Microsoft DP-800 Practice Test 28
Question 270
Briarfield Foods is responsible for an Azure SQL or Microsoft SQL workload. A developer selects a model for long SQL migration analysis. Operational evidence: Tool options vary in token limits, privacy policy and quality. What operational condition would provide the earliest useful regression warning?
- Monitor instruction drift and ignored conventions
- Monitor connection errors and token expiry
- Monitor spend, hallucinated APIs and model changes
- Monitor migration impact and drift
Explanation
Correct Answer
C:
Tool options vary in token limits, privacy policy and quality. Monitor spend, hallucinated APIs and model changes. Model choice affects input limits, code disclosure and response quality. Compare approved deployments against policy and test cases before enabling a code assistant.
Incorrect Answers
A:
“Monitor instruction drift and ignored conventions” concerns Assistant creates inconsistent column and object names; the reported problem instead is Tool options vary in token limits, privacy policy and quality. Monitor spend, hallucinated APIs and model changes. Model choice affects input limits, code disclosure and response quality. Compare approved deployments against policy and test cases before enabling a code assistant.
B:
“Monitor connection errors and token expiry” concerns Client config points to an outdated URL and unsupported auth; the reported problem instead is Tool options vary in token limits, privacy policy and quality. Monitor spend, hallucinated APIs and model changes. Model choice affects input limits, code disclosure and response quality. Compare approved deployments against policy and test cases before enabling a code assistant.
D:
“Monitor migration impact and drift” concerns DDL change could destroy legacy data or break dependencies; the reported problem instead is Tool options vary in token limits, privacy policy and quality. Monitor spend, hallucinated APIs and model changes. Model choice affects input limits, code disclosure and response quality. Compare approved deployments against policy and test cases before enabling a code assistant.
Question 271
At Northstar Analytics, an analyst requests Fabric Copilot to inspect a protected SQL dataset. The observed constraint is: Prompt context must not broaden Fabric workspace access. What initial check best narrows the technical cause without altering business data?
- Inspect repository guidance and Copilot instruction file scope
- Inspect provenance of retrieved comments and tool-call logs
- Inspect lakehouse endpoint scopes and tool configuration
- Inspect workspace role and Copilot feature availability
Explanation
Correct Answer
D:
Prompt context must not broaden Fabric workspace access. Inspect workspace role and Copilot feature availability. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Incorrect Answers
A:
“Inspect repository guidance and Copilot instruction file scope” concerns Assistant creates inconsistent column and object names; the reported problem instead is Prompt context must not broaden Fabric workspace access. Inspect workspace role and Copilot feature availability. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
B:
“Inspect provenance of retrieved comments and tool-call logs” concerns AI assistant may treat database metadata as instructions; the reported problem instead is Prompt context must not broaden Fabric workspace access. Inspect workspace role and Copilot feature availability. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
C:
“Inspect lakehouse endpoint scopes and tool configuration” concerns Broad access would expose unrelated workspace files; the reported problem instead is Prompt context must not broaden Fabric workspace access. Inspect workspace role and Copilot feature availability. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Question 272
A database engineer at Maple Harbor Research is investigating this case: An analyst requests Fabric Copilot to inspect a protected SQL dataset. The relevant finding is: Prompt context must not broaden Fabric workspace access. Which proposed change is the most suitable response to the observed constraint?
