Skip to content
zeeshare.com

claude certifications / CCAR-F / practice

CCAR-F practice questions

60 questions over the 6 published scenarios. Pick your answer, then press Show answer to see the right one and the reasoning. These are practice questions, not real exam content. The source is at the end.

Ready for the real thing? Exam mode: 4 random scenarios, a timer, answers at the end.

0 of 60 answered, 0 right

Scenario 1: Customer Support Resolution Agent

You are building a customer support resolution agent with the Claude Agent SDK. It handles high-ambiguity requests (returns, billing disputes, account issues) via custom MCP tools — get_customer, lookup_order, process_refund, escalate_to_human — targeting 80%+ first-contact resolution while knowing when to escalate.

Question 1.1Domain 1: Agentic architecture and orchestrationSelect one

You are implementing the agent's core loop. Which control flow correctly determines when to keep executing tools and when to present the final response?

Show answer

Correct: B

The agentic loop keys off stop_reason: “tool_use” means the model has requested tools and expects their results back; “end_turn” means it has finished reasoning and produced its answer. That signal is the designed termination mechanism.

Why not the others: A parses natural language for a completion signal — a documented anti-pattern; C makes an arbitrary iteration cap the primary stopping mechanism; D fails because responses can contain both text and tool_use blocks mid-task.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 1.2Domain 1: Agentic architecture and orchestrationSelect one

The agent calls lookup_order and your code executes it successfully. How does the model actually receive the order data so it can reason about the next action?

Show answer

Correct: D

Tool execution is the harness's job: the loop appends the tool result to the conversation and re-invokes the model. That growing history is the only channel through which the model sees what tools returned.

Why not the others: A and C describe automatic mechanisms that do not exist — the API does not execute your tools; B confuses static tool definitions with runtime results.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 1.3Domain 1: Agentic architecture and orchestrationSelect one

Company policy caps autonomous refunds at $500; larger refunds must go to a human. In testing, prompt instructions alone still let an occasional $650 refund through. What is the correct enforcement design?

Show answer

Correct: A

Business rules with financial consequences need deterministic guarantees. A tool-call interception hook enforces the threshold in code — the violating call can never execute — while prompt-based approaches remain probabilistic.

Why not the others: B and D improve the odds but retain a non-zero failure rate, which the scenario shows is unacceptable here; C misapplies a sampling parameter to a compliance problem.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 1.4Domain 1: Agentic architecture and orchestrationSelect one

A customer writes one message containing three concerns: a refund for a damaged item, a shipping address change, and a missing loyalty credit. How should the agent handle this?

Show answer

Correct: C

Multi-concern decomposition is the designed pattern: split the request into distinct items, investigate each against shared context, and respond once with a complete resolution — protecting first-contact resolution.

Why not the others: A and D silently drop or bounce concerns the customer already stated, directly harming FCR; B escalates work that is well within capability.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 1.5Domain 1: Agentic architecture and orchestrationSelect one

The agent must escalate a complex billing dispute mid-process. The human agents receiving escalations do not have access to the conversation transcript. What should the escalation include?

Show answer

Correct: B

Structured handoff protocols exist precisely because the receiving human lacks the transcript: the summary transfers the case state — identity, findings, figures, and a recommendation — so the customer never has to start over.

Why not the others: A discards completed investigation and forces repetition; C conveys mood, not case state; D transfers unprocessed noise and leaves the analysis to be redone.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 1.6Domain 2: Tool design and MCP integrationSelect one

When process_refund fails for any reason, it currently returns the string “Operation failed.” The agent responds by retrying policy-blocked refunds and giving up on temporary outages — the opposite of correct. What is the fix?

Show answer

Correct: D

Uniform error strings deny the agent the information recovery decisions require. Structured metadata — category, retryability, description — lets it retry transient failures, explain business refusals, and stop wasting attempts on non-retryable errors.

Why not the others: A hard-codes one recovery strategy for error types that need different ones; B removes the signal instead of enriching it; C treats communication as a substitute for correct recovery logic.

Study this:Domain 2 task statements on the CCAR-F page

Question 1.7Domain 2: Tool design and MCP integrationSelect one

A refund request violates the returns window policy. The tool rejects it. Which error response enables the agent to handle this correctly with the customer?

Show answer

Correct: A

Policy violations are business errors: non-retryable by definition, and best paired with an explanation the agent can relay. The retriable: false flag prevents wasted attempts; the friendly description powers the customer conversation.

Why not the others: B mislabels a deterministic refusal as temporary, guaranteeing futile retries; C is silent error suppression — an anti-pattern that turns failure into misinformation; D exposes internals the agent cannot use and should not repeat.

Study this:Domain 2 task statements on the CCAR-F page

Question 1.8Domain 2: Tool design and MCP integrationSelect two

The agent frequently confuses get_customer and lookup_order; both currently carry one-line descriptions. Which TWO description changes most directly fix the misrouting? (Select TWO.)

