Anthropic CCA-F Practice Test 35
Question 340
A user says 'make the app faster' without naming a workload or metric. Which approach should precede code changes?
- Ground the plan in inspected source paths and a verification strategy
- Clarify and measure performance goals before choosing an optimization plan
- Perform the targeted edit directly and verify it without a large planning phase
- Use plan mode to inspect dependencies and agree on the implementation sequence
Explanation
Correct Answer
B:Define an explicit baseline and success criteria before optimizing the coding or orchestration workflow. Measure the current cost, latency or failure behavior so the team knows which tradeoff actually matters. Without a target, an agent may repeatedly change code that already meets requirements or improve speed while reducing correctness, producing unnecessary churn rather than a measurable benefit.
Incorrect Answers
A:A useful plan is tied to actual system constraints, not generic architecture language. This is not a substitute for “Clarify and measure performance goals before choosing an optimization plan”; that control is necessary in the stated circumstances. Without a target, an agent may repeatedly change code that already meets requirements or improve speed while reducing correctness, producing unnecessary churn rather than a measurable benefit.
C:Planning overhead is unnecessary for a small well-understood change. Although useful elsewhere, it is not the direct mechanism to establish measurable goals before ambiguous optimization.
D:Plan mode can organize an optimization effort, but 'make the app faster' has no measurable success criterion. First ask which workload is slow and capture baseline latency or throughput. Choosing an architecture before defining the target may optimize an irrelevant part of the application.
Question 341
A developer needs a new import added to one file after a compiler error identifies the missing symbol. When can direct edits be used?
- Use direct execution when the required change and verification path are unambiguous
- Ground the plan in inspected source paths and a verification strategy
- Plan by mapping current authentication paths, ownership and tests before editing
- Apply the import change directly and skip the identified compiler or focused test because the missing symbol is obvious
Explanation
Correct Answer
A:The error points to a specific bounded correction. The agent should still inspect the context and validate compilation afterward. A compiler diagnostic identifying a missing symbol and its target file provides enough scope for a direct edit. Verify the correct import and re-run the compiler rather than adding a broad architecture exercise.
Incorrect Answers
B:A useful plan is tied to actual system constraints, not generic architecture language. This capability does not directly apply a clearly scoped code fix without full redesign.
C:Mapping a monorepo's authentication architecture would be disproportionate for one missing import identified by a compiler. The changed symbol and file are known, so make the targeted edit and verify it with the focused compilation or test rather than begin broad planning.
D:A small, well-understood import fix can be made without a separate planning phase, but it still needs verification against the compiler and relevant tests. Skipping the identified failing check leaves no evidence that the dependency resolves or that a new import conflict was not introduced. The keyed principle allows direct editing only when the scope and verification path are clear.
Question 342
An API endpoint rename affects mobile clients and a third-party integration. What should an architect plan?
- Inventory consumers and design a compatibility or migration sequence before modifying the endpoint
- Use plan mode to evaluate trade-offs and capture decision criteria
- Keep planning separate until explicit approval is recorded for execution
- Remove the legacy endpoint immediately without checking mobile or third-party consumers.
Explanation
Correct Answer
A:External dependencies create coordination risk. A plan can preserve backward compatibility and define staged rollout and rollback. An external integration may still call the old API path after internal code compiles. Identify the affected consumers and design a compatibility period or coordinated cutover before renaming a public endpoint.
Incorrect Answers
B:Evaluating a queue versus synchronous calls is an architecture trade-off, not the main risk in renaming a public API endpoint. Inventory dependent mobile and third-party clients, then plan a compatibility or migration window so deployed consumers do not break.
C:Requiring explicit execution approval is useful for sensitive changes, but it does not identify which old API clients would fail after a rename. The plan must first map external consumers, versioned contracts and a migration sequence, with approval handled at the appropriate execution boundary.
D:Mobile clients and third-party integrations may update on schedules the team does not control. Removing the endpoint before an inventory and compatibility plan can cause production failures. The architect should document consumers and an explicit migration period.
Question 343
A login-flow refactor adds token refresh and SSO. Which phase should explicitly identify threat boundaries?
- Keep planning separate until explicit approval is recorded for execution
- Plan by mapping current authentication paths, ownership and tests before editing
- Treat token refresh and SSO as display-only changes and avoid authentication trust-boundary analysis
- Plan the authentication architecture and review controls before writing implementation code
Explanation
Correct Answer
D:Threat-modeling before implementation identifies which roles can access new functions, which data cross trust boundaries and which failure modes matter. A proposed design should account for token custody, tool permissions and rollback paths before production changes. This planning is not merely documentation: it can reveal authorization gaps that would be expensive to repair after deployment.
Incorrect Answers
A:Separating planning from execution is good governance, but the question asks which phase should identify threats introduced by token refresh and SSO. The design plan must map trust boundaries and security controls before implementation; mere approval of an unexamined plan is insufficient.
