CCAR-P Practice Test 4 — 25 Questions

Question 1

A developer support team receives repeated reports that Claude responses in an internal tool are truncated mid-sentence. Logs show the stop_reason value is max_tokens on most affected calls. Which change most directly resolves the truncation while preserving response quality?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Increase the max_tokens parameter on the affected requests and verify the model's context window can accommodate input plus output.. The stop_reason value is the authoritative signal: max_tokens means the output ceiling, not the model, ended the response. Raising max_tokens lets the model finish, and checking that input plus output fit the context window prevents a new failure mode. Sampling settings, prompt wording, and streaming do not change how many tokens the model may emit, so they cannot resolve this truncation.

Answer

Set temperature to zero so the model produces shorter, more deterministic completions.

Answer

Enable streaming so partial responses are delivered before the token limit is reached.

Answer

Add a system prompt instruction telling the model to always finish its sentences.

Question 2

A team is building an agent that must call a payment provider's API. The API requires an idempotency key on every charge request, and the agent may retry a charge if a network error occurs mid-call. Which design correctly preserves financial correctness when retries happen?

Accepted Answer

Derive the idempotency key deterministically from the logical charge (for example, a hash of order ID and amount) and reuse that same key across all retries of that charge.. The idempotency key is the provider's contract for recognizing repeated attempts as one logical charge. Deriving it deterministically from stable charge attributes means every retry, even after a process restart or agent replan, presents the same key, so the provider returns the original outcome instead of charging again. This preserves correctness under at-least-once retry semantics without sacrificing resilience.

Answer

Generate a fresh idempotency key for each retry attempt so the provider can distinguish a retry from a genuinely new charge.

Answer

Disable automatic retries for charge calls and surface every network error to a human operator for manual reconciliation.

Answer

Omit the idempotency key and instead check the account balance before each retry to see whether the charge already landed.

Question 3

A platform team is standardizing how internal teams integrate Claude. Leadership wants faster onboarding, fewer production incidents, and clear accountability for cost. Which TWO practices best support these goals? (Choose two.)

Accepted Answer

Publish a golden-path reference implementation with sample prompts, error handling, and a checklist for going to production.. A golden-path reference implementation accelerates onboarding and reduces incidents by giving teams proven patterns, while per-service tagging with a shared usage dashboard makes cost attributable and accountable. Freezing model versions, allowing full tooling autonomy, and centralizing one shared key each work against at least one of the stated goals, so they are not the right practices here.

Answer

Route all Claude traffic through a single shared API key managed by the platform team to simplify billing.

Answer

Let each team choose its own SDK, logging format, and retry strategy to maximize autonomy.

Answer

Mandate that all teams use the same model version and freeze upgrades for a year to reduce variability.

Question 4

A software company's internal AI review board is defining escalation criteria for its Claude-powered support assistant. The board wants a rule that reliably routes the highest-consequence cases to human specialists rather than relying on the model's own confidence statements. Which escalation design best achieves this?

Accepted Answer

Route cases to specialists based on objective risk signals such as account tier, regulatory keywords, and prior complaint history.. Reliable escalation must be driven by signals that exist independently of the model's self-assessment. Objective criteria such as account tier, regulatory keywords, and complaint history correlate directly with consequence and can be evaluated deterministically, guaranteeing that the cases the board cares most about reach a specialist before a reply is finalized.

Answer

Ask the assistant to flag any conversation it finds ambiguous and forward those to specialists for a second opinion.

Answer

Instruct the assistant to state a confidence percentage with each answer and escalate whenever it reports below ninety percent.

Answer

Sample five percent of all conversations at random for specialist review after the assistant has already replied.

Question 5

You are the lead architect on a Claude-powered contract-analysis platform. Two weeks before go-live, the General Counsel asks for written assurance that the system will not retain client contract text for model training and that all data stays within the EU. Which artifact should you produce first to satisfy this governance obligation?