Show answer

Correct: B, D

Descriptions are the primary selection mechanism. Input formats plus example queries show each tool's territory; explicit boundary language resolves precisely the overlap causing the misrouting.

Why not the others: A removes information from tools that already have too little; C adds emphasis without discrimination; E is false — names help, but descriptions carry the selection signal.

Study this:Domain 2 task statements on the CCAR-F page

Question 1.9Domain 5: Context management and reliabilitySelect one

A customer's first message is: “I want to speak to a human. Do not try to fix this yourself.” The issue looks like a routine replacement the agent could resolve. What should the agent do?

Show answer

Correct: C

Explicit customer demands for a human are a first-class escalation trigger, honored immediately. Overriding a stated preference to demonstrate capability damages trust regardless of how resolvable the issue looks.

Why not the others: A and D do exactly what the customer forbade; B substitutes an unreliable proxy (sentiment) for a signal that could not be clearer — the customer already said the words.

Study this:Domain 5 task statements on the CCAR-F page

Question 1.10Domain 5: Context management and reliabilitySelect two

In long multi-issue sessions, the agent's later responses misquote refund amounts and order numbers because earlier details were condensed into vague summaries, while each lookup_order result dumps 40+ fields into context. Which TWO changes address this? (Select TWO.)

Show answer

Correct: A, D

The paired fix: protect precise transactional facts from lossy summarization by persisting them in a dedicated block, and stop the bloat at its source by trimming verbose tool outputs to relevant fields before they accumulate.

Why not the others: B controls output length, not context quality; C intensifies the exact failure mode — numbers dissolving into vagueness; E outsources the system's memory problem to the customer.

Study this:Domain 5 task statements on the CCAR-F page

Scenario 2: Code Generation with Claude Code

Your team uses Claude Code for code generation, refactoring, debugging, and documentation, integrated into daily development with custom slash commands and CLAUDE.md configuration — and you must judge when plan mode beats direct execution.

Question 2.1Domain 3: Claude Code configuration and workflowsSelect one

You have a personal /scratch-notes slash command you use constantly, but it reflects your own workflow and should not appear for teammates when they pull the repository. Where does the command file belong?

Show answer

Correct: C

Command scoping mirrors intent: ~/.claude/commands/ holds personal commands visible only to you, while .claude/commands/ in the repo is shared with everyone via version control. A personal workflow tool belongs in the former.

Why not the others: A publishes a personal tool to the whole team; B is project context, not a command definition mechanism; D misuses path-scoped rules, which condition on edited file paths, not identity.

Study this:Domain 3 task statements on the CCAR-F page

Question 2.2Domain 3: Claude Code configuration and workflowsSelect one

Your /analyze-architecture skill produces thousands of lines of exploration output that pollute the main conversation, crowding out the task you actually wanted help with. Which SKILL.md frontmatter option fixes this?

Show answer

Correct: B

context: fork exists for exactly this: verbose or exploratory skills run in their own isolated context, and the main session receives the distilled result rather than the full exploration transcript.

Why not the others: A governs parameter prompting; C governs which tools the skill may use — neither controls where output accumulates; D is rules-file syntax, not skill frontmatter for isolation.

Study this:Domain 3 task statements on the CCAR-F page

Question 2.3Domain 3: Claude Code configuration and workflowsSelect one

You are writing a /scaffold-component skill that generates boilerplate files. You want a guarantee it can create files but can never run shell commands, no matter what its instructions are asked to do. How do you enforce this?

Show answer

Correct: D

allowed-tools is the enforcement mechanism: frontmatter-declared tool restrictions bound what the skill can invoke during execution — a configuration guarantee rather than an instruction the model might not follow.

Why not the others: A is prompt-level guidance with a non-zero failure rate; B is hope; C changes the execution workflow but is not a per-skill tool restriction.

Study this:Domain 3 task statements on the CCAR-F page

Question 2.4Domain 3: Claude Code configuration and workflowsSelect one

A new teammate's Claude Code sessions ignore the team's coding standards. You discover the standards live in your own ~/.claude/CLAUDE.md. What is the correct fix, and how do you verify it?

Show answer

Correct: A

User-level configuration applies only to that user — it never travels via version control. Team standards belong at project level, and /memory is the diagnostic that shows exactly which memory files a session loaded.

Why not the others: B distributes configuration by hand and drifts immediately; C reinstalls software to fix a file-location problem; D mistakes a persistent configuration issue for a per-session prompting task — and nothing “sticks” between sessions.

Study this:Domain 3 task statements on the CCAR-F page

Question 2.5Domain 3: Claude Code configuration and workflowsSelect one

The project's CLAUDE.md has grown to 2,000 lines covering testing, API conventions, deployment, and styling; sessions load it all regardless of task. What is the recommended reorganization?

Show answer

Correct: C

The .claude/rules/ directory is the modular alternative to a monolithic CLAUDE.md: focused topic files, with YAML path scoping where rules should load only for matching files — less irrelevant context, easier maintenance.

