A research summarization assistant has been deployed for six months. A user has flagged that a generated summary contained a fabricated citation. The product team has asked whether the incident requires architectural action or whether it is an isolated case.
Which two Diligence-competency actions should you take? (Select two.)
Each correct answer presents part of the solution.

• A. Sample recent summaries to estimate the fabrication frequency across the population.
• B. Communicate to users that the assistant does not fabricate output as a matter of design.
• C. Review whether citation-grounding controls exist anywhere in the current generation pipeline.
• D. Treat the incident as an anecdotal isolated case and take no further investigative action.
• E. Disable the assistant immediately for all current users without any prior diagnostic analysis.

A Claude architect is designing a HIPAA-compliant pipeline that processes patient records.
Which two design decisions directly support HIPAA compliance requirements? (Select two.)

• A. Enforcing role-based access controls so that PHI is retrievable only by authorized personnel.
• B. Ensuring patient data is never included in training feedback loops sent to the model provider without a BAA in place.
• C. Selecting the highest-capability Claude model to maximize diagnostic accuracy.
• D. Setting max_tokens to a low value to minimize the volume of text generated per request.
• E. Using streaming responses to reduce perceived latency for clinical users.

You are designing a content moderation classifier that processes high volumes of user-generated comments under a tight per-message latency budget using well-defined classification labels.
Which model selection best aligns with the workload?

• A. Sonnet with extended thinking enabled, because deeper reasoning should be applied to every moderation request to improve edge-case handling.
• B. Sonnet, because larger general-purpose models are preferred even when workload latency requirements are strict.
• C. Haiku, because its latency and cost profile align with high-volume classification workloads that require limited reasoning depth.
• D. Opus, because every moderation decision requires maximum reasoning depth regardless of classification complexity.

You are supporting an EU-based deployment with GDPR obligations.
Which combination of measures best supports the deployment's GDPR posture?

• A. disabling all data-retention configuration, redaction controls, and data-subject-rights handling to simplify day-to-day operations, accepting the resulting GDPR compliance exposure
• B. enterprise-tier deployment with a signed Data Processing Addendum, defined data-retention configuration, redaction of personal data not needed for the task, and documented data-subject-rights handling
• C. using a personal Claude account tier for processing EU personal data at scale, with no signed Data Processing Addendum and no documented data-subject-rights handling procedure
• D. pasting full EU personal data into every prompt to "give Claude complete context" without considering purpose limitation, data minimization, or the organization's Data Processing Addendum obligations

You are distinguishing functional from non-functional requirements during discovery.
Which item is a non-functional requirement?

• A. The system must produce a draft response that a human reviewer can edit before sending.
• B. The system must classify inbound tickets into a defined set of categories.
• C. The system must extract a defined set of specific fields from invoice attachments and populate a downstream data record.
• D. The system must respond at p95 latency under 800 milliseconds at the expected request volume.