Accepted Answer

A data-flow and retention attestation that maps contract text through the Claude API, documents Anthropic's zero-data-retention configuration, and confirms the EU-only processing region.. The stakeholder needs verifiable evidence about two distinct properties: retention behaviour and processing location. Only a data-flow and retention attestation both traces the path of contract text through the Claude API and records the concrete configuration choices, such as zero-data-retention and EU-region processing, that make the assurance true. Schedule changes, redaction habits, and risk logs are adjacent activities that do not answer the question.

Answer

A prompt-engineering guideline telling analysts to strip client names from contract text before submitting it.

Answer

An updated project charter that adds a legal-review milestone to the schedule before the go-live date.

Answer

A risk-register entry logging 'data residency uncertainty' with a medium severity rating and an owner.

Question 6

A public-sector agency must demonstrate to an external auditor that its Claude-based citizen inquiry assistant was operated in line with its approved safety policy throughout the prior fiscal year. The agency has no centralized record of which policy text was in force, when it changed, or who approved each change. Which governance practice should the agency institute first?

Accepted Answer

Establish version-controlled policy documents with recorded approvals and effective dates.. Auditors reconstruct conformance by comparing what happened against the rules that were in force at the time, which requires an authoritative, dated policy history with named approvers. Version-controlled policies with effective dates supply that timeline; without it, no amount of monitoring, testing, or public communication can demonstrate year-long adherence.

Answer

Publish a citizen-facing FAQ describing how the assistant works and what data it uses.

Answer

Deploy an additional monitoring dashboard that tracks assistant uptime and query volume.

Answer

Commission a penetration test of the assistant's public-facing endpoint.

Question 7

You are the lead architect for a Claude-powered document summarization service used by the legal department. Six weeks after launch, the department's managing partner states that the summaries 'miss the point' and that the team has lost confidence in the tool. Logs show the service is technically healthy with 99.9% availability and low latency. What is the most effective next step to restore stakeholder confidence?

Accepted Answer

Schedule a working session with the managing partner to review 20 recently generated summaries together and capture explicit criteria for what a 'correct' summary contains.. Perceived quality failures require eliciting the stakeholder's actual success criteria before changing anything technical. A structured review of real outputs turns an abstract complaint into concrete requirements that can drive prompt engineering, evaluation datasets, and acceptance tests. This approach respects the stakeholder's expertise, produces actionable data, and rebuilds confidence through collaboration rather than defensiveness.

Answer

Increase the model's max_tokens and temperature settings so that summaries become longer and more varied, giving the legal team more content to work with.

Answer

Immediately roll back to the previous model version and notify the legal department that the service will be paused until a full quality audit is completed.

Answer

Send the managing partner a detailed report showing the service's 99.9% availability and p95 latency figures, demonstrating that the platform is performing within its SLA.

Question 8

A regulated healthcare client is reviewing your Claude-based patient-intake summarization tool. Their compliance officer asks how you will handle a scenario where the model produces a clinically inaccurate summary. Which response demonstrates the strongest lifecycle and stakeholder communication practice?

Accepted Answer

Describe an incident response process with human-in-the-loop review, error logging, root-cause analysis, and a defined escalation path to the clinical team.. The strongest response to a compliance concern about inaccuracy is a documented control process: human review before clinical action, traceable logging, root-cause analysis, and a defined escalation path. This shows the system is governed rather than merely deployed. Guaranteeing perfect accuracy misrepresents LLM behavior, chasing latency misses the point, and shifting all liability to the clinician damages trust without addressing the underlying control gap.

Answer

State that the tool is a decision-support aid and that all liability rests with the clinician who reviews the output.

Answer

Offer to switch to a smaller, faster model so that summaries are generated quickly enough for clinicians to catch errors in real time.

Answer

Guarantee that the model will not produce inaccurate summaries because Anthropic's safety training prevents harmful outputs.

Question 9

You are the lead architect on a Claude-powered claims triage tool. Six weeks before launch, the executive sponsor asks for a single one-page view of project health that shows schedule variance, cost variance, and scope changes at a glance. Which artifact should you produce?

