CCAR-P: Claude Certified Architect — Professional

A security team is assessing two proposed controls. Control A implements an outbound tool allow-list with destination restrictions and per-call review. Control B evaluates responses against a stable adversarial evaluation set after every model-version change.

Which two risk categories are correctly matched to these controls? (Select two.)