AWS Certified Cloud Practitioner (CLF-C02) Practice Exam Questions and Answers – Part 16/16

Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which of the following Amazon Simple Storage Service (Amazon S3) storage classes do not charge any data retrieval fee? (. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.

Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →

What you will practice

  • Which of the following Amazon Simple Storage Service (Amazon S3) storage classes do not charge any data retri…
  • Which of the following statements are true regarding Amazon Simple Storage Service (Amazon S3) (Select two)?
  • A cargo shipping company runs its server fleet on Amazon EC2 instances. Some of these instances host CRM appl…
  • An organization maintains a separate Virtual Private Cloud (VPC) for each of its business units. Two units ne…
  • An e-commerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Wh…
  • AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the fol…

Answers and explanations

Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.

Q1. Which of the following Amazon Simple Storage Service (Amazon S3) storage classes do not charge any data retrieval fee? (Select two)

Answer: A,B. Amazon S3 Intelligent-Tiering || Amazon S3 Standard

Amazon S3 Standard and S3 Intelligent-Tiering are correct because neither charges a data retrieval fee for accessing your objects. As a practical rule, expect retrieval fees on infrequent access tiers and Glacier archive classes to offset their lower storage costs.

Q2. Which of the following statements are true regarding Amazon Simple Storage Service (Amazon S3) (Select two)?

Answer: B,C. Amazon Simple Storage Service (Amazon S3) is a key value based object storage service || Amazon Simple Storage Service (Amazon S3) stores data in a flat non-hierarchical structure

Amazon S3 is an object storage service that uses a flat, non-hierarchical structure rather than traditional file systems. It relies on key-value pairs, so you cannot install databases directly on it, making it very distinct from block storage.

Q3. A cargo shipping company runs its server fleet on Amazon EC2 instances. Some of these instances host CRM applications that need to be accessible 24/7. These applications are not mission-critical. In case of a disaster, these applications c…

Answer: C. Warm Standby strategy

A warm standby strategy runs a smaller, functional version of your environment in another region, allowing you to scale up quickly during a disaster. Pilot light lacks this immediate operational capacity, while multi-site active-active exceeds the cost requirements for non-mission-critical workloads.

Q4. An organization maintains a separate Virtual Private Cloud (VPC) for each of its business units. Two units need to privately share data. Which is the most optimal way of privately sharing data between the two VPCs?

Answer: A. VPC peering connection

VPC peering connects two VPCs directly, allowing private traffic routing between them as if they are in the same network. Site-to-Site VPN and Direct Connect link on-premises networks to AWS, while VPC endpoints only connect a VPC to AWS services.

Q5. An e-commerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which of the following costs is the company responsible for?

Answer: A. Application software license costs

Under the shared responsibility model, AWS handles physical security, hardware, and facility power, while customers manage their own application software licenses. This division of labor frees companies from maintaining data centers. Hardware and facility costs never fall to the cloud customer.

Q6. AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two.)

Answer: D,E. Amazon Elastic Compute Cloud (Amazon EC2) || Amazon CloudFront

AWS Shield Advanced provides specialized DDoS protection for resources like Amazon CloudFront and Amazon EC2. These services sit at the edge or compute layers, unlike storage or deployment services like S3 or Elastic Beanstalk.

Q7. Which Amazon S3 storage class has NO minimum storage duration charge for objects?

Answer: A. Amazon S3 Standard

Amazon S3 Standard has no minimum storage duration, making it ideal for frequently accessed data. Archival and infrequent access classes like Glacier and Standard-IA enforce minimum duration fees, so deleting objects early incurs prorated charges.

Q8. Which AWS service offers lifecycle configuration rules for cost-optimal storage?

Answer: C. Amazon Simple Storage Service (Amazon S3)

Amazon S3 lifecycle rules transition older objects to cheaper storage classes or delete them entirely to optimize costs. Block storage like EBS and instance stores lack automated lifecycle tiering. Use this feature to manage data retention seamlessly.

Q9. Which of the following are free under the Amazon S3 pricing model? (Select two.)

Answer: D,E. Data transferred out to an Amazon Elastic Compute Cloud (Amazon EC2) instance, when the instance is in the same AWS Region as the S3 bucket || Data transferred in from the internet

S3 does not charge for data transferred into the service from the internet or for data sent to an EC2 instance in the same region. Data going out to other regions incurs standard transfer fees, while all storage classes charge for consumed capacity.

Q10. Which of the following is correct regarding the Amazon Relational Database Service (Amazon RDS) service?

Answer: A. You can use both read replicas and multi-AZ deployment for disaster recovery

Both read replicas and Multi-AZ deployments can address disaster recovery needs. Remember that Multi-AZ primarily provides high availability, while read replicas are typically used for scaling read performance, though cross-Region replicas serve as excellent disaster recovery mechanisms.

Q11. Which entity ensures that your application on Amazon Elastic Compute Cloud (Amazon EC2) always has the right amount of capacity to handle the current traffic demand?

Answer: D. Amazon EC2 Auto Scaling

Amazon EC2 Auto Scaling automatically adjusts the number of instances to handle current traffic demands. A practical exam cue is to associate Auto Scaling with adding or removing capacity, whereas load balancers strictly distribute incoming traffic across existing resources.

Q12. Bob and Susan each have an AWS account in AWS Organizations. Susan has five Reserved Instances (RIs) of the same type and Bob has none. During one particular hour, Susan uses three instances and Bob uses six for a total of nine instances o…

Answer: A,E. AWS bills five instances as Reserved Instances, and the remaining four instances as regular instances || Bob receives the cost-benefit from Susan's Reserved Instance (RI) only if he launches his instances in the same AWS Region where Susan purchased her Reserved Instances (RI)

Consolidated billing applies Reserved Instance discounts automatically to any matching instance in the organization. The discount applies region-wide, making the Availability Zone requirement in the original explanation a technical inaccuracy.

Q13. How is Amazon EC2 different from traditional hosting systems? (Select two)

Answer: B,D. Amazon EC2 can scale with changing computing requirements || With Amazon EC2, developers can launch and terminate the instances anytime they need to

Amazon EC2 differs from traditional hosting because it easily scales with changing requirements and allows developers to launch or terminate instances at any time. For the exam, remember that EC2 provides flexible, on-demand compute capacity rather than fixed monthly contracts.

Q14. Which of the following AWS storage services can be directly accessed by both AWS Cloud services and on-premises resources via a standard Linux mount command over AWS Direct Connect or VPN?

Answer: D. Amazon Elastic File System (Amazon EFS)

Amazon EFS provides an NFS file system accessible from both AWS and on-premises servers over a Direct Connect or VPN connection. S3 is also accessible on-premises but is an object store rather than a mountable file system. EBS and instance store attach directly to EC2.

Q15. Amazon EC2 Spot Instances are a best-fit for which of the following scenarios?

Answer: D. To run any containerized workload with Amazon Elastic Container Service (Amazon ECS) that can be interrupted

Spot Instances offer deep discounts for interruptible workloads like flexible containerized tasks. They should not be used for critical workloads or scheduled jobs requiring guaranteed capacity, and they never support database installations.

Q16. Which AWS service would you use to create a logically isolated section of the AWS Cloud where you can launch AWS resources in your virtual network?

Answer: D. Virtual private Cloud (VPC)

Amazon Virtual Private Cloud lets you provision a logically isolated section of the AWS Cloud where you can launch resources in a custom virtual network. Remember that subnets and network access control lists are features configured inside your VPC.

More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.

Scroll to Top