AnthropicIntegration

Identity & Authorization — CCAR-P Practice Question

A representative Claude Certified Architect - Professional (CCAR-P) exam question on Identity & Authorization. Work through it below, then read why each option is right or wrong.

This question is part of the free Claude Certified Architect - Professional practice test.

Short answer

The correct answer is A. At the identity-aware application and tool boundary for every request, with least privilege and audit logs.

The model is not an authorization authority. Each tool call needs enforcement based on authenticated identity, resource, action, and policy.

The Question

An enterprise agent uses MCP tools to read and modify records. Where should authorization decisions be enforced?

AAt the identity-aware application and tool boundary for every request, with least privilege and audit logsCorrect

BIn the user's natural-language request

CBy hiding tool names

DOnly in the model prompt

Why A is correct

The model is not an authorization authority. Each tool call needs enforcement based on authenticated identity, resource, action, and policy.

Why the other options are wrong

Option B: In the user's natural-language request

Option B does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (A) is the only one that fully meets every constraint stated in the question.

Option C: By hiding tool names

Option C does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (A) is the only one that fully meets every constraint stated in the question.

Option D: Only in the model prompt

Option D does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (A) is the only one that fully meets every constraint stated in the question.

Key idea: Identity & Authorization

The model is not an authorization authority. Each tool call needs enforcement based on authenticated identity, resource, action, and policy. On the CCAR-P exam, questions in the "Integration" domain test whether you can map a scenario's constraints to the right choice. Read the requirement carefully, eliminate options that violate any single constraint, and pick the one that satisfies all of them with the least operational overhead.

Ready to see how you'd score?

Take the free practice quiz and find out which Claude Certified Architect - Professional domains you need to focus on. No signup required.

Take the free quiz See all 20+ practice questions

Practice 5 similar questions

Same cert, same or adjacent domain. Use these after reviewing the explanation.

Take the quiz →

1Discovery & Requirements — CCAR-P Practice QuestionSolution Design and Architecture 2Model Routing & Governance — CCAR-P Practice QuestionClaude Models, Prompting, and Context Engineering 3RAG & Evaluation — CCAR-P Practice QuestionIntegration 4Evals & Release Gate — CCAR-P Practice QuestionEvaluation, Testing, and Optimization 5Governance & Data Retention — CCAR-P Practice QuestionGovernance, Safety, and Risk Management

Related Claude Certified Architect - Professional Practice Questions

Discovery & Requirements — CCAR-P Practice Question→Model Routing & Governance — CCAR-P Practice Question→RAG & Evaluation — CCAR-P Practice Question→

Official sources used

Verify program and exam details at the source before scheduling.

AnthropicContextual Retrieval