Anthropic CCAR-P Exam Syllabus Topics:

Anthropic Claude Certified Architect - Professional Sample Questions:

1. You are running a risk assessment on a planned Claude-based deployment and must complete the inventory steps before assessing threats against assets.
Which two steps must be completed BEFORE assessing threats against assets to estimate likelihood and impact? (Select two.) Each correct answer presents part of the solution.

A) Identify the assets that the deployment touches, along with the sensitivity of each asset.
B) Document the assessment outcome with risks, mitigations, residual risk, and acceptance owners.
C) Recommend mitigations and residual-risk acceptance for the risks that remain after analysis.
D) Enumerate the threat actors and attack vectors relevant to the deployment.
E) Recommend mitigations and residual-risk acceptance for risks that remain.

2. A document analysis service processes legal filings averaging 80,000 tokens each. Each filing is queried by attorneys an average of 14 times during a case. The current architecture sends the full filing on every query.
The CFO has asked you to reduce per-query costs while preserving response quality. The security officer requires that filing contents not be stored outside Fabrikam's tenancy.
Which optimization approach should you recommend?

A) Move the workload to a smaller Claude model to reduce the per-token cost paid.
B) Summarize each filing once at intake and run all subsequent queries against the summary.
C) Index filings in a vector store and retrieve only the relevant passages per query.
D) Cache the filing as the prompt prefix for reuse across the 14 queries per case.

3. You are a platform architect designing an internal Claude-based assistant that serves both finance analysts and external auditors. Each population must access only documents permitted by its role.
Where should role-based access control be enforced in the pipeline?

A) After the response is generated, by post-filtering content that should not have been retrieved.
B) Nowhere in the pipeline; rely on the model's general refusal behavior to reject unauthorized document access without any enforced access control.
C) Inside the system prompt as a natural-language instruction for Claude to ignore unauthorized documents.
D) At the retrieval layer, before any role-restricted content reaches the prompt-construction step or the model.

4. A security team is evaluating two proposed controls. Control A adds an outbound tool allow-list with destination restrictions and per-call review. Control B scores responses against a stable adversarial evaluation set after each model-version change.
Which two risk categories are correctly matched to these controls? (Select two.)

A) Control B - data exfiltration via outbound tool calls
B) Control A - data exfiltration via outbound tool calls
C) Control A - prompt injection from adversarial content in retrieved data
D) Control A - silent quality drift after a model-version upgrade
E) Control B - silent quality drift after a model-version upgrade

5. A solutions architect is analyzing stakeholder feedback collected after the first quarter of a Claude-powered procurement automation deployment. The feedback includes four statements: (1) "Our procurement team is processing 3x more purchase orders per analyst per day." (2) "We have eliminated the manual data entry role entirely and redeployed those staff to vendor relationship management." (3) "The API integration costs are running 40% over the projected per-transaction budget." (4) "Response latency during end-of-month batch runs is averaging 11 seconds, against our committed 5-second SLA." Which of the following correctly identifies the primary business value pillar each stakeholder statement represents?

A) Statement 1: Efficiency; Statement 2: Transformation; Statement 3: Solution Cost; Statement 4:
Performance SLA
B) Statement 1: Productivity; Statement 2: Efficiency; Statement 3: Solution Cost; Statement 4:
Performance SLA
C) Statement 1: Transformation; Statement 2: Productivity; Statement 3: Solution Cost; Statement 4:
Efficiency
D) Statement 1: Efficiency; Statement 2: Productivity; Statement 3: Performance SLA; Statement 4:
Solution Cost

Solutions: