CCAR-P: Claude Certified Architect — Professional

By Anthropic · Question Mode

QuestionQ41

VerifiedGovernance, Safety & Risk Management

You are assessing an integration specification for security weaknesses.

Which two findings represent valid security gaps in the specification? Each correct answer provides a complete solution. (Select two.)

Choose two
Explanation

Service credentials must not be included in prompt context because they can be exposed through logging and tracing. Authorization must be enforced before a model or tool accesses restricted data; response-layer-only RBAC allows unauthorized access to occur before rendering is blocked.

Community Discussion

No comments yet. Be the first to start the discussion!