CCAR-P practice › Developer Productivity & Operational Enablement · Question 106 of 110

Developer Productivity & Operational Enablement

Developers complain about constant permission prompts in Claude Code, and several have added a rule allowing all Bash commands in their user settings. The security team is concerned. What is the best response?

Show answer and explanation

Answer: A — Narrowly allow frequent safe commands in project settings; deny dangerous patterns in managed settings

Prompt fatigue is fixed by narrowing, not removing, controls: allow the specific safe commands teams run and enforce non-overridable denies centrally (a). (b) halts productivity without fixing the design. (c) accepts unbounded execution and only detects misuse. (d) worsens the fatigue that caused the workaround.