Month End Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big75certs

Claude Certified Developer CCDV-F Exam Dumps

Page: 3 / 7
Total 95 questions

Claude Certified Developer-Foundations Questions and Answers

Question 9

A teammate is reviewing the team's threat model for a Claude application and has asked you to identify the categories of AI-specific threats that the model should cover. The teammate has already listed traditional web application threats and wants to know what additional categories apply to a Claude application.

Which AI-specific threat categories would you add?

Options:

A.

Cross-site scripting and SQL injection, because these traditional web application threats apply with equal weight to any application that uses Claude in any way.

B.

Network-level denial of service and physical infrastructure attacks, because these categories cover the threats most likely to affect any Claude application in production.

C.

Prompt injection, data leakage from prompts or context, jailbreak attempts, and unsafe model output that bypasses application controls.

D.

Supply chain attacks on the Claude SDK because the SDK itself is the only point of vulnerability that a Claude application introduces beyond traditional web application threats.

Question 10

Your Claude application's token costs have grown faster than expected. The team has not been tracking token usage by feature, so the team cannot identify which features are driving cost. The team is debating how to respond.

How would you respond?

Options:

A.

Tell the team that cost growth is unavoidable as the application scales and that no investigation will change the trajectory of the application's cost over the next several quarters.

B.

Switch every feature to the smallest model to cut cost broadly across the application during normal operation.

C.

Reduce token usage uniformly across all features by half, applying the cut evenly across the application during normal operation.

D.

Add token usage tracking by feature to the application's logging so the team can identify which features drive cost before recommending changes.

Question 11

Your Claude agent has access to a tool that retrieves customer records. A teammate has noticed that the agent occasionally calls the tool with arguments the schema does not declare, and the tool's downstream service returns an error each time. The teammate proposes loosening the schema so the tool accepts whatever arguments the model produces.

How would you respond?

Options:

A.

Add a system prompt instruction telling the model to produce schema-conforming arguments, treating the prompt instruction as the primary mechanism for keeping the agent's tool calls valid.

B.

Keep the schema strict, validate arguments before dispatching, and return a structured error so the agent can retry.

C.

Remove the schema entirely and rely on the downstream service to reject invalid calls, treating the downstream service as the team's primary enforcement layer.

D.

Loosen the schema as the teammate proposed so the downstream service receives every call the agent makes during normal operation.

Question 12

The team is debating whether to integrate with the Claude API directly or through a third-party abstraction layer that supports multiple LLM providers. The team has identified that all current and projected use cases run on Claude, no internal customer has requested LLM portability, and the team's product roadmap does not mention multi-provider support over the next two years. The third-party abstraction would add roughly 15 percent overhead in code complexity and introduce one additional dependency.

Which integration approach would you recommend?

Options:

A.

The third-party abstraction layer, on the grounds that multi-provider support is valuable for any application as a matter of long-term flexibility across vendors.

B.

Both integration paths in parallel, where the application uses each path on different runs to compare which performs better in production over time.

C.

A custom multi-provider abstraction layer the team builds in-house so that the team controls every part of the abstraction the application uses for its API calls.

D.

Direct integration with Claude through its SDK, because no multi-provider need exists and abstraction would add complexity that does not pay off.

Page: 3 / 7
Total 95 questions