CCAO-F Safety and Responsible Use Practice Test 4 — 15 Questions

Question 1

A product team is designing a feature where Claude will draft personalized outreach emails to prospective customers on behalf of sales representatives. Before launch, the legal team asks the developers to ensure the feature aligns with Anthropic's Usage Policies. Which implementation choice best satisfies this requirement while keeping the feature useful?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Allow Claude to generate the emails but require a human sales representative to review and approve each message before it is sent.. Human review before sending provides accountability and prevents unreviewed automated outreach that could mislead prospects. It preserves the feature's usefulness while addressing the policy concern about deceptive or unverified communications. The other options either hide disclosures, eliminate the feature, or rely solely on the model, none of which robustly satisfy the legal team's requirement.

Answer

Add a system prompt instructing Claude to never make false claims, and rely on the model to enforce this during generation.

Answer

Configure Claude to include a hidden disclosure in the email headers stating that the message was generated by an AI system.

Answer

Restrict the feature to internal drafts only, preventing any email from being sent to external prospects.

Question 2

A product manager is preparing to launch a Claude-powered assistant that will summarize user-uploaded medical lab reports. Before release, legal asks the team to confirm that the assistant will not provide direct diagnoses or treatment recommendations. The team decides to add a system prompt that instructs Claude to avoid giving medical advice and to recommend consulting a licensed clinician. Which action best aligns with Anthropic's safety guidance for this deployment?

Accepted Answer

Implement the system prompt, then run adversarial and edge-case evaluations to verify refusal behavior and monitor outputs after launch.. The correct approach layers a clear system prompt with empirical validation and post-deployment monitoring. Instructions alone cannot guarantee safe behavior in a high-stakes domain, so teams must test for refusal consistency and watch for regressions. This combination of preventive prompting and detective controls reflects responsible deployment practices for medical-adjacent use cases.

Answer

Rely solely on the system prompt and ship without any further testing, because Claude's Constitutional AI training already prevents medical advice.

Answer

Disable Claude's ability to discuss health topics entirely by blocking any prompt containing medical terminology before it reaches the model.

Answer

Ask Claude to role-play as a licensed physician so that its medical summaries are more authoritative and useful to end users.

Question 3

A product team is preparing to launch a Claude-powered assistant that summarizes user-submitted medical symptom descriptions and suggests when to seek care. Before launch, the safety lead asks for controls that reduce the risk of harmful overreliance on the assistant's output. (Choose two.)

Accepted Answer

Add an escalation path that surfaces emergency resources and urges immediate human medical attention when the described symptoms suggest urgency.. Reducing overreliance in a health-adjacent assistant requires both expectation-setting and a safety net. Clear scope guidance prevents users from mistaking summaries for diagnoses, while an escalation path ensures potentially urgent cases are routed to human care. Together they keep the assistant in a supportive role rather than an authoritative one, which is the core responsible-use posture for this domain.

Answer

Instruct the assistant to recommend specific prescription dosages so users can act immediately on the summary.

Answer

Tune the system prompt so the assistant always answers with maximum confidence to avoid confusing users with uncertainty.

Answer

Remove all disclaimers so the interface feels seamless and users are not distracted from the assistant's recommendations.

Question 4

A developer is building an internal tool that uses Claude to summarize employee performance reviews. During testing, they notice that when a review contains negative feedback, Claude sometimes softens the language so much that the summary no longer reflects the original meaning. The developer wants to reduce this behavior while keeping summaries accurate and useful. Which approach is most appropriate?

Accepted Answer

Add explicit instructions in the system prompt to preserve the original sentiment and severity of negative feedback, and include examples of desired summaries.. Explicit instructions and examples guide Claude to preserve sentiment and severity, directly addressing the observed softening. This approach maintains usefulness and accuracy without introducing risky workarounds. The other options either change models unnecessarily, add opaque post-processing, or remove critical information, all of which fail to meet the goal of faithful summaries.

Answer

Post-process the summaries with a sentiment analysis tool and automatically rewrite any sentences that are too positive.

Answer

Switch to a different Claude model version that is known to be less likely to soften negative feedback.

Answer

Remove all negative feedback from the input before sending it to Claude, so the model only summarizes positive points.

Question 5

A media company is deploying Claude to help journalists draft articles. The editorial team wants to ensure the tool is used responsibly and that published content remains trustworthy. Which TWO practices best support responsible use of Claude in this newsroom workflow? (Choose two.)

Accepted Answer

Require journalists to verify all factual claims, quotations, and statistics generated by Claude before publication.. Responsible newsroom use of Claude combines human verification of facts with transparent disclosure of AI assistance. Verification prevents hallucinations from reaching the public, while disclosure preserves reader trust. Together they keep journalists accountable for published content and treat Claude as a drafting aid rather than an autonomous publisher.

