Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which budget types can be created under AWS Budgets? (Select three.). Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which budget types can be created under AWS Budgets? (Select three.)
- Which of the following are components of an AWS Site-to-Site VPN connection? (Select two.)
- An IT company is on a cost-optimization spree and wants to identify all Amazon Elastic Compute Cloud (Amazon…
- An enterprise is developing a roadmap for its cloud adoption journey and wants to ensure its IT investments a…
- Which AWS services/features support High Availability by default? (Select two)
- An e-commerce company uses AWS Cloud and would like to receive separate invoices for development and producti…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which budget types can be created under AWS Budgets? (Select three.)
Answer: C,E,F. Usage budget || Reservation budget || Cost budget
AWS Budgets lets you create cost, usage, and reservation budgets to track your cloud spending and resource utilization. You can also track Savings Plans, but hardware, software, and resource budgets are not actual features tested on the exam.
Q2. Which of the following are components of an AWS Site-to-Site VPN connection? (Select two.)
Answer: D,E. Customer gateway || Virtual private gateway (VGW)
An AWS Site-to-Site VPN requires a virtual private gateway on the AWS side and a customer gateway representing your on-premises network hardware. Remember that an internet gateway simply allows public traffic into a VPC, while a NAT gateway handles private subnet outbound traffic.
Q3. An IT company is on a cost-optimization spree and wants to identify all Amazon Elastic Compute Cloud (Amazon EC2) instances that are under-utilized. Which AWS services can be used off-the-shelf to address this use-case without needing any…
Answer: B,C. AWS Cost Explorer || AWS Trusted Advisor
Trusted Advisor and Cost Explorer both identify underutilized instances right out of the box with automated rightsizing recommendations. CloudWatch requires manual configuration of alarms and metrics to monitor utilization, so it does not fit the requirement.
Q4. An enterprise is developing a roadmap for its cloud adoption journey and wants to ensure its IT investments align with business objectives and deliver measurable value. Which perspective of the AWS Cloud Adoption Framework (CAF) addresses…
Answer: C. Business Perspective
The Business Perspective ensures IT investments align with business objectives and deliver measurable value. The Platform Perspective handles technical architecture, while the Governance Perspective focuses on risk and compliance management.
Q5. Which AWS services/features support High Availability by default? (Select two)
Answer: C,D. Amazon Elastic File System (Amazon EFS) || Amazon DynamoDB
DynamoDB and EFS provide built-in high availability by automatically replicating data across multiple availability zones. EBS volumes and subnets are confined to a single availability zone, meaning they require manual setup for resilience.
Q6. An e-commerce company uses AWS Cloud and would like to receive separate invoices for development and production environments. As a Cloud Practioner, which of the following solutions would you recommend for this use-case?
Answer: A. Create separate AWS accounts for development and production environments to receive separate invoices
Creating separate AWS accounts for each environment ensures you naturally receive separate monthly invoices. AWS Organizations actually consolidates billing into one central payer account, while Cost Explorer and tags only help visualize costs.
Q7. A startup runs its proprietary application on docker containers. As a Cloud Practitioner, which AWS service would you recommend so that the startup can run containers and still have access to the underlying servers?
Answer: A. Amazon Elastic Container Service (Amazon ECS)
Amazon Elastic Container Service is correct because it allows you to run Docker containers while retaining direct access and control over the underlying servers. Contrast this with AWS Fargate, which is a serverless compute engine that removes the need to provision or manage any underlying infrastructure.
Q8. A cyber-security agency uses AWS Cloud and wants to carry out security assessments on its own AWS infrastructure without any prior approval from AWS. Which of the following describes/facilitates this practice?
Answer: D. Penetration Testing
Penetration testing is the correct choice because AWS permits customers to perform security assessments on their own infrastructure without prior approval for several common services. Note that prohibited activities like network stress testing still strictly require special authorization from AWS.
Q9. Which feature of AWS Cloud offers the ability to innovate faster and rapidly develop, test, and launch software applications?
Answer: A. Agility
Agility is correct because it specifically describes the cloud benefit of rapidly provisioning resources to accelerate development, testing, and launch cycles. Elasticity involves scaling resources dynamically based on real-time demand, whereas global deployment focuses on reducing latency worldwide.
Q10. As per the AWS Shared Responsibility Model, Security and Compliance is a shared responsibility between AWS and the customer. Which of the following security services/utilities falls under the purview of AWS under the AWS Shared Responsibil…
Answer: C. AWS Shield Standard
AWS Shield Standard is automatically enabled for all AWS accounts at no extra cost, making its infrastructure security completely the responsibility of AWS. In contrast, services like WAF and Shield Advanced require customer configuration and management, placing them under customer responsibility.
Q11. An AWS user is trying to launch an Amazon EC2 instance in a given region. What is the region-specific constraint that the Amazon Machine Image (AMI) must meet so that it can be used for this Amazon EC2 instance?
Answer: C. You must use an Amazon Machine Image (AMI) from the same region as that of the Amazon EC2 instance. The region of the Amazon Machine Image (AMI) has no bearing on the performance of the Amazon EC2 instance
An Amazon Machine Image must exist in the same AWS Region where you plan to launch your EC2 instance. You can copy an image to the required region if needed, but the region itself only dictates deployment location and has no impact on instance performance.
Q12. Which of the following AWS services are regional in scope? (Select two.)
Answer: A,E. AWS Lambda || Amazon Rekognition
AWS Lambda and Amazon Rekognition are regional services because they operate and maintain data within a specific geographic AWS Region. Remember that IAM, CloudFront, and WAF operate globally, meaning their configurations apply universally across all your active regions.
Q13. Compared to the On-Demand Instance prices, what is the highest possible discount offered for Reserved Instances (RI)?
Answer: C. 72
Standard Reserved Instances offer a maximum discount of seventy-two percent compared to On-Demand Instance pricing. Memorize this specific seventy-two percent threshold for the exam, as it represents the upper limit of standard reservation savings.
Q14. Which of the following is correct regarding AWS Shield Advanced pricing?
Answer: C. AWS Shield Advanced offers protection against higher fees that could result from a DDoS attack
Shield Advanced includes cost protection, covering unanticipated scaling charges caused by a DDoS attack. The service requires an additional fee regardless of your support plan, so it is not a free inclusion for Business or Enterprise users.
Q15. A customer is running a comparative study of pricing models of Amazon EFS and Amazon Elastic Block Store (Amazon EBS) that are used with the Amazon EC2 instances that host the application. Which of the following statements are correct rega…
Answer: A,E. Amazon Elastic Block Store (Amazon EBS) Snapshots are stored incrementally, which means you are billed only for the changed blocks stored || You will pay a fee each time you read from or write data stored on the Amazon Elastic File System (Amazon EFS) – Infrequent Access storage class
EBS snapshots are incremental, so you only pay for changed blocks. EFS Infrequent Access charges lower storage rates but applies access fees for reads and writes, optimizing costs for rarely accessed data.
Q16. An IT company would like to move its IT resources (including any data and applications) from an AWS Region in the US to another AWS Region in Europe. Which of the following represents the correct solution for this use-case?
Answer: C. The company should just start creating new resources in the destination AWS Region and then migrate the relevant data and applications into this new AWS Region
Regions are completely independent, so you must manually create new resources in the destination Region and migrate your data. AWS CloudFormation can deploy the new infrastructure, but it cannot automatically move existing data or applications across regions.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.