B:Authentication spans trust boundaries and often multiple components. That addresses a different part of the system, not the requirement to design security boundaries before broad implementation.
C:Session and identity flows are security-critical and require explicit threat and permission assessment. SSO and refresh-token flows can change who is trusted and how sessions are renewed. Treating them as cosmetic UI work ignores credential storage, authorization and authentication failure cases that require dedicated tests.
Question 344
A repository migration touches many components with uncertain dependencies. Which use of plan mode is justified here?
- Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks
- Use plan mode first to inventory changes and validate a migration approach
- Start modifying unknown downstream consumers before reviewing their interface dependencies.
- Skip dependency inspection and begin mutating all affected modules because the repository has an existing CI job
Explanation
Correct Answer
B:A cross-component migration may involve dependencies that are not visible from the first file inspected. Use plan mode to inventory affected modules and consumers, choose an implementation order and identify compatibility and regression tests. Review the plan before editing so an apparently local change does not accidentally break upstream contracts or deployment steps.
Incorrect Answers
A:Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit. Here, a repository migration touches many components with uncertain dependencies. Use plan mode first to inventory changes and validate a migration approach. Planning reduces unintended broad edits when architecture and dependencies are uncertain.
C:Editing unknown consumers before identifying affected interfaces increases the likelihood of conflicting changes and regression. The planned migration should inventory dependencies, define safe sequencing and verify compatibility before source edits.
D:An existing CI job is useful after changes, but does not establish which components depend on the migrating interfaces. Writing first risks incompatible updates and difficult rollback. Plan mode should map affected systems and validation requirements before mutation begins.
Question 345
An engineer must update a checked-in generated API client after a server schema change. Which planning or execution decision best fits?
- Inspect affected interfaces and obtain a plan before mutating dependent modules
- Plan required validations and authorization before executing the change
- Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks
- Execute directly and run the relevant tests afterward
Explanation
Correct Answer
C:When an engineer must update a checked-in generated API client after a server schema change, the system should modify the authoritative generator inputs and rerun code generation with targeted compatibility checks. Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit. Associate findings with the actual commit or revision and suppress only verified duplicates, not genuine failures.
Incorrect Answers
A:Reviewing compatibility and rollback scope prevents accidental consumer breakage. Here, an engineer must update a checked-in generated API client after a server schema change. Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks. Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit.
B:Planning cannot replace actual approval but it can map the safe execution steps. Here, an engineer must update a checked-in generated API client after a server schema change. Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks. Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit.
D:Deterministic low-risk edits are faster when unnecessary deliberation is avoided. Here, an engineer must update a checked-in generated API client after a server schema change. Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks. Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit.
Question 346
A requested refactor could alter public API contracts. What should happen before direct code edits?
- Plan required validations and authorization before executing the change
- Execute directly and run the relevant tests afterward
- Reaffirm the bounded task and execute only authorized changes
- Inspect affected interfaces and obtain a plan before mutating dependent modules
Explanation
Correct Answer
D:A requested refactor could alter public API contracts. The relevant control is to inspect affected interfaces and obtain a plan before mutating dependent modules. Reviewing compatibility and rollback scope prevents accidental consumer breakage. Keep noninteractive execution, machine-readable results and exit status consistent for automated CI review.
Incorrect Answers
A:Planning cannot replace actual approval but it can map the safe execution steps. The required action is “Inspect affected interfaces and obtain a plan before mutating dependent modules”; the other measure addresses a separate concern. Reviewing compatibility and rollback scope prevents accidental consumer breakage.
B:Deterministic low-risk edits are faster when unnecessary deliberation is avoided. This is not a substitute for “Inspect affected interfaces and obtain a plan before mutating dependent modules”; that control is necessary in the stated circumstances. Reviewing compatibility and rollback scope prevents accidental consumer breakage.
C:Direct work should preserve scope rather than converting a small request into an unsolicited redesign. Here, a requested refactor could alter public API contracts. Inspect affected interfaces and obtain a plan before mutating dependent modules. Reviewing compatibility and rollback scope prevents accidental consumer breakage.
Question 347
A security patch must be deployed through approved change control. Which use of plan mode is justified here?
- Plan required validations and authorization before executing the change
- Execute directly and run the relevant tests afterward
- Reaffirm the bounded task and execute only authorized changes
- Surface the unresolved dependency rather than silently choose an assumption
Explanation
Correct Answer
A:The relevant control is to plan required validations and authorization before executing the change. Planning cannot replace actual approval but it can map the safe execution steps. This matters when a security patch must be deployed through approved change control. Associate findings with the actual commit or revision and suppress only verified duplicates, not genuine failures.