Why not the others: A abandons hard-won project conventions; B unshares team configuration and guarantees divergence; D makes always-relevant standards opt-in and forgettable.

Study this:Domain 3 task statements on the CCAR-F page

Question 2.6Domain 1: Agentic architecture and orchestrationSelect one

Yesterday you ran a long investigation into a memory leak in a session you named leak-hunt. Today you want to continue exactly where that investigation left off. What do you run?

Show answer

Correct: B

Named session resumption is the mechanism for continuing specific prior work: --resume <session-name> restores that conversation's context so the investigation picks up where it stopped.

Why not the others: A is not a real flag; C starts a fresh non-interactive run with no memory of yesterday; D approximates resumption badly — unstructured scrollback is a poor substitute for the session's actual context.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 2.7Domain 1: Agentic architecture and orchestrationSelect one

You have completed a thorough analysis of a module and now want to compare two competing refactoring strategies — developing each independently from that same analysis baseline without the explorations contaminating each other. Which capability fits?

Show answer

Correct: D

fork_session exists for divergent exploration: both branches inherit the completed analysis, then evolve independently — clean comparison without re-paying the analysis cost or cross-contaminating approaches.

Why not the others: A is impossible — context cannot be selectively forgotten on request; B pays for the expensive baseline twice; C compresses context within one session, it does not branch it.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 2.8Domain 1: Agentic architecture and orchestrationSelect one

You want to resume last week's refactoring session, but since then the team has merged substantial changes across the files it analyzed, so most of its tool results now describe code that no longer exists. What is the reliable approach?

Show answer

Correct: A

The resumption tradeoff: resume when prior context is mostly valid; start fresh with an injected summary when tool results have gone stale. Heavily changed files put this squarely in the second case — keep the conclusions, discard the outdated evidence.

Why not the others: B assumes an automatic re-verification that does not happen — stale results sit in context as if true; C spends tokens on a correctness problem; D throws away a valid technique — for minor changes, resuming and informing the session which files changed works well.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 2.9Domain 5: Context management and reliabilitySelect one

Mid-way through an extended exploration session, context is filling with verbose discovery output and responses are noticeably degrading, but you are not ready to end the session. Which built-in command helps immediately?

Show answer

Correct: C

/compact is the in-session relief valve for exactly this situation: it compacts accumulated context — typically bloated with verbose discovery output — so an extended session can continue without degradation.

Why not the others: A shows which memory files are loaded — diagnostic, not cleanup; B is not the mechanism (forking is for divergent branches, not compression); D does not address conversation bloat.

Study this:Domain 5 task statements on the CCAR-F page

Question 2.10Domain 5: Context management and reliabilitySelect two

During multi-hour codebase exploration sessions, the agent starts answering from “typical patterns” instead of the specific classes it discovered earlier. Which TWO practices counteract this context degradation? (Select TWO.)

Show answer

Correct: B, E

Both practices manage what occupies the context: a scratchpad persists precise findings outside the degrading conversation, and subagent delegation keeps verbose exploration out of the main window entirely, returning only distilled summaries.

Why not the others: A postpones the same degradation at higher cost; C and D add more text to an already saturated context without removing any of the noise causing the problem.

Study this:Domain 5 task statements on the CCAR-F page

Scenario 3: Multi-Agent Research System

A coordinator agent built on the Claude Agent SDK delegates to specialized subagents — web search, document analysis, synthesis, and report generation — to research topics and produce comprehensive, cited reports.

Question 3.1Domain 1: Agentic architecture and orchestrationSelect one

Your coordinator's system prompt tells it to delegate research to subagents, but at runtime it never spawns any — it attempts all the research itself. Its configuration restricts it to research-planning tools. What is the most likely cause?

Show answer

Correct: D

Subagent spawning happens through the Task tool. A coordinator whose allowedTools omits “Task” has no mechanism to delegate, no matter how clearly its prompt describes the intention — capability configuration trumps instruction.

Why not the others: A and C look for the failure in comprehension or emphasis when the tool inventory makes delegation impossible; B describes a startup model that does not exist — subagents are spawned on demand.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 3.2Domain 1: Agentic architecture and orchestrationSelect one

The web search subagent gathers excellent findings, but the synthesis subagent's reports are generic and reference none of them. The coordinator invokes synthesis with the prompt “Synthesize the research findings.” What is wrong?

Show answer

Correct: B

Subagent context isolation is the rule: each subagent sees only what its prompt contains. “The research findings” refers to material the synthesis agent has never seen — the coordinator must pass the findings explicitly.

Why not the others: A adds reasoning capacity over an empty input; C duplicates the search agent's role instead of fixing the handoff; D is not the missing ingredient — data is.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 3.3Domain 1: Agentic architecture and orchestrationSelect one

The coordinator currently invokes the web search subagent, waits for completion, then invokes the document analysis subagent — doubling research latency even though the two tasks are independent. How do you run them in parallel?

Show answer

Correct: A

Parallel spawning is achieved by emitting multiple Task tool calls in one coordinator response rather than across separate turns — independent workstreams then execute concurrently.

