Domain 7
Security and Safety
Read the material that has been authored for this domain, alongside its published exam value.
- Exam weight
- 8.1%
- Approximate items
- About 4 items
Notes are not yet written
This domain has no authored note sections. The blueprint below shows what the domain measures while the notes are being contributed.
What this domain covers
| Sub-skill | Exam weight | Approximate items | What it measures | Status |
|---|---|---|---|---|
| AI Application Security | 3.2% | About 1.7 items | Prompt injection awareness and mitigation; jailbreak defense; untrusted input handling; data leakage prevention; PII handling; authentication, authorization, confidentiality, privacy, integrity | Scaffolded |
| Guardrails and Safe Deployment | 2.3% | About 1.2 items | Content policy; guardrail layering; secure-by-design principles (privacy, IAM, least privilege) | Scaffolded |
| Identity, Secrets, and Key Management | 1.6% | About 0.8 items | Secrets, credentials, and API keys across dev and prod; identity validation; access approval and level verification; authorized access monitoring | Scaffolded |
| Claude Hooks | 1% | About 0.5 items | Hooks as guardrails and safety controls to prevent destructive actions | Scaffolded |
Reference application
Related reference-application modules have reserved addresses.
Practice
This domain's self-check has two halves. Its recall prompts come from the notes and you grade yourself on them. Its quiz asks 4 items — this domain's share of a 53-item mock — and is scored by the same rule the mock uses. Only the scored quiz feeds a readiness signal.
The bank holds 6 of the 4 items the quiz asks for.