10 CLF-C02 practice questions with answer reveals and spoken explanations. Choose before the reveal and keep your score.
Certification: AWS Certified Cloud Practitioner (CLF-C02). Independent practice, not an official exam.
How to use this round:
– Pause each question if you need more time to decide.
– Compare your answer after the reveal.
– Review the concepts you missed, then practice again.
Practice free with CertPunch:
Web: https://certpunch.com/
iPhone and iPad: https://apps.apple.com/app/certpunch/id6797541734
Android: https://play.google.com/store/apps/details?id=com.certpunch.app
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which AWS service supports an in-memory data structure store, compatible with Redis, that delivers sub-millis…
- A company currently uses a Security Assertion Markup Language (SAML)-based application to log in to third-par…
- Which AWS services facilitate building secure and scalable mobile and web applications, offering features suc…
- What is a specific benefit of an Enterprise Support plan?
- What are the benefits of using Amazon Rekognition with image files?
- Your CTO wants to move to cloud. What cost advantages are there to moving to cloud?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which AWS service supports an in-memory data structure store, compatible with Redis, that delivers sub-millisecond latency for use cases such as caching, session stores, and real-time analytics?
Answer: C. Amazon MemoryDB
Amazon MemoryDB for Redis is a Redis-compatible, durable in-memory database that delivers sub-millisecond latency for caching, session stores, and analytics. On the exam, remember DynamoDB offers single-digit millisecond performance, not the Redis compatibility and sub-millisecond speeds described here.
Q2. A company currently uses a Security Assertion Markup Language (SAML)-based application to log in to third-party business applications and would like to have this hosted in AWS using managed services. Which AWS service will meet this requir…
Answer: C. Amazon Cognito.
Amazon Cognito supports SAML 2.0 federation for managed application sign-in, matching the requirement. A test-taker could argue IAM SAML federation or IAM Identity Center also fit, so watch the wording about managed application access.
Q3. Which AWS services facilitate building secure and scalable mobile and web applications, offering features such as real-time updates and offline functionalities? (Select TWO.)
Answer: C,E. AWS Amplify || AWS AppSync
AWS Amplify and AWS AppSync both support building scalable web and mobile apps with real-time updates and offline capabilities. Amazon API Gateway is the strongest distractor, but it only manages APIs and does not offer offline features by itself.
Q4. What is a specific benefit of an Enterprise Support plan?
Answer: B. Included Technical Account Manager
The Enterprise Support plan is the only tier that includes a designated Technical Account Manager. For the exam, remember TAM plus 15-minute response for business-critical issues equals Enterprise Support.
Q5. What are the benefits of using Amazon Rekognition with image files?
Answer: B. Can be used to identify objects in an image
Amazon Rekognition uses deep learning to detect objects, scenes, faces, and text in images. It does not transcode, resize, or compress media, so those options fail on the service's core purpose.
Q6. Your CTO wants to move to cloud. What cost advantages are there to moving to cloud?
Answer: A. You provision only what you need and adjust to peak load
Cloud economics center on provisioning only what you need and elastically scaling to meet peak load, so you avoid over-provisioning capital expense. Free data transfer is the trap; inbound is free but outbound transfer is charged.
Q7. Which AWS tools can be used for automation? (Select TWO.)
Answer: B,C. AWS CloudFormation || AWS Elastic Beanstalk
CloudFormation and Elastic Beanstalk are the classic automation answers for infrastructure and application deployment. Note that AