Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 17 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: An organization is currently operating MySQL databases on its own on-premises servers. To reduce the operational burden . Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- An organization is currently operating MySQL databases on its own on-premises servers. To reduce the operatio…
- Which type of cloud computing does Amazon Elastic Compute Cloud (EC2) represent?
- A data analytics company is running a proprietary batch analytics application on AWS and wants to use a stora…
- Which of the following statements are CORRECT regarding the AWS VPC service? (Select two)
- A company needs a storage solution for a project wherein the data is accessed less frequently but needs rapid…
- According to the AWS Cloud Adoption Framework (AWS CAF), what are two tasks that a company should perform whe…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. An organization is currently operating MySQL databases on its own on-premises servers. To reduce the operational burden of database maintenance and management, the organization wants to move to a fully managed AWS database offering. Which…
Answer: D. Replatform
Replatforming involves moving to a managed cloud service like Amazon RDS to reduce operational overhead without rewriting applications. Rehosting is a distractor that simply lifts and shifts servers to EC2, retaining all management burdens.
Q2. Which type of cloud computing does Amazon Elastic Compute Cloud (EC2) represent?
Answer: A. Infrastructure as a Service (IaaS)
Amazon EC2 represents Infrastructure as a Service because it provides foundational computing resources where you manage the operating system and applications. Remember that Elastic Beanstalk is PaaS, while fully managed products like Rekognition fit the SaaS category.
Q3. A data analytics company is running a proprietary batch analytics application on AWS and wants to use a storage service which would be accessed by hundreds of EC2 instances simultaneously to append data to existing files. As a Cloud Practi…
Answer: B. Amazon Elastic File System (Amazon EFS)
EFS provides a scalable file system that can be concurrently accessed by hundreds of EC2 instances. EBS is a strong distractor, but volumes can only be attached to a single instance, and object storage like S3 cannot handle direct file appends.
Q4. Which of the following statements are CORRECT regarding the AWS VPC service? (Select two)
Answer: B,C. A Network Address Translation gateway (NAT gateway) is managed by AWS || A Security Group can have allow rules only
A Security Group is stateful and only supports allow rules, while a NAT Gateway is a fully managed AWS service. Remember that Network ACLs are stateless and support both allow and deny rules, and a NAT instance is managed by the customer.
Q5. A company needs a storage solution for a project wherein the data is accessed less frequently but needs rapid access when required. Which S3 storage class is the MOST cost-effective for the given use-case?
Answer: B. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
Amazon S3 Standard-Infrequent Access is designed for data accessed less frequently but requiring rapid retrieval. While Glacier is cheaper, it is for archives and does not offer rapid access, making Standard-IA the correct choice for this use case.
Q6. According to the AWS Cloud Adoption Framework (AWS CAF), what are two tasks that a company should perform when planning to migrate to the AWS Cloud and aiming to become more responsive to customer inquiries and feedback as part of their or…
Answer: B,C. Leverage agile methods to rapidly iterate and evolve || Organize your teams around products and value streams
The AWS Cloud Adoption Framework recommends leveraging agile methods and organizing teams around products. This approach shifts organizations away from bureaucratic designs to become more responsive to customer inquiries and feedback.
Q7. AWS Web Application Firewall (WAF) offers protection from common web exploits at which layer?
Answer: D. Layer 7
AWS Web Application Firewall inspects HTTP and HTTPS requests to protect against web exploits. This traffic operates at the Application layer, which is Layer 7 of the OSI model. AWS Shield is typically used for Layer 3 and Layer 4 protection.
Q8. A company wants to move to AWS cloud and release new features with quick iterations by utilizing relevant AWS services whenever required. Which of the following characteristics of AWS Cloud does it want to leverage?
Answer: D. Agility
Agility in the AWS Cloud refers to the ability to rapidly develop, test, and launch new features. Because cloud resources are available on-demand, companies can quickly iterate without waiting for hardware provisioning.
Q9. According to the AWS Shared Responsibility Model, which of the following are responsibilities of AWS? (Select two)
Answer: A,C. Replacing faulty hardware of Amazon EC2 instances || Operating the infrastructure layer, the operating system and the platform for the Amazon S3 service
Under the Shared Responsibility Model, AWS is responsible for the security of the cloud infrastructure. This includes physical hardware replacement and managing abstracted services like S3. Customers remain responsible for IAM roles and S3 bucket policies.
Q10. Which of the following is a serverless AWS service?
Answer: D. AWS Lambda
AWS Lambda is a serverless compute service that runs code without provisioning servers. Unlike EC2, EMR, or Elastic Beanstalk, you do not manage the underlying instances, making it the only serverless option on this list.
Q11. Which of the following AWS services support reservations to optimize costs? (Select three)
Answer: B,C,E. Amazon DynamoDB || Amazon Elastic Compute Cloud (Amazon EC2) || Amazon Relational Database Service (Amazon RDS)
Amazon EC2, Amazon RDS, and Amazon DynamoDB support reservations to optimize costs for predictable workloads. Services like Amazon S3 and AWS Lambda follow pay-as-you-go pricing and do not offer reservation discounts.
Q12. Which AWS Route 53 routing policy would you use to route traffic to multiple resources and also choose how much traffic is routed to each resource?
Answer: D. Weighted routing
Weighted routing allows you to distribute traffic across multiple resources by assigning specific proportional values. Use latency-based routing when your priority is sending users to the fastest responding region instead.
Q13. Which AWS Support plan provides architectural guidance contextual to your specific use-cases?
Answer: B. AWS Business Support
Business Support is the lowest tier offering contextual architectural guidance for specific use cases. A strong distractor is Enterprise Support, which provides proactive consultative reviews and a Technical Account Manager.
Q14. Which of the following AWS services support VPC Gateway Endpoints for a private connection from a VPC? (Select two)
Answer: A,D. Amazon Simple Storage Service (Amazon S3) || Amazon DynamoDB
Amazon S3 and DynamoDB are the only services supporting gateway endpoints. Other supported services use interface endpoints powered by PrivateLink, which use elastic network interfaces instead of route table modifications.
Q15. A financial services company wants to ensure that its AWS account activity meets governance, compliance, and auditing norms. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
Answer: C. AWS CloudTrail
AWS CloudTrail records account-specific API actions for auditing user activity and compliance. AWS Config is a strong distractor, but it specifically evaluates resource configuration changes rather than account-level API events.
Q16. Which of the following Amazon S3 storage classes takes the most time to retrieve data (also known as first byte latency)?
Answer: B. Amazon S3 Glacier Deep Archive
S3 Glacier Deep Archive has the longest retrieval time, taking up to 48 hours for standard requests. Glacier Flexible Retrieval is a common distractor, but its maximum expedited retrieval time is only five minutes.
Q17. Which of the following AWS services should be used to automatically distribute incoming traffic across multiple targets?
Answer: B. AWS Elastic Load Balancing (ELB)
Elastic Load Balancing distributes incoming traffic across multiple registered targets like EC2 instances. AWS Auto Scaling is a strong distractor, but it only adjusts the number of instances rather than routing requests.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.