Why not the others: B changes nothing about scheduling; C is massive infrastructure duplication for a one-line orchestration fix; D is false — parallel Task calls are a documented pattern.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 3.4Domain 1: Agentic architecture and orchestrationSelect one

Your coordinator gives subagents rigid step-by-step procedures (“run these exact five queries in this order”). Subagents fail whenever a topic doesn't fit the script. How should coordinator prompts be designed instead?

Show answer

Correct: C

Goal-and-criteria prompts preserve subagent adaptability: the coordinator defines success, the subagent chooses the path — which is why the agent (not a fixed script) is there at all.

Why not the others: A is an arms race against topic variety that scripts always lose; B removes the goal along with the script; D reintroduces a human into a loop designed to run autonomously.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 3.5Domain 1: Agentic architecture and orchestrationSelect one

Completed reports are coherent but shallow on some subtopics. You want the system to notice and repair its own coverage gaps before finalizing. Which orchestration pattern achieves this?

Show answer

Correct: B

Iterative refinement closes the quality loop: evaluate coverage, dispatch targeted follow-up research where gaps exist, re-synthesize — repeating until the report meets criteria rather than hoping the first pass suffices.

Why not the others: A ships the known defect; C fills gaps with uncited generalities — the opposite of a cited research product; D doubles cost blindly with no gap-detection to aim the second pass.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 3.6Domain 2: Tool design and MCP integrationSelect one

Every subagent currently receives the full 18-tool catalog. Logs show the synthesis agent attempting web searches and the search agent trying document parsing — with frequent wrong-tool selections everywhere. What is the correct redesign?

Show answer

Correct: D

Tool distribution is an architectural control: agents choose more reliably among 4–5 role-relevant tools than among 18, and tools outside an agent's specialization are misused precisely because they are available.

Why not the others: A adds selection complexity to solve selection complexity; B changes ordering, not decision difficulty; C asks prompts to fight an inventory problem configuration should fix.

Study this:Domain 2 task statements on the CCAR-F page

Question 3.7Domain 2: Tool design and MCP integrationSelect one

Subagents burn many tool calls just discovering what data exists — listing available document collections, probing for issue summaries, checking what schemas are present — before real work begins. Which MCP capability reduces this?

Show answer

Correct: A

MCP resources exist for exactly this: exposing catalogs of available content so agents start informed. Discovery becomes a lookup instead of a spelunking expedition of exploratory calls.

Why not the others: B pays for the inefficiency rather than removing it; C goes stale the moment the data changes; D trades wasted calls for ignorance.

Study this:Domain 2 task statements on the CCAR-F page

Question 3.8Domain 5: Context management and reliabilitySelect one

Final reports state findings but cite nothing. Investigation shows each summarization step compresses source attribution away, so by synthesis time nobody knows which claim came from where. What is the structural fix?

Show answer

Correct: C

Provenance survives only if it is structural: claim-source mappings travel as data through every hop, so synthesis merges attributed claims instead of anonymous assertions. Attribution is preserved, never reconstructed.

Why not the others: A invents citations — worse than none in a research product; B advertises attribution the system no longer possesses; D reduces compression events but the remaining one still strips attribution.

Study this:Domain 5 task statements on the CCAR-F page

Question 3.9Domain 5: Context management and reliabilitySelect two

Two credible sources report different figures for the same market's size, and one subagent's summary simply picked the larger number. Which TWO practices produce correct handling of conflicting source data? (Select TWO.)

Show answer

Correct: A, D

Conflicts are information: preserve both values with attribution and surface the disagreement for deliberate reconciliation — and carry dates in structured output, since “conflicting” figures often just measure different moments.

Why not the others: B invents a number no source reported; C automates a reconciliation that needs judgment — recency is context, not an override rule; E deletes two credible sources because they disagree.

Study this:Domain 5 task statements on the CCAR-F page

Question 3.10Domain 5: Context management and reliabilitySelect two

You are designing how the web search subagent behaves when its searches fail or return nothing. Which TWO behaviors are correct? (Select TWO.)

Show answer

Correct: B, E

Resilient error propagation is layered and honest: handle locally what is locally fixable, escalate the rest with context the coordinator can act on, and never conflate “the search broke” with “the search found nothing.”

Why not the others: A makes any single failure fatal when partial-result strategies exist; C is silent suppression — failure dressed as fact; D hides the very context that recovery decisions need.

Study this:Domain 5 task statements on the CCAR-F page

Scenario 4: Developer Productivity with Claude

You are building developer productivity tooling on the Claude Agent SDK: helping engineers explore unfamiliar codebases, understand legacy systems, generate boilerplate, and automate repetitive tasks — using the built-in tools (Read, Write, Edit, Bash, Grep, Glob) plus MCP servers.

Question 4.1Domain 2: Tool design and MCP integrationSelect two

The agent must (a) locate every file matching the test naming convention anywhere in the repo, and (b) find every place the string “PaymentDeclinedError” appears in code. Which TWO tool selections are correct? (Select TWO.)

