Discuss Anthropic CCAR-P Exam Topic 3 Question 3

You are reviewing an integration specification for security gaps.

Which two findings constitute valid security gaps in the specification? (Select two.)

Each correct answer presents a complete solution.

ATool calls execute server-side under a least-privilege service principal scoped to the requested action.

BService credentials are placed in the prompt context, where they can leak into logs and traces.

CRole-based access control is enforced only at the response-rendering layer after the model accesses restricted data.

DPer-user OAuth tokens are exchanged with scope-restricted permissions and refreshed within the active session.

ETool inputs and outputs are encrypted in transit using transport-layer security between services.

Suggested Answer: B, C

Credentials must never be supplied as prompt content. Prompts can be retained in traces, debugging output, caches, or logs, and model output may inadvertently expose included secrets. Credentials should instead be resolved server-side through an approved secret store or delegated authentication mechanism. Option C is also a serious gap because post-response RBAC occurs after unauthorized data has already entered model context. Authorization must be enforced before retrieval and prompt construction. Options A, D, and E describe appropriate controls: least-privilege service identities, per-user scoped OAuth, and encrypted transport. Anthropic's prompt-leak guidance recommends excluding unnecessary sensitive information, while Claude Code security relies on permission-based enforcement rather than natural-language instructions alone. Reduce prompt leak

Get Premium CCAR-P Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

7 comments · newest first

Dorsey 2 days ago

A sounds okay to me, least-privilege is good practice.

Natalya 7 days ago

C is a big issue too. Access control should be enforced earlier.

Rocco 12 days ago

B is definitely a security gap. Credentials shouldn't be in logs!

Viva 17 days ago

D and E seem secure, but I can't recall if they could still have vulnerabilities.

Deja 22 days ago

C sounds familiar; I feel like we talked about how access control should be enforced earlier in the process.

Quentin 28 days ago

I think B is definitely a security gap because exposing credentials can lead to serious issues.

Albina 1 month ago

I remember discussing least-privilege principles, so A seems safe, but I'm not sure about the others.

Anthropic CCAR-P Exam - Topic 3 Question 3 Discussion