8 domains and 25 published objectives, each with its official weight, what the domain tests, the decision rules that settle most of its items, the traps the wrong options set, and every objective in plain words, with the official documentation page to read where there is one.
1
Agents and Workflows
14.7% of the exam · 3 published objectives
14.7%
Agents and Workflows is 14.7 percent of the exam, about eight items, split almost evenly across three skills: agent architecture, building agents with Claude, and recurring patterns and frameworks. The domain turns on one judgement: does the task need a model choosing the next step at run time, or is the sequence knowable up front and better run as a pipeline? Everything else in the domain follows from that call.
Items are framed as a team with a multi-step task and a proposed design. You decide which shape fits, whether a supervisor delegating to specialist subagents is warranted, whether to run the loop yourself or hand it to Anthropic's hosted option, and what belongs in a hook rather than an instruction. Framework names are context, not the thing tested; the pattern behind the name earns the mark.
Decision rules
- If every step is knowable before the run starts, build a workflow; keep an agent for tasks where each step depends on the last result.
- Add a supervisor and subagents only when specialists need isolated context or different tools, never for the hierarchy itself.
- Anything that must happen on every iteration, a permission check or a log write, belongs in a hook or in code, not in the prompt.
- Self-host when you need control of the loop, runtime and data path; use the hosted option when configuration is enough.
Traps
- The option that makes the system more autonomous when the scenario describes a repeatable, fully specified pipeline.
- Adding agents to fix a quality problem that a clearer tool description or a tighter prompt would have fixed.
- Treating a hook and a prompt instruction as interchangeable when only one is guaranteed to run.
- Choosing a framework by name recognition when the question is about a pattern any of them could implement.
Objectives
- Agent Architecture. Decide between a scripted workflow and an autonomous agent, and know when a supervisor with subagents genuinely improves a task. Read: Multi-agent orchestration
- Agent Construction with Claude. Build an agent with the Claude Agent SDK or a hand-written loop, choose between self-hosting and Anthropic's managed option, and use hooks for steps that always run. Read: Claude Agent SDK overview
- Agent Patterns and Frameworks. Recognise the standard agent patterns, tool loops, subagents, memory and window management, and what a framework such as LangGraph or PydanticAI adds. Read: Subagents
2
Applications and Integration
33.1% of the exam · 6 published objectives
33.1%
Applications and Integration is 33.1 percent of the exam, about 17 items, more than the next two domains together. Of its six skills the two heaviest, application design at 8.6 percent and software engineering foundations at 7.4 percent, lean on general engineering more than on Claude features: they test whether you can scope a requirement, shape a schema, keep sessions clean and treat prompts and configuration as versioned, reviewed code. The most Claude-specific weight is API mechanics at 6.8 percent: the Messages API, tools, streaming, images, thinking, caching, the Batches API and reaching Claude through a cloud vendor.
Items describe a team with a constraint, most often cost, latency or a deadline, and ask which API mode, design or configuration decision fits. The guide's own sample here is an overnight job where cost matters and results are not needed until morning; the answer is the batch path, and every distractor either speeds up something that did not need speed or cuts quality to save money badly. Expect that structure to recur.
Decision rules
- Match the API mode to the deadline: a waiting user gets the Messages API, streamed if the response is long; a report due tomorrow goes through the Batches API for less.
- Put the material that never changes first and the material that varies last, so prompt caching can reuse the prefix.
- Pin the model version in configuration and move it deliberately, with an evaluation run, so a release never changes behaviour unnoticed.
- Keep CLAUDE.md, settings.json and prompt versions in version control beside the code they govern, and review them the same way.
Traps
- Parallelising synchronous calls to go faster when the scenario said cost mattered and time did not.
- Cutting max_tokens or dropping to the smallest model as a cost fix when the real problem was the wrong API mode.
- Hard-coding data or logic into a system prompt when the scenario asked for something maintainable across applications.
Objectives
- Understanding Requirements. Turn a business requirement and a solution architecture into functional and infrastructure requirements before choosing any Claude feature.
