Anthropic CCDV-F - Claude Certified Developer-Foundations

The supplied examination source identifies D as correct. The statement "produce client memos faster" is a business objective , not an implementable engineering requirement. The first engineering activity is therefore requirements decomposition: determine what functionality is required and what technical characteristics must support it.

Functional requirements might specify how analysts provide source information, what stages the agent performs, whether it researches, outlines, drafts, revises, or cites material, which systems it accesses, what output it returns, and where human approval occurs. Infrastructure and non-functional requirements then define latency, access control, confidentiality, context size, availability, auditability, model selection, integration interfaces, token cost, observability, and operational constraints.

Anthropic's developer lifecycle similarly separates defining measurable success criteria from choosing and implementing model capabilities. Its evaluation guidance emphasizes establishing specific, measurable success criteria before optimizing a model or prompt. Claude's agent configuration also separates implementation components such as the model, system prompt, tools, MCP servers, and Skills—choices that logically follow requirement definition.

A is useful discovery but prematurely assumes a prompt-driven drafting implementation. B is precedent-driven rather than requirement-driven. C selects technology before defining what the system must accomplish.

Relevant topics: Understanding Reqs, functional requirements, infrastructure requirements, non-functional requirements, acceptance criteria, and solution decomposition .

Option B creates a clear separation between persistent application instructions and per-request user content. Stable behavioral rules—role, output conventions, formatting constraints, policies, and other instructions intended to apply across requests—belong in the system-level instruction layer. User messages should primarily carry task-specific input and requirements that vary from interaction to interaction.

Anthropic’s Messages API defines the system prompt specifically as the mechanism for providing overarching context and instructions to Claude. Current guidance likewise recommends the top-level system field for instructions that should apply from the beginning of the conversation, while more transient information belongs in conversation messages.

A mixes persistent application behavior with user-controlled content and weakens separation of concerns. C preserves the inconsistent architecture responsible for the problem. D duplicates instructions unnecessarily, wastes context tokens, and increases the possibility that future edits create conflicting versions of the same rule.

Consolidating stable instructions also makes prompts easier to version, evaluate, review, and maintain. Therefore, B is the correct design. Relevant Study Guide topics: system prompts, instruction hierarchy, prompt organization, formatting consistency, separation of concerns, and maintainable prompt construction.

D applies configuration as code and is the answer explicitly selected in the supplied examination source. Claude Code treats project configuration as part of the repository's working context. Anthropic documents project-level CLAUDE.md as the mechanism for providing project instructions and context, while shared project configuration belongs in .claude/settings.json. Crucially, Anthropic states that .claude/settings.json is intended to be checked into source control and shared with the team .

Keeping these files alongside the code establishes a single versioned relationship between application behavior and the configuration that influences Claude Code. Standard pull requests then provide diffs, peer review, ownership controls, CI validation, audit history, and straightforward rollback. A particular commit can therefore reproduce both source code and its associated Claude project configuration.

A creates competing copies and synchronization risk. B artificially separates behavior configuration from the code version it affects. C creates the same problem specifically for settings.json.

Developer-local values remain distinct: .claude/settings.local.json exists specifically for settings that should not be committed.

Relevant Claude Developer topics: Confia Management, CLAUDE.md, settings.json, configuration as code, source control, pull-request review, reproducibility, auditability, and team-shared Claude Code configuration .

Option D applies a fundamental production engineering principle: treat externally generated data as potentially malformed and parse it defensively before use. Downstream application logic should not assume that every field exists, every type is correct, or every unexpected property can safely be ignored. Instead, the parser should validate expected structures, handle optional or missing values deliberately, reject incompatible types, and convert failures into controlled application errors rather than process crashes.

Anthropic's Structured Outputs documentation identifies exactly these failure classes for unconstrained model output: malformed JSON, missing required fields, inconsistent types, and schema violations can break downstream applications. Current Structured Outputs and strict tool-use capabilities can eliminate many schema-level failures through constrained decoding, but defensive handling remains an important software boundary when unexpected data can still arise from external services, legacy paths, or semantic validation requirements.

A creates unnecessary outages. B hides failures and discards potentially recoverable data without observability. C deliberately postpones a reliability requirement until after deployment.

The supplied question identifies D as correct. Relevant topics: Claude App Design, defensive programming, structured output, schema validation, parsing, error handling, downstream reliability, and type safety.

===============

The supplied exam source identifies C . Tool descriptions are part of Claude's runtime decision context. A descriptive function name can indicate what a tool appears to do, but it may not clearly tell Claude when to use it, when not to use it, what assumptions apply, or how it differs from similar tools .

Anthropic's official tool-use documentation states that Claude determines whether to call a tool based on the user's request and the tool's description. Its tool-definition guidance defines description as detailed plaintext describing what the tool does, when it should be used, and how it behaves. Anthropic's troubleshooting guidance also identifies ambiguous descriptions as a cause of selecting the wrong tool and recommends differentiating tools by when they should be used, not only by what they do.

