CCAR-P Practice Test 5 — 25 Questions

Question 1

A financial services firm runs Claude-powered document review for loan applications. The CISO asks the platform team to produce evidence that every model change affecting production was reviewed and approved before deployment. Which governance mechanism most directly satisfies this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enforce a change-management record that ties each production model or prompt revision to a named approver, its evaluation results, and its deployment timestamp.. Auditors need a traceable link between a deployed revision, the person who approved it, and the evidence that supported the decision. A change-management record that captures approver identity, evaluation results, and deployment time creates that chain, covering both model identifier updates and prompt changes. Logging, failover, and informal notification describe runtime behavior or awareness but cannot demonstrate pre-deployment authorization.

Answer

Publish the current model version in the internal service catalog and notify stakeholders through the monthly engineering newsletter.

Answer

Configure automatic failover to a secondary model identifier whenever the primary model returns elevated error rates.

Answer

Enable verbose request logging on the Anthropic API so every prompt and completion is stored for later inspection by the security team.

Question 2

A multinational retailer operates Claude in three regions and must prove that customer data from each region never leaves that region, even during model upgrades. Which architectural approach best satisfies this requirement?

Accepted Answer

Deploy region-specific endpoints and storage in each geography, pin explicit model identifiers per region, and validate data flows so no cross-region replication occurs.. Residency requires architectural enforcement: region-specific endpoints and storage keep processing local, pinned model identifiers prevent silent rerouting during upgrades, and validated data flows prove no replication occurs. Contracts, encryption, and post-hoc logging address legal assurance, confidentiality, or detection, but none of them constrain where data is actually processed and stored.

Answer

Enable verbose audit logging on all regions and review the logs quarterly to detect any cross-region data movement.

Answer

Use a single global endpoint and rely on contractual terms stating that data will be handled in accordance with local laws.

Answer

Encrypt all customer data with a customer-managed key before sending it to a shared multi-region inference pool.

Question 3

A developer is building a Claude-based tool to help support agents draft responses. They want to quickly test different prompt variations without redeploying the application. Which Anthropic feature should they use?

Accepted Answer

The Anthropic Workbench, which allows interactive prompt editing and comparison.. The Anthropic Workbench is built for interactive prompt development. It lets developers edit prompts, adjust parameters, and compare outputs in real time, all without code changes or deployments. This accelerates experimentation and helps teams converge on effective prompts faster, directly boosting developer productivity.

Answer

The Anthropic Console's usage dashboard, which shows token consumption and latency.

Answer

The Anthropic CLI, which allows sending prompts from the terminal.

Answer

The Anthropic API with a local script that sends requests and logs responses.

Question 4

Midway through a six-month Claude deployment for a claims-processing team, the operations director tells you the team will not adopt the assistant because 'it slows us down.' Usage telemetry shows agents open the tool but abandon it after one or two interactions. What is the most effective response to this adoption risk?

Accepted Answer

Observe agents performing real claims in their environment, identify where the assistant interrupts or duplicates their existing steps, and co-design a revised integration with the operations director.. Low usage with rapid abandonment is a workflow-fit signal, so the architect should observe real work and locate the friction points before changing models or policies. Co-designing the integration with the operations director turns the stakeholder from a blocker into a partner and produces changes grounded in actual claim-handling steps. This is more likely to yield durable adoption than mandates, model upgrades, or attributing the problem to user resistance.

Answer

Conclude that the claims team is resistant to change, document the adoption risk in the project log, and continue the rollout with the remaining teams.

Answer

Escalate to the executive sponsor and request a mandate requiring agents to use the assistant for every claim, with compliance tracked weekly.

Answer

Upgrade to the largest available Claude model and increase the context window so responses become more comprehensive for every claim.

Question 5

A platform team maintains a Claude-powered code review assistant. They want to roll out a new system prompt to production safely. The current process involves manually copying the prompt into a deployment script, which has led to drift and accidental overwrites. Which approach best enables safe, auditable prompt deployments?

Accepted Answer

Store the system prompt in a version-controlled repository and use a CI/CD pipeline that validates and deploys prompts via the Anthropic API.. Version-controlled prompts deployed through CI/CD give teams a reviewable, testable, and reversible process. Automated validation catches issues early, and the pipeline ensures every environment uses the same approved prompt. This eliminates manual copying and accidental overwrites while providing an audit trail, directly improving operational reliability and developer velocity.

Answer

Embed the system prompt directly in the application code and use feature flags to toggle between versions.

Answer

Have each developer maintain their own copy of the system prompt and share updates via a team wiki.

Answer

Store the system prompt in a database and update it directly in production when changes are needed.