- Systems Life Cycle. Place a Claude application inside a standard systems life cycle, from development through implementation, operation and maintenance.
- Claude API Mechanics. Know how the Messages API behaves, including tools, streaming, images, thinking, caching, batch processing and cloud-vendor access, and when realtime or batch is right. Read: Messages API reference
- Software Engineering Foundations. Apply everyday software engineering, REST and JSON, asynchronous code, version control, code review and refactoring at any scale, to code that calls Claude. Read: Get started with the Claude Developer Platform
- Claude Application Design. Design applications around how instructions are read on each surface, where content boundaries sit, how schemas are shaped and how sessions and plugins stay clean. Read: Building with Claude
- Configuration Management. Manage configuration deliberately: CLAUDE.md files, settings.json, pinned model versions, versioned prompts and plugin dependencies. Read: Claude Code settings
3
Claude Code
3.1% of the exam · 1 published objective
3.1%
Claude Code is 3.1 percent of the exam, about two items, from a single skill. The objective is close to a vocabulary list: the components (rules, skills, commands, agents and agent memory), the features (session management, slash commands, headless, streaming and auto modes), the CLAUDE.md hierarchy, repository initialisation and settings.json. Know what each thing is and where it lives; a two-item domain has no room for anything deeper.
Items ask which component holds a given kind of instruction, or which mode suits a described run. The same product surface is worth several times more on the architect foundations track, and candidates studying from that track's materials routinely overspend here. Read the section once, confirm you can place each term, and give the saved hours to Applications and Integration.
Decision rules
- Persistent instructions go in the CLAUDE.md that owns them, user, project or directory; one-off notes stay in the conversation.
- A repeatable action invoked by name is a command or skill; a standing constraint is a rule; a delegated specialist is an agent.
- Headless mode is for scripts and CI where nobody is at the keyboard; interactive sessions are for exploration and review.
- Cap the study time: two items cannot repay a week.
Traps
- Answering with a Claude Code component when the question is really about the API or an agent loop.
- Any option that puts a secret or a temporary note into CLAUDE.md.
- Confusing which settings.json a value is read from with what the value does.
Objectives
- Claude Code Operation. Operate Claude Code day to day: its components, its session and mode features, the CLAUDE.md hierarchy, repository set-up and settings.json. Read: Claude Code overview
4
Eval, Testing, and Debugging
2.6% of the exam · 1 published objective
2.6%
Eval, Testing, and Debugging is 2.6 percent of the exam, roughly one item, and despite the domain title its only listed skill is debugging and error handling. There is no eval-design objective; evaluation appears on this exam as the thing you run after fixing something, mostly in other domains. The one question is about locating a fault: what kind of error is it, what recovery fits, what does the trace say, and did the integration layer or the model output go wrong.
The framing is a symptom and a set of remedies, and the credited option classifies before it acts. A transient failure gets a bounded retry, an authorisation failure gets a person, a malformed response gets validation and a repair step; the option that skips the classification is the distractor even when it sounds decisive.
Decision rules
- Classify before responding: a transient error earns a capped retry, an authorisation error earns a human, a malformed output earns validation and repair.
- Read the trace before touching the prompt; if the request never reached the model correctly, the fix is in the integration layer.
- Change one variable at a time when isolating a fault, and keep a known-good case to compare against.
Traps
- Retrying an error a retry cannot fix, such as a permission denial or a bad schema, and calling it resilience.
- Switching model tier for a fault the request payload or the parser caused.
- Reading a single wrong answer as a systemic failure without checking whether the input was unusual.
Objectives
- Debugging and Error Handling. Identify an error's type, pick a recovery that fits, read traces to find the failure mode and decide whether the integration or the model output is at fault. Read: API errors
5
Model Selection and Optimization
16.8% of the exam · 4 published objectives
16.8%
Model Selection and Optimization is 16.8 percent of the exam, about nine items, and is named for its smallest skill. Choosing between Opus, Sonnet and Haiku is 2.7 percent; the weight is in LLM fundamentals at 5.2 percent (tokens, context windows, sampling, non-determinism, thinking modes and effort levels, zero- to few-shot prompting) and technical fundamentals at 6.1 percent, the plumbing of SDKs over a REST API and connections such as websockets. Cost and token management, 2.8 percent, covers usage tracking, cost modelling and caching.
