The mental model that passes the CCAR-P exam
Foundations has one governing idea: prompts guide, code enforces. That still holds here and is assumed. Professional adds a second, and most of the sixty-three questions turn on it.
Every architectural decision needs a trade-off, a measurement, and an owner.
At Foundations level a design is judged by whether it works. At Professional level a design is judged by whether it can be defended. Defensible means three things, and an option missing any of them is usually the wrong answer:
- A stated trade-off. You chose this over that, and you can say what you gave up. An option presented as having no downside is not an architecture, it is a sales pitch.
- A measurement. An accuracy floor, a latency budget, a cost per transaction, an escalation rate. If nobody can tell whether it is working, nobody can tell when it stops working.
- An owner. A named human accountable for the output, the review, the incident and the decision to retire it.
What that looks like in the answer options
| Situation | The Foundations-level answer | The Professional answer |
|---|---|---|
| Choosing between two viable architectures | The one that is technically better | The one that meets the stated constraint, with the trade-off documented for the people who will live with it |
| Quality is inconsistent in production | Improve the prompt | Build the eval set first, establish the baseline, then change one thing and measure the delta |
| A regulated workload | Add a guardrail | Establish where data may reside, who reviews what, what is logged, how long it is retained, and what evidence an auditor will be shown |
| Cost is too high | Use a cheaper model | Instrument cost per request first, find where it actually concentrates, then apply the lever that addresses that — caching, routing, batching or scope |
| A stakeholder asks for a guarantee of accuracy | Explain that LLMs are probabilistic | Convert it into a measurable target with an agreed evaluation method, a review step for the cases that fall short, and a shared definition of acceptable |
| The system has been live for a year | It works, leave it | Re-run the evals, review the model version, check whether the assumptions in the design still hold, and decide deliberately whether to keep, change or retire |
| Handing over to another team | Write a README | Document the decisions and their rationale, the evals that define correctness, the operational runbook and the known failure modes |
Four professional-level corollaries
- Measure before you optimise. Almost every optimisation question has an option that jumps to a fix and an option that instruments first. The instrument-first option wins unless the stem already gives you the measurement.
- Compliance is an architecture input, not a review gate. Data residency, retention and auditability shape which deployment surface and which pattern you can use at all — they are decided at design time, not signed off at the end.
- The human in the loop is a design element with a cost. Where review is required, the architecture must make it fast enough that it actually happens. A review step nobody has time for is the same as no review step.
- Simplicity survives handover. Between two designs that both meet the requirement, the one another team can operate is the better architecture, and the exam scores it that way.
← Previous: CCAR-P study guide (start here) | Next: Domain 1 — Solution Design and Architecture →
Explore Other Certification Study Guides
Switch to another exam guide to prepare for your next Claude certification:
Claude Certified Associate — Foundations
Entry-level certification for non-coders: prompting, output evaluation, model selection, workflow integration, configuration, governance & responsible use.
Claude Certified Architect — Foundations
Core architectural principles: agentic loops & orchestration, tool design & MCP, Claude Code workflows, prompt engineering, and context reliability.
Claude Certified Developer — Foundations
Build software on Claude: API integration, model selection, tools & MCP servers, agents vs workflows, security, safety & debugging.