Quiz — Session 6: Claude Code & CI/CD

Program : Applied AI — Advanced Level — Instructor: Yann Isola Format: 10 MCQs (multiple choice questionnaire) — only one correct answer per question — recommended duration: 12 minutes. Level : depth certification Claude Certified Architect — several questions are judgment scenarios.

Question 1 — What fundamentally distinguishes Claude Code from a chat assistant that talks about code?

HAS It uses a larger model, specialized in programming B It is an agent: it loops — reads files, modifies, executes commands, observes the results and corrects — within a scope of permissions defined by the user C It works entirely offline, without calling the model D It can only work on one file at a time

Question 2 — What is the role of the file `CLAUDE.md` ?

HAS This is the log of past conversations with Claude Code B This is the tool permissions configuration file C This is a project instruction file loaded automatically at the start of each session: overview, conventions, common commands, known pitfalls D This is the file where Claude Code writes its plans before executing them

Question 3 — The order `/init` of Claude Code…

HAS Resets all permissions to their default values B Inspects the repository and generates a first draft of CLAUDE.md , which the team must then rework C Initializes a new empty Git repository D Clears the context of the current conversation

Question 4 — In `.claude/settings.json` , the entrance `"Bash(npm test:*)"` in the list `allow` means:

HAS All shell commands are allowed if npm is installed B Commands starting with npm test are permitted without confirmation; other commands Bash remain subject to the normal regime (confirmation, or headless refusal) C The order npm test is prohibited D Claude Code will launch npm test automatically after each modification

Question 5 — Scenario: a CI pipeline uses Claude Code in headless mode for PR review (reading the diff, producing a comment). What set of permissions should an architect use?

HAS All authorized tools, to avoid blockages in the middle of the night B Read , Glob , Grep , LS , plus variations Bash(git diff:*)/Bash(git log:*) — and nothing else: neither writing nor WebFetch , nor free shell C Uniquely Write , to write the review comment D Bash without restriction, because the CI is already an isolated environment

Question 6 — What is the difference in nature between a rule written in `CLAUDE.md` and a hook `PreToolCall` ?

HAS None: both guarantee the same level of control B THE CLAUDE.md is more reliable because it is read every session C The prompt instruction is probabilistic (the model almost always follows it); the hook is deterministic (code that runs every time and can block the call) — security requirements go into hooks or permissions D Hooks only work in headless mode, CLAUDE.md only in interactive mode

Question 7 — The team wants every file modified by Claude Code to be immediately reformatted by the in-house formatter, without exception. What mechanism?

HAS A bold instruction in CLAUDE.md B A hook PreToolCall which blocks all editions C A hook PostToolCall filtered on editing tools (Edit , MultiEdit , Write ), which launches the formatter after each modification D A hook Stop which reformats the entire repository at the end of the session

Question 8 — In headless mode (`claude -p "..."`), what happens when Claude Code wants to use a tool not authorized by the configuration?

HAS A confirmation window is displayed on the CI runner B The tool is automatically authorized after 30 seconds without response C The action is refused - there is no one to confirm - and the task may remain incomplete: hence the need to pre-calibrate the permissions to what is strictly necessary for the task D Claude Code automatically switches to interactive mode

Question 9 — Scenario: a test generation CI job has `Write` and runs on a runner containing deployment secrets. The analyzed PR comes from an external contributor. What is the main risk and its priority mitigation?

HAS No risk: the model always refuses malicious instructions B Prompt injection: the PR code may contain hidden instructions that the agent will read; mitigation: minimum permissions (limit Write , no network tools, no free shell), guardrail hooks, and isolation of the runner from secrets C API quota overrun, which is solved by increasing the timeout D The slowness of the model, which we solve with a faster model

Question 10 — What are their respective uses? `/compact` And `/cost` in a long interactive session?

HAS /compact reduces the size of project files; /cost displays the subscription price B /compact compresses conversation history (summary) to free context and maintain quality; /cost displays the consumption of tokens and the cost of the session — two reflexes for controlling long sessions, supplemented by prompt caching which charges stable prefixes at a reduced rate ⚠ (rate: see today's price list) C /compact merge Git commits; /cost estimates the development time saved D Both commands are only available in headless mode

Quiz — Session 6: Claude Code & CI/CD

Question 1 — What fundamentally distinguishes Claude Code from a chat assistant that talks about code?

Question 2 — What is the role of the file CLAUDE.md ?

Question 3 — The order /init of Claude Code…

Question 4 — In .claude/settings.json , the entrance "Bash(npm test:*)" in the list allow means:

Question 5 — Scenario: a CI pipeline uses Claude Code in headless mode for PR review (reading the diff, producing a comment). What set of permissions should an architect use?

Question 6 — What is the difference in nature between a rule written in CLAUDE.md and a hook PreToolCall ?