A can supplement descriptions with examples but should not universally replace them. B incorrectly assumes names provide sufficient semantics. D removes the information from Claude's actual decision context.

Therefore, tool descriptions are operational metadata for model routing, not merely documentation for developers.

Relevant Claude Developer topics: Agent Construction, tool definitions, tool descriptions, tool selection, schema design, disambiguation, routing, and reliable tool use .

===============

Option C is the correct application of context isolation. A specialized step should receive the minimum relevant information required for its own task rather than inheriting an ever-growing global transcript. This improves signal-to-noise ratio, limits accidental cross-task influence, controls token usage, and makes individual components easier to evaluate.

Anthropic’s context-engineering guidance explicitly identifies multi-agent architectures as a technique for long-horizon work. Specialized subagents can operate with their own context windows and return condensed results to an orchestrating agent rather than exposing every agent to every intermediate detail. This architecture protects each reasoning process from irrelevant history while allowing the overall system to preserve necessary state.

Options A and D represent the opposite approach: indiscriminately loading the full prior history. Larger context is not automatically better; Anthropic warns that excessive context can introduce context pollution and degrade retrieval or attention to important information. B also fails because a single global prompt does not isolate state or tailor the information available to each processing stage.

Therefore, C best implements scoped reasoning boundaries. Relevant Claude Developer topics are multi-agent architecture, subagents, context isolation, context engineering, orchestration, and long-running workflow design.

===============

Option B is the correct fault-tolerance pattern for a long-running stateful workflow. A checkpoint captures enough durable execution state—completed steps, intermediate results, pending work, identifiers, and other necessary task state—to restart from a known consistent point rather than replaying the entire workflow after interruption.

This pattern is consistent with Claude's current stateful agent architecture. Anthropic's Managed Agents documentation describes persistent sessions that preserve conversation history across interactions. When a session becomes idle, its sandbox can be checkpointed so filesystem and execution artifacts are available when work resumes. The certification concept is broader than that specific hosted implementation: long-running agent systems should externalize recoverable state at meaningful boundaries.

A longer timeout does not protect against process crashes, infrastructure restarts, network failures, or deployment interruptions. C doubles resource consumption and creates consistency problems without providing deterministic recovery. D wastes completed work and may repeat external side effects.

Therefore, B provides controlled resumability and minimizes repeated processing. Relevant Study Guide topics: checkpointing, persistent state, resumable workflows, long-running agents, fault tolerance, idempotency, and recovery architecture.

===============

Option D reflects the correct architecture-selection principle: extension mechanisms should be selected according to what the capability must accomplish rather than familiarity, novelty, or implementation convenience. Anthropic explicitly distinguishes Claude extension mechanisms by purpose. Built-in tools cover common capabilities already supported by the platform. Custom tools expose application-specific callable operations through defined schemas. Skills package reusable knowledge, instructions, and workflows. MCP connects Claude to external systems, APIs, databases, and services through a standardized protocol.

The decision therefore depends on scope and integration boundaries. A reusable procedural workflow may belong in a Skill; access to an external enterprise system may warrant MCP; a narrowly application-specific operation can be a custom tool; and a built-in tool should generally be preferred when it already satisfies the requirement.

A makes prior team experience the architectural criterion rather than requirements. B assumes newer technology is inherently better. C optimizes implementation convenience without considering maintainability, interoperability, or reuse.

Therefore, D is the appropriate selection rule. Relevant Study Guide topics: built-in tools, custom tools, Skills, MCP, extension architecture, reuse boundaries, and capability selection.

===============

Option B is correct because destructive production operations require deterministic enforcement outside the model’s probabilistic reasoning. Claude Code hooks can intercept lifecycle events before tool execution and explicitly allow, deny, or request further handling based on concrete rules.

Anthropic’s hooks documentation provides this exact security pattern. A PreToolUse hook can inspect a proposed command before execution and return a blocking decision. Anthropic’s example demonstrates blocking destructive operations such as drop table, while other commands proceed normally.

That mechanism can be adapted to database controls: block DROP, destructive DELETE, unauthorized schema modifications, or production writes; require explicit approval for high-risk operations; and allow read-only or known-safe queries automatically.

A merely increases the probability that someone might notice an unsafe operation and does not prevent execution. C assumes model capability can replace access controls, which is an unacceptable safety boundary. D is useful behavioral guidance but remains probabilistic and cannot guarantee prevention.

Therefore, B creates a deterministic control between model intent and side-effect execution. Relevant Study Guide topics: Claude hooks, PreToolUse, tool governance, deterministic enforcement, approval gates, least privilege, and destructive-operation protection.

===============