- Use least-privileged MCP permissions and explicit allowlisted capabilities
- Configure an approved metadata-only MCP tool with least privilege
- Treat schema content as untrusted data and restrict agent tool permissions
- Grant least-privilege workspace access and follow Copilot tenant policy
Explanation
Correct Answer
D:
Prompt context must not broaden Fabric workspace access. Grant least-privilege workspace access and follow Copilot tenant policy. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Incorrect Answers
A:
“Use least-privileged MCP permissions and explicit allowlisted capabilities” concerns A broad server permission grants unnecessary write access; the reported problem instead is Prompt context must not broaden Fabric workspace access. Grant least-privilege workspace access and follow Copilot tenant policy. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
B:
“Configure an approved metadata-only MCP tool with least privilege” concerns Broad access would expose unrelated workspace files; the reported problem instead is Prompt context must not broaden Fabric workspace access. Grant least-privilege workspace access and follow Copilot tenant policy. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
C:
“Treat schema content as untrusted data and restrict agent tool permissions” concerns AI assistant may treat database metadata as instructions; the reported problem instead is Prompt context must not broaden Fabric workspace access. Grant least-privilege workspace access and follow Copilot tenant policy. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Question 273
Juniper Commerce is responsible for an Azure SQL or Microsoft SQL workload. An analyst requests Fabric Copilot to inspect a protected SQL dataset. Operational evidence: Prompt context must not broaden Fabric workspace access. What isolated pilot would provide the strongest evidence before rollout?
- Inject benign adversarial text into a test comment
- Test with read-only sample data under allowed and denied roles
- Attempt read and unauthorized write in a lab session
- Request sample code from tool against a disposable repository branch
Explanation
Correct Answer
B:
Prompt context must not broaden Fabric workspace access. Test with read-only sample data under allowed and denied roles. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Incorrect Answers
A:
“Inject benign adversarial text into a test comment” concerns AI assistant may treat database metadata as instructions; the reported problem instead is Prompt context must not broaden Fabric workspace access. Test with read-only sample data under allowed and denied roles. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
C:
“Attempt read and unauthorized write in a lab session” concerns A broad server permission grants unnecessary write access; the reported problem instead is Prompt context must not broaden Fabric workspace access. Test with read-only sample data under allowed and denied roles. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
D:
“Request sample code from tool against a disposable repository branch” concerns Assistant creates inconsistent column and object names; the reported problem instead is Prompt context must not broaden Fabric workspace access. Test with read-only sample data under allowed and denied roles. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Question 274
At Summit Logistics, an analyst requests Fabric Copilot to inspect a protected SQL dataset. The observed constraint is: Prompt context must not broaden Fabric workspace access. Which acceptance result most directly demonstrates the requirement has been satisfied?
- Assistant accesses only authorized objects
- The assistant workflow avoids real secret disclosure
- Only intended lakehouse metadata is returned
- Assistant does not execute unauthorized data exports
Explanation
Correct Answer
A:
Prompt context must not broaden Fabric workspace access. Assistant accesses only authorized objects. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Incorrect Answers
B:
“The assistant workflow avoids real secret disclosure” addresses the ai coding assistant secrets situation—unreviewed prompts could expose credentials. The observed failure is: Prompt context must not broaden Fabric workspace access. Assistant accesses only authorized objects. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
C:
“Only intended lakehouse metadata is returned” concerns Broad access would expose unrelated workspace files; the reported problem instead is Prompt context must not broaden Fabric workspace access. Assistant accesses only authorized objects. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
D:
“Assistant does not execute unauthorized data exports” concerns AI assistant may treat database metadata as instructions; the reported problem instead is Prompt context must not broaden Fabric workspace access. Assistant accesses only authorized objects. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Question 275
A database engineer at BrightPath Studios is investigating this case: An analyst requests Fabric Copilot to inspect a protected SQL dataset. The relevant finding is: Prompt context must not broaden Fabric workspace access. What operational condition would provide the earliest useful regression warning?
- Monitor cross-workspace access attempts
- Monitor migration impact and drift
- Monitor instruction drift and ignored conventions
- Monitor audit events and permission drift
Explanation
Correct Answer
D:
Prompt context must not broaden Fabric workspace access. Monitor audit events and permission drift. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Incorrect Answers
A:
“Monitor cross-workspace access attempts” concerns Broad access would expose unrelated workspace files; the reported problem instead is Prompt context must not broaden Fabric workspace access. Monitor audit events and permission drift. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
B:
“Monitor migration impact and drift” concerns DDL change could destroy legacy data or break dependencies; the reported problem instead is Prompt context must not broaden Fabric workspace access. Monitor audit events and permission drift. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
C:
“Monitor instruction drift and ignored conventions” concerns Assistant creates inconsistent column and object names; the reported problem instead is Prompt context must not broaden Fabric workspace access. Monitor audit events and permission drift. Adding Fabric context to a prompt must not escalate workspace permissions. Confirm the caller’s effective role and whether Copilot is enabled for the tenant.
