Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which of the following is available across all AWS Support plans?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which of the following is available across all AWS Support plans?
- A digital media company wants to convert English language subtitles into Spanish language subtitles. As a Clo…
- Which AWS service will you use to provision the same AWS infrastructure across multiple AWS accounts and Regi…
- An e-commerce company wants to review the Payment Card Industry (PCI) reports on AWS Cloud. Which AWS resourc…
- Which AWS entity enables you to privately connect your Amazon Virtual Private Cloud (Amazon VPC) to an Amazon…
- Which of the following are benefits of the AWS Web Application Firewall (AWS WAF)? (Select two)
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following is available across all AWS Support plans?
Answer: D. AWS Health Dashboard – Your account health
The AWS Health Dashboard provides personalized alerts and remediation guidance regarding your account and resource health, available across every support tier. Contrast this with the full Trusted Advisor checks and third-party software support, which require upgraded Business or Enterprise plans.
Q2. A digital media company wants to convert English language subtitles into Spanish language subtitles. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
Answer: A. Amazon Translate
Amazon Translate is a neural machine translation service that easily converts text between languages, making it ideal for localizing subtitles. Do not confuse this with Transcribe, which handles speech to text, or Polly, which converts written text into spoken audio.
Q3. Which AWS service will you use to provision the same AWS infrastructure across multiple AWS accounts and Regions?
Answer: C. AWS CloudFormation
AWS CloudFormation uses StackSets to deploy infrastructure across multiple accounts and regions simultaneously using templates. AWS Config monitors resource compliance, and CodeDeploy handles application code, not foundational infrastructure provisioning.
Q4. An e-commerce company wants to review the Payment Card Industry (PCI) reports on AWS Cloud. Which AWS resource can be used to address this use case?
Answer: D. AWS Artifact
AWS Artifact provides on-demand access to AWS security and compliance reports, including Payment Card Industry reports. For the exam, reliably associate any need for compliance documentation or audits directly with the AWS Artifact portal.
Q5. Which AWS entity enables you to privately connect your Amazon Virtual Private Cloud (Amazon VPC) to an Amazon Simple Queue Service (Amazon SQS) queue?
Answer: B. VPC Interface Endpoint
A VPC Interface Endpoint uses AWS PrivateLink to privately connect your VPC to supported services like Amazon SQS. A strong exam rule is that gateway endpoints only support Amazon S3 and DynamoDB, while other services rely on interface endpoints.
Q6. Which of the following are benefits of the AWS Web Application Firewall (AWS WAF)? (Select two)
Answer: C,D. AWS Web Application Firewall (AWS WAF) can block all requests except the ones that you allow || AWS Web Application Firewall (AWS WAF) can check for the presence of SQL code that is likely to be malicious (known as SQL injection)
AWS WAF operates at Layer 7 to inspect web requests, allowing you to block malicious SQL injection attempts or restrict access to specific IP addresses. DDoS response team access is exclusive to Shield Advanced, and infrastructure attacks target lower layers.
Q7. Which of the following AWS Support plans provide programmatic access to AWS Support Center features to create, manage and close your support cases? (Select two)
Answer: A,B. AWS Business Support || AWS Enterprise Support
Both Business and Enterprise Support tiers provide programmatic API access to the AWS Support Center for case management. Developer and Basic tiers lack this API access, and Corporate Support is a distractor that does not exist.
Q8. Which of the following entities can be used to connect to an Amazon Elastic Compute Cloud (Amazon EC2) server from a Mac OS, Windows or Linux based computer via a browser-based client?
Answer: C. Amazon EC2 Instance Connect
Amazon EC2 Instance Connect offers a secure, browser-based SSH client accessible across major operating systems. Standard SSH or PuTTY require standalone software, whereas Direct Connect is a dedicated physical network service.
Q9. Which of the following AWS authentication mechanisms supports an AWS Multi-Factor Authentication (AWS MFA) device that you can plug into a USB port on your computer?
Answer: B. U2F security key
A Universal 2nd Factor security key plugs into a USB port for authentication. Hardware and virtual devices typically generate codes, while SMS relies on text messages, so look for the USB characteristic to identify the correct option.
Q10. Which of the following is best-suited for load-balancing HTTP and HTTPS traffic?
Answer: D. Application Load Balancer
The Application Load Balancer operates at Layer 7 and is designed for routing HTTP and HTTPS traffic. The Network Load Balancer handles lower-level TCP and UDP traffic, and System Load Balancer is a distractor.
Q11. Which of the following is a perspective of the AWS Cloud Adoption Framework (AWS CAF)?
Answer: A. Business
Business is one of the six core perspectives of the AWS Cloud Adoption Framework, alongside People, Governance, Platform, Security, and Operations. For the exam, use the memory trick that the framework completely avoids standard terms like architecture, process, or product to describe its perspectives.
Q12. A social media analytics company wants to migrate to a serverless stack on AWS. Which of the following scenarios can be handled by AWS Lambda? (Select two)
Answer: C,D. AWS Lambda can be used to execute code in response to events such as updates to DynamoDB tables || AWS Lambda can be used for preprocessing of data before it is stored in Amazon S3 buckets
Lambda is a serverless compute service that runs code in response to events like DynamoDB streams, or it can easily process data before storing it in S3. You cannot install applications like databases or container services on it.
Q13. The QA team at a company wants a tool/service that can provide access to different mobile devices with variations in firmware and Operating System versions. Which AWS service can address this use case?
Answer: D. AWS Device Farm
AWS Device Farm is an application testing service that lets you test mobile apps across various real devices and operating systems. The other options handle application deployment or code pipelines instead of device testing.
Q14. An e-commerce company would like to receive alerts when the Amazon EC2 Reserved Instances (RI) utilization drops below a certain threshold. Which AWS service can be used to address this use case?
Answer: D. AWS Budgets
AWS Budgets is the correct choice because it allows you to set custom reservation utilization or coverage targets and receive alerts when usage drops below your defined threshold. Use Cost Explorer to visualize data, but rely on Budgets for alerts.
Q15. Which of the following is the MOST cost-effective Amazon Elastic Compute Cloud (Amazon EC2) instance purchasing option for short-term, spiky, and critical workloads on AWS Cloud?
Answer: B. On-Demand Instance
On-Demand Instances are the correct choice for short-term, spiky, and critical workloads because they require no upfront commitment and cannot be unexpectedly interrupted. Avoid Spot Instances for critical workloads since AWS can reclaim them with short notice.
Q16. A financial services company wants to ensure that all customer data uploaded to its data lake on Amazon Simple Storage Service (Amazon S3) always stays private. Which of the following is the MOST efficient solution to address this complian…
Answer: A. Use Amazon S3 Block Public Access to ensure that all Amazon S3 resources stay private
Amazon S3 Block Public Access is the most efficient solution because it provides centralized controls to instantly ensure that all buckets and objects remain private. Custom Lambda functions might work, but native features are always preferred for efficiency.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.