Question 6

Your agent orchestrates a research task by spawning several subagents, each with its own Claude conversation, and merging their outputs. You observe that the final synthesis contradicts the subagents' findings. Which architectural change most reliably preserves fidelity when merging?

Accepted Answer

Pass each subagent's structured findings, including source citations and confidence, into the synthesizer as explicit quoted evidence.. Fidelity through a merge depends on provenance. When the synthesizer receives each subagent's findings as attributable, cited evidence, it can align claims to sources, surface real disagreements, and avoid fabricating a consensus. Structured handoff preserves the trail from subagent output to final answer, which is precisely what a paraphrased or mutable handoff destroys.

Answer

Raise the synthesizer subagent's temperature so it can creatively reconcile conflicting viewpoints.

Answer

Have the synthesizer re-run each subagent's task itself to verify the results before merging.

Answer

Give all subagents access to a shared mutable scratchpad so they can overwrite each other's conclusions during execution.

Question 7

A Claude agent orchestrates three specialized subagents: one for data extraction, one for validation, and one for report generation. In production, the validation subagent sometimes receives malformed input from the extraction subagent and silently produces a passing result. You need the orchestrator to detect and contain these failures without halting the entire pipeline. Which design change is most appropriate?

Accepted Answer

Have each subagent return a structured result envelope containing a status, a schema-validated payload, and an error field, and make the orchestrator validate the envelope before routing onward.. Reliable multi-agent pipelines depend on explicit contracts at every handoff. A structured envelope with status, validated payload, and error field lets the orchestrator verify upstream output before trusting it downstream. That check enables targeted containment, such as retrying or quarantining one branch, rather than trusting a failing agent's self-assessment or retrying blindly.

Answer

Increase the orchestration layer's retry count so that any subagent failure is retried several times before the pipeline reports an error to the caller.

Answer

Merge the extraction and validation subagents into a single agent so that malformed intermediate data never crosses a component boundary.

Answer

Instruct the validation subagent to always return a confidence score between zero and one, and have the orchestrator discard results below a fixed threshold.

Question 8

An insurer uses a Claude-based agent that can call internal tools to look up policy details. During review, the safety team finds that a document uploaded by a claimant contains text instructing the agent to email the full policy database to an external address. The agent has an email tool available. Which control most directly prevents this class of failure?

Accepted Answer

Enforce tool-level authorization so the agent's identity lacks permission to send external email, and constrain tool arguments to validated allowlists.. When untrusted content can reach a model that holds real capabilities, the reliable fix is to remove the dangerous capability from the agent's identity and constrain the arguments of the tools it keeps. Injected text can persuade a model but cannot grant permissions the credential layer denies, so an agent without external-email rights cannot exfiltrate regardless of what the document says. Detection and prompting remain useful layers but are not deterministic.

Answer

Scan uploaded documents with a classifier that flags imperative language and quarantine any document that scores above threshold.

Answer

Add a system prompt instruction telling the model to ignore any instructions found inside uploaded documents.

Answer

Require human approval for every tool invocation the agent proposes, regardless of which tool or argument is involved.

Question 9

Midway through delivery of a Claude-powered contract review tool, the legal department asks you to add a new jurisdiction's regulatory rules. The change touches prompt design, evaluation sets, and the review workflow. Which action best manages this change through the project lifecycle?

Accepted Answer

Submit a formal change request with impact analysis covering schedule, cost, evaluation effort, and compliance risk, then route it for approval.. Scope changes that alter prompts, evaluation sets, and workflow should flow through formal change control. A written change request with impact analysis gives the governance body the schedule, cost, quality, and compliance information needed to decide intelligently. It also protects the team from unplanned work and preserves an auditable record that the new jurisdiction's rules were deliberately incorporated rather than absorbed invisibly.

Answer

Accept the request and absorb the work into the current sprint without adjusting the schedule or budget.

Answer

Reject the request because the requirements baseline was already approved by the steering committee.

Answer

Delegate the decision to the engineering lead and instruct the team to start work immediately.

Question 10

A team maintains a Claude-powered code review bot. Reviewers complain that the bot sometimes approves pull requests that clearly violate the team's security policy. The team wants to make policy violations detectable and reproducible in CI without relying on manual spot checks. What is the most effective approach?

Accepted Answer

Build a regression suite of labeled pull requests with known policy outcomes, run the bot against it on every prompt or model change, and fail CI when accuracy drops below a threshold.. The only approach that makes violations detectable and reproducible is a labeled regression suite wired into CI with an explicit accuracy threshold. It converts anecdotal complaints into a metric, catches regressions on prompt or model changes, and gates deployment. Prompt tweaks, manual reporting, and model size upgrades all lack the measurement needed to prove the bot is improving.

Answer

Ask reviewers to report every false approval in a shared spreadsheet and review the log monthly.