Show answer

Correct: A, C

The division of labor is clean: Glob matches file paths against patterns (names, extensions, directories); Grep searches file contents for patterns (identifiers, error strings, imports). Each task maps to exactly one of them.

Why not the others: B and D swap the tools into each other's territory; E abandons both purpose-built tools for a brute-force pipeline that floods context.

Study this:Domain 2 task statements on the CCAR-F page

Question 4.2Domain 2: Tool design and MCP integrationSelect one

The agent attempts an Edit on a legacy file and fails: the anchor text it targeted appears in six places, so the unique-match requirement cannot be satisfied. What is the standard fallback?

Show answer

Correct: D

Edit depends on unique text matching; when a file's repetitive structure defeats that, Read + Write performs the modification reliably on the whole file. It is the documented fallback for exactly this failure.

Why not the others: A mutilates code to satisfy the tool; B retries a deterministic failure — the sixfold match will not resolve itself; C swaps a controlled file operation for fragile stream editing.

Study this:Domain 2 task statements on the CCAR-F page

Question 4.3Domain 2: Tool design and MCP integrationSelect one

Asked how the billing module works, the agent Reads dozens of files upfront and exhausts its context before answering. What is the correct exploration strategy for building codebase understanding?

Show answer

Correct: B

Incremental exploration is the pattern: search first to find where the relevant code lives, then read narrowly along the traced paths. Context is spent on the files that matter rather than on everything alphabetically prior to them.

Why not the others: A spends the budget by filename accident; C outsources the agent's job to its user; D trusts documentation to describe code accurately — in a legacy system, a famous last assumption.

Study this:Domain 2 task statements on the CCAR-F page

Question 4.4Domain 2: Tool design and MCP integrationSelect one

The team shares a GitHub MCP server that needs an auth token, and you also run a personal, experimental MCP server you don't want to impose on anyone. How should these be configured?

Show answer

Correct: A

Scoping follows audience: project .mcp.json distributes team tooling via version control, with ${VAR} expansion keeping credentials out of the repo; ~/.claude.json holds personal and experimental servers that stay yours.

Why not the others: B commits a live secret to version control; C makes shared infrastructure a manual wiki chore that drifts; D puts server configuration in files that don't configure servers.

Study this:Domain 2 task statements on the CCAR-F page

Question 4.5Domain 3: Claude Code configuration and workflowsSelect one

Two tasks arrive: fixing an off-by-one bug in one function with a clear stack trace, and migrating the codebase's HTTP library — touching 45+ files with several viable approaches. How should plan mode and direct execution be assigned?

Show answer

Correct: C

The assignment rule: direct execution for simple, well-scoped changes; plan mode where scale, architectural implications, or competing approaches make design-before-commitment valuable — like a 45-file migration.

Why not the others: A taxes a trivial fix with ceremony; B invites costly rework by executing a large migration unplanned; D inverts the rule on both tasks.

Study this:Domain 3 task statements on the CCAR-F page

Question 4.6Domain 3: Claude Code configuration and workflowsSelect one

Developers keep invoking your /generate-fixture skill bare, without the entity type and record count it needs, then get confused by the results. Which frontmatter option addresses this?

Show answer

Correct: D

argument-hint is the frontmatter mechanism for exactly this: skills that need parameters can prompt for them on bare invocation instead of running underspecified.

Why not the others: A isolates output, not input requirements; B constrains tools, not arguments; C documents the parameters for whoever reads docs — the invocation still runs bare.

Study this:Domain 3 task statements on the CCAR-F page

Question 4.7Domain 3: Claude Code configuration and workflowsSelect one

You must decide where two things live: (1) the team's universal coding standards that should shape every session, and (2) a multi-step release-notes workflow used a few times per month. What is the correct placement?

Show answer

Correct: B

The dividing line: CLAUDE.md for universal, always-relevant standards; skills for on-demand, task-specific workflows. Each mechanism carries the load it was designed for.

Why not the others: A makes universal standards opt-in — they will be skipped; C loads a monthly workflow into every session's context forever; D inverts both placements.

Study this:Domain 3 task statements on the CCAR-F page

Question 4.8Domain 1: Agentic architecture and orchestrationSelect one

The task is open-ended: “add comprehensive tests to this legacy codebase.” Nobody knows yet where the risk concentrates or what depends on what. Which decomposition approach fits?

Show answer

Correct: A

Open-ended tasks call for adaptive decomposition: understand the terrain, prioritize by impact, and let the plan evolve with what each step reveals — the opposite of a fixed pipeline chosen before anything is known.

Why not the others: B spends effort by directory-listing order rather than risk; C asks one pass to do what requires discovery; D uses recency as a proxy for importance — legacy risk often lives in old, untouched code.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 4.9Domain 1: Agentic architecture and orchestrationSelect one

You are choosing decomposition strategies for two workflows: a code review that always checks the same five aspects, and a production-incident investigation whose next step depends on what each finding reveals. Which pairing is right?

