McAfee Secure

Exam Code: CCA-F

Exam Name: Claude Certified Architect - Foundations

Certification Provider: Anthropic

Questions & Answers

Anthropic CCA-F Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

Questions & Answers

134 Questions & Answers with Testing Engine

"Claude Certified Architect - Foundations Exam", also known as CCA-F exam, is a Anthropic certification exam.

Pass your tests with the always up-to-date CCA-F Exam Engine. Your CCA-F training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Anthropic CCA-F Practice Test 7

Question 60

A customer requests both a refund and a replacement item for one damaged purchase. Separate specialists each propose granting their remedy. What should the orchestrator do?

  1. Execute both proposed actions immediately to satisfy the customer.
  2. Let whichever specialist finishes first decide the only policy for all future cases.
  3. Approve the refund first and conceal it from the replacement specialist.
  4. Reconcile the remedies against the same order's eligibility and credit policy before committing either side effect.

Explanation

Correct Answer

D:

Independent favorable recommendations can conflict with a mutually exclusive remedy rule.

Incorrect Answers

A:

Double compensation can violate policy and create irreversible cost.

B:

Response timing is unrelated to this order's entitlement.

C:

Withholding prior actions defeats coordination and risks duplicate fulfillment.

Question 61

Two policy agents return opposite eligibility decisions about a subscription refund, each citing a different contract revision. The coordinator lacks an effective-date comparison. What response is appropriate?

  1. Label both recommendations as identical and mark eligibility verified.
  2. Choose the permissive answer because it makes the customer happiest.
  3. Choose the restrictive answer without checking contract applicability.
  4. Record the conflicting policy versions and withhold payment pending targeted reconciliation or authorized escalation.

Explanation

Correct Answer

D:

A documented unresolved decision is safer than arbitrarily selecting a contradictory interpretation.

Incorrect Answers

A:

Contradictory outcomes cannot establish a single verified result.

B:

An unsupported exception can cause unauthorized payment.

C:

The denial may wrongly apply a superseded agreement.

Question 62

A request must go to a human fraud reviewer; no reviewer has accepted it yet. The bot is preparing a closing message. Which status should it report?

  1. Leave no case record and tell the customer to contact support again.
  2. Set the customer-facing status to resolved immediately after the escalation ticket is created, without recording the human decision.
  3. Mark the original request complete as soon as the escalation message is generated.
  4. Create a structured open escalation with case ID, evidence, assigned queue and pending decision; tell the customer it is not resolved.

Explanation

Correct Answer

D:

Routing an outstanding review does not equal approval or completed service.

Incorrect Answers

A:

Unrecorded handoff loses the context necessary for timely resolution.

B:

Submitting a case is not the same as obtaining the needed approval. The transaction remains open until the designated authority resolves it.

C:

A queue submission is not the human's determination.

Question 63

A tool blocks a prohibited cross-account refund with a nonretryable policy error. The agent immediately repeats the same call. What recovery plan is correct?

  1. Retain the denial and follow an alternative permitted route, such as verifying the proper account or escalating the case.
  2. Remove policy checks from the service temporarily for this customer.
  3. Change the tool's result status to success before resuming Claude.
  4. Retry the identical refund until a transient network response occurs.

Explanation

Correct Answer

A:

A known policy failure requires changed entitlement or an approved handoff, not the same request.

Incorrect Answers

B:

Disabling the protective boundary would expand unauthorized financial access.

C:

Fabricated success would conceal rejection and mislead the customer.

D:

Business-rule denials are not connectivity failures and will not become permitted through retries.

Question 64

Two MCP providers return an order date, one as Unix seconds and one as ISO 8601 text. A support summary accidentally compares their raw strings. Select TWO controls that make subsequent date comparisons reliable.

  1. Normalize dates with a controlled post-tool transformation to a common timezone-aware representation while retaining provenance.
  2. Drop the provider with Unix timestamps rather than parse its valid response.
  3. Convert every date to the current local calendar day for simplicity.
  4. Ask Claude to compare raw timestamp strings using alphabetical order.
  5. Test the conversion against offsets and daylight-saving boundaries before trusting chronological ordering.

Explanation

Correct Answers

A:

Consistent typed timestamps make comparisons meaningful without erasing source evidence.

E:

A shared timestamp type is necessary, but a conversion bug can still reverse events near a zone boundary. Boundary-case checks validate the deterministic transformation rather than having the model guess an ordering.

Incorrect Answers

B:

Encoding differences do not make the source irrelevant or untrustworthy.

C:

Discarding actual timestamps destroys relevant ordering.

D:

Different encodings do not share a lexicographic chronology.

