Hooks & Guardrails — CCAR-F Practice Question
A representative Claude Certified Architect - Foundations (CCAR-F) exam question on Hooks & Guardrails. Work through it below, then read why each option is right or wrong.
Short answer
The correct answer is A. A deterministic pre-action hook or permission rule that rejects writes to the protected path.
A deterministic pre-action control enforces the protected-path invariant before mutation. Written guidance alone is advisory.
The Question
A team must prevent Claude Code from modifying generated migration files under any circumstances. What is the strongest control?
Why A is correct
A deterministic pre-action control enforces the protected-path invariant before mutation. Written guidance alone is advisory.
Why the other options are wrong
Option B does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (A) is the only one that fully meets every constraint stated in the question.
Option C does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (A) is the only one that fully meets every constraint stated in the question.
Option D does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (A) is the only one that fully meets every constraint stated in the question.
Key idea: Hooks & Guardrails
A deterministic pre-action control enforces the protected-path invariant before mutation. Written guidance alone is advisory. On the CCAR-F exam, questions in the "Claude Code Configuration and Workflows" domain test whether you can map a scenario's constraints to the right choice. Read the requirement carefully, eliminate options that violate any single constraint, and pick the one that satisfies all of them with the least operational overhead.
Ready to see how you'd score?
Take the free practice quiz and find out which Claude Certified Architect - Foundations domains you need to focus on. No signup required.
Practice 5 similar questions
Same cert, same or adjacent domain. Use these after reviewing the explanation.