CCAO-F Safety and Responsible Use — Timed 10 Questions

Question 1

A financial services firm is deploying Claude to assist wealth managers by summarizing complex market reports. During testing, a manager asks Claude to provide a specific, guaranteed investment recommendation for a high-net-worth client. Claude refuses the request. Which safety principle is the model primarily demonstrating in this scenario?

10 minute time limit — choose an answer to begin.

Accepted Answer

Compliance with the 'harmlessness' pillar of Constitutional AI.. Anthropic models are trained with a focus on avoiding the provision of high-stakes financial advice that could lead to significant economic harm. By refusing to provide guaranteed investment recommendations, Claude adheres to the safety guardrails regarding regulated professions. This behavior ensures the model remains a helpful assistant without overstepping into roles that require human fiduciary responsibility and legal licensing.

Answer

The principle of helpfulness over harmlessness.

Answer

Avoiding hallucinations by acknowledging a lack of real-time data.

Answer

The principle of technical transparency in AI responses.

Question 2

When evaluating Claude for a use case involving children under the age of 13, which TWO actions are required to comply with safety and legal standards like COPPA?

Accepted Answer

Obtaining verifiable parental consent before allowing the child to interact with the AI.. Working with children requires the highest level of safety and legal compliance. Developers must ensure they have verifiable parental consent and that the model is configured to avoid generating age-inappropriate content. These requirements are part of both legal mandates (like COPPA in the US) and Anthropic's own commitment to protecting vulnerable populations from AI misuse.

Answer

Disabling the safety filters to allow the child to explore the AI's full capabilities.

Answer

Encouraging the child to use the AI for unsupervised psychological counseling sessions.

Answer

Configuring the model to prioritize entertainment value over factual accuracy.

Question 3

Anthropic's data privacy policy for enterprise API users generally includes which THREE of the following protections?

Accepted Answer

Customer data sent via the API is not used to train the base models by default.. Data privacy is a major component of responsible AI for enterprise clients. Anthropic provides specific guarantees to ensure that business data remains secure and is not misused. These protections are vital for organizations in regulated industries that need to maintain strict control over their proprietary information and customer data.

Answer

All API data is automatically published to an open-source research database.

Answer

The model can be configured to store all user passwords in plain text for easy retrieval.

Question 4

Your team is deploying a Claude-powered chatbot for HR policies. You notice the model occasionally hallucinates company-specific benefits that do not exist. Which strategy most effectively mitigates these hallucinations while maintaining safety?

Accepted Answer

Implementing a retrieval-augmented generation (RAG) pipeline to ground responses.. Retrieval-Augmented Generation (RAG) is the gold standard for grounding LLMs in factual data. By providing the model with verified source documents, you force it to rely on provided context rather than its internal training data. This reduces hallucination risk, ensures accuracy in HR responses, and aligns with responsible AI use by anchoring the assistant to verified, company-approved information sources rather than speculative model completions.

Answer

Fine-tuning the model on your company's full handbook and benefit documentation.

Answer

Adding 'You must not lie' to the system instructions to improve accuracy.

Answer

Increasing the penalty for repeated hallucinations using post-training feedback.

Question 5

Which TWO of the following practices are recommended to mitigate the risk of prompt injection attacks in a customer-facing Claude application?

Accepted Answer

Use the Messages API structure to clearly delineate system instructions from user inputs.. Mitigating prompt injection requires separating user input from system instructions and implementing input validation. By using robust architectural patterns, you ensure that user input is treated as untrusted data rather than executable instructions. This is vital for security, as it protects the application from being redirected to perform unauthorized tasks or extract internal system prompt details, thereby preserving the integrity and safety of the service provided to users.

Answer

Include a secret password in the system prompt that the user must type to proceed.

Answer

Trust that the model’s internal safety training is sufficient to block all injections.

Answer

Encrypt all user inputs before passing them to the model at the API level.

Question 6

An enterprise developer is designing a customer-facing financial chatbot using Claude 3.5 Sonnet. The application needs to prevent users from eliciting investment advice or unauthorized financial recommendations. Which architectural pattern provides the most robust defense-in-depth safety mechanism against prompt injection bypassing system instructions?

