CCDV-F Practice Test 15 — 15 Questions

Question 1

A developer is implementing a weather-reporting agent using Claude 3.5 Sonnet. After Claude generates a tool_use block for the 'get_weather' tool, the developer fetches the data. What is the correct next step to ensure Claude can finalize its response to the user?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Send a new user message containing a 'tool_result' block with the 'tool_use_id'.. The tool use lifecycle requires a multi-turn interaction where the model first requests a tool execution. Once the developer executes the tool locally, they must return the result to Claude in a new 'user' message with a 'tool_result' block. This allows Claude to incorporate the external data into its final synthesis and provide an accurate answer to the original query.

Answer

Append the tool results directly to the end of the previous assistant message.

Answer

Update the system prompt with the new weather data and restart the session.

Answer

Issue a second assistant message that includes the weather data as a JSON string.

Question 2

When designing a system prompt for a chatbot, which approach is most effective for ensuring the model maintains a consistent tone?

Accepted Answer

Provide a detailed character description and style guide within the system prompt.. A consistent tone requires explicit behavioral definition in the system prompt. By describing the target persona, communication style, and prohibited behaviors in detail, you provide the model with a clear identity. This prevents the model from defaulting to its standard 'AI assistant' voice, ensuring that every response is aligned with the specific brand or functional requirements defined by the application's design.

Answer

Ask the user to define the tone in the first prompt.

Answer

Randomly change the prompt at every turn to keep the model alert.

Answer

Use the assistant role to remind itself of the tone every turn.

Question 3

Which method is best for improving Claude's accuracy in a complex multi-step reasoning task?

Accepted Answer

Instructing the model to 'think through this step-by-step' before providing the final answer.. Chain-of-thought (CoT) prompting is the industry standard for improving accuracy in reasoning-heavy tasks. By forcing the model to articulate its logic step-by-step before arriving at a final answer, you minimize common reasoning errors. This process allows the model to 'show its work,' which helps in verifying its conclusions and significantly reduces the probability of reaching an incorrect final result through faulty assumptions.

Answer

Asking the model to provide only the final answer to save tokens.

Answer

Providing the model with a massive list of facts without any reasoning steps.

Answer

Using a very high temperature to ensure the model finds a unique reasoning path.

Question 4

Refer to the exhibit. An internal tool is configured to send user input directly to the API. Which security improvement should be applied to the architecture?

Accepted Answer

Implement a middleware to sanitize and block dangerous system commands in the user input.. The architecture is currently wide open to dangerous instruction execution. The application must include an input-validation or intent-classification layer before the request reaches the LLM. By checking if the request involves sensitive or destructive actions—such as file system deletion—the tool can block the request entirely, ensuring the model is never used to generate commands that could cause catastrophic system damage.

Answer

Increase the 'max_tokens' to ensure the deletion script is generated fully.

Answer

Use a more advanced model for the same request.

Answer

Add a disclaimer in the system prompt that deleting files is prohibited.

Question 5

Your team is building an agentic workflow that interacts with internal databases. Which TWO security practices should be implemented to prevent prompt injection attacks that could lead to unauthorized data exfiltration?

Accepted Answer

Implement a strict allow-list of tools and functions the model can execute.. Preventing prompt injection requires a defense-in-depth approach that separates user input from system instructions and enforces strict operational boundaries. By limiting the agent's capability to only necessary functions and using structured output formats, developers minimize the attack surface. These practices are critical because agentic workflows are highly susceptible to malicious instructions that override original system prompts, potentially leading to unauthorized data queries or unintended execution of dangerous internal operations.

Answer

Use hardcoded system prompts that are strictly enforced via fine-tuning.

Answer

Perform all API calls using a public-facing read-only database user.

Answer

Require human-in-the-loop approval for all model responses.

Question 6

Which THREE strategies are effective for reducing hallucinations when Claude is asked to answer questions based on a large provided context?

Accepted Answer

Instructing the model to say 'I don't know' if the answer is not in the text.. Reducing hallucinations requires a combination of structural constraints and behavioral guidance. By allowing the model to express uncertainty and encouraging it to ground its answers in direct quotes, developers create a verification loop. These techniques ensure the model prioritizes accuracy over the helpfulness of providing an answer even when the information is missing.

Answer

Setting the temperature to 0.7 to allow for more creative synthesis of the facts.

Answer

Increasing the frequency_penalty to prevent the model from repeating context words.

Question 7

Refer to the exhibit. What is the primary technical benefit of the developer pre-filling the assistant's message with an opening curly brace?

Accepted Answer

It forces Claude to skip conversational filler and start directly with the data payload.. Pre-filling the assistant's response is a powerful technique to steer Claude toward a specific output format, such as JSON. By providing the start of the response, the developer constrains the model's first few tokens, which significantly increases the likelihood that the entire following sequence adheres to the desired schema and avoids unwanted conversational preamble like 'Certainly, here is the JSON'.

Answer

It reduces the API latency by pre-calculating the first token of the response.

Answer

It triggers the model's 'JSON mode' which is a dedicated high-performance inference path.

Answer

It allows the developer to bypass the system prompt entirely for better token economy.

Question 8

When using Claude's tool use features in a streaming response, how should the developer handle the 'tool_use' blocks in the stream?

Accepted Answer

Accumulate tool_use delta events until a 'content_block_stop' event is received.. Streaming with tool use requires careful handling of partial blocks. As Claude streams its response, it may start a 'tool_use' block. The developer must accumulate these fragments until the block is complete before attempting to execute the tool, as the arguments and even the tool name may be delivered across multiple chunks.

