CCAR-P Practice Test 9 — 10 Questions

Question 1

A public-sector agency must demonstrate to an external auditor that its Claude-based citizen inquiry assistant was operated in line with its approved safety policy throughout the prior fiscal year. The agency has no centralized record of which policy text was in force, when it changed, or who approved each change. Which governance practice should the agency institute first?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Establish version-controlled policy documents with recorded approvals and effective dates.. Auditors reconstruct conformance by comparing what happened against the rules that were in force at the time, which requires an authoritative, dated policy history with named approvers. Version-controlled policies with effective dates supply that timeline; without it, no amount of monitoring, testing, or public communication can demonstrate year-long adherence.

Answer

Publish a citizen-facing FAQ describing how the assistant works and what data it uses.

Answer

Deploy an additional monitoring dashboard that tracks assistant uptime and query volume.

Answer

Commission a penetration test of the assistant's public-facing endpoint.

Question 2

You are the lead architect for a Claude-powered document summarization service used by the legal department. Six weeks after launch, the department's managing partner states that the summaries 'miss the point' and that the team has lost confidence in the tool. Logs show the service is technically healthy with 99.9% availability and low latency. What is the most effective next step to restore stakeholder confidence?

Accepted Answer

Schedule a working session with the managing partner to review 20 recently generated summaries together and capture explicit criteria for what a 'correct' summary contains.. Perceived quality failures require eliciting the stakeholder's actual success criteria before changing anything technical. A structured review of real outputs turns an abstract complaint into concrete requirements that can drive prompt engineering, evaluation datasets, and acceptance tests. This approach respects the stakeholder's expertise, produces actionable data, and rebuilds confidence through collaboration rather than defensiveness.

Answer

Increase the model's max_tokens and temperature settings so that summaries become longer and more varied, giving the legal team more content to work with.

Answer

Immediately roll back to the previous model version and notify the legal department that the service will be paused until a full quality audit is completed.

Answer

Send the managing partner a detailed report showing the service's 99.9% availability and p95 latency figures, demonstrating that the platform is performing within its SLA.

Question 3

A regulated healthcare client is reviewing your Claude-based patient-intake summarization tool. Their compliance officer asks how you will handle a scenario where the model produces a clinically inaccurate summary. Which response demonstrates the strongest lifecycle and stakeholder communication practice?

Accepted Answer

Describe an incident response process with human-in-the-loop review, error logging, root-cause analysis, and a defined escalation path to the clinical team.. The strongest response to a compliance concern about inaccuracy is a documented control process: human review before clinical action, traceable logging, root-cause analysis, and a defined escalation path. This shows the system is governed rather than merely deployed. Guaranteeing perfect accuracy misrepresents LLM behavior, chasing latency misses the point, and shifting all liability to the clinician damages trust without addressing the underlying control gap.

Answer

State that the tool is a decision-support aid and that all liability rests with the clinician who reviews the output.

Answer

Offer to switch to a smaller, faster model so that summaries are generated quickly enough for clinicians to catch errors in real time.

Answer

Guarantee that the model will not produce inaccurate summaries because Anthropic's safety training prevents harmful outputs.

Question 4

You are the lead architect on a Claude-powered claims triage tool. Six weeks before launch, the executive sponsor asks for a single one-page view of project health that shows schedule variance, cost variance, and scope changes at a glance. Which artifact should you produce?

Accepted Answer

An executive status dashboard summarizing schedule variance, cost variance, and approved scope changes with RAG status.. The sponsor needs a consolidated, glanceable view of the three classic project health dimensions: schedule, cost, and scope. An executive status dashboard presents variance against baseline with RAG indicators, which supports fast decisions about funding, staffing, or descoping. Task-level artifacts like Gantt charts, traceability matrices, and risk registers serve delivery teams, not executive steering, so they cannot substitute for this rollup.

Answer

A risk register listing every identified risk with probability and impact scores.

Answer

A requirements traceability matrix mapping each functional requirement to its test case.

Answer

A detailed Gantt chart exported from the project management tool showing every task and dependency.

Question 5

A developer productivity team is building an internal coding assistant that calls the Claude Messages API. During a spike in usage, the assistant starts failing with 429 responses and users see truncated answers. The team wants the assistant to degrade gracefully under load rather than fail outright, while keeping latency predictable for interactive use. Which change best meets these goals?

Accepted Answer

Implement exponential backoff with jitter on 429 responses, queue non-interactive requests, and reserve a dedicated rate-limit tier or header budget for interactive calls.. Rate-limit pressure is best handled by smoothing retries and separating traffic classes. Exponential backoff with jitter avoids retry storms, queueing non-interactive work frees capacity during spikes, and a reserved budget for interactive calls keeps latency predictable. This lets the assistant degrade gracefully by delaying background work instead of failing user-facing requests.

Answer

Cache every prompt-response pair indefinitely in Redis and serve cached answers whenever the API returns a 429.

