Anthropic : CCAR-P Questions & Answers

During an architectural review, the security team identifies a risk that adversarial content injected into retrieved documents could manipulate the model's behavior.
Which mitigation most directly addresses this threat?

• A. Score outputs against a stable adversarial evaluation set on each model-version change.
• B. Restrict outbound tool calls to an approved destination allow-list.
• C. Require citations for each claim and constrain responses to source-supported content.
• D. Treat all retrieved content as untrusted input and apply input classifiers with output validation.

You are compiling a diagnostic toolkit for Claude Code operational issues.
Which two diagnostic actions belong in the toolkit? (Select two.)
Each correct answer presents a complete solution.

• A. Roll back to the previous Claude Code version immediately to confirm whether the issue is version specific.
• B. Increase the model sampling temperature so that intermittent issues surface more frequently for analysis.
• C. List the configured Model Context Protocol (MCP) servers and inspect server status to identify connection failures.
• D. Reproduce the issue with a minimal reproduction case that isolates one variable at a time.
• E. File a support ticket with vendor support before any local reproduction or evidence collection.

You are responding to a stakeholder request that adds significant scope to a deployment already in flight.
Which response best aligns expectations while respecting the stakeholder's underlying need?

• A. Decline the request outright without acknowledging the stakeholder's underlying need or offering alternatives such as deferral, descoping, or timeline extension.
• B. Hide the scope-addition request from the broader delivery team to avoid a difficult conversation, allowing the change to proceed without team awareness of its timeline implications.
• C. Acknowledge the request, describe the scope and timeline implications transparently, and propose options-defer it, descope something else, or extend the timeline-for the stakeholder to choose.
• D. Accept the additional scope into the current release without describing the timeline or descoping implications, allowing the delivery plan to absorb unacknowledged changes until they surface as delays.

Engineering leadership wants to roll out Claude Skills to 280 developers across 14 teams. Skills will encode internal coding standards, code-review checklists, and incident-postmortem templates. Leadership has asked how to govern Skill authorship so that Skills remain trustworthy without bottlenecking on a single central team.
Which governance model should you recommend?

• A. Federated authorship across the 14 teams with a central review and publication gate.
• B. Per-developer authorship across the 280 engineers with no team-level coordination required.
• C. Centralized authorship by a single platform team responsible for every Skill produced.
• D. Fully decentralized authorship across the 14 teams with no review before publication.

You are designing the prompt for a ticket-triage classifier with thirty well-defined categories and clear category descriptions in the prompt.
Which technique is most appropriate as the starting point?

• A. A prompt with no category descriptions, expecting the model to infer the category set.
• B. A prompt that demands the model invent new categories when the supplied ones do not fit.
• C. A chain-of-thought prompt for a routing decision that does not require multi-step reasoning.
• D. A zero-shot prompt that specifies the categories with their descriptions and the required output format.