Learn with Anthropic : CCAR-P training material for 100% pass

You are comparing patterns for a batch document-classification job that follows fixed steps: extract metadata, classify, summarize, and persist.
Which pattern is the best fit and why?

• A. A workflow pattern, because agentic patterns do not support tool invocations and therefore cannot execute the persist step that writes results to the downstream store.
• B. An agentic pattern, because the open-ended planning capability of agents produces more consistent structured outputs than a fixed workflow graph on classification tasks.
• C. A workflow pattern, because the steps are well-defined and predictable per-request token cost is preferred over flexibility.
• D. An agentic pattern, because agents are categorically more accurate than workflows and therefore always preferable regardless of step predictability.

A senior architect is preparing briefing materials on a new retrieval architecture. The executive sponsor has requested a summary of the architectural decision. Which framing is most appropriate for that audience?

• A. Capabilities delivered, scope implications, and feature-level dependencies on the roadmap.
• B. Threat model, control mappings, residual-risk acceptance, and audit traceability.
• C. Technical alternatives evaluated, implementation implications, and component-level consequences.
• D. Business outcomes achieved, trade-offs accepted, and high-level risks acknowledged.

A technical team is cataloging risks specific to Claude's use in a document-grounded Q & A system.
Which two items represent failure modes that are intrinsic to LLM-based systems rather than generic software defects? (Select two.)

• A. A database connection timeout causes a retrieval call to return an empty result set.
• B. An expired TLS certificate blocks outbound API calls to the Claude endpoint.
• C. The model generates a plausible-sounding answer that is unsupported by any retrieved document.
• D. A misconfigured load balancer routes requests to a deprecated API version.
• E. The model refuses a legitimate query because surface features trigger an overly broad safety pattern.

During an architectural review, the security team identifies a risk that adversarial content injected into retrieved documents could manipulate the model's behavior.
Which mitigation most directly addresses this threat?

• A. Restrict outbound tool calls to an approved destination allow-list.
• B. Treat all retrieved content as untrusted input and apply input classifiers with output validation.
• C. Score outputs against a stable adversarial evaluation set on each model-version change.
• D. Require citations for each claim and constrain responses to source-supported content.

You are configuring tool permissions for a Claude-based assistant. The assistant's defined responsibilities require read access to a knowledge base and write access to a draft queue, and nothing else.
Which scoping design best applies least privilege?

• A. Allow access to all tools with read permissions globally and restrict write permissions to the draft- queue tool, without scoping to only the specific tools required for defined tasks.
• B. Disable all tools entirely to achieve a minimal permission surface, accepting that the assistant can no longer perform the read-knowledge-base or write-draft-queue tasks it was designed for.
• C. Allow access to every tool in the catalog and rely on the model to decline tools it should not use.
• D. Per-role allow-list of exactly the read-knowledge-base and write-draft-queue tools, enforced at the orchestration layer.