Answer

Increase max_tokens on every request so answers are never truncated, and retry failed requests immediately in a tight loop.

Answer

Switch every request to a smaller, faster model and remove retry logic to reduce the number of API calls.

Question 6

You are designing an agentic workflow that must reliably complete a multi-step refund process across an internal billing service and an external payment gateway. The workflow can fail at any step, and partial completion is unacceptable. Which two architectural mechanisms are required to guarantee that the workflow either completes fully or leaves no partial effect? (Choose two.)

Accepted Answer

A compensating action for each forward step, invoked in reverse order when the workflow cannot proceed to completion.. Atomicity across independent services is achieved with a saga-style pattern: a durable log that records each step's intent and outcome, plus compensating actions that undo committed steps when the workflow cannot finish. The log enables correct recovery after a crash, and the compensations unwind partial effects in reverse order. Together they make the workflow effectively all-or-nothing even though no single transaction spans both systems.

Answer

A semantic cache that stores prior successful refund transcripts and replays them on similar requests.

Answer

A higher model temperature on the planner so it can explore alternative step orderings when a step fails.

Answer

A longer per-step timeout so that slow external calls are given more time to finish before the orchestrator gives up.

Question 7

A multinational corporation is using Claude to process employee feedback surveys. The data includes sensitive personal opinions. The governance team must ensure that the AI system complies with the EU's General Data Protection Regulation (GDPR). Which control is most critical to address the 'right to explanation' requirement for automated decision-making?

Accepted Answer

Implement a mechanism to provide a human-readable explanation of how the AI arrived at its conclusions for each individual.. The right to explanation under GDPR requires that individuals receive meaningful information about the logic of automated decisions. Implementing a mechanism to generate human-readable explanations for each individual directly fulfills this. Other controls like anonymization, consent, or data residency address different aspects of GDPR but not the specific transparency requirement.

Answer

Obtain explicit consent from all employees before processing their feedback with AI.

Answer

Anonymize all employee feedback before processing to remove personal identifiers.

Answer

Store all data within the EU to comply with data residency requirements.

Question 8

A document-processing agent must extract structured fields from thousands of PDFs. Some PDFs are scanned images, some are native text, and some are encrypted. The architect wants one pipeline that routes each document to the appropriate extractor and reports per-document confidence. Which design best fits?

Accepted Answer

Pre-classify each PDF by inspecting its structure, route native-text documents to a text extractor, scanned images to OCR, and encrypted files to a decryption step, then validate extracted fields and attach confidence scores.. The three document classes need different handling, so the pipeline should inspect each file and route it: direct text extraction for native PDFs, OCR for scans, and a decryption stage for encrypted files. After extraction, validating fields and attaching confidence scores gives the per-document reporting the architect requires. This approach uses the cheapest viable method for each class and keeps confidence meaningful, rather than forcing one uniform method that is wrong for at least one class.

Answer

Reject any PDF that is not native text and return an error, since scanned and encrypted documents are out of scope for automated processing.

Answer

Convert every PDF to images first, then run OCR on all of them, and skip classification because OCR handles any document.

Answer

Send every PDF to a single vision-language model and ask it to return the structured fields directly, ignoring document type.

Question 9

A platform team wants every service to call Claude through a single internal gateway that injects the system prompt, enforces token budgets, and emits OpenTelemetry traces. A developer proposes having each service call the Anthropic Messages API directly and centralizing only the API key in a shared vault. What is the strongest architectural reason to reject the developer's proposal?

Accepted Answer

Centralizing the API key without centralizing the call path removes the single point where prompt policy, token budgets, and traces can be enforced.. A shared secret protects only the credential, not the behavior around it. The gateway is valuable because it is the one place where system prompts are injected, token budgets are enforced, and OpenTelemetry spans are produced. Routing every service through it keeps those controls consistent and auditable, whereas direct Messages API calls scatter policy across many codebases and make drift inevitable.

Answer

Direct client calls cannot use streaming responses, so latency-sensitive features would break.

Answer

The Anthropic Messages API rejects requests that originate from more than one client ID per key.

Answer

A shared vault secret cannot be rotated without redeploying every consuming service.

Question 10

Your organization is preparing to retire a legacy Claude model snapshot that several internal teams still call through their own applications. You must communicate the deprecation without disrupting business operations. (Choose two.)

Accepted Answer

Identify each consuming team, confirm their migration owner, and track migration status against the sunset date.. Effective deprecation communication combines a clear timeline with a named replacement and per-team migration guidance, plus identification of each consuming team and its migration owner with status tracking. Together these give consumers both the information and the accountability needed to migrate before the sunset date. Silent redirection, indefinite extension, and mandatory evaluation submission each substitute a shortcut for a managed transition.

Answer

Extend the legacy snapshot indefinitely to avoid any possibility of disruption to internal teams.

Answer

Silently redirect all traffic to the newest available model snapshot so consumers experience no interruption.

Answer

Require every consuming team to re-run its full evaluation suite and submit results before the sunset date.