Security & Permissions — CCDV-F Practice Question
A representative Claude Certified Developer - Foundations (CCDV-F) exam question on Security & Permissions. Work through it below, then read why each option is right or wrong.
Short answer
The correct answer is B. Enforce least privilege in application and tool authorization, exposing delete only to approved users with confirmation and audit logging.
Authorization must be enforced outside the model. Least privilege, explicit confirmation, and audit records protect consequential operations.
The Question
An internal agent can search documents and delete records. Most users only need search. What is the safest authorization model?
Why B is correct
Authorization must be enforced outside the model. Least privilege, explicit confirmation, and audit records protect consequential operations.
Why the other options are wrong
Option A does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.
Option C does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.
Option D does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.
Key idea: Security & Permissions
Authorization must be enforced outside the model. Least privilege, explicit confirmation, and audit records protect consequential operations. On the CCDV-F exam, questions in the "Security and Safety" domain test whether you can map a scenario's constraints to the right choice. Read the requirement carefully, eliminate options that violate any single constraint, and pick the one that satisfies all of them with the least operational overhead.
Ready to see how you'd score?
Take the free practice quiz and find out which Claude Certified Developer - Foundations domains you need to focus on. No signup required.
Practice 5 similar questions
Same cert, same or adjacent domain. Use these after reviewing the explanation.