Answer

Execute the tool as soon as the 'name' property is received in the stream.

Answer

Wait for the 'message_stop' event before parsing any tool_use blocks.

Answer

Streaming is not supported when using tools; use the synchronous API instead.

Question 9

A developer needs Claude to analyze a legal document and extract specific clauses into a structured format. To ensure the model focuses only on the provided text and ignores its general knowledge of law, which prompting strategy is most effective?

Accepted Answer

Wrapping the document in tags and using a system prompt to define the extraction rules.. Isolating input data using XML tags like allows Claude to clearly distinguish between the instructions and the content being processed. This structural separation reduces the likelihood of the model hallucinating external information or conflating instructions with the text body, which is critical for high-stakes document analysis where accuracy is more important than creative interpretation.

Answer

Placing the document content at the very end of the prompt after all instructions.

Answer

Increasing the temperature setting to 1.0 to ensure the model captures nuanced legal language.

Answer

Using a few-shot approach with examples of general legal documents not related to the current task.

Question 10

Which TWO of the following are effective ways to protect sensitive data when building a RAG (Retrieval-Augmented Generation) pipeline?

Accepted Answer

Apply attribute-based access control (ABAC) to the vector database queries.. Protecting data in a RAG pipeline requires securing both the retrieval process and the generation process. Access control at the retrieval stage ensures that users only query information they are authorized to see. Simultaneously, data minimization during the augmentation phase prevents sensitive information from being unnecessarily exposed to the model. These steps are crucial because RAG systems often bridge the gap between secure databases and generative models, creating a high-risk surface for accidental data leakage.

Answer

Index all documents regardless of user access permissions.

Answer

Include the entire enterprise document store in the prompt context.

Answer

Store all retrieved documents in plain text within the application code.

Question 11

Refer to the exhibit. An application suddenly begins receiving this error in production. What is the most immediate security-focused action to take?

Accepted Answer

Immediately revoke the current API key and generate a new one.. An authentication error indicates that the currently used key is either revoked, expired, or invalid. In a production environment, this is a major red flag that could signal a credential compromise. The most responsible action is to treat the key as compromised, revoke it immediately in the console, and rotate to a new key to protect the integrity of the application's API interactions.

Answer

Retry the request with an exponential backoff strategy.

Answer

Check if the API billing limit has been reached.

Answer

Hardcode the master account key to restore service quickly.

Question 12

A developer is implementing a complex MCP Server to expose local file system operations. Which THREE security practices should be prioritized to ensure the server does not compromise the host system? (Select THREE)

Accepted Answer

Implement a 'root directory' restriction to prevent path traversal attacks.. Security in MCP is paramount because tools can perform side effects on the host. Restricting access to specific directories (sandboxing), requiring manual user approval for destructive actions, and validating all inputs against expected patterns are critical layers of defense. These measures prevent the model from accidentally or maliciously accessing sensitive files or executing harmful commands.

Answer

Use the 'tool_choice' parameter to only allow read-only operations by default.

Answer

Run the MCP Server with administrative or root privileges for better performance.

Question 13

A financial firm needs to identify potential jailbreak attempts against their Claude-powered chatbot. Which approach provides the most effective real-time detection?

Accepted Answer

Deploy a dedicated classification model to evaluate the safety of prompts and responses.. Real-time detection of jailbreak attempts is best achieved through a secondary, lightweight LLM or a specialized classifier that analyzes both the user input and the model's generated output. By evaluating the interaction for adversarial patterns—such as attempts to bypass safety filters—the security layer can intercept malicious prompts before they are fully processed or block harmful responses, providing a critical safety net that static rules cannot match.

Answer

Use a static keyword-based filter on the user input.

Answer

Audit the logs daily to search for suspicious query patterns.

Answer

Disable the ability for the model to access external URLs.

Question 14

Your organization is integrating Claude into a customer-facing portal. Which TWO practices are essential to prevent prompt injection and unauthorized usage of your API keys?

Accepted Answer

Utilize IAM roles or managed secret services to inject credentials at runtime.. Securing API access requires a defense-in-depth approach. Implementing environment-based secret management prevents hardcoding credentials, reducing the risk of accidental exposure in source control. Simultaneously, robust input sanitization and prompt engineering guardrails are necessary to prevent malicious actors from manipulating the model's behavior via prompt injection. Together, these measures protect both the infrastructure integrity and the functional safety of the LLM application from external adversarial threats.

Answer

Hardcode API keys in the application configuration files for faster deployment.

Answer

Rely solely on the Anthropic API's internal safety filters to stop all malicious input.

Answer

Disable all logging of user requests to ensure maximum privacy for the API keys.

Question 15

A company wants Claude to answer questions about their internal HR policies. They are deciding between fine-tuning a model and using a Tool-calling (RAG) approach. Why is Tool-calling usually preferred for this use case?

Accepted Answer

Tool-calling allows the model to access the most up-to-date policies instantly.. Tool-calling, often used in Retrieval-Augmented Generation (RAG), is generally superior for internal knowledge bases because it allows for easy updates and provides verifiable citations. Fine-tuning is expensive, time-consuming, and results in a 'frozen' snapshot of data that becomes obsolete as soon as policies change, making it unsuitable for dynamic corporate environments.

Answer

Fine-tuning cannot be used to teach a model new factual information.

Answer

Tool-calling is the only way to ensure Claude uses a professional tone.

Answer

Fine-tuned models are restricted from using tools for security reasons.