CCAR-P Governance, Safety, and Risk Management — Timed 30 Questions

Question 1

A healthcare company wants to use Claude to summarize patient notes while ensuring that the model does not inadvertently use the data for future training. Which Anthropic policy or feature provides this guarantee for API customers by default?

30 minute time limit — choose an answer to begin.

Accepted Answer

The Anthropic Commercial Terms of Service regarding Data Usage.. Privacy and data governance are paramount in healthcare. Anthropic's standard terms of service for API and enterprise customers explicitly state that data submitted via the API is not used for training their foundation models, providing a critical legal and technical safeguard for organizations handling sensitive PII or PHI.

Answer

The 'Opt-In' training toggle located in the standard user Console.

Answer

The use of 'Temperature' set to 0.0 to prevent data memorization.

Answer

The 'Prompt Caching' feature which isolates data within a single session.

Question 2

Which THREE actions are considered violations of Anthropic’s Acceptable Use Policy (AUP) when using Claude?

Accepted Answer

Using the model to generate deceptive political campaign materials.. The Acceptable Use Policy (AUP) defines the legal and ethical boundaries for using Anthropic's technology. Governance teams must ensure their applications do not fall into these categories to avoid service suspension and ensure their AI strategy remains aligned with ethical standards and legal requirements.

Answer

Summarizing internal company documents for an executive briefing.

Answer

Creating a chatbot that helps students learn complex physics concepts.

Question 3

An architect is designing an evaluation ('eval') suite to monitor the safety of a Claude-powered chatbot. Which TWO metrics are most relevant for assessing the risk of 'jailbreaking' and 'harmful content generation'?

Accepted Answer

Attack Success Rate (ASR) on a benchmark of known jailbreak prompts.. Safety evals are quantitative tests used to measure how often a model violates safety policies. By tracking specific metrics like refusal rates on adversarial prompts and the presence of harmful strings in outputs, architects can objectively assess the risk profile of their AI application over time.

Answer

Average response latency measured in milliseconds.

Answer

The total number of tokens generated per user session.

Answer

The frequency of '429 Too Many Requests' errors from the API.

Question 4

Your organization is implementing an AI governance board to oversee Claude deployments. What is the most effective approach for managing prompt injection risks in production?

Accepted Answer

Implement a separate, lightweight model to inspect all user inputs for malicious intent.. Managing prompt injection requires an architecture that separates untrusted user input from system instructions. Implementing a strict input sanitization layer combined with a robust system prompt structure ensures that the model can distinguish between instructions and data. This defense-in-depth approach is vital for enterprise security, preventing malicious actors from overriding model behaviors and ensuring that safety guardrails remain effective against adversarial manipulation attempts.

Answer

Rely solely on the model's inherent ability to distinguish between user intent and instructions.

Answer

Force users to sign a legal agreement regarding acceptable use before accessing the UI.

Answer

Disable system prompts entirely to prevent attackers from overriding them.

Question 5

Which action should an architect take to ensure that PII is not stored in Anthropic's training datasets?

Accepted Answer

Configure the organization's account settings to exclude API data from model training.. Anthropic provides explicit enterprise controls that allow customers to opt-out of training on their data. By configuring these settings at the organizational level, architects ensure that prompts and completions are treated as ephemeral and not used for model improvement. This is a critical governance requirement for industries like healthcare and finance, where data privacy and non-retention policies are mandatory to avoid compliance violations.

Answer

Use data masking techniques locally to obfuscate all sensitive information.

Answer

Rotate API keys frequently to prevent data from being linked to a specific user.

Answer

Delete all chat logs after each session to prevent storage in training sets.

Question 6

Your team is auditing compliance with AI safety policies. Which THREE of the following are considered essential components of an effective AI audit trail?

Accepted Answer

Logging the full raw prompt and the corresponding completion for every API call.. An effective audit trail captures sufficient context to reconstruct the history of an AI interaction for compliance, troubleshooting, and forensics. Logging the prompt, completion, and metadata allows organizations to verify model behavior against corporate standards. In regulated industries, these logs are essential for demonstrating that the AI's outputs are governed, monitored, and aligned with legal requirements, effectively mitigating liability during an external compliance review.

Answer

Recording the user's local IP address and physical home address.

Answer

Logging the user's password in plain text to ensure secure authentication.

Question 7

When designing a system for sensitive data analysis using Claude, which THREE architectural choices represent best practices for safety and risk management?

Accepted Answer

Use ephemeral compute environments to process requests.. Best practices for sensitive data analysis involve minimizing exposure, ensuring robust logging, and maintaining clear provenance. By using ephemeral environments, strict access controls, and comprehensive auditing, organizations can limit the risk of data leakage. These architectural decisions are foundational to maintaining a secure posture, ensuring that data is protected throughout the entire lifecycle of the request, from initial ingestion to final output generation and storage.

Answer

Store all raw user input in unencrypted public buckets.

Answer

Disable all authentication to improve system latency.