Question 276
Lakeview Services is responsible for an Azure SQL or Microsoft SQL workload. A coding agent cannot connect to an approved SQL MCP endpoint. Operational evidence: Client config points to an outdated URL and unsupported auth. What initial check best narrows the technical cause without altering business data?
- Audit endpoint authentication, identity scopes and exposed tools
- Inspect lakehouse endpoint scopes and tool configuration
- Inspect repository guidance and Copilot instruction file scope
- Inspect endpoint URL, transport and authentication configuration
Explanation
Correct Answer
D:
Check that the coding agent points to the currently approved SQL MCP server URL, uses the supported transport or client integration and has a compatible, authorized authentication configuration. Verify endpoint discovery and a harmless read-only test under a scoped identity before changing any SQL data. A valid permission grant cannot repair a stale endpoint URL or a client transport mismatch.
Incorrect Answers
A:
Auditing the MCP server's exposed tools and the caller's permissions is important for least-privilege authorization, especially if unexpected write capabilities appear. In this stem, however, the immediate connection failure is tied to an outdated client URL and an unsupported authentication mechanism. Inspect those connection settings first, then audit the endpoint's tool scopes after a supported connection is established.
B:
“Inspect lakehouse endpoint scopes and tool configuration” concerns Broad access would expose unrelated workspace files; the reported problem instead is Client config points to an outdated URL and unsupported auth. Check that the coding agent points to the currently approved SQL MCP server URL, uses the supported transport or client integration and has a compatible, authorized authentication configuration. Verify endpoint discovery and a harmless read-only test under a scoped identity before changing any SQL data. A valid permission grant cannot repair a stale endpoint URL or a client transport mismatch.
C:
“Inspect repository guidance and Copilot instruction file scope” concerns Assistant creates inconsistent column and object names; the reported problem instead is Client config points to an outdated URL and unsupported auth. Check that the coding agent points to the currently approved SQL MCP server URL, uses the supported transport or client integration and has a compatible, authorized authentication configuration. Verify endpoint discovery and a harmless read-only test under a scoped identity before changing any SQL data. A valid permission grant cannot repair a stale endpoint URL or a client transport mismatch.
Question 277
At Crownridge Travel, a coding agent cannot connect to an approved SQL MCP endpoint. The observed constraint is: Client config points to an outdated URL and unsupported auth. Which proposed change is the most suitable response to the observed constraint?
- Configure correct vetted MCP endpoint and credential flow
- Choose approved model appropriate to migration context and prompt limits
- Configure an approved metadata-only MCP tool with least privilege
- Use least-privileged MCP permissions and explicit allowlisted capabilities
Explanation
Correct Answer
A:
Client config points to an outdated URL and unsupported auth. Configure correct vetted MCP endpoint and credential flow. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Incorrect Answers
B:
“Choose approved model appropriate to migration context and prompt limits” concerns Tool options vary in token limits, privacy policy and quality; the reported problem instead is Client config points to an outdated URL and unsupported auth. Configure correct vetted MCP endpoint and credential flow. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
C:
“Configure an approved metadata-only MCP tool with least privilege” concerns Broad access would expose unrelated workspace files; the reported problem instead is Client config points to an outdated URL and unsupported auth. Configure correct vetted MCP endpoint and credential flow. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
D:
“Use least-privileged MCP permissions and explicit allowlisted capabilities” concerns A broad server permission grants unnecessary write access; the reported problem instead is Client config points to an outdated URL and unsupported auth. Configure correct vetted MCP endpoint and credential flow. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Question 278
A database engineer at Oakridge Advisors is investigating this case: A coding agent cannot connect to an approved SQL MCP endpoint. The relevant finding is: Client config points to an outdated URL and unsupported auth. What isolated pilot would provide the strongest evidence before rollout?
