Exam CCAR-P Topic 1 Question 75 Discussion

Actual exam question for Anthropic's CCAR-P exam
Question #: 75
Topic #: 1
An engineer inadvertently commits an API key to the repository by placing it in .claude/settings.json.
Which configuration design principle was violated?

Suggested Answer: C Vote an answer

A shared project settings file is intended to be committed so that team-level configuration can travel with the repository. Consequently, it must never contain API keys, access tokens, passwords, or comparable secrets.
Credentials should be injected at runtime through an approved secret-management mechanism, environment- specific credential provider, or delegated authentication flow. This separates distributable configuration from sensitive authentication material and supports rotation, revocation, auditing, and least privilege. Options A and B concern configuration precedence rather than secret handling. Option D is incorrect because MCP server definitions may legitimately be stored in project configuration; only their sensitive credential values must remain outside version control. Because the key was exposed, the operational response should also include immediate revocation or rotation and investigation of repository history. Claude Code: Settings files and precedence

by Coral at Oct 28, 2026, 09:16 AM

Limited Time Offer

15%

Off

Get Premium CCAR-P Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10