You are integrating Claude Code into a workflow that runs against a production database.
Which guardrail design most directly preserves safety on data-modifying operations?

• A. Allow Claude Code to write directly to the production database without subagent scoping, read-only credential defaults, or human confirmation gates on data-modifying operations.
• B. Configure the database MCP server with a read-only credential by default, restrict the subagent's tool list to read-only operations, and require explicit human confirmation on any operation that would modify data.
• C. Configure the database MCP server with a fully privileged credential that can perform any read or write operation, and allow all operations to proceed without explicit human confirmation.
• D. Disable all logging and auditing on database operations through the MCP server to reduce alert noise, removing the observability needed to detect unintended data modifications.

You are building an ethics review checklist for deployments supported by artificial intelligence (AI). Which two checks belong on the list? (Select two.) Each correct answer presents a complete solution.

• A. Confirm that high-impact decisions retain human accountability rather than being attributed to the model.
• B. Confirm that vendor licensing terms permit the planned production use of the model.
• C. Verify that outputs do not rely on generalizations about people that the underlying data does not support.
• D. Confirm that latency and throughput targets are met across the supported user populations.
• E. Restrict the ethics review to outputs that exceed a defined model-confidence threshold.

You are integrating Claude Code into a team workflow and must complete the design and configuration steps before piloting the integrated workflow with a small group.
Which two steps must be completed BEFORE piloting the integrated workflow? (Select two.) Each correct answer presents part of the solution.

• A. Iterate the integrated workflow based on pilot findings before broader rollout to the team.
• B. Configure the project-scope MCP servers, permissions, subagents, and persistent project context.
• C. Negotiate the workflow change with affected teams and obtain formal sign-off from each manager.
• D. Identify the workflow steps where AI-assisted tooling adds value and where human authority must remain.
• E. Document the integrated workflow with handoff criteria, permission boundaries, and on-call runbooks.

You are responding to an adversarial input pattern in which users include text claiming admin authority and instructing the model to bypass safety restrictions.
Which combination of controls most effectively mitigates this attack pattern?

• A. Granting users any privilege level they assert in their message content, on the assumption that cooperative behavior requires honoring self-declared authority without independent verification.
• B. Prompt-level instructions that treat user content as untrusted data, runtime classifiers that detect override attempts, scoped tool permissions that cannot be elevated by user content, and audit logging of attempts.
• C. Removing all safety restrictions and guardrails to eliminate the attack surface that bypass attempts target, accepting that this makes the assistant unrestricted for all inputs.
• D. Trusting that the model will intrinsically recognize and reject all bypass attempts without prompt-level instructions, runtime classifiers, scoped permissions, or audit logging.

An engineer inadvertently commits an API key to the repository by placing it in .claude/settings.json.
Which configuration design principle was violated?

• A. MCP server definitions must reside in environment variables to prevent scope conflicts.
• B. Project-scope configuration should always override user-scope configuration.
• C. Credentials must be resolved at runtime from a secret store and never stored in version-controlled files.
• D. Managed configuration must be applied before project-scope configuration is read.