10 CLF-C02 practice questions with answer reveals and spoken explanations. Choose before the reveal and keep your score.
Certification: AWS Certified Cloud Practitioner (CLF-C02). Independent practice, not an official exam.
How to use this round:
– Pause each question if you need more time to decide.
– Compare your answer after the reveal.
– Review the concepts you missed, then practice again.
Practice free with CertPunch:
Web: https://certpunch.com/
iPhone and iPad: https://apps.apple.com/app/certpunch/id6797541734
Android: https://play.google.com/store/apps/details?id=com.certpunch.app
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which of the following statements are security principles within the AWS Well-Architected Framework? (Select…
- What can be used to allow an application running on an Amazon EC2 instance to securely store data in an Amazo…
- A new e-commerce company is looking for an AWS service to send transactional emails, such as order confirmati…
- Which AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?
- Which AWS service or feature allows a company to receive a single monthly AWS bill when using multiple AWS ac…
- A Cloud practitioner wants to know if there are services which can protect from DDoS (Distributed Denial of S…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following statements are security principles within the AWS Well-Architected Framework? (Select TWO.)
Answer: B,C. Protect data in transit and at rest. || Monitor, alert, and audit actions and changes to AWS resources.
Protecting data in transit and at rest and monitoring, alerting, and auditing actions are both core security pillar design principles. Options like analyzing expenditures and operations as code belong to cost optimization and operational excellence instead, so watch the pillar match.
Q2. What can be used to allow an application running on an Amazon EC2 instance to securely store data in an Amazon S3 bucket without using long-term credentials?
Answer: A. AWS IAM role
An IAM role attached to the EC2 instance delivers temporary credentials automatically, avoiding long-term keys. Access keys are long-lived credentials that should never be embedded in code, which is the classic trap in this question.
Q3. A new e-commerce company is looking for an AWS service to send transactional emails, such as order confirmations and password resets, to their customers. Which AWS service would be most appropriate for this task?
Answer: B. Amazon Simple Email Service (Amazon SES)
Amazon SES is purpose-built for sending transactional email like order confirmations and password resets. SNS pushes pub-sub notifications but is not optimized for email delivery, making SES the clear choice here.
Q4. Which AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?
Answer: A. Amazon EMR
Amazon EMR provides a managed Hadoop framework for processing vast amounts of data on EC2 and S3. Athena is serverless SQL querying of S3 data, and Redshift is a data warehouse, so the Hadoop keyword pins EMR.
Q5. Which AWS service or feature allows a company to receive a single monthly AWS bill when using multiple AWS accounts?
Answer: B. Consolidated billing
Consolidated billing in AWS Organizations combines multiple accounts into one monthly bill from a payer account. Cost Explorer and the Cost and Usage Report only visualize or itemize costs; they do not produce a single bill.
Q6. A Cloud practitioner wants to know if there are services which can protect from DDoS (Distributed Denial of Service) attacks directed at AWS services. Which AWS service or tool will provide this protection?
Answer: A. AWS Shield
AWS Shield provides always-on managed DDoS protection in Standard and Advanced tiers. GuardDuty detects threats like unusual API activity but does not mitigate volumetric DDoS attacks, so match DDoS to Shield on the exam.
Q7. Which service can a Cloud Practitioner use to configure custom cost and usage limits and enable alerts for when defined thresholds are exceeded?
Answer: B. AWS Budgets
AWS Budgets lets you set custom cost and usage limits and receive alerts when actual or forecasted amounts exceed thresholds. Cost Explorer analyzes past spending but cannot trigger threshold alerts, so alerts signal Budgets.
Q8. How can an organization take advantage of tiered pricing across multiple business units within an organization?
Answer: D. AWS Organizations consolidated billing.
Consolidated billing in AWS Organizations combines usage across all accounts so the company earns volume pricing tier discounts. Service control policies only restrict permissions, and Reserved Instances are a pricing model rather than a billing mechanism.
Q9. Which of the following tasks can a user perform to optimize Amazon EC2 costs? (Select TWO.)
Answer: B,D. Purchase Amazon EC2 Reserved Instances. || Implement Auto Scaling groups to add and remove instances based on demand.
Reserved Instances cut long-term compute costs, and Auto Scaling matches capacity to demand so you avoid paying for idle servers. AWS Budgets sends alerts but does not actually stop spending, so it is not a true cost-optimization action.
Q10. What can a Cloud Practitioner use the AWS Total Cost of Ownership (TCO) Calculator for?
Answer: C. Estimate savings when comparing the AWS Cloud to an on-premises environment
The TCO Calculator estimates cost savings of running workloads on AWS versus an on-premises environment. Distinguish it from the AWS Pricing Calculator, which estimates monthly bills for planned AWS resources.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days.