Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which pillar of the AWS Well-Architected Framework is responsible for making sure that you select the right resource typ. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which pillar of the AWS Well-Architected Framework is responsible for making sure that you select the right r…
- Which of the following AWS services can be used to forecast your AWS account usage and costs?
- The DevOps team at an IT company wants to centrally manage its servers on AWS Cloud as well as on-premises da…
- Which of the following AWS entities lists all users in your account and the status of their various account a…
- Which Amazon Route 53 routing policy would you use to route traffic to a single resource such as a web server…
- Which of the following describes an Availability Zone (AZ) in the AWS Cloud?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which pillar of the AWS Well-Architected Framework is responsible for making sure that you select the right resource types and sizes based on your workload requirements?
Answer: A. Performance Efficiency
The Performance Efficiency pillar focuses on selecting the right resource types and sizes to match your workload requirements. Cost Optimization does overlap with sizing, but it strictly prioritizes avoiding unnecessary spend.
Q2. Which of the following AWS services can be used to forecast your AWS account usage and costs?
Answer: B. AWS Cost Explorer
AWS Cost Explorer lets you visualize historical usage and provides forecasting to predict future costs and usage. AWS Budgets sends alerts based on thresholds, but it relies on data rather than being the primary forecasting interface.
Q3. The DevOps team at an IT company wants to centrally manage its servers on AWS Cloud as well as on-premises data centers so that it can collect software inventory, run commands, configure and patch servers at scale. As a Cloud Practitioner…
Answer: A. AWS Systems Manager
AWS Systems Manager provides a unified interface to view operational data and automate tasks across both AWS and on-premises servers. CloudFormation handles infrastructure as code, while Config assesses resource configuration compliance.
Q4. Which of the following AWS entities lists all users in your account and the status of their various account aspects such as passwords, access keys, and MFA devices?
Answer: B. Credentials Report
The IAM Credentials Report lists all users in your account alongside the status of their passwords, access keys, and MFA devices. Trusted Advisor checks infrastructure, but the credentials report is the designated compliance auditing tool.
Q5. Which Amazon Route 53 routing policy would you use to route traffic to a single resource such as a web server for your website?
Answer: C. Simple routing
Simple routing is the correct choice because it configures standard DNS records to route traffic directly to a single resource, like a web server. Choose weighted routing to split traffic across multiple resources instead.
Q6. Which of the following describes an Availability Zone (AZ) in the AWS Cloud?
Answer: A. One or more data centers in the same location
An Availability Zone consists of one or more discrete data centers within a specific AWS Region. For the exam, remember that multiple locations define a Region, while a single location with redundant power and networking defines an Availability Zone.
Q7. Which of the following entities should be used for an Amazon Elastic Compute Cloud (Amazon EC2) Instance to access a DynamoDB table?
Answer: C. IAM role
Using an IAM role grants an Amazon EC2 instance temporary credentials to securely access a DynamoDB table. Avoid embedding long-term IAM user access keys directly in applications, as this creates a significant security risk.
Q8. AWS Organizations provides which of the following benefits? (Select two)
Answer: C,D. Volume discounts for Amazon EC2 and Amazon S3 aggregated across the member AWS accounts || Share the reserved Amazon EC2 instances amongst the member AWS accounts
AWS Organizations offers consolidated billing, enabling volume discounts and shared Reserved Instances across member accounts. Management tasks like patching instances or provisioning Spot Instances are handled by management services, not Organizations.
Q9. Which AWS service will help you deploy application code automatically to an Amazon Elastic Compute Cloud (Amazon EC2) instance?
Answer: B. AWS CodeDeploy
AWS CodeDeploy is the specific service that automates code deployments directly to compute services like Amazon EC2. Elastic Beanstalk is an end-to-end platform, while CodeBuild compiles code, and CloudFormation provisions resources.
Q10. Which AWS service can be used to host a static website with the LEAST effort?
Answer: A. Amazon Simple Storage Service (Amazon S3)
Amazon S3 is the most effortless way to host a static website by simply configuring bucket permissions. Glacier is for archiving, Storage Gateway connects on-premises systems, and file systems like EFS require attached compute resources.
Q11. Which AWS service would you choose for a data processing project that needs a schemaless database?
Answer: A. Amazon DynamoDB
Amazon DynamoDB is the correct choice because it is a non-relational, schemaless database that easily handles flexible data structures. For the exam, remember that services like RDS, Aurora, and Redshift are relational databases that require a rigid, predefined schema.
Q12. Which of the following entities are part of an Amazon Virtual Private Cloud (Amazon VPC) in the AWS Cloud? (Select two)
Answer: B,E. Internet Gateway || Subnet
Subnets and Internet Gateways are fundamental networking components that exist directly inside an Amazon Virtual Private Cloud. As a quick exam tip, easily eliminate the distractors because API Gateway and Storage Gateway are standalone services, while objects belong to S3 buckets.
Q13. A multi-national organization has a separate virtual private cloud (VPC) for each of its business units on the AWS Cloud. The organization also wants to connect its on-premises data center with the different virtual private clouds (VPC) fo…
Answer: B,C. AWS Transit Gateway || AWS Direct Connect
AWS Transit Gateway provides a central hub to route traffic between multiple VPCs, and AWS Direct Connect provides a dedicated, private network path from on-premises data centers into AWS. Avoid VPC peering here because managing individual connections between many networks quickly becomes overly complex.
Q14. According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for AWS Identity and Access Management (AWS IAM)? (Select two)
Answer: A,E. Enable multi-factor authentication (MFA) on all accounts || Analyze user access patterns and review AWS Identity and Access Management (AWS IAM) permissions
Under the shared responsibility model, customers are strictly responsible for their own security in the cloud, which includes enabling multi-factor authentication and analyzing user access patterns. AWS handles the security of the underlying infrastructure, managing global networks and compliance validation independently.
Q15. A firm wants to maintain the same data on Amazon Simple Storage Service (Amazon S3) between its production account and multiple test accounts. Which technique should you choose to copy data into multiple test accounts while retaining objec…
Answer: C. Amazon S3 Replication
Amazon S3 Replication automatically and asynchronously copies objects across buckets while perfectly retaining all original metadata. On the exam, remember that storage classes simply tier data, Transfer Acceleration speeds up edge uploads, and bucket policies only grant access rather than moving data.
Q16. Reserved Instance (RI) pricing is available for which of the following AWS services? (Select two)
Answer: A,E. Amazon Relational Database Service (Amazon RDS) || Amazon Elastic Compute Cloud (Amazon EC2)
Reserved Instances are available for compute services like Amazon EC2 and relational databases like Amazon RDS to provide a billing discount for committed usage. Services such as IAM are free, while S3 and CloudFront do not offer reserved capacity because they are strictly metered by usage.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.