Accepted Answer

An executive status dashboard summarizing schedule variance, cost variance, and approved scope changes with RAG status.. The sponsor needs a consolidated, glanceable view of the three classic project health dimensions: schedule, cost, and scope. An executive status dashboard presents variance against baseline with RAG indicators, which supports fast decisions about funding, staffing, or descoping. Task-level artifacts like Gantt charts, traceability matrices, and risk registers serve delivery teams, not executive steering, so they cannot substitute for this rollup.

Answer

A risk register listing every identified risk with probability and impact scores.

Answer

A requirements traceability matrix mapping each functional requirement to its test case.

Answer

A detailed Gantt chart exported from the project management tool showing every task and dependency.

Question 10

A developer productivity team is building an internal coding assistant that calls the Claude Messages API. During a spike in usage, the assistant starts failing with 429 responses and users see truncated answers. The team wants the assistant to degrade gracefully under load rather than fail outright, while keeping latency predictable for interactive use. Which change best meets these goals?

Accepted Answer

Implement exponential backoff with jitter on 429 responses, queue non-interactive requests, and reserve a dedicated rate-limit tier or header budget for interactive calls.. Rate-limit pressure is best handled by smoothing retries and separating traffic classes. Exponential backoff with jitter avoids retry storms, queueing non-interactive work frees capacity during spikes, and a reserved budget for interactive calls keeps latency predictable. This lets the assistant degrade gracefully by delaying background work instead of failing user-facing requests.

Answer

Cache every prompt-response pair indefinitely in Redis and serve cached answers whenever the API returns a 429.

Answer

Increase max_tokens on every request so answers are never truncated, and retry failed requests immediately in a tight loop.

Answer

Switch every request to a smaller, faster model and remove retry logic to reduce the number of API calls.

Question 11

You are designing an agentic workflow that must reliably complete a multi-step refund process across an internal billing service and an external payment gateway. The workflow can fail at any step, and partial completion is unacceptable. Which two architectural mechanisms are required to guarantee that the workflow either completes fully or leaves no partial effect? (Choose two.)

Accepted Answer

A compensating action for each forward step, invoked in reverse order when the workflow cannot proceed to completion.. Atomicity across independent services is achieved with a saga-style pattern: a durable log that records each step's intent and outcome, plus compensating actions that undo committed steps when the workflow cannot finish. The log enables correct recovery after a crash, and the compensations unwind partial effects in reverse order. Together they make the workflow effectively all-or-nothing even though no single transaction spans both systems.

Answer

A semantic cache that stores prior successful refund transcripts and replays them on similar requests.

Answer

A higher model temperature on the planner so it can explore alternative step orderings when a step fails.

Answer

A longer per-step timeout so that slow external calls are given more time to finish before the orchestrator gives up.

Question 12

A multinational corporation is using Claude to process employee feedback surveys. The data includes sensitive personal opinions. The governance team must ensure that the AI system complies with the EU's General Data Protection Regulation (GDPR). Which control is most critical to address the 'right to explanation' requirement for automated decision-making?

Accepted Answer

Implement a mechanism to provide a human-readable explanation of how the AI arrived at its conclusions for each individual.. The right to explanation under GDPR requires that individuals receive meaningful information about the logic of automated decisions. Implementing a mechanism to generate human-readable explanations for each individual directly fulfills this. Other controls like anonymization, consent, or data residency address different aspects of GDPR but not the specific transparency requirement.

Answer

Obtain explicit consent from all employees before processing their feedback with AI.

Answer

Anonymize all employee feedback before processing to remove personal identifiers.

Answer

Store all data within the EU to comply with data residency requirements.

Question 13

A document-processing agent must extract structured fields from thousands of PDFs. Some PDFs are scanned images, some are native text, and some are encrypted. The architect wants one pipeline that routes each document to the appropriate extractor and reports per-document confidence. Which design best fits?