Accepted Answer

Deploy a two-tier validation pipeline where incoming queries pass through a lightweight safety classifier model before reaching Claude, combined with robust system prompts.. Combining strict system-level instructions with an independent, dedicated input classification guardrail model creates a defense-in-depth architecture. This ensures that even if a user's prompt successfully jailbreaks the primary model's persona, an isolated secondary evaluation step catches and neutralizes policy violations before generation occurs.

Answer

Rely solely on advanced system prompts containing explicit constraints against giving financial advice, utilizing Claude's strong instruction-following capabilities.

Answer

Implement a post-generation regex filter that scans output text for specific financial disclaimer phrases before returning responses to the end user.

Answer

Lower the model's temperature parameter to zero to ensure deterministic outputs that strictly adhere to the safety guidelines defined in the prompt.

Question 7

An organization is implementing Claude to help automate customer support for a healthcare insurance portal. Which TWO strategies are most effective for ensuring the deployment aligns with Anthropic's Safety and Responsible Use guidelines regarding medical information?

Accepted Answer

Utilizing system prompts that explicitly restrict the model to administrative and policy-related queries.. Deploying AI in healthcare requires balancing utility with safety to avoid providing unauthorized medical diagnoses. Implementing specific system prompts that restrict Claude to administrative tasks and ensuring a human-in-the-loop for sensitive escalations are standard practices. These steps align with the shared responsibility model where the developer ensures the application context remains safe for the end-user.

Answer

Configuring Claude to provide medical diagnoses only when the user confirms they are over 18.

Answer

Prompting the user to ignore previous safety instructions to ensure the model is as helpful as possible.

Answer

Fine-tuning the model on publicly available medical forums to increase its diagnostic accuracy.

Question 8

Refer to the exhibit. A developer receives this JSON response after submitting a prompt to the Claude API that included instructions to generate a bypass for a software licensing system. What does this error message indicate about the model's safety architecture?

Accepted Answer

An external safety layer identified the prompt as a violation of Anthropic's usage policies.. The exhibit demonstrates the active role of Anthropic's safety filters in intercepting requests that violate usage policies. In this case, requesting a software license bypass falls under prohibited activities related to illegal acts or computer misuse. The filter acts as a proactive guardrail to prevent the model from generating content that could facilitate harmful or illegal technical activities.

Answer

The API key has been revoked due to excessive safety violations by the developer.

Answer

The model's Constitutional AI training failed to identify the harmful intent during inference.

Answer

The model has encountered a technical timeout while processing a complex ethical dilemma.

Question 9

A marketing team wants to use Claude to generate personalized political advertisements for a local election, targeting specific demographics with tailored messaging about voting records. According to Anthropic's 'Safety and Responsible Use' policies, how should this use case be handled?

Accepted Answer

It is prohibited because it involves personalized political campaigning and election influence.. Anthropic's policies are particularly strict regarding political campaigning and election integrity. Generating personalized political advertisements or targeting demographics to influence voting behavior is generally prohibited or highly restricted. This is to prevent the use of AI in spreading misinformation, manipulating public opinion, or interfering with the democratic process through large-scale automated messaging.

Answer

It is permitted if the team provides a disclaimer that the content was AI-generated.

Answer

It is allowed as long as the voting records used in the prompts are public information.

Answer

It is permitted only for local elections but prohibited for national or federal elections.

Question 10

Which THREE of the following are core components of Anthropic's 'Constitutional AI' approach to model safety?

Accepted Answer

A set of written principles (the 'Constitution') used to guide model behavior.. Constitutional AI is a unique method developed by Anthropic to train models to be helpful, honest, and harmless. It involves a supervised learning phase where the model learns from a 'constitution' of principles, followed by a reinforcement learning phase where the model critiques its own responses based on those principles, reducing the need for human labeling.

Answer

Complete reliance on human moderators to review every API call in real-time.

Answer

Hard-coding specific keywords that trigger an automatic shutdown of the model.