最新のCCAR-P問題集で試験を準備する

A research summarization assistant has been deployed for six months. A user has flagged that a generated summary contained a fabricated citation. The product team has asked whether the incident requires architectural action or whether it is an isolated case.
Which two Diligence-competency actions should you take? (Select two.)
Each correct answer presents part of the solution.

• A. Treat the incident as an anecdotal isolated case and take no further investigative action.
• B. Disable the assistant immediately for all current users without any prior diagnostic analysis.
• C. Review whether citation-grounding controls exist anywhere in the current generation pipeline.
• D. Communicate to users that the assistant does not fabricate output as a matter of design.
• E. Sample recent summaries to estimate the fabrication frequency across the population.

You are selecting a protocol for a single low-latency stateless tool call from a Claude-based assistant to an internal pricing service that already exposes a stable HTTP API.
Which integration mechanism is the most appropriate?

• A. A bespoke streaming protocol layered over an unrelated asynchronous message bus.
• B. An agent-to-agent handoff that introduces another Claude-based agent in front of the pricing service.
• C. A long-lived stateful session protocol for a stateless single-call interaction.
• D. A direct API call to the existing endpoint with the appropriate scoped credentials.

You are preparing a HIPAA-eligible deployment for a healthcare customer.
Which configuration supports HIPAA compliance using Anthropic-offered tools?

• A. Claude Free with no contractual addendum, since consumer products meet HIPAA requirements out of the box.
• B. Claude Enterprise with a signed Business Associate Agreement, Zero Data Retention enabled, and audit logging configured for compliance tracking.
• C. Disabling all audit logging so that no PHI is recorded in any log store, on the assumption that the absence of logs satisfies HIPAA requirements without a signed BAA.
• D. An ad-hoc personal Claude account used by individual clinicians for PHI-related tasks, with no Business Associate Agreement, no Zero Data Retention, and no audit logging configured.

The compliance team at a firm has approved a Claude Skill that generates client-facing investment summaries. The Skill includes the firm's required disclaimers and prohibited-language list. A product manager has asked whether additional guardrails are needed at the application layer or whether the Skill alone is sufficient.
Which two guardrail responsibilities should remain at the application layer rather than the Skill? (Select two.) Each correct answer presents part of the solution.

• A. Log every generated summary to the firm's compliance audit trail for retention.
• B. Format output sections according to the firm's standardized house style guidelines.
• C. Apply the prohibited-language list that the compliance team maintains and updates.
• D. Verify the requesting user is authorized to generate investment summaries at all.
• E. Apply the disclaimer template that the compliance team has standardized firm-wide.

You are running a controlled experiment to compare two prompts and must complete the design steps before executing the experiment.
Which two steps must be completed BEFORE running the experiment with random assignment? (Select two.) Each correct answer presents part of the solution.

• A. Define the hypothesis and the primary success metric for the comparison.
• B. Document the recommendation, the trade-offs accepted, and the alternatives considered.
• C. Determine the minimum detectable effect size and the sample size needed for power.
• D. Analyze the results against the predefined success metric and significance threshold.
• E. Decide whether to promote, reject, or iterate the candidate based on the analysis.