Accepted Answer

Pre-classify each PDF by inspecting its structure, route native-text documents to a text extractor, scanned images to OCR, and encrypted files to a decryption step, then validate extracted fields and attach confidence scores.. The three document classes need different handling, so the pipeline should inspect each file and route it: direct text extraction for native PDFs, OCR for scans, and a decryption stage for encrypted files. After extraction, validating fields and attaching confidence scores gives the per-document reporting the architect requires. This approach uses the cheapest viable method for each class and keeps confidence meaningful, rather than forcing one uniform method that is wrong for at least one class.

Answer

Reject any PDF that is not native text and return an error, since scanned and encrypted documents are out of scope for automated processing.

Answer

Convert every PDF to images first, then run OCR on all of them, and skip classification because OCR handles any document.

Answer

Send every PDF to a single vision-language model and ask it to return the structured fields directly, ignoring document type.

Question 14

A platform team wants every service to call Claude through a single internal gateway that injects the system prompt, enforces token budgets, and emits OpenTelemetry traces. A developer proposes having each service call the Anthropic Messages API directly and centralizing only the API key in a shared vault. What is the strongest architectural reason to reject the developer's proposal?

Accepted Answer

Centralizing the API key without centralizing the call path removes the single point where prompt policy, token budgets, and traces can be enforced.. A shared secret protects only the credential, not the behavior around it. The gateway is valuable because it is the one place where system prompts are injected, token budgets are enforced, and OpenTelemetry spans are produced. Routing every service through it keeps those controls consistent and auditable, whereas direct Messages API calls scatter policy across many codebases and make drift inevitable.

Answer

Direct client calls cannot use streaming responses, so latency-sensitive features would break.

Answer

The Anthropic Messages API rejects requests that originate from more than one client ID per key.

Answer

A shared vault secret cannot be rotated without redeploying every consuming service.

Question 15

Your organization is preparing to retire a legacy Claude model snapshot that several internal teams still call through their own applications. You must communicate the deprecation without disrupting business operations. (Choose two.)

Accepted Answer

Identify each consuming team, confirm their migration owner, and track migration status against the sunset date.. Effective deprecation communication combines a clear timeline with a named replacement and per-team migration guidance, plus identification of each consuming team and its migration owner with status tracking. Together these give consumers both the information and the accountability needed to migrate before the sunset date. Silent redirection, indefinite extension, and mandatory evaluation submission each substitute a shortcut for a managed transition.

Answer

Extend the legacy snapshot indefinitely to avoid any possibility of disruption to internal teams.

Answer

Silently redirect all traffic to the newest available model snapshot so consumers experience no interruption.

Answer

Require every consuming team to re-run its full evaluation suite and submit results before the sunset date.

Question 16

An agentic system uses a supervisor agent that delegates to specialized worker agents. During a long incident, the supervisor's own context fills with worker transcripts, and it begins losing track of which workers have completed and which are still running. Which TWO architectural changes best preserve the supervisor's ability to coordinate correctly? (Choose two.)

Accepted Answer

Have the supervisor maintain an external task ledger that records each delegated task, its assigned worker, and its status, and read from that ledger instead of retaining full worker transcripts.. The supervisor's difficulty comes from mixing coordination state with raw worker output. Externalizing task state into a ledger and having workers return compact structured envelopes keeps the authoritative record of what is delegated and what has finished separate from bulky transcripts. The supervisor can then coordinate from small, reliable signals and pull detail only when needed, rather than trying to hold the entire incident in its context window.

Answer

Restart the supervisor with a fresh context whenever its window fills, and rely on workers to resend their current status on request.

Answer

Allow workers to message each other directly to resolve dependencies, removing the supervisor from the coordination path entirely.

Answer

Increase the supervisor's context window to the largest available model so it can retain all worker transcripts for the duration of the incident.

Question 17

You are architecting a Claude agent that orchestrates a long-running approval workflow spanning hours or days, where human reviewers may intervene between steps. Which TWO mechanisms are necessary to keep the workflow correct across these interruptions? (Choose two.)