Show answer

Correct: C

The selection rule: fixed sequential pipelines for predictable multi-aspect work, adaptive decomposition where the path emerges from intermediate findings. Each workflow gets the structure its uncertainty profile demands.

Why not the others: A pays adaptivity overhead on a task with no uncertainty; B forces an investigation to follow steps written before the evidence existed; D assigns each strategy to the workflow that defeats it.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Question 4.10Domain 1: Agentic architecture and orchestrationSelect two

You are writing AgentDefinition configurations for the productivity system's subagents. Which TWO statements about subagents are accurate? (Select TWO.)

Show answer

Correct: B, D

Two load-bearing facts: subagents are configured individually (description, system prompt, tool restrictions), and they are isolated — no inherited history, no memory across invocations, so context passing is always explicit.

Why not the others: A and C invert the isolation and spawning models — context never flows automatically, and Task is the spawning mechanism; E is false — tool restrictions are configuration, not suggestion.

Study this:Claude Agent SDK, Part 1: The agent loop is just a while loop

Scenario 5: Claude Code for Continuous Integration

You are integrating Claude Code into a CI/CD pipeline for automated code review, test generation, and pull-request feedback — designing prompts that produce actionable findings while minimizing false positives.

Question 5.1Domain 3: Claude Code configuration and workflowsSelect one

Your CI job must run Claude Code non-interactively and produce review findings your pipeline can parse and post as inline PR comments. Which invocation is correct?

Show answer

Correct: B

The CI trio: -p (--print) for non-interactive execution, --output-format json for machine-readable output, and --json-schema to enforce the findings structure your pipeline consumes — no prose parsing, no input hangs.

Why not the others: A hangs waiting for interactive input and then scrapes prose; C invents flags that do not exist; D solves the hang but leaves the pipeline regex-parsing unstructured text.

Study this:Domain 3 task statements on the CCAR-F page

Question 5.2Domain 3: Claude Code configuration and workflowsSelect one

CI-generated tests ignore your team's fixture library, duplicate helper setup, and test trivialities. Developers reject most of them. What is the configuration-level fix?

Show answer

Correct: D

CI invocations get their project context from CLAUDE.md. Standards, value criteria, and fixture documentation there directly raise generation quality — the model can only follow conventions it has been shown.

Why not the others: A scales the reject pile; B institutionalizes rework instead of fixing its cause; C reduces variability of output that is uninformed either way.

Study this:Domain 3 task statements on the CCAR-F page

Question 5.3Domain 3: Claude Code configuration and workflowsSelect one

Reviews re-run after each new commit to a PR, and the bot re-posts the same findings every time — developers now mute it. How should re-reviews be designed?

Show answer

Correct: A

Duplicate suppression is a context design problem: give the reviewer its own prior findings and the explicit instruction to report deltas — new issues plus unresolved carryovers — and the noise stops while coverage remains complete.

Why not the others: B misses issues that emerge from interaction with earlier commits; C leaves everything after the first push unreviewed; D disguises the spam developers already muted.

Study this:Domain 3 task statements on the CCAR-F page

Question 5.4Domain 3: Claude Code configuration and workflowsSelect one

You notice that when the same Claude Code session that generated a change also reviews it, the review is conspicuously gentle — missing issues an independent reviewer catches. Why, and what is the design implication?

Show answer

Correct: C

Session context isolation matters for review integrity: the generating session carries the rationale that produced the code, biasing it toward its own choices. An independent instance evaluates the code on its own terms.

Why not the others: A misreads a context effect as a personality setting; B changes capability when the problem is contaminated context — the same model reviews well when independent; D adds superstition to a mechanism that is about context, not calendars.

Study this:Domain 3 task statements on the CCAR-F page

Question 5.5Domain 4: Prompt engineering and structured outputSelect one

Your review prompt says “be conservative and only report high-confidence findings,” yet false positives remain high. What does effective precision engineering look like instead?

Show answer

Correct: D

Vague conservatism doesn't transfer — specific criteria do. Defining reportable versus skippable categories with concrete boundaries gives the model an operable decision rule, which is what actually moves precision.

Why not the others: A intensifies an instruction that has no operational content; B reorders noise instead of reducing it — self-stated confidence is poorly calibrated; C reviews less code with the same faulty judgment.

Study this:Domain 4 task statements on the CCAR-F page

Question 5.6Domain 4: Prompt engineering and structured outputSelect one

Findings in the “code style” category are 70% false positives, and developers have begun dismissing security findings too — trust in the whole reviewer is collapsing. What is the right operational move?

Show answer

Correct: B

High false-positive categories are contagious: they teach developers to dismiss everything. Disabling the offender protects the credibility of accurate categories while its prompts are fixed offline — trust is the system's real asset.

Why not the others: A doubles down on the noise destroying trust; C relabels the same false positives; D asks humans to absorb a cost the configuration should eliminate.

