CCAR-P Governance, Safety, and Risk Management Practice Question
A software vendor is preparing for a customer security review of its Claude-powered support assistant. The customer asks how the vendor prevents the assistant from leaking one tenant's data into another tenant's conversation. Which architectural control most directly addresses this concern?
⚠ Common exam trap
The trap here is answering a data-isolation question with a model-behavior setting, when isolation is enforced by the retrieval and storage layer rather than by how the model is prompted or sampled.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Scope every retrieval query and every stored conversation to the authenticated tenant identifier, and reject requests whose tenant scope cannot be resolved.
Cross-tenant leakage is prevented at the point where data is selected, not at the point where text is generated. Binding every retrieval and storage operation to the authenticated tenant identifier, and failing closed when that identifier is missing, guarantees that only authorized content can reach the model. Prompt instructions, extended thinking, and temperature settings alter model behavior but leave the underlying data access path unchanged.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add a system prompt instructing the assistant to answer only questions about the current customer.
Why it's wrong here
A system prompt is a behavioral nudge that a crafted question can override, so it cannot be relied upon to prevent cross-tenant disclosure. It also leaves the retrieval and storage layers unchanged, meaning another tenant's documents may still be fetched into context. The customer is asking for an architectural guarantee, and prompt text does not provide one.
- ✓
Scope every retrieval query and every stored conversation to the authenticated tenant identifier, and reject requests whose tenant scope cannot be resolved.
Why this is correct
Enforcing tenant scope at the data access layer ensures that only the authenticated tenant's documents can enter the context window, regardless of what the model is asked. Failing closed when scope cannot be resolved removes the ambiguous cases that typically cause leaks. Because the boundary is enforced in code the model cannot influence, it answers the customer's concern about isolation directly.
- ✗
Set the assistant's temperature to zero to make responses more predictable across tenants.
Why it's wrong here
Temperature controls sampling randomness and is unrelated to data partitioning. Reducing it makes outputs more consistent for a given input but does not stop a retrieval step from pulling another tenant's records into context. The customer's question is about data boundaries, and a decoding parameter cannot establish or enforce one.
- ✗
Enable Claude's extended thinking so the assistant reasons more carefully before answering.
Why it's wrong here
Extended thinking improves the quality of reasoning on complex tasks but has no bearing on which documents are retrieved or which tenant they belong to. Isolation is a property of the data access path, not of the model's deliberation. Enabling it would increase latency and cost while leaving the cross-tenant exposure exactly as it was.
About these practice questions
This CCAR-P question is part of Courseiva's 262-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Anthropic exam blueprint
This CCAR-P practice question is part of Courseiva's free Anthropic certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCAR-P exam.