Answer

Instruct Claude to invent plausible expert quotes when real sources are unavailable to meet tight deadlines.

Answer

Allow Claude to publish articles directly to the public site to speed up the news cycle and reduce editorial costs.

Answer

Remove all human editors from the process so that Claude's outputs are not altered by subjective human bias.

Question 6

A marketing agency uses Claude to generate blog drafts for clients. A junior writer pastes a competitor's copyrighted article into the prompt and asks Claude to 'rewrite it closely enough that it reads differently but keeps all the same arguments and examples.' What is the most appropriate responsible-use action for the agency?

Accepted Answer

Refuse the near-verbatim rewrite request and instead use Claude to produce an original draft informed by the writer's own research and analysis.. Responsible use means not directing Claude to launder another creator's copyrighted work into a superficially different article. The defensible path is to decline the near-verbatim rewrite and instead have the writer conduct independent research, then use Claude to draft original content grounded in that research. This preserves the agency's legal position and respects the competitor's rights.

Answer

Ask Claude to paraphrase sentence by sentence and then publish the result without attribution to the competitor.

Answer

Run the rewrite through a second AI tool to make the text harder to trace back to the original article.

Answer

Proceed, because the output is generated text and therefore cannot infringe the competitor's copyright.

Question 7

A support team is using Claude to answer customer questions about a software product. A customer asks how to reset their password, and Claude provides a step-by-step guide that includes a menu option that does not exist in the current version. The team wants to reduce these kinds of errors. Which action is most appropriate?

Accepted Answer

Ground Claude's responses by providing the current product documentation as context in the prompt.. Grounding Claude with current product documentation ensures answers are based on accurate information, directly reducing errors like referencing non-existent menu options. Disclaimers, fine-tuning, and temperature adjustments do not reliably correct factual gaps. The most appropriate action is to supply the model with up-to-date context.

Answer

Set the temperature parameter to zero to make Claude more deterministic.

Answer

Fine-tune a custom model on historical support tickets that contain similar password reset questions.

Answer

Instruct Claude to always add a disclaimer that its answers may be inaccurate.

Question 8

A product team is preparing to launch a Claude-powered feature that summarizes and answers questions about user-submitted documents. During a pre-launch review, a team member suggests that because Claude already has built-in safety filters, they can skip adding any application-level safeguards. Which response best reflects responsible deployment practices?

Accepted Answer

Add application-level safeguards such as input sanitization, output review, and usage monitoring on top of Claude's built-in protections.. Responsible deployment of Claude-based features involves defense in depth: the model's built-in safeguards plus application-specific controls. Because user-submitted documents can contain prompt injection, sensitive data, or domain-specific harmful content, teams should add input sanitization, output review, and monitoring. Relying solely on built-in filters, disabling them, or waiting for user reports all fail to address foreseeable risks before launch.

Answer

Postpone all safeguards until after launch, then rely on user reports to identify and fix any safety issues that arise.

Answer

Disable Claude's built-in safety filters to avoid false refusals, then add a single keyword blocklist for known harmful terms.

Answer

Rely on Claude's built-in safety filters as the sole safeguard, since Anthropic continuously updates them.

Question 9

A developer is building an internal Claude-based tool that helps employees draft performance reviews. During testing, a reviewer notices that when the tool is asked to summarize a manager's notes about a female employee, it tends to soften critical feedback, while notes about a male employee produce more direct criticism. The developer wants to address this behavioral difference before rollout. Which action is most appropriate?

Accepted Answer

Collect evaluation data across gender and other demographic groups, test prompt and fine-tuning mitigations, and monitor outputs after deployment.. The appropriate response is a structured bias-mitigation cycle: measure disparities with disaggregated evaluations, test interventions such as prompt changes or fine-tuning, and monitor after launch. Performance reviews are high-impact, so unverified fixes or exclusionary workarounds are inadequate. Evidence-based iteration is the responsible path to reducing gendered tone differences.

Answer

Restrict the tool to male employees only until a future model version resolves the bias, to avoid producing unfair reviews.

Answer

Ignore the difference because performance reviews naturally vary by individual and the model is only reflecting the manager's original notes.

Answer

Add a system prompt instructing Claude to be equally critical for all employees, then ship the tool without further evaluation.

Question 10

A developer is building an internal tool that lets employees query Claude about pending layoffs, performance reviews, and salary bands using scraped HR documents. The company's legal team has not reviewed the data handling. Which responsible-use concern is most significant before this tool goes live?

Accepted Answer

Sensitive personal and confidential employment data is being processed without legal review, creating privacy and confidentiality risk.. When an internal tool exposes layoff plans, performance reviews, and salary bands through Claude, the dominant risk is unauthorized processing of sensitive and confidential data without legal or privacy review. Addressing data governance, access controls, and regulatory obligations before launch is the responsible-use priority; output quality and rate limits are secondary operational matters.