Study this:Domain 4 task statements on the CCAR-F page

Question 5.7Domain 4: Prompt engineering and structured outputSelect one

The reviewer labels near-identical issues “critical” one day and “minor” the next. Severity-based merge gates are therefore unreliable. How do you get consistent severity classification?

Show answer

Correct: A

Consistency comes from operational definitions: severity levels anchored by concrete examples give the classifier something to match, turning a vibe into a rubric. That is what makes severity gates dependable.

Why not the others: B discards the signal the merge gate needs; C statistically launders an unanchored judgment; D measures size, not impact — a one-line auth bypass outranks a fifty-line comment tweak.

Study this:Domain 4 task statements on the CCAR-F page

Question 5.8Domain 4: Prompt engineering and structured outputSelect one

The reviewer keeps flagging your codebase's accepted idiomatic patterns (e.g., intentional fall-throughs with comments) as bugs, while your detailed prose instructions haven't fixed it. What is the most effective addition?

Show answer

Correct: C

When prose fails to convey a judgment boundary, examples carry it: contrasted acceptable-versus-genuine cases with reasoning teach a distinction the model can generalize — the documented strength of few-shot prompting for false-positive reduction.

Why not the others: A creates a trivially wrong rule any commented bug defeats; B restates the goal without transferring the judgment; D exempts exactly the code that most needs reviewing.

Study this:Domain 4 task statements on the CCAR-F page

Question 5.9Domain 4: Prompt engineering and structured outputSelect two

Your team is deciding which CI workloads to move to the Message Batches API for its 50% cost savings. Which TWO statements are accurate? (Select TWO.)

Show answer

Correct: A, D

The batch decision rule in both directions: overnight and weekly jobs are the ideal profile for the discount; anything a developer waits on cannot tolerate a 24-hour, no-SLA window and stays synchronous.

Why not the others: B and C are false — there is no latency guarantee, and mid-request tool execution is unsupported; E is false — custom_id exists precisely to correlate request/response pairs.

Study this:Domain 4 task statements on the CCAR-F page

Question 5.10Domain 4: Prompt engineering and structured outputSelect two

You are adding few-shot examples to the review prompt. Which TWO practices reflect how few-shot prompting works best? (Select TWO.)

Show answer

Correct: B, E

Effective few-shot work is targeted and demonstrative: a handful of examples aimed at genuine ambiguity, with reasoning shown, plus format demonstrations that lock output structure — quality of targeting over quantity.

Why not the others: A bloats context and dilutes the signal of the examples that matter; C and D are false — examples complement explicit criteria, and code review is a prime few-shot use case.

Study this:Domain 4 task statements on the CCAR-F page

Scenario 6: Structured Data Extraction

You are building a structured data extraction system: pulling information from unstructured documents, validating output against JSON schemas, handling edge cases gracefully, and integrating with downstream systems.

Question 6.1Domain 4: Prompt engineering and structured outputSelect one

Your current pipeline asks Claude to “respond with JSON” in plain text; downstream parsing breaks on markdown fences, trailing commentary, and occasional malformed syntax. What is the most reliable structural fix?

Show answer

Correct: C

Tool use with JSON schemas is the reliability mechanism for structured output: the model's extraction arrives as schema-conformant tool input, not as prose that happens to contain JSON — syntax errors are eliminated by construction.

Why not the others: A improves the odds within a fundamentally text-shaped channel; B patches symptoms with fragile repairs; D relocates the same free-text problem to a different syntax.

Study this:Domain 4 task statements on the CCAR-F page

Question 6.2Domain 4: Prompt engineering and structured outputSelect one

You have several extraction tools — one per document type — and incoming documents of unknown type. The model must always produce a structured extraction, choosing the appropriate schema itself, and never reply with conversational text. Which tool_choice setting is correct?

Show answer

Correct: A

The three modes map to intent: “any” compels a tool call while preserving the model's choice among schemas — exactly right for unknown document types that must always yield structured output.

Why not the others: B (and D, which defaults to it) permits conversational text instead of a tool call; C welds every document to one schema when types vary.

Study this:Domain 4 task statements on the CCAR-F page

Question 6.3Domain 4: Prompt engineering and structured outputSelect one

Your invoice schema marks vendor_tax_id as required. On invoices that genuinely lack a tax ID, the model fabricates plausible-looking values to satisfy the schema. What is the schema-level fix?

Show answer

Correct: D

Required fields on possibly-absent information force fabrication — the schema leaves no honest answer. Nullable/optional fields give the model a legitimate way to say “not present,” which is the designed prevention for this failure.

Why not the others: A pits an instruction against a structural requirement that demands a value; B catches well-formed fabrications only by luck; C makes invented values more conservative-looking, not less invented.

Study this:Domain 4 task statements on the CCAR-F page

Question 6.4Domain 4: Prompt engineering and structured outputSelect one

Since adopting tool use, extractions are always syntactically valid — yet invoices arrive where line items don't sum to the stated total, and values occasionally land in the wrong fields. What should you understand and do?

