AnthropicSecurity and Safety

Security & Permissions — CCDV-F Practice Question

A representative Claude Certified Developer - Foundations (CCDV-F) exam question on Security & Permissions. Work through it below, then read why each option is right or wrong.

Short answer

The correct answer is B. Enforce least privilege in application and tool authorization, exposing delete only to approved users with confirmation and audit logging.

Authorization must be enforced outside the model. Least privilege, explicit confirmation, and audit records protect consequential operations.

The Question

An internal agent can search documents and delete records. Most users only need search. What is the safest authorization model?

AGive every user both tools and rely on the prompt
BEnforce least privilege in application and tool authorization, exposing delete only to approved users with confirmation and audit loggingCorrect
CHide the delete tool name
DLet Claude decide each user's role

Why B is correct

Authorization must be enforced outside the model. Least privilege, explicit confirmation, and audit records protect consequential operations.

Why the other options are wrong

Option A: Give every user both tools and rely on the prompt

Option A does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.

Option C: Hide the delete tool name

Option C does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.

Option D: Let Claude decide each user's role

Option D does not satisfy the requirement in the scenario. Review the explanation above: the correct choice (B) is the only one that fully meets every constraint stated in the question.

Key idea: Security & Permissions

Authorization must be enforced outside the model. Least privilege, explicit confirmation, and audit records protect consequential operations. On the CCDV-F exam, questions in the "Security and Safety" domain test whether you can map a scenario's constraints to the right choice. Read the requirement carefully, eliminate options that violate any single constraint, and pick the one that satisfies all of them with the least operational overhead.

Ready to see how you'd score?

Take the free practice quiz and find out which Claude Certified Developer - Foundations domains you need to focus on. No signup required.

Practice 5 similar questions

Same cert, same or adjacent domain. Use these after reviewing the explanation.

Related Claude Certified Developer - Foundations Practice Questions