Answer

The scraped documents may contain outdated formatting that confuses the model's retrieval step.

Answer

Employees might use the tool more often than the license tier allows, causing unexpected API rate limits.

Answer

The model may produce grammatically inconsistent answers across sessions, reducing employee trust in the tool.

Question 11

A developer is building a Claude-powered assistant for a legal firm. The assistant is asked to draft a clause citing a specific statute. Claude generates a citation that appears authoritative but does not actually exist. The developer wants to reduce the risk of this happening in production. Which approach is most aligned with responsible use?

Accepted Answer

Use retrieval-augmented generation (RAG) to ground Claude's responses in a verified legal database, and add automated checks that validate citations against that database.. Hallucinated citations in legal drafting pose serious risks. Retrieval-augmented generation grounds Claude's responses in a verified database, and automated checks validate that cited statutes exist. This combination addresses the root cause by ensuring outputs are based on real sources and are programmatically verified. Disclaimers, higher temperature, or limited fine-tuning do not reliably prevent fabricated references in production.

Answer

Instruct Claude to always add a disclaimer that its output may contain errors, and rely on the attorney to verify every citation manually.

Answer

Increase the model's temperature setting so that Claude produces more creative and varied citations, reducing the chance of repeating a fake one.

Answer

Fine-tune Claude on a small set of real legal documents and assume it will generalize to all statutes and jurisdictions without further validation.

Question 12

A developer is preparing to deploy Claude in an application that generates creative fiction. They want to ensure the application is used responsibly and complies with Anthropic's Usage Policies. Which TWO practices should they implement? (Choose two.)

Accepted Answer

Include a clear disclosure to end users that content is AI-generated.. Disclosing AI-generated content and providing a reporting mechanism are two concrete practices that support transparency and accountability. They align with responsible use expectations for creative applications without unnecessarily restricting legitimate expression. The other options are either overly broad, ineffective, or not required by policy.

Answer

Require users to sign a legal waiver acknowledging that AI-generated content may be offensive.

Answer

Fine-tune Claude to never generate content that could be considered controversial.

Answer

Implement a content filter to block any violent or sexual themes in the generated fiction.

Question 13

A product team is integrating Claude into a children's educational app. Before launch, they must ensure the model does not produce age-inappropriate content. Which action best aligns with Anthropic's safety guidance for this deployment?

Accepted Answer

Implement additional input and output filtering, plus human review, specifically tuned for the children's audience.. Deploying Claude in a child-facing context requires going beyond baseline protections. The correct approach is to add audience-specific input/output filtering and human review, as Anthropic emphasizes that safety is a shared responsibility. Relying solely on defaults, disabling safeguards, or testing only with adults all fail to address the unique risks of a children's educational app.

Answer

Rely on the model's default safety filters without additional testing, since Anthropic already ensures all outputs are child-safe.

Answer

Only test with adult users first and assume the same behavior will hold for children.

Answer

Disable all safety features to avoid false refusals, because educational content is inherently safe.

Question 14

A research lab asks Claude to help draft a persuasive article arguing that a widely discredited medical treatment is effective, and requests that the piece cite fabricated studies to strengthen the case. The lab says the output is only for an internal debate exercise. What is the most appropriate response under responsible-use principles?

Accepted Answer

Decline to fabricate studies, but offer to help the lab build a balanced debate brief that accurately represents the scientific consensus and the evidence against the treatment.. Generating persuasive health misinformation backed by fabricated citations is harmful regardless of the stated internal-use framing, because the deceptive artifact can escape its intended context. The responsible path is to refuse the fabrication and offer a legitimate alternative: an accurate, balanced brief that represents the scientific consensus and the evidence against the treatment.

Answer

Comply but add a short disclaimer at the end noting that the cited studies are fictional.

Answer

Comply fully, because the lab states the content is for internal use and will not be published externally.

Answer

Comply with the fabrication request but mark the studies with obviously fake author names so readers can tell they are invented.

Question 15

A marketing team wants to use Claude to generate personalized email campaigns. They plan to include customers' full names, email addresses, and purchase histories in the prompts. Which practice best aligns with responsible data handling?

Accepted Answer

Minimize personally identifiable information (PII) in prompts by using anonymized or aggregated data, and ensure compliance with relevant privacy regulations.. Responsible data handling with Claude involves minimizing PII in prompts and complying with privacy regulations. Using anonymized or aggregated data reduces exposure while still supporting personalization. Encrypting data, instructing the model to forget, or isolating instances do not address the fundamental risk of sending unnecessary personal information. Data minimization is the key practice.

Answer

Use a separate Claude instance for each customer to isolate their data, without changing what data is included in prompts.

Answer

Send full PII but instruct Claude to forget the data after generating the email, relying on the model's ability to discard information.

Answer

Include all customer data in the prompt to maximize personalization, since Claude's API encrypts data in transit.