10 CLF-C02 practice questions with answer reveals and spoken explanations. Choose before the reveal and keep your score.
Certification: AWS Certified Cloud Practitioner (CLF-C02). Independent practice, not an official exam.
How to use this round:
– Pause each question if you need more time to decide.
– Compare your answer after the reveal.
– Review the concepts you missed, then practice again.
Practice free with CertPunch:
Web: https://certpunch.com/
iPhone and iPad: https://apps.apple.com/app/certpunch/id6797541734
Android: https://play.google.com/store/apps/details?id=com.certpunch.app
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- An application has highly dynamic usage patterns. Which characteristics of the AWS Cloud make it cost-effecti…
- A Cloud Practitioner noticed that IP addresses that are owned by AWS are being used to attempt to flood ports…
- Which AWS service should a Cloud Practitioner use to establish a secure network connection between an on-prem…
- According to the shared responsibility model, which security and compliance task is AWS responsible for?
- Why is AWS able to continue to reduce its pricing?
- A company needs to use third-party software for its workload on AWS. Is there an AWS feature or service the c…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. An application has highly dynamic usage patterns. Which characteristics of the AWS Cloud make it cost-effective for this type of workload? (Select TWO.)
Answer: B,C. Elasticity || Pay-as-you-go pricing
Elasticity lets resources scale with highly variable demand, and pay-as-you-go means you only pay for what is consumed. Reliability and high availability concern resilience, not cost efficiency for fluctuating workloads.
Q2. A Cloud Practitioner noticed that IP addresses that are owned by AWS are being used to attempt to flood ports on some of the company's systems. To whom should the issue be reported?
Answer: D. AWS Trust & Safety team
Abuse of AWS-owned IP addresses, such as flooding attempts, should be reported to the AWS Trust and Safety team via the abuse form. A Technical Account Manager supports your own workloads, not external abuse reports.
Q3. Which AWS service should a Cloud Practitioner use to establish a secure network connection between an on-premises network and AWS?
Answer: C. Virtual Private Network
A VPN establishes an encrypted connection over the internet between an on-premises network and AWS. Watch for VPC as a distractor; it is the virtual network itself, not the secure link to your data center.
Q4. According to the shared responsibility model, which security and compliance task is AWS responsible for?
Answer: C. Updating Amazon EC2 host firmware
AWS is responsible for security of the cloud, including the physical hosts and their firmware. Everything listed otherwise, like OS patching, permissions, and data encryption, is the customer's responsibility in the cloud.
Q5. Why is AWS able to continue to reduce its pricing?
Answer: D. Economies of scale
Aggregating usage from hundreds of thousands of customers lets AWS achieve economies of scale and pass the savings on as lower prices. Pay-as-you-go is a billing model, not the driver behind repeated price reductions.
Q6. A company needs to use third-party software for its workload on AWS. Is there an AWS feature or service the company can use to purchase the software?
Answer: D. AWS Marketplace
AWS Marketplace is the digital catalog for finding and buying third-party software that runs on AWS. License Manager only tracks licenses you already own; it does not sell software.
Q7. Which AWS service does AWS Snowball Edge natively support?
Answer: D. Amazon EC2
Snowball Edge devices natively support running Amazon EC2 instances with sbe instance types for edge computing. Trusted Advisor, SMS, and DMS are management and migration services, not local Snowball workloads.
Q8. Which AWS service can be used to load data from Amazon S3, transform it, and move it to another destination?
Answer: A. AWS Glue
AWS Glue is a serverless extract, transform, and load service that moves data between sources like S3 and target destinations. Amazon Kinesis handles real-time streaming, while EMR and Redshift focus on big data processing and warehousing rather than managed ETL.
Q9. Which AWS service helps customers meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
Answer: B. AWS CloudHSM
AWS CloudHSM provides dedicated single-tenant hardware security modules for key generation and management to meet strict compliance requirements. KMS manages keys but uses shared, managed infrastructure, so the keyword dedicated hardware points to CloudHSM.
Q10. A company plans to move its application development to AWS. Which benefits can they achieve when developing and running applications in the AWS Cloud compared to on-premises? (Select TWO.)
Answer: A,E. AWS makes it easy to implement high availability. || AWS can accommodate large changes in application demand.
High availability across Availability Zones and elastic scaling for demand changes are direct cloud advantages. AWS only patches infrastructure, not your application code, and never auto-replicates data globally, so those distractors fail under shared responsibility.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days.