CCAR-P Practice Question: Stakeholder Communication and Lifecycle Management
A business unit has been running its own Claude-powered tool outside the central platform for four months. It works well, and the unit lead wants it blessed as-is rather than migrated. As the platform architect, what is the most appropriate first step?
⚠ Common exam trap
The trap here is treating an unmanaged but successful tool as a compliance failure to be stamped out, when the higher-value move is to evaluate it and fold its strengths into the governed platform.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assess the tool against platform standards for security, data handling, cost visibility, and supportability, then agree on a remediation or integration path with the unit lead.
Shadow AI is best handled by converting it into governed capability rather than by punishing it. A standards-based assessment produces concrete findings and a negotiated path, preserving the working tool's value while closing security, data-handling, cost, and support gaps. That keeps the unit lead as a partner and strengthens the platform's credibility.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Escalate the unit lead to the executive sponsor for violating architecture standards.
Why it's wrong here
Framing a working solution as a violation makes the first move adversarial and burns political capital before any facts are gathered. Escalation is appropriate for unresolved risk acceptance, not for opening a conversation about an unmanaged but functioning tool. The assessment should come before any escalation.
- ✓
Assess the tool against platform standards for security, data handling, cost visibility, and supportability, then agree on a remediation or integration path with the unit lead.
Why this is correct
Assessing against standards turns an unmanaged asset into a governed one without discarding value. It identifies concrete gaps, such as unclear data retention or invisible spend, and produces a negotiated path: remediate in place, integrate key capabilities into the platform, or migrate with a funded timeline. The unit lead stays a partner rather than a resistor.
- ✗
Grant an indefinite exemption so the unit can keep operating the tool without further review.
Why it's wrong here
An indefinite exemption institutionalizes shadow AI and the risks that prompted central governance in the first place: uncontrolled data flows, unmeasured spend, and no incident path. It also signals to other units that building outside the platform is rewarded, which steadily erodes the platform's mandate.
- ✗
Mandate immediate migration to the central platform to eliminate the unmanaged tool.
Why it's wrong here
An immediate mandate ignores the working solution, discards four months of learning, and converts a cooperative unit into an adversary. It also risks service disruption for users who depend on the tool today. Governance should absorb proven capability, not punish it, and a forced migration before assessment forfeits the chance to learn why the unit bypassed the platform.
About these practice questions
One of 262 original CCAR-P practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Anthropic exam blueprint
This CCAR-P practice question is part of Courseiva's free Anthropic certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCAR-P exam.