Q32 of 60 — CCA Practice Exam

Customer Support Resolution Agent

Your customer support resolution agent uses a db-reader subagent to look up order history, refund eligibility, and account status. In production, support engineers report that in roughly 8% of escalated sessions, the subagent successfully executes an UPDATE or DELETE statement against the orders table — modifying live customer data without authorization. The subagent's system prompt already instructs it to only run SELECT queries. What is the most effective fix?

A. Rewrite the subagent's system prompt to more explicitly prohibit write operations, including concrete examples of disallowed queries and a warning that such actions will be escalated to a supervisor agent.

B. Add a PreToolUse hook to the subagent that invokes a validation script on every Bash call, blocking execution with exit code 2 if a SQL write operation is detected in the command.

C. Increase the subagent's context window allocation so it retains more of the conversation history and can better apply the read-only constraint across long support sessions.

D. Replace the Bash tool with a custom read-only SQL tool that wraps the database connection and logs all queries, then manually review logs weekly to catch unauthorized writes.