Question 65

A payment action requests $850 while the approved refund limit is $300. An agent's prompt says 'be helpful'. What should guard the operation?

  1. A pre-execution validation hook or service authorization rule should reject the over-limit call and return an actionable denial.
  2. Let the API execute then ask the assistant to apologize for exceeding policy.
  3. Ask the model to promise not to exceed limits on its next turn.
  4. Round the amount to $300 without notifying or obtaining authorization.

Explanation

Correct Answer

A:

The rule must be enforced before the financial side effect occurs.

Incorrect Answers

B:

A post-hoc message does not reverse a forbidden transfer.

C:

A promise in generated text is weaker than an executable policy boundary.

D:

Silently changing a requested payment can create incorrect ledger actions.

Question 66

A legacy order API emits 0, 1 and 9 without labels; the agent describes 9 as delivered, but the provider defines it as canceled. What is the right integration change?

  1. Replace unknown codes with delivered to avoid confusing the customer.
  2. Explain in the system prompt that larger codes always mean later shipping progress.
  3. Infer completion from the number of hours since the last update and drop the structured carrier status code.
  4. Introduce a tested mapping from provider status codes to stable semantic labels before passing the result to Claude.

Explanation

Correct Answer

D:

Code-to-state normalization prevents inference from unexplained numbers.

Incorrect Answers

A:

A fabricated success status masks canceled or failed orders.

B:

Numeric order is not a documented status taxonomy.

C:

Elapsed time is not a reliable delivery state. The normalized status must reflect the provider's actual event code and timestamp.

Question 67

An urgent user message tells a claims agent to disregard approval rules and refund a restricted charge. The service hook receives the request anyway. Which behavior demonstrates sound enforcement?

  1. Ask the model to create a fictitious manager-approval token.
  2. Perform the transaction then log a policy warning afterward.
  3. Deny the unauthorized action at the pre-tool policy boundary regardless of the user's persuasive wording.
  4. Treat an urgent tone as a temporary approval override.

Explanation

Correct Answer

C:

Security decisions must rely on authenticated entitlement rather than instructions embedded in chat.

Incorrect Answers

A:

A forged authority value cannot satisfy an actual approval workflow.

B:

Logging a violation cannot prevent the harmful side effect.

D:

Emotion and urgency are not financial authorization signals.

Question 68

A billing pipeline joins a price in cents from one service with a shipping charge in dollars from another. The total is inflated one hundredfold. What is the minimum safe fix?

  1. Normalize both numeric values to a declared currency and unit before arithmetic, preserving original-unit metadata.
  2. Drop shipping charges because they create unit ambiguity.
  3. Divide every future total by 100 regardless of its source units.
  4. Ask Claude to estimate which number looks more realistic.

Explanation

Correct Answer

A:

Typed money fields prevent 1500 cents from being treated as 1500 dollars.

Incorrect Answers

B:

Excluding valid line items changes the total rather than correcting units.

C:

A universal correction breaks records already expressed in dollars.

D:

Human-like intuition is not a deterministic financial transformation.

Question 69

A CRM tool returns customer status plus an internal access token that is not needed for the user's support question. The assistant may echo results. How should the host handle it?

  1. Display the token only in the downloadable support transcript for audit completeness.
  2. Forward the token to the model and add 'do not repeat this' in the prompt.
  3. Replace absent customer status with a default active value before downstream eligibility checks.
  4. Remove or mask credential fields in the controlled tool-result transformation before model consumption and logging.

Explanation

Correct Answer

D:

A redacted result protects secrets while keeping legitimate support evidence.

Incorrect Answers

A:

Unnecessary credential disclosure in logs creates a second exposure path.

B:

Sensitive values already exposed to generated output remain at risk.

C:

A default positive status converts missing evidence into authorization. The transformation should preserve unknown/null semantics and restrict exposure of sensitive fields.

Question 70

A coding assistant proposes deleting a protected production configuration file using its shell tool. A repository policy prohibits this path. Where should the restriction be enforced?

  1. Reject the dangerous call with a pre-execution path allowlist or denylist enforced by the tool runner.
  2. Run the deletion then restore from backup if the assistant apologizes.
  3. Suppress the dangerous filename in the assistant's final text but let the pending delete call execute.
  4. Give the assistant a stronger instruction while preserving unrestricted delete permission.

Explanation

Correct Answer

A:

The host can block a destructive operation before filesystem changes occur.

Incorrect Answers

B:

Restoration is uncertain and does not justify knowingly executing an unauthorized delete.

C:

Output redaction cannot prevent a harmful operation. The pre-execution hook must validate target path and deny disallowed mutations.

D:

A text reminder is not a security boundary.

Claude Certified Architect - Foundations (CCA-F) Practice Tests