Question 8

A multinational financial services firm must comply with GDPR while using Claude for document analysis. They require that none of their prompt data be used for training Anthropic's foundation models. Which configuration or agreement best addresses this risk management requirement?

Accepted Answer

Standard Enterprise API Terms of Service. Architects must ensure that data remains within specified boundaries and is not used for model improvement to comply with strict regional laws like GDPR. Anthropic provides enterprise-grade controls and standard Data Processing Addendums (DPAs) that guarantee customer data is not used to train global models. Understanding these configurations is critical for maintaining compliance while leveraging LLMs for sensitive business operations.

Answer

Zero-Shot Prompt Engineering

Answer

Client-Side Encryption (CSE)

Answer

Public Beta Access Tiers

Question 9

A global bank is deploying Claude for internal document summarization. The risk committee requires controls to prevent unauthorized data leakage and ensure compliance with regional privacy laws. Which TWO controls are most effective for mitigating these risks? (Choose two.)

Accepted Answer

Configure the API to automatically redact personally identifiable information (PII) before sending data to Claude.. The most effective controls are DLP scanning and automatic PII redaction. DLP scanning inspects and blocks sensitive data in both directions, while redaction prevents sensitive data from ever reaching the model. Together, they provide strong preventive measures against data leakage and help meet regional privacy requirements. Other options are either misaligned with the deployment model or are detective/administrative rather than preventive.

Answer

Enable verbose logging of all prompts and responses for forensic analysis.

Answer

Require all users to sign an acceptable use policy before accessing the summarization tool.

Answer

Use a private, dedicated instance of Claude with no internet access and strict network segmentation.

Question 10

A multinational bank uses Claude via Amazon Bedrock with a cross-region inference profile so that requests from its Frankfurt branch may be served by any of several EU regions. The bank's regulator requires that no customer PII leave the European Economic Area and that every inference be attributable to a named human approver. The architecture team proposes Anthropic-side controls to satisfy both requirements. Which TWO approaches are technically valid for meeting these requirements? (Choose two.)

Accepted Answer

Deploy the application in a single AWS region, route all traffic there, and gate each request behind an approval workflow whose identity is written to the application audit log.. Meeting a data residency mandate requires controlling where inference executes, not merely filtering content, so regional scoping of the inference path or a single-region deployment is necessary. Meeting an attribution mandate requires a durable record linking each call to an identified human, which comes from audit logging of the invoking principal or an approval workflow. Content filters and prompt instructions influence what the model says but cannot prove where processing occurred or who authorized it.

Answer

Enable Anthropic's Zero Data Retention option in the Anthropic Console for the bank's organization.

Answer

Configure the Bedrock guardrail with a PII filter set to ANONYMIZE on the input and the model response.

Answer

Add a system prompt instructing Claude to refuse any request containing a customer name or account number.

Question 11

A global financial institution must ensure that all prompt data and model responses for their Claude 3.5 Sonnet implementation remain within the European Union to comply with strict GDPR data residency requirements. Which architecture strategy best fulfills this governance mandate?

Accepted Answer

Utilize regional endpoints in AWS Bedrock or GCP Vertex AI located in EU regions.. Data residency is a critical governance requirement for enterprise deployments in regulated markets. Anthropic provides regional infrastructure through cloud partners like AWS Bedrock and GCP Vertex AI, which allows architects to pin data processing and storage to specific geographic boundaries. This ensures that sensitive information never leaves the legally required jurisdiction during the inference lifecycle.

Answer

Enable cross-region inference to ensure high availability across global data centers.

Answer

Configure the standard Anthropic Console with an EU-based billing address.

Answer

Implement client-side encryption for all prompts using AWS KMS keys.

Question 12

An architect is defining the Shared Responsibility Model for a company deploying Claude via the Messages API. Which THREE tasks are the sole responsibility of the customer (the 'User') rather than Anthropic?

Accepted Answer

Classification and sanitization of PII within input prompts.. Understanding the Shared Responsibility Model is essential for risk management in AI deployments. While Anthropic secures the base model and underlying infrastructure, the customer remains responsible for the data they input, how they configure access to the API, and the specific ways the model's output is integrated into their business processes.

Answer

Physical security of the data centers housing the TPU/GPU clusters.

Answer

Fine-tuning the base model's Constitutional AI principles.

Question 13

Refer to the exhibit. An architect reviews this API request log. Despite the 'Ignore all previous safety instructions' directive, Claude refuses to provide instructions for bypassing the firewall. Which safety mechanism is primarily responsible for this refusal?

Accepted Answer

Constitutional AI (CAI) and RLHF during the model's training phase.. Claude's resilience to prompt injection and malicious instructions is not accidental; it is the result of Anthropic's unique training methodology. This ensures that even when a user explicitly commands the model to ignore its rules, the model maintains its commitment to safety and refuses to generate harmful or illegal content.

Answer

The external Python-based regex filter applied to the API output.

Answer

The 'max_tokens' parameter being set to a value low enough to truncate the response.