Answer

Switch to a larger model and rely on its improved reasoning to catch policy violations without additional testing.

Answer

Raise the model temperature to zero and add 'be strict about security' to the system prompt, then redeploy.

Question 11

A platform team at a large enterprise wants to standardize how Claude is invoked across 30 internal microservices. They need to enforce prompt templates, model selection, and retry logic centrally, while still allowing service teams to customize business-specific instructions. Which approach best balances central governance with team autonomy?

Accepted Answer

Publish an internal SDK that wraps the Anthropic API and embeds a versioned prompt template registry from which teams can inherit and override specific sections.. The best solution provides a single, versioned integration layer that centralizes cross-cutting concerns like authentication, retries, and model selection, while exposing extension points for domain-specific prompts. This gives the platform team enforceable standards and gives service teams the flexibility they need, without code duplication or prompt drift.

Answer

Let each service team manage its own Anthropic API keys, prompts, and retry logic, and rely on quarterly architecture reviews to keep behavior aligned.

Answer

Require each service team to copy a canonical prompt file into their repository and update it manually whenever the platform team changes standards.

Answer

Deploy a shared API gateway that rewrites every request to a single canonical prompt and strips service-specific instructions before forwarding to Claude.

Question 12

A team runs a Claude-based document summarization service. They notice that during peak hours, API requests occasionally fail with rate limit errors, causing user-visible failures. They want to improve reliability without over-provisioning. Which strategy is most effective?

Accepted Answer

Implement exponential backoff with jitter and retry on rate limit errors, and use a queue to smooth bursts.. Exponential backoff with jitter and a queue are the most robust ways to handle rate limits. Backoff with jitter avoids synchronized retries, and a queue absorbs spikes so the API is called at a sustainable rate. This improves reliability without over-provisioning, and it is a best practice for integrating with Anthropic's API.

Answer

Increase the max_tokens parameter for each request to get more done per call.

Answer

Switch to a smaller, faster model to reduce latency and avoid rate limits.

Answer

Cache all responses indefinitely so repeated requests never hit the API.

Question 13

You are standing up a governance cadence for a Claude-based platform that will serve three business units. Which TWO practices are essential to keep stakeholders aligned across the lifecycle? (Choose two.)

Accepted Answer

A standing review where each business unit sees shared adoption, quality, and cost metrics against agreed targets.. Lifecycle alignment across multiple business units rests on two pillars: visibility and accountability. A shared metrics review gives every unit the same evidence base, while named business and technical owners with escalation paths ensure decisions and incidents reach accountable people quickly. Together they prevent drift without freezing innovation.

Answer

A single shared backlog where all units' requests compete, prioritized solely by the platform team's technical judgment.

Answer

A freeze on new requests for the first year so the platform team can stabilize the core service.

Answer

A monthly all-hands for every user of the platform so everyone hears the same roadmap presentation.

Question 14

A claims-processing agent runs for hours and must survive process restarts without losing in-flight work. You are designing durable execution around Claude's stateless Messages API. Which TWO practices are required to make the agent resumable? (Choose two.)

Accepted Answer

Persist the full message history and pending tool_use ids to durable storage after each turn so the loop can be reconstructed.. Because the Messages API is stateless, resumability is entirely the orchestrator's responsibility. You must persist the conversation, including tool_use and tool_result pairings, and checkpoint in-flight tool dispatches so a restart does not replay side effects. Together these produce a replayable log that reconstructs the loop and reconciles uncertain operations, turning crash recovery into a deterministic continuation.

Answer

Rely on the model's server-side session state to remember prior turns across restarts.

Answer

Cache every model response in a CDN so identical prompts return instantly after a restart.

Answer

Increase the context window by enabling extended thinking so the agent retains more history internally.

Question 15

A Claude agent maintains a long conversation with a user over weeks. The architect notices that the agent gradually forgets early constraints the user stated, even though the conversation is well within the model's context window. The team wants to fix this without re-summarizing the entire history on every turn. Which approach is most appropriate?

Accepted Answer

Move persistent user constraints into a structured memory store that is retrieved and injected as a system-level block on each turn.. Persistent constraints belong in a durable memory store that is retrieved and injected as a system-level block each turn, giving them stable salience without repeatedly summarizing the whole history. Larger context windows, repeated reminders, and temperature changes do not fix attention dilution over long conversations, and two of them are actively counterproductive. Structured memory is the right architectural layer for durable user preferences.

Answer

Raise the temperature slightly so the model explores more of the conversation when generating.

Answer

Increase the model's context window by switching to a larger variant so all history fits with room to spare.

Answer

Insert the early constraints again at the very end of every user message as a reminder.

