CCAR-F Agentic Architecture and Orchestration Practice Question
Exhibit
{
"model": "claude-3-5-sonnet-20241022",
"betas": ["computer-use-2024-10-22"],
"tools": [
{
"type": "computer_20241022",
"name": "computer",
"display_width_px": 1024,
"display_height_px": 768,
"display_number": 0
}
],
"messages": [...]
}Refer to the exhibit showing a configuration for Claude 3.5 Sonnet. Which architectural requirement is strictly necessary when implementing this 'computer_20241022' tool in a production environment?
⚠ Common exam trap
Candidates often overlook security, assuming the tool can be run directly on the host, which poses extreme risks since the model has full control over the system's GUI.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The tool must be executed within a dedicated, isolated sandbox or virtual machine
The 'computer_20241022' tool enables Claude to interact with a graphical user interface by taking screenshots and simulating inputs. Because the model essentially 'sees' the screen, the architect must provide a secure, isolated sandbox environment where the agent can execute commands safely without risking the host system or accessing sensitive data outside the intended scope.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The agent must have direct root access to the host operating system
Why it's wrong here
Granting root access to an LLM-driven agent is a major security risk and is never recommended. Agents should run with the least privilege necessary to perform their tasks. The architecture should isolate the agent's environment to prevent accidental or malicious system-wide changes that could compromise the underlying host infrastructure.
- ✗
The orchestration layer must include a visual feedback loop for human monitoring
Why it's wrong here
While visual monitoring is helpful for debugging or HITL, it is not a technical requirement for the API to function. The API operates by exchanging screenshots and coordinates. The primary architectural requirement is the backend infrastructure that processes these tool calls and executes them within a controlled environment, regardless of human visibility.
- ✓
The tool must be executed within a dedicated, isolated sandbox or virtual machine
Why this is correct
Computer use involves the model executing mouse movements and keystrokes. To ensure security and reliability, these actions must occur in an isolated environment like a Docker container or VM. This prevents the agent from affecting the production server and allows for easy cleanup and reset of the environment.
- ✗
The 'display_width_px' must always match the resolution of the developer's monitor
Why it's wrong here
The display dimensions are parameters that define the virtual canvas the model interacts with. They do not need to match the developer's physical monitor. The model uses these dimensions to calculate relative coordinates for its actions, and they should be chosen based on the requirements of the software the agent is using.
About these practice questions
Courseiva writes every CCAR-F question from scratch — 271 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Anthropic exam blueprint
This CCAR-F practice question is part of Courseiva's free Anthropic certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCAR-F exam.