Items give you a task and ask for a tier and a reasoning setting, a symptom and ask for the mechanism, or a bill and ask what to change. The exam rewards the cheapest configuration that a measured result shows is good enough, and punishes reaching for the most capable model or the deepest thinking as a reflex.
Decision rules
- Start with the cheapest tier that could plausibly pass, and move up only when a measured result says it does not.
- Tier and thinking are separate dials: enable extended or adaptive thinking for the step that needs deliberation, not for every call.
- Measure tokens per call before optimising; the largest saving is usually a cached prefix or a shorter context, not a smaller model.
- Treat a model upgrade as a change that needs an evaluation run, because behaviour can shift between releases.
Traps
- The most capable model as the answer to every quality complaint, when the scenario describes a bounded task a lighter tier handles.
- Enabling extended thinking globally to fix one hard step, then paying for it on every call.
- Confusing the context window with the output-token limit, or a rate limit with either.
Objectives
- LLM Fundamentals. Explain tokens, context windows, sampling and non-determinism, the fast, extended and adaptive thinking options and effort levels, and zero-, one- and few-shot prompting. Read: Glossary
- Technical Fundamentals. Handle the engineering plumbing under an AI application: SDKs that wrap the REST API and connection patterns such as websockets. Read: Client SDKs and libraries
- Model Selection and Tradeoffs. Choose between Opus, Sonnet and Haiku on quality, latency and cost, know which support adaptive thinking, and plan for behaviour changes between releases. Read: Choosing a model
- Cost and Token Management. Track token usage, model an application's cost, and bring it down with prompt caching and cache checkpoints. Read: Prompt caching
6
Prompt and Context Engineering
11% of the exam · 3 published objectives
11%
Prompt and Context Engineering is 11.0 percent of the exam, about six items, across three skills: prompt engineering at 4.6 percent, context engineering at 3.8 percent and output handling at 2.6 percent. Together they are the discipline of making a single call behave: what goes in the system prompt and what in the user turn, when an example is worth its tokens, how a long session is kept from drifting, and what a program can safely do with the result.
Items show a first draft that underperforms and ask what to change first, a long task that has degraded and ask which technique fits, or an output that code will parse and ask how to make that safe. The credited answers are the unglamorous ones: clarify before adding examples, compact rather than expand, validate before trusting.
Decision rules
- Fix clarity and structure before adding examples; an example is a measured fix for a demonstrated miss, and each one costs tokens on every call.
- Stable role and rules belong in the system prompt; the task and its data belong in the user turn.
- When a long task degrades, compact history mid-task, clear it between tasks, and hand a large side investigation to a subagent.
- If a program reads the output, enforce a schema and validate before use; prose is for people.
Traps
- Adding more examples when the instructions were unclear to begin with.
- The option that finds a bigger context budget rather than curating what is in the window.
- Parsing free text with string matching when a structured output was available.
Objectives
- Context Engineering. Keep the context window useful: prune tool output, compact history, prevent drift and bloat, and isolate work in subagents or separate steps. Read: Context windows
- Prompt Engineering. Write and iterate prompts with clear instructions, well-chosen examples, the right split between system and user content, explicit output constraints and sanitised input. Read: Prompt engineering overview
- Output Handling. Produce, validate and consume output safely through structured patterns, response validation, defensive parsing and scepticism toward confident text. Read: Structured outputs
7
Security and Safety
8.1% of the exam · 4 published objectives
8.1%
Security and Safety is 8.1 percent of the exam, about four items, spread over four skills: application security at 3.2 percent, guardrails and safe deployment at 2.3 percent, identity and secrets at 1.6 percent, and hooks at 1.0 percent, half an item on average, which may not appear on your form at all. Prompt injection is the anchor; the guide's own sample here is a summariser reading a page that carries hidden instructions, and the credited answer separates untrusted content from trusted instructions and scopes what the acting tool may do.