Question 16

A financial services firm runs a Claude-powered loan pre-screening agent that reads applicant emails and drafts a preliminary recommendation. The firm's risk committee insists that no automated decision may be finalized without a documented human review step. Which control most directly satisfies this requirement while preserving the agent's throughput?

Accepted Answer

Insert a mandatory human-in-the-loop approval gate before any recommendation is written back to the loan origination system.. The risk committee's requirement is about who authorizes a decision, not how the model behaves or how well activity is recorded. Only a human-in-the-loop approval gate makes a person the final authorizing step before the recommendation reaches the loan origination system, yielding the documented review the committee expects while letting the agent handle upstream work automatically.

Answer

Log every model request and response to immutable storage and retain the logs for seven years.

Answer

Increase the model's temperature to zero and add a system prompt instructing Claude to be conservative in its recommendations.

Answer

Enable prompt caching on the applicant-email summarization step to reduce latency and cost per screening.

Question 17

A Claude-based customer onboarding assistant has been in production for one quarter. The steering committee asks how you will decide whether to expand it to two additional regions. Which approach best supports that lifecycle decision?

Accepted Answer

Run a defined evaluation against agreed success metrics from the pilot, then present results as a stage-gate decision to the committee.. Lifecycle decisions at scale should be evidence-based and governed through stage gates. By measuring the pilot against pre-agreed success metrics and presenting the results to the steering committee, you convert an expansion question into a structured go/no-go decision. This protects the organization from scaling unproven value, creates a documented rationale, and ensures regional differences in language, compliance, and support are addressed before commitment.

Answer

Expand immediately to both regions because the assistant has had no reported outages in production.

Answer

Wait until a region formally requests the assistant, then build it on demand.

Answer

Survey the engineering team about whether they feel the assistant is ready for more traffic.

Question 18

A developer productivity team runs an internal Claude-powered code review assistant. During peak morning hours, many developers submit large diffs simultaneously and the assistant returns HTTP 429 responses with a retry-after header. The team wants to keep latency predictable for interactive users while still processing queued batch jobs overnight. Which design best achieves this?

Accepted Answer

Separate interactive and batch traffic into distinct queues with different priority, apply exponential backoff with jitter on 429s, and use retry-after to pace the batch queue.. Traffic isolation plus backoff with jitter and retry-after pacing is the standard pattern for protecting interactive latency under throttling. Batch work can tolerate delay and should absorb the throttling signal, while interactive requests deserve priority. This keeps the developer experience stable without ignoring the server's pacing guidance.

Answer

Immediately retry every 429 request in a tight loop until it succeeds, because the retry-after header is only advisory and can be ignored for interactive traffic.

Answer

Switch all traffic to a smaller, cheaper model during peak hours to reduce the chance of hitting rate limits, then switch back after the peak window ends.

Answer

Increase the max_tokens parameter on every request so fewer round trips are needed, reducing the total number of API calls during peak hours.

Question 19

You are designing a long-running agent that executes a sequence of irreversible operations, such as issuing refunds and sending customer notifications. The agent runs unattended overnight. Which TWO architectural patterns best ensure that a partial failure does not leave the system in an inconsistent state? (Choose two.)

Accepted Answer

Implement compensating actions so that each irreversible operation has a defined reversal or mitigation step.. Unattended agents performing irreversible actions need both a durable record of intent and a way to reverse or mitigate completed steps. Journaling provides the audit trail and restart logic, while compensating actions provide the semantic undo. Together they allow the orchestrator to detect partial completion and bring the workflow back to a consistent state after a crash or timeout.

Answer

Cache all tool responses in memory so the agent can replay the session without re-calling tools after a restart.

Answer

Raise the max_tokens limit for each planning step so the agent can reason through more contingencies before acting.

Answer

Increase the model's temperature so it explores alternative execution orders and avoids getting stuck on a failing step.

Question 20

A software vendor is preparing for a customer security review of its Claude-powered support assistant. The customer asks how the vendor prevents the assistant from leaking one tenant's data into another tenant's conversation. Which architectural control most directly addresses this concern?

Accepted Answer

Scope every retrieval query and every stored conversation to the authenticated tenant identifier, and reject requests whose tenant scope cannot be resolved.. Cross-tenant leakage is prevented at the point where data is selected, not at the point where text is generated. Binding every retrieval and storage operation to the authenticated tenant identifier, and failing closed when that identifier is missing, guarantees that only authorized content can reach the model. Prompt instructions, extended thinking, and temperature settings alter model behavior but leave the underlying data access path unchanged.

Answer

Add a system prompt instructing the assistant to answer only questions about the current customer.

Answer

Set the assistant's temperature to zero to make responses more predictable across tenants.

Answer

Enable Claude's extended thinking so the assistant reasons more carefully before answering.