Anthropic CCAR-P Exam Overview:

Anthropic CCAR-P Exam Syllabus Topics:

Anthropic Claude Certified Architect - Professional Sample Questions:

1. A research summarization assistant has been deployed for six months. A user has flagged that a generated summary contained a fabricated citation. The product team has asked whether the incident requires architectural action or whether it is an isolated case.
Which two Diligence-competency actions should you take? (Select two.)
Each correct answer presents part of the solution.

A) Sample recent summaries to estimate the fabrication frequency across the population.
B) Treat the incident as an anecdotal isolated case and take no further investigative action.
C) Review whether citation-grounding controls exist anywhere in the current generation pipeline.
D) Communicate to users that the assistant does not fabricate output as a matter of design.
E) Disable the assistant immediately for all current users without any prior diagnostic analysis.

2. You are preparing a HIPAA-eligible deployment for a healthcare customer.
Which configuration supports HIPAA compliance using Anthropic-offered tools?

A) Disabling all audit logging so that no PHI is recorded in any log store, on the assumption that the absence of logs satisfies HIPAA requirements without a signed BAA.
B) Claude Free with no contractual addendum, since consumer products meet HIPAA requirements out of the box.
C) Claude Enterprise with a signed Business Associate Agreement, Zero Data Retention enabled, and audit logging configured for compliance tracking.
D) An ad-hoc personal Claude account used by individual clinicians for PHI-related tasks, with no Business Associate Agreement, no Zero Data Retention, and no audit logging configured.

3. You are configuring tool permissions for a Claude-based assistant. The assistant's defined responsibilities require read access to a knowledge base and write access to a draft queue, and nothing else.
Which scoping design best applies least privilege?

A) Per-role allow-list of exactly the read-knowledge-base and write-draft-queue tools, enforced at the orchestration layer.
B) Allow access to every tool in the catalog and rely on the model to decline tools it should not use.
C) Allow access to all tools with read permissions globally and restrict write permissions to the draft- queue tool, without scoping to only the specific tools required for defined tasks.
D) Disable all tools entirely to achieve a minimal permission surface, accepting that the assistant can no longer perform the read-knowledge-base or write-draft-queue tasks it was designed for.

4. You are evaluating an evaluation set used to score a Claude-based hiring-support tool. The set is drawn from one geographic region and one tenure band.
Which response is most appropriate?

A) Reduce the evaluation set further to a single demographic subgroup to simplify score interpretation, narrowing coverage rather than expanding it to match the intended user population.
B) Continue using the narrow evaluation set drawn from one region and one tenure band because the existing benchmark scores are already high on that subset.
C) Discard all quantitative evaluation and replace it with qualitative impressions collected from a small, convenience-selected group that may not represent the tool's full user population.
D) Expand the evaluation set to cover the geographic regions and tenure bands the tool will serve, and rescore the system on the expanded set before broader release.

5. A Claude architect at a health services organization is defining evaluation metrics for a clinical-summary pipeline. The pipeline must remain within a per-query cost ceiling and must never surface patient data to unauthorized roles.
Which two metrics directly address these requirements? (Select two.)

A) Throughput measured as successful requests processed per minute
B) Per-query token cost measured against the defined cost ceiling
C) BLEU score computed against a human-annotated reference summary set
D) Response latency at the 95th percentile across a one-week sample window
E) Role-based access-control enforcement rate measured on a red-team dataset

Solutions: