic renewal.

When does the money-back guarantee apply?

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days. Guarantee terms

About the DP-800 exam

Where can I take the DP-800 exam?

Proctored exam scheduled through Pearson VUE; an online proctored option is available in most countries and regions.

How long is the Microsoft Certified: SQL AI Developer Associate exam?

The DP-800 exam has 50 questions and a 120-minute time limit.

Do you need a prior certification before taking DP-800?

No. The DP-800 study guide lists no prerequisites, and nothing is checked when you register. Microsoft does publish an audience profile, and it is demanding: expertise in designing AI-enabled database solutions across SQL Server, Azure SQL and SQL database in Microsoft Fabric, real T-SQL and database development work, familiarity with CI/CD in GitHub and with AI-assisted development tools, and a working grasp of embeddings, vectors and models. Treat that profile as the background the questions assume.

How is DP-800 weighted across its exam domains?

Microsoft publishes three domains and gives each one a range rather than a fixed figure. Design and develop database solutions carries 35-40%, Secure, optimize, and deploy database solutions also carries 35-40%, and Implement AI capabilities in database solutions carries 25-30%. The security, optimization and deployment domain holds the most objectives of the three, so give it study time in proportion.

What happens if you fail DP-800 on your first attempt?

You can book again after 24 hours. From the second retake onward, the wait between attempts is 14 days. Microsoft allows no more than five attempts at the same exam within the twelve months that follow your first one. Use each wait as targeted review time rather than a queue.

How do you keep the certification current after you pass?

The credential stays valid for one year. Six months before your expiry date, Microsoft opens a renewal assessment on Microsoft Learn that you take online. Passing a different exam does not extend it. If the date goes by, you have to earn the certification again through the exam.

Where and how do you sit DP-800?

The sitting is proctored and booked through Pearson VUE. Most countries and regions also offer an online proctored option, so you can take it from home if your space meets the rules. Either way, the same 120-minute limit applies.

Your preparation for DP-800

$29.99one-time

12 months of access for DP-800 · No automatic renewal

Buy DP-800 access

Questions in the app are currently in English.

Try 20 questions for freeFree account required. No credit card.

Already have an account? Log in

Prefer a subscription? View subscriptions →

Money back if you fail with at least 80% Readiness, for eligible purchases under the guarantee terms.

Guarantee terms

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days.

Full guarantee terms →