CCAR-P Practice Question: Stakeholder Communication and Lifecycle Management
You are the lead architect on a Claude-powered contract-analysis platform. Two weeks before go-live, the General Counsel asks for written assurance that the system will not retain client contract text for model training and that all data stays within the EU. Which artifact should you produce first to satisfy this governance obligation?
⚠ Common exam trap
The trap here is treating a governance request for evidence as a project-management request, and responding with a schedule change or risk log instead of a document that actually verifies the data-handling claims.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A data-flow and retention attestation that maps contract text through the Claude API, documents Anthropic's zero-data-retention configuration, and confirms the EU-only processing region.
The stakeholder needs verifiable evidence about two distinct properties: retention behaviour and processing location. Only a data-flow and retention attestation both traces the path of contract text through the Claude API and records the concrete configuration choices, such as zero-data-retention and EU-region processing, that make the assurance true. Schedule changes, redaction habits, and risk logs are adjacent activities that do not answer the question.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A prompt-engineering guideline telling analysts to strip client names from contract text before submitting it.
Why it's wrong here
Redaction advice is a useful control but is not proof of retention or residency, and it shifts responsibility onto individual analysts rather than the platform. It also fails to address the EU-processing requirement, since redacted text could still be processed outside the region. This does not provide the written assurance counsel requested.
- ✓
A data-flow and retention attestation that maps contract text through the Claude API, documents Anthropic's zero-data-retention configuration, and confirms the EU-only processing region.
Why this is correct
This directly addresses both concerns: it traces where contract text travels and records the contractual zero-data-retention setting plus the EU region selection. A written data-flow attestation is the governance artifact that lets counsel verify the claim independently, rather than accepting a verbal promise, and it becomes the reference document for later audits.
- ✗
An updated project charter that adds a legal-review milestone to the schedule before the go-live date.
Why it's wrong here
A charter amendment only changes scope and timing; it does not answer the substantive question about whether client text is retained or where it is processed. Counsel asked for assurance about data handling, not for a schedule change, so this artifact leaves the actual governance obligation unmet and delays the answer the stakeholder needs.
- ✗
A risk-register entry logging 'data residency uncertainty' with a medium severity rating and an owner.
Why it's wrong here
Logging the risk documents that a concern exists but resolves nothing. The General Counsel asked for assurance that specific guarantees are in place, and a risk entry explicitly states the opposite: that the guarantee is unverified. It is a tracking tool, not the evidence artifact needed to close the governance question.
About these practice questions
Courseiva writes every CCAR-P question from scratch — 262 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Anthropic exam blueprint
This CCAR-P practice question is part of Courseiva's free Anthropic certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCAR-P exam.