Show answer

Correct: B

The boundary of the guarantee: tool use ensures structure, not truth. Semantic errors — sums that don't reconcile, transposed fields — need a semantic validation layer, with self-check fields like calculated_total making discrepancies machine-visible.

Why not the others: A misunderstands what was promised: shape, not semantics; C destroys the structure that downstream systems depend on; D retries until errors align by chance rather than detecting them.

Study this:Domain 4 task statements on the CCAR-F page

Question 6.5Domain 4: Prompt engineering and structured outputSelect one

An extraction fails Pydantic validation with two specific field errors. You will retry. What should the retry request contain — and when would you skip retrying altogether?

Show answer

Correct: C

Retry-with-error-feedback works because the model sees what it produced, what was wrong, and the source to correct against. And the boundary matters: format and structural errors are retryable; information absent from the document is not.

Why not the others: A retries blind — the model can't fix errors it isn't shown; B removes the document and extraction the correction must reference; D abandons the failed extraction rather than repairing it.

Study this:Domain 4 task statements on the CCAR-F page

Question 6.6Domain 4: Prompt engineering and structured outputSelect one

An overnight batch of 10,000 documents completes with 200 failures: most are oversized documents that blew past context limits, plus some transient errors. What is the correct failure-handling workflow?

Show answer

Correct: A

custom_id exists for exactly this: correlate failures to their source documents, fix what caused each failure (chunk the oversized ones), and resubmit only the fixed subset — paying again for 200 documents, not 10,000.

Why not the others: B reprocesses 9,800 successes to retry 200 failures; C silently drops 2% of the corpus; D misunderstands context limits, which belong to the model, not the API path — unchunked oversized documents fail synchronously too.

Study this:Domain 4 task statements on the CCAR-F page

Question 6.7Domain 2: Tool design and MCP integrationSelect one

A single analyze_document tool handles extraction, summarization, and claim verification, chosen by a mode parameter. The agent regularly picks the wrong mode and results are inconsistent. What is the recommended redesign?

Show answer

Correct: D

Purpose-specific tools turn a hidden mode decision into a visible selection decision — the thing tool descriptions are good at guiding. Each tool's contract is explicit, and misrouting drops accordingly.

Why not the others: A buries the selection problem one layer deeper; B improves documentation of a structure that remains ambiguous; C reduces options while keeping the overloaded design.

Study this:Domain 2 task statements on the CCAR-F page

Question 6.8Domain 2: Tool design and MCP integrationSelect one

When your MCP extraction tool hits a parsing failure, it returns the message “Error: could not parse document” as an ordinary successful text result. The agent then treats that sentence as document content. What is the correct MCP pattern?

Show answer

Correct: B

isError is MCP's channel for communicating tool failure: it makes the error a machine-recognizable condition the agent can reason about, rather than text masquerading as a successful result.

Why not the others: A still relies on the model inferring failure from prose conventions; C replaces a mislabeled failure with a silent one; D turns a recoverable tool error into a transport-level breakdown.

Study this:Domain 2 task statements on the CCAR-F page

Question 6.9Domain 5: Context management and reliabilitySelect two

Your extraction system reports 97% aggregate accuracy, and leadership wants to cut human review of high-confidence extractions. Which TWO practices must precede that decision? (Select TWO.)

Show answer

Correct: A, C

Two safeguards make automation defensible: segmentation proves the average isn't hiding a failing document type or field, and stratified sampling of the “safe” population keeps measuring after the humans step back — catching drift and novel errors.

Why not the others: B trusts exactly the number that masks segment failures; D removes the instrumentation precisely when risk increases; E trusts self-flagged uncertainty, which misses the errors the model is confidently wrong about.

Study this:Domain 5 task statements on the CCAR-F page

Question 6.10Domain 5: Context management and reliabilitySelect two

Reviewer capacity covers only a fraction of extractions, so review attention must be routed where errors are likeliest. Which TWO practices form a sound routing design? (Select TWO.)

Show answer

Correct: B, D

Calibration then routing: field-level confidence scores become meaningful once thresholds are tuned on labeled data, and review capacity flows to the calibrated-low-confidence and ambiguous-source cases where errors actually cluster.

Why not the others: A uses uncalibrated confidence — the known-unreliable version of the right signal; C and E route by arrival order and page count, neither of which correlates with error risk.

Study this:Domain 5 task statements on the CCAR-F page

Quiz yourself in Claude

The same questions are on this site's MCP server. Add it to Claude once, then ask in plain words. Your Claude asks the question, waits for your answer, and only then checks it and explains.

Claude Code
claude mcp add --transport http zeeshare https://agent.zeeshare.com/mcp

Then try: "Quiz me on CCAR-F domain 3, five questions, and keep score."

Any MCP client works. The address is https://agent.zeeshare.com/mcp

Reference

Matthew Purcell, Claude Certified Architect – Foundations (CCAR-F) Practice Exam Question Set. Written following the CCAR-F exam guide v1.0 (July 2026) by someone who sat and passed the exam. Original practice questions, not actual exam content.