Incorrect Answers
B:Deterministic low-risk edits are faster when unnecessary deliberation is avoided. Here, a security patch must be deployed through approved change control. Plan required validations and authorization before executing the change. Planning cannot replace actual approval but it can map the safe execution steps.
C:Direct work should preserve scope rather than converting a small request into an unsolicited redesign. This is not a substitute for “Plan required validations and authorization before executing the change”; that control is necessary in the stated circumstances. Planning cannot replace actual approval but it can map the safe execution steps.
D:A safe plan names what is unknown and prevents unsupported changes. Here, a security patch must be deployed through approved change control. Plan required validations and authorization before executing the change. Planning cannot replace actual approval but it can map the safe execution steps.
Question 348
A task is clearly bounded with a known test suite. Which planning or execution decision best fits?
- Reaffirm the bounded task and execute only authorized changes
- Execute directly and run the relevant tests afterward
- Surface the unresolved dependency rather than silently choose an assumption
- Use plan mode first to inventory changes and validate a migration approach
Explanation
Correct Answer
B:Deterministic low-risk edits are faster when unnecessary deliberation is avoided. For this situation, the system should execute directly and run the relevant tests afterward. The factual trigger is a task is clearly bounded with a known test suite. Keep noninteractive execution, machine-readable results and exit status consistent for automated CI review.
Incorrect Answers
A:Direct work should preserve scope rather than converting a small request into an unsolicited redesign. Here, a task is clearly bounded with a known test suite. Execute directly and run the relevant tests afterward. Deterministic low-risk edits are faster when unnecessary deliberation is avoided.
C:A safe plan names what is unknown and prevents unsupported changes. The required action is “Execute directly and run the relevant tests afterward”; the other measure addresses a separate concern. Deterministic low-risk edits are faster when unnecessary deliberation is avoided.
D:Planning reduces unintended broad edits when architecture and dependencies are uncertain. Here, a task is clearly bounded with a known test suite. Execute directly and run the relevant tests afterward. Deterministic low-risk edits are faster when unnecessary deliberation is avoided.
Question 349
An agent proposes extensive unrelated cleanup during a one-file fix. What should happen before direct code edits?
- Surface the unresolved dependency rather than silently choose an assumption
- Use plan mode first to inventory changes and validate a migration approach
- Reaffirm the bounded task and execute only authorized changes
- Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks
Explanation
Correct Answer
C:When an agent proposes extensive unrelated cleanup during a one-file fix, the system should reaffirm the bounded task and execute only authorized changes. Direct work should preserve scope rather than converting a small request into an unsolicited redesign. Associate findings with the actual commit or revision and suppress only verified duplicates, not genuine failures.
Incorrect Answers
A:A safe plan names what is unknown and prevents unsupported changes. Here, an agent proposes extensive unrelated cleanup during a one-file fix. Reaffirm the bounded task and execute only authorized changes. Direct work should preserve scope rather than converting a small request into an unsolicited redesign.
B:Planning reduces unintended broad edits when architecture and dependencies are uncertain. The proposed option cannot provide the specific “Reaffirm the bounded task and execute only authorized changes” behavior that the case requires. Direct work should preserve scope rather than converting a small request into an unsolicited redesign.
D:Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit. The required action is “Reaffirm the bounded task and execute only authorized changes”; the other measure addresses a separate concern. Direct work should preserve scope rather than converting a small request into an unsolicited redesign.
Question 350
A plan identifies a critical uncertainty that cannot be resolved from the repository. Which use of plan mode is justified here?
- Use plan mode first to inventory changes and validate a migration approach
- Modify the authoritative generator inputs and rerun code generation with targeted compatibility checks
- Inspect affected interfaces and obtain a plan before mutating dependent modules
- Surface the unresolved dependency rather than silently choose an assumption
Explanation
Correct Answer
D:A plan identifies a critical uncertainty that cannot be resolved from the repository. The relevant control is to surface the unresolved dependency rather than silently choose an assumption. A safe plan names what is unknown and prevents unsupported changes. Keep noninteractive execution, machine-readable results and exit status consistent for automated CI review.
Incorrect Answers
A:Planning reduces unintended broad edits when architecture and dependencies are uncertain. This is not a substitute for “Surface the unresolved dependency rather than silently choose an assumption”; that control is necessary in the stated circumstances. A safe plan names what is unknown and prevents unsupported changes.
B:Generated artifacts should be derived from their sources so regeneration will not silently overwrite a one-off manual edit. Here, a plan identifies a critical uncertainty that cannot be resolved from the repository. Surface the unresolved dependency rather than silently choose an assumption. A safe plan names what is unknown and prevents unsupported changes.
C:Reviewing compatibility and rollback scope prevents accidental consumer breakage. The proposed option cannot provide the specific “Surface the unresolved dependency rather than silently choose an assumption” behavior that the case requires. A safe plan names what is unknown and prevents unsupported changes.