Accepted Answer

Persist the full message history and tool state to durable storage after each turn so the workflow can resume from the exact checkpoint.. Long-running workflows with human-in-the-loop interruptions require durable checkpointing to resume exact state and idempotency keys to make retries safe. Together they ensure that an interruption or crash neither loses the reasoning chain nor duplicates side effects such as approvals or notifications. Stateless summarization, token limits, and disabling tools all fail to provide either guarantee.

Answer

Set a very short max_tokens on every turn to reduce the chance of context drift across days.

Answer

Disable tool use entirely during human review windows and rely on the reviewer to re-enter all prior context manually.

Answer

Use a stateless design where each invocation rebuilds context by summarizing all prior decisions into the system prompt.

Question 18

You are architecting a customer-support agent for a SaaS platform. The agent must answer billing questions using a live invoice API and general policy questions using a static knowledge base. The invoice API is fast but occasionally returns stale data; the knowledge base is large and slow to search. Your design gives the agent a dedicated 'billing' sub-agent and a 'policy' sub-agent, coordinated by a router agent. After deployment, you observe the router sending nearly every query to both sub-agents in parallel, causing high latency. Which architectural change best addresses this while preserving answer quality?

Accepted Answer

Have the router emit a structured routing decision with a confidence score, and only fan out to both sub-agents when the confidence falls below a configured threshold.. The router is being overly cautious and fanning out on every query, which multiplies latency. Adding an explicit confidence signal to the routing decision lets the orchestrator fan out only when the router is genuinely unsure. High-confidence routing keeps the common case single-hop, while the fallback preserves correctness on ambiguous queries. This is the only option that changes the router's decision policy rather than replacing it with a brittle rule or an unrelated caching layer.

Answer

Merge both sub-agents into a single agent with access to both the invoice API tool and the knowledge base search tool, and let it choose tools freely.

Answer

Cache the router's routing decisions for 24 hours so repeated identical queries skip the router on subsequent requests.

Answer

Replace the router with a fixed decision tree that maps every query containing the word 'invoice' to the billing sub-agent and all other queries to the policy sub-agent.

Question 19

Your team operates a Claude-based internal knowledge assistant. A new compliance officer asks how the platform will handle model deprecations and capability changes over the next 24 months. Which TWO practices should be established now to give stakeholders durable lifecycle assurance? (Choose two.)

Accepted Answer

Pin production traffic to a specific model version and maintain a documented, tested upgrade path with a rollback option before any version change.. Durable lifecycle assurance rests on two complementary controls: version pinning with a rehearsed upgrade and rollback path, and a documented register that ties every model to its business function, owner, and review cadence. Pinning supplies predictability; the register supplies visibility and accountability. Promises of eternal model availability, constant upgrades to the newest version, and indefinite prompt freezes all fail because they either cannot be honoured or actively prevent the controlled change that deprecation management requires.

Answer

Ask the model provider to guarantee in writing that no model used by the platform will ever be retired.

Answer

Freeze all prompt and evaluation changes indefinitely so that the only variable in the system is the underlying model.

Answer

Always route production requests to the newest available Claude model so the platform is never running outdated versions.

Question 20

A research agent uses Claude with an extended thinking budget to analyze a 200-page regulatory filing. Mid-analysis it must call a `fetch_footnote` tool whose result is essential to the conclusion. The architect wants the tool result to be incorporated without discarding the model's prior reasoning. Which approach best achieves this?

Accepted Answer

Insert the tool result into the conversation as a tool_result block associated with the original tool_use, then continue the same turn so the model resumes from its existing reasoning.. Tool results must be returned as tool_result blocks paired with the originating tool_use so the conversation remains valid and the model can continue from its existing reasoning rather than restart. This preserves the thinking budget and the message sequence. Restarting, summarizing through another model, or deferring to retrieval all either discard reasoning or break the API contract, so they fail this scenario.

Answer

Store the footnote in an external vector store and instruct the agent to retrieve it again later if needed.

Answer

Append the tool result as a new user message and restart the analysis from the beginning of the filing.

Answer

Summarize the footnote with a separate cheap model and paste the summary into the system prompt before the next call.