- Connect through isolated test tenant using minimal permissions
- Inject benign adversarial text into a test comment
- Request schema list using an isolated low-privileged identity
- Test with read-only sample data under allowed and denied roles
Explanation
Correct Answer
A:
Client config points to an outdated URL and unsupported auth. Connect through isolated test tenant using minimal permissions. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Incorrect Answers
B:
“Inject benign adversarial text into a test comment” concerns AI assistant may treat database metadata as instructions; the reported problem instead is Client config points to an outdated URL and unsupported auth. Connect through isolated test tenant using minimal permissions. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
C:
“Request schema list using an isolated low-privileged identity” concerns Broad access would expose unrelated workspace files; the reported problem instead is Client config points to an outdated URL and unsupported auth. Connect through isolated test tenant using minimal permissions. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
D:
“Test with read-only sample data under allowed and denied roles” concerns Prompt context must not broaden Fabric workspace access; the reported problem instead is Client config points to an outdated URL and unsupported auth. Connect through isolated test tenant using minimal permissions. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Question 279
Horizon Communications is responsible for an Azure SQL or Microsoft SQL workload. A coding agent cannot connect to an approved SQL MCP endpoint. Operational evidence: Client config points to an outdated URL and unsupported auth. Which acceptance result most directly demonstrates the requirement has been satisfied?
- Assistant does not execute unauthorized data exports
- Approved schema discovery works and unauthorized functions fail
- Schema change preserves required data and rollback succeeds
- Chosen model yields auditable output without exposing sensitive schema
Explanation
Correct Answer
B:
Client config points to an outdated URL and unsupported auth. Approved schema discovery works and unauthorized functions fail. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Incorrect Answers
A:
“Assistant does not execute unauthorized data exports” concerns AI assistant may treat database metadata as instructions; the reported problem instead is Client config points to an outdated URL and unsupported auth. Approved schema discovery works and unauthorized functions fail. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
C:
“Schema change preserves required data and rollback succeeds” concerns DDL change could destroy legacy data or break dependencies; the reported problem instead is Client config points to an outdated URL and unsupported auth. Approved schema discovery works and unauthorized functions fail. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
D:
“Chosen model yields auditable output without exposing sensitive schema” concerns Tool options vary in token limits, privacy policy and quality; the reported problem instead is Client config points to an outdated URL and unsupported auth. Approved schema discovery works and unauthorized functions fail. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Question 280
At Brookfield Labs, a coding agent cannot connect to an approved SQL MCP endpoint. The observed constraint is: Client config points to an outdated URL and unsupported auth. What operational condition would provide the earliest useful regression warning?
- Track spend, hallucinated APIs and model changes
- Monitor connection errors and token expiry
- Monitor migration impact and drift
- Monitor instruction drift and ignored conventions
Explanation
Correct Answer
B:
Client config points to an outdated URL and unsupported auth. Monitor connection errors and token expiry. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
Incorrect Answers
A:
“Track spend, hallucinated APIs and model changes” addresses the github copilot model selection situation—tool options vary in token limits, privacy policy and quality. The observed failure is: Client config points to an outdated URL and unsupported auth. Monitor connection errors and token expiry. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
C:
“Monitor migration impact and drift” concerns DDL change could destroy legacy data or break dependencies; the reported problem instead is Client config points to an outdated URL and unsupported auth. Monitor connection errors and token expiry. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.
D:
“Monitor instruction drift and ignored conventions” concerns Assistant creates inconsistent column and object names; the reported problem instead is Client config points to an outdated URL and unsupported auth. Monitor connection errors and token expiry. A valid MCP client requires the actual approved endpoint, transport and authentication flow. An outdated URL or unsupported credential method prevents safe connection.