Answer

A hardcoded list of forbidden words in the Anthropic Messages API gateway.

Question 14

A security architect is configuring the Anthropic Console for a large enterprise. Which TWO features should be implemented to enforce centralized governance and reduce the risk of unauthorized account access?

Accepted Answer

Single Sign-On (SSO) integration via SAML 2.0.. Centralized governance in the Anthropic Console involves managing how users authenticate and what permissions they have. Implementing enterprise-grade access controls ensures that only authorized personnel can generate API keys or view usage metrics, which is vital for maintaining a secure and compliant AI environment.

Answer

Automatic rotation of all API keys every 24 hours.

Answer

Real-time packet inspection of all API traffic.

Answer

Hardware Security Module (HSM) storage for all model weights.

Question 15

An organization is deploying Claude to provide automated coding assistance. To manage the risk of generating insecure code or violating open-source licenses, which governance step is most effective?

Accepted Answer

Implementing a mandatory 'Human-in-the-Loop' review and automated SAST scanning.. Risk management for AI-generated code requires a multi-layered approach. While the model is highly capable, it may occasionally suggest patterns that contain vulnerabilities or mimic copyrighted code. Integrating automated security scanning into the development lifecycle ensures that AI-generated artifacts meet the same standards as human-written code.

Answer

Disabling the model's ability to output code blocks entirely.

Answer

Relying on Claude's internal safety training to prevent all insecure code generation.

Answer

Requiring all developers to use Claude only for writing documentation, not logic.

Question 16

When conducting a risk assessment for a new Claude-based customer support bot, which TWO factors should be prioritized as 'High Risk' according to Anthropic's safety guidelines?

Accepted Answer

Providing automated, unreviewed medical or legal advice.. Identifying high-risk scenarios is a core part of an architect's role in safety governance. Applications that involve high-stakes decision-making or have the potential to cause physical or financial harm require more stringent guardrails, human oversight, and rigorous red-teaming compared to low-stakes creative or administrative tasks.

Answer

Generating personalized marketing copy for a retail website.

Answer

Summarizing publicly available news articles for internal research.

Answer

Translating internal training manuals into multiple languages.

Question 17

Refer to the exhibit. The user is attempting to trick the model into revealing sensitive information by claiming a high-clearance role. This is an example of which security threat, and how does the 'system' prompt help mitigate it?

Accepted Answer

Prompt injection (jailbreaking); the system prompt establishes a higher-priority context.. Social engineering and role-playing are common techniques used in prompt injection attacks to bypass security constraints. The system prompt is a powerful governance tool because it sets the foundational rules and persona for the model, which are prioritized by Claude's reasoning engine over conflicting instructions found in the user messages.

Answer

Man-in-the-middle attack; the system prompt encrypts the secret code name.

Answer

Denial of Service (DoS); the system prompt limits the tokens used to hide the secret.

Answer

Data poisoning; the system prompt cleans the training data in real-time.

Question 18

An architect needs to implement a 'Red Teaming' process for a new Claude deployment. What is the primary objective of this activity in the context of AI governance and safety?

Accepted Answer

To adversarialy test the model to find safety gaps and potential for misuse.. Red Teaming is a proactive safety practice where a group of testers tries to find vulnerabilities, biases, or ways to make the model fail. This is a critical component of risk management, as it identifies potential issues before they can affect real users in a production environment.

Answer

To optimize the model's latency and throughput for high-volume traffic.

Answer

To automate the generation of unit tests for the application's UI components.

Answer

To verify that the model's billing and usage credits are being tracked correctly.

Question 19

When deploying Claude in a production environment, an architect notices that the model occasionally generates responses that are slightly biased. What is the most appropriate governance-first approach to address this?

Accepted Answer

Use a system prompt to define neutral behavior and implement bias-detection evals.. Bias in AI is an ongoing challenge that requires active management. A governance-first approach involves using a combination of model-native features, like system prompts, and external evaluation frameworks to measure and mitigate bias consistently across the application's lifecycle, rather than ignoring the problem.

Answer

Ignore the bias as long as the model's overall accuracy remains high.

Answer

Switch to a smaller model version to reduce the complexity of the outputs.

Answer

Manually rewrite every biased response before it reaches the end user.

Question 20

A company is using Claude to process customer feedback. They want to ensure that if a customer mentions self-harm or illegal activities, the system immediately flags this for a human moderator. Which tool is best suited for this specific governance task?

Accepted Answer

An external Moderation API or a dedicated safety-tuned model layer.. Handling sensitive content like self-harm requires specialized safety tools that go beyond standard text classification. Anthropic and its partners provide moderation APIs and safety filters designed to detect these high-risk categories, allowing organizations to implement mandatory human intervention for critical safety events.

Answer

The 'Temperature' parameter, set to its lowest possible value.

Answer

A standard SQL database with a list of 'bad words' to block.

Answer

Increasing the 'max_tokens' to allow the model to explain the risks.