Anthropic CCAR-P Practice Exam Questions

Anthropic CCAR-P Sample Question Answers

Question # 1

You are classifying chunking strategies by the corpus type each is best suited to. For each chunking strategy, select the appropriate corpus type: “Long Structured Documents,” “Heterogeneous Short Records,” or “Code or Hierarchical Specifications.

Show Answer

Question # 2

You are a solution architect designing a Claude-based assistant with access to 60 internal tools across multiple business domains. Loading every tool definition on every request increases token usage and time to first response. Which design pattern best addresses this issue without sacrificing capability breadth?

A. Apply progressive tool discovery so a curated initial subset is exposed and additional tools are loaded on demand based on the task.
B. Use a separate model call to summarize all 60 tool definitions before each user turn.
C. Increase the maximum context length and load all 60 tool definitions on every request, accepting the higher token cost and latency as necessary for full capability.
D. Hard-code a fixed set of five tools per request to reduce token usage, regardless of whether those tools are relevant to the current task.

Show Answer

Question # 3

You are reviewing an integration specification for security gaps. Which two findings constitute valid security gaps in the specification? (Select two.) Each correct answer presents a complete solution.

A. Tool calls execute server-side under a least-privilege service principal scoped to the requested action
B. Service credentials are placed in the prompt context, where they can leak into logs and traces.
C. Role-based access control is enforced only at the response-rendering layer after the model accesses restricted data
D. Per-user OAuth tokens are exchanged with scope-restricted permissions and refreshed within the active session.
E. Tool inputs and outputs are encrypted in transit using transport-layer security between services.

Show Answer

Question # 4

A business sponsor has requested an AI solution to “improve customer experience.” The sponsor cannot articulate which customer journey is failing, which metric reflects the failure, or which decisions the AI should support. The sponsor is asking you to begin design work next week. Which delegation-competency action should you take first

A. Recommend that the sponsor revise the request and resubmit it later for evaluation.
B. Begin prototyping a generic assistant against the broad request before the next deadline.
C. Propose a fixed scope that you commit to by default based on your own assumptions.
D. Facilitate a structured discovery to define the failing decision and the target metric.

Show Answer

Question # 5

You are integrating Claude Code into a workflow that runs against a production database. Which guardrail design most directly preserves safety on data-modifying operations?

A. Allow Claude Code to write directly to the production database without subagent scoping, read-only credential defaults, or human confirmation gates on data-modifying operations.
B. Configure the database MCP server with a fully privileged credential that can perform any read or write operation, and allow all operations to proceed without explicit human confirmation.
C. Disable all logging and auditing on database operations through the MCP server to reduce alert noise, removing the observability needed to detect unintended data modifications.
D. Configure the database MCP server with a read-only credential by default, restrict the subagent’s tool list to read-only operations, and require explicit human confirmation on any operation that would modify data.

Show Answer

Question # 6

You are rolling out monitoring for a Claude-based deployment and must complete the specification steps before instrumenting the deployment. Which two steps must be completed BEFORE instrumenting the deployment to emit metrics and traces? (Select two.) Each correct answer presents part of the solution.

A. Define the metrics and the slices the deployment will monitor across normal and adversarial traffic
B. Tune the alert thresholds based on observed normal-state distributions to reduce false positives
C. Define the service-level objectives (SLOs) and the error budgets the deployment will be held to
D. Build the dashboards that surface metrics across slices at the cadence the team operates on.
E. Document the dashboards, alerts, and runbooks for the on-call rotation that will respond

Show Answer

Question # 7

You are designing a test strategy for a Claude-based pipeline that handles sensitive financial data. Which two test types should be prioritized to cover both safety under attack and cross- component correctness? (Select two.)

A. Adversarial tests using prompt-injection and malformed-input cases.
B. Regression tests against a stable reference set of previously known-good outputs.
C. Smoke tests that verify core paths after each deployment.
D. Integration tests that verify end-to-end pipeline behavior across all components.
E. Unit tests targeting only individual prompt-template rendering logic.

Show Answer

Question # 8

After a prompt-template update, several previously passing test cases now produce unexpected outputs. Which test type is specifically designed to detect this category of failure?

A. Adversarial tests that probe for prompt-injection vulnerabilities.
B. Regression tests scored against a stable reference set of known-good behavior.
C. Smoke tests that confirm high-level system availability after the change. 
D. Integration tests that validate cross-component pipeline behavior.

Show Answer

Question # 9

You are building an ethics-review checklist for deployments supported by artificial intelligence. Which two checks belong on the list? (Select two.) Each correct answer presents a complete solution

A. Confirm that vendor licensing terms permit the planned production use of the model.
B. Verify that outputs do not rely on generalizations about people that the underlying data does not support.
C. Confirm that high-impact decisions retain human accountability rather than being attributed to the model.
D. Restrict ethics review to outputs that exceed a defined model-confidence threshold
E. that latency and throughput targets are met across supported user populations.

Show Answer

Question # 10

A Claude architect is leading the discovery phase for a new AI-powered customer service solution. Which two activities are characteristic of structured discovery and requirement gathering for a Claude-based deployment? (Select two.)

A. Facilitating stakeholder workshops to surface latency, accuracy, and compliance constraintsbefore scoping begins.
B. Selecting the Claude model tier based on the architect’s prior project experience before stakeholder inputis collected.
C. Generating an initial prototype and iterating based on user reaction rather than written requirements.
D. Documenting explicit success criteria and failure thresholds that will gate production deployment.
E. Deferring constraint documentation until the integration design phase to avoid scope creep.

Show Answer