Items present untrusted input reaching the model, an irreversible action that needs a gate, or a credential in the wrong place, and ask for the most effective control. The distractors are controls that feel like controls and are not: a request in the system prompt, a change of temperature, a more obedient model.
Decision rules
- Anything that arrived from outside, a page, a file or a tool result, is data, never instruction; keep it apart from trusted instructions and limit what the acting tool can do.
- Enforce the rules that matter with a control the model cannot argue with: a hook, a permission boundary, or human confirmation of irreversible actions.
- Least privilege applies to the model's tools as much as to people: grant what the current step needs and widen only after review.
- Secrets live in a secret manager or the environment, never in prompts, CLAUDE.md, logs or committed configuration.
Traps
- A polite line in the system prompt presented as a security control.
- A larger or more instruction-following model offered as the fix for injection, when it can be more exposed, not less.
- Temperature or other sampling settings offered as a mitigation for anything security related.
- A guardrail placed after the action instead of before it.
Objectives
- AI Application Security. Defend an application against prompt injection and jailbreaks, handle untrusted input and personal data, prevent leakage, and enforce authentication, authorisation, confidentiality and integrity. Read: Mitigate jailbreaks and prompt injections
- Guardrails and Safe Deployment. Deploy responsibly with a content policy, layered guardrails and secure-by-design principles: privacy, identity and access management, least privilege.
- Claude Hooks. Use hooks as enforcement, so a destructive action inside a Claude application is blocked rather than merely discouraged. Read: Hooks reference
- Identity, Secrets, and Key Management. Manage secrets, credentials and API keys across development and production, validate identity, approve access at the right level and monitor use. Read: Admin API
8
Tools and MCPs
10.6% of the exam · 3 published objectives
10.6%
Tools and MCPs is 10.6 percent of the exam, about six items, across tool implementation at 4.4 percent, agentic customisation at 4.1 percent and MCP server development at 2.1 percent. Note the order: choosing the delivery mechanism for a capability (built in, custom, a Skill, or a server) is worth twice as much as knowing how to write the server. The domain is the contract between the model's judgement and the outside world, and a tool's description is the whole of how the model chooses it.
Items describe a capability a team needs and ask which delivery mechanism fits, a tool that fires wrongly and ask what to change, or a reuse requirement and ask where the logic lives. The guide's sample is an internal inventory API several applications must share; the answer is an MCP server, and the distractors paste data into context, bury logic in prompts, or assume a built-in tool can reach a system it has no connector for.
Decision rules
- A description is how a tool gets chosen; when the wrong tool fires, fix its name, description and parameters before changing anything else.
- Build an MCP server when a capability must be shared across applications and maintained on its own; keep a single-app capability as a custom tool.
- Prefer what is built in when it covers the need, a custom tool for your own systems, a Skill to package a way of working, a server to share access.
- Match the transport to the topology: stdio when the server runs beside the client, a network transport when they are apart.
- Gate high-impact tools behind approval and keep their permissions narrow, because the tool set is also a security boundary.
Traps
- Pasting live data into the prompt instead of giving the model a tool that fetches it.
- Assuming a built-in tool can reach an internal system it was never connected to.
- Hard-coding integration logic into each application's prompt when reuse was the stated requirement.
- Fixing a tool-selection problem with a bigger model rather than a clearer description.
Objectives
- Tool Implementation. Implement tools well: input schemas, descriptions the model can act on, error handling, client-side versus server-side execution, approval patterns and coherent tool sets. Read: Tool use overview
- MCP Server Development. Author, deploy and integrate an MCP server that exposes resources, tools and prompts over the right transport, and know the client and server roles. Read: Connect Claude Code to tools via MCP
- Agentic Customization. Compare the four delivery mechanisms, Anthropic's built-in tooling, your own custom tools, Skills, and MCP servers, and pick the right one for the use case. Read: Agent Skills overview
Weights are the official domain weightings from the exam guide. Objective titles are Anthropic's published wording; the sentence after each is ours.