CCDV-F · DOMAINS D3 + D4 + D7

CCDV-F Domains D3, D4 and D7: Claude Code, Testing and Security

CCDV-F domains D3, D4 and D7 are Claude Code, Evaluation, Testing & Debugging, and Security & Safety. Together they make up 13.8% of the exam. They are the lightest three domains, but each tests a specific, checkable skill.

  • CCDV-F
  • 53 questions
  • 120 min
  • 720 to pass
  • $125 USD

Weight at a glance

Domain Weight
D7 Security & Safety 8.1%
D3 Claude Code 3.1%
D4 Evaluation, Testing & Debugging 2.6%
Combined 13.8%

D7 Security & Safety (8.1%)

D7 is the largest of the three. It tests how you protect a Claude application.

  • AI application security. Prompt-injection awareness and mitigation, untrusted-input handling, data-leakage prevention and PII handling.
  • Guardrails and secure-by-design deployment. Content-policy layering and least-privilege identity and access management.
  • Hooks. Claude Hooks as deterministic guardrails against destructive actions.
  • Secrets. Identity, secrets and API-key management.

D3 Claude Code (3.1%)

D3 is narrow and hands-on. The Architect exam, CCAR-F, weights Claude Code more heavily, so this domain stays small here.

  • Core components. Rules, Skills, Commands, Agents and Agent Memory.
  • Interaction modes. Session management, built-in and custom slash commands, headless mode, streaming mode and auto-mode.
  • Configuration. The CLAUDE.md hierarchy, repository initialization and settings.json.

D4 Evaluation, Testing & Debugging (2.6%)

D4 is the lightest domain on the exam. It tests debugging and error handling for Claude applications.

  • Identify the error type. Know what kind of failure you are looking at.
  • Select a recovery strategy. Match the response to the failure.
  • Trace the fault. Decide whether the problem sits in the integration layer or in model output.

Why the small domains still matter

At 13.8% combined, these three domains are roughly seven questions on a 53-question exam, if questions follow weight exactly. The official guide does not promise that split, so treat it as an estimate. Hooks and prompt-injection mitigation overlap with the larger D2 and D8 topics, so the knowledge pays off in more than one place.

Related pages

Practice these domains

Optional. This page and the planner are complete without it. Claude Architect Certification, run by the team behind this site, has a concept library and warm-ups for CCDV-F.