11 CLF-C02 practice questions with answer reveals and spoken explanations. Choose before the reveal and keep your score.
Certification: AWS Certified Cloud Practitioner (CLF-C02). Independent practice, not an official exam.
How to use this round:
– Pause each question if you need more time to decide.
– Compare your answer after the reveal.
– Review the concepts you missed, then practice again.
Practice free with CertPunch:
Web: https://certpunch.com/
iPhone and iPad: https://apps.apple.com/app/certpunch/id6797541734
Android: https://play.google.com/store/apps/details?id=com.certpunch.app
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which service allows an organization to view operational data from multiple AWS services through a unified us…
- Which IAM entity can be used for assigning permissions to AWS services?
- How does Amazon CloudFront deliver content to end users with low latency using the AWS global infrastructure?
- Which AWS service or VPC component allows inbound traffic from the internet to access a VPC?
- An organization is considering implementing a new workload in the AWS Cloud. However, the company first wants…
- AWS Global Infrastructure consists of which of the following components?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which service allows an organization to view operational data from multiple AWS services through a unified user interface and automate operational tasks?
Answer: D. AWS Systems Manager
AWS Systems Manager provides a unified interface for operational data across AWS services plus automation for operational tasks. CloudWatch monitors metrics and logs but does not automate operational tasks across resources.
Q2. Which IAM entity can be used for assigning permissions to AWS services?
Answer: A. IAM Role
IAM roles are the entity used to grant permissions to AWS services without permanent credentials. IAM policies define permissions but must be attached to a role; you never assign a policy directly to a service.
Q3. How does Amazon CloudFront deliver content to end users with low latency using the AWS global infrastructure?
Answer: C. Edge locations
CloudFront delivers content through a global network of edge locations, routing each request to the lowest-latency location. Exam cue: CloudFront equals edge locations, while Regions and AZs are for running workloads.
Q4. Which AWS service or VPC component allows inbound traffic from the internet to access a VPC?
Answer: B. Internet gateway
An internet gateway is the VPC component that allows inbound traffic from the internet to reach resources in the VPC. A NAT gateway only enables outbound internet access from private subnets, never inbound.
Q5. An organization is considering implementing a new workload in the AWS Cloud. However, the company first wants to forecast costs. Which tool should the company use to estimate the cost of the workload?
Answer: A. AWS Pricing Calculator.
AWS Pricing Calculator estimates costs for planned workloads before you build them. Cost Explorer and the Cost and Usage Report analyze past or current spend, not pre-deployment estimates for new workloads.
Q6. AWS Global Infrastructure consists of which of the following components?
Answer: D. AWS Regions
AWS Regions are a core component of AWS Global Infrastructure, along with Availability Zones and edge locations. For the exam, remember that Organizations, LightSail, and Alexa are services or account-management tools, not physical infrastructure components.
Q7. Are there any AWS services or features that will identify and search for externally shared AWS resources?
Answer: A. AWS IAM Access Analyzer.
AWS IAM Access Analyzer identifies resources shared with external entities, such as S3 buckets and IAM roles, helping detect unintended access. Control Tower handles multi-account governance, so it does not find externally shared resources.
Q8. Which of the following is an advantage of AWS Cloud computing?
Answer: D. Trade fixed expenses for variable expenses.
Trading fixed capital expenses for variable pay-as-you-go expenses is one of the six advantages of cloud computing. The other options describe trades you never make, since cloud benefits like security and agility are not traded away.
Q9. A security operations engineer needs to implement threat detection and monitoring for malicious or unauthorized behavior. Which service should be used?
Answer: B. Amazon GuardDuty
Amazon GuardDuty provides intelligent threat detection and continuous monitoring for malicious or unauthorized activity. Exam cue: GuardDuty detects threats, Shield protects against DDoS, and KMS or CloudHSM manage encryption keys.
Q10. An Amazon EC2 instance running the Amazon Linux 2 AMI is billed in what increment?
Answer: C. Per second
EC2 Linux instances, including Amazon Linux 2, are billed per second with a 60-second minimum. Exam cue: remember Linux bills per second, while Windows instances historically bill per hour, and EBS storage bills per GB provisioned.
Q11. After an organization has migrated several servers into AWS, they are unsure as to what they must directly manage themselves. Which cost is the company's direct responsibility?
Answer: A. Cost of application software licenses.
Application software licenses remain the customer's responsibility under the shared responsibility model. AWS owns the hardware, power, and data center physical security, so those costs never fall on the customer.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days.