11 CLF-C02 practice questions with answer reveals and spoken explanations. Choose before the reveal and keep your score.
Certification: AWS Certified Cloud Practitioner (CLF-C02). Independent practice, not an official exam.
How to use this round:
– Pause each question if you need more time to decide.
– Compare your answer after the reveal.
– Review the concepts you missed, then practice again.
Practice free with CertPunch:
Web: https://certpunch.com/
iPhone and iPad: https://apps.apple.com/app/certpunch/id6797541734
Android: https://play.google.com/store/apps/details?id=com.certpunch.app
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance state changes. Whic…
- Which of the following are advantages of the AWS Cloud? (Select TWO.)
- An architecture's ability to withstand failures with minimal downtime demonstrates which AWS Cloud benefit?
- Which AWS service provides on-demand downloads of AWS security and compliance reports?
- Which pillar of the AWS Well-Architected Framework includes the design principle of defining workloads, appli…
- An organization recently migrated to AWS and wants to enable intelligent threat protection and continuous mon…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance state changes. Which AWS service can the company use to meet this requirement?
Answer: B. Amazon EventBridge
Amazon EventBridge is the serverless event bus that can trigger a Step Functions workflow in response to EC2 instance state-change events. Remember EventBridge for event-driven automation; Fargate is container compute and SageMaker is machine learning.
Q2. Which of the following are advantages of the AWS Cloud? (Select TWO.)
Answer: A,D. Users can stop guessing about resource capacity. || Users can stop spending money on the maintenance of data centers.
Two of the six advantages of cloud computing are trading capital expense for variable expense and stopping capacity guessing. AWS manages security OF the cloud, not all security IN the cloud, and cloud bills vary with usage.
Q3. An architecture's ability to withstand failures with minimal downtime demonstrates which AWS Cloud benefit?
Answer: D. High availability
High availability means a system keeps operating through component failures with minimal downtime. Scalability and elasticity are about handling changes in demand, not surviving failures, so they are the tempting wrong picks.
Q4. Which AWS service provides on-demand downloads of AWS security and compliance reports?
Answer: C. AWS Artifact
AWS Artifact provides on-demand downloads of AWS security and compliance reports such as SOC and PCI documents. Exam cue: Artifact equals audit reports; Inspector equals automated vulnerability assessments.
Q5. Which pillar of the AWS Well-Architected Framework includes the design principle of defining workloads, applications, and infrastructure as code (IaC)?
Answer: B. Operational excellence
Performing operations as code, including infrastructure as code, is a core design principle of the operational excellence pillar. The other pillars focus on performance, security, or recovering from failures rather than how operations are run.
Q6. An organization recently migrated to AWS and wants to enable intelligent threat protection and continuous monitoring across all its accounts. Which AWS service should the company use to achieve this goal?
Answer: D. Amazon GuardDuty
Amazon GuardDuty provides intelligent, continuous threat detection across accounts using machine learning on logs. Detective investigates findings after the fact, Shield handles DDoS, and Macie discovers sensitive data, so GuardDuty is the fit.
Q7. Which AWS service provides a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser, without needing to install any software or configure servers?
Answer: B. AWS Cloud9
AWS Cloud9 is a cloud-based IDE that lets you write, run, and debug code from a browser with no local setup. CodeStar and CodeBuild handle development workflows and builds, not an in-browser IDE, so they fail the requirement.
Q8. Which IAM entity is associated with an access key ID and secret access key?
Answer: D. IAM User
Access key IDs and secret access keys are long-term credentials attached to an IAM user for programmatic calls. Remember, IAM roles use temporary credentials and groups and policies cannot hold access keys at all.
Q9. Under the AWS shared responsibility model, which of the following is an example of customer responsibility in the AWS Cloud?
Answer: D. Firewall configuration
Firewall configuration, such as security groups and network ACLs, is security in the cloud and belongs to the customer. Exam cue: anything you can configure in the console is usually your responsibility, not AWS's.
Q10. Under the AWS shared responsibility model, which actions are the responsibility of AWS? (Select TWO.)
Answer: B,C. Encrypting traffic on the AWS backbone between global and regional AWS facilities. || Scanning AWS service endpoints for vulnerabilities.
AWS owns its global network and service endpoints, so protecting backbone traffic and scanning endpoints for vulnerabilities fall under security of the cloud. Security group rules and S3 encryption are customer configurations, so those distractors fail.
Q11. An organization moves a workload to Amazon EC2 instances on AWS. Cost-effectiveness is the key to running the workload properly in the Cloud. What can the company do to meet this requirement?
Answer: A. Rightsize all the EC2 instances that are used in the deployment
Rightsizing instances to match actual workload demand directly reduces cost since you pay for provisioned capacity. Consolidated billing and CloudFormation help with management, not with making the workload itself cheaper.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days.