A developer creates an agent tool that executes shell commands on a Linux server. The tool passes Claude's generated command string directly to the system shell with no input validation. A user submits a prompt asking to "read the company secrets file" and Claude generates a command that reads /etc/passwd and other sensitive system files. Which vulnerability type is this, and what is the correct mitigation?
This question requires Pro
Unlock all 20 questions in this certification
Written by certified professionals · Aligned to official exam objectives
View all Pro featuresMore Tools and MCPs Questions
20 questions
Full Claude Certified Developer – Foundations Practice Test
All topics covered
All Claude Certified Developer – Foundations Questions
Browse by topic
Related Questions
When Claude decides to call a client-side tool, what value appears in the stop_reason field of the A...
A developer wants to guarantee that Claude's tool calls always exactly match the defined JSON schema...
A developer builds an agent with 5,000 available tools. Including all tool definitions in every requ...
A developer wants to connect Claude to an existing company MCP server to access internal tools, with...
What are the three required fields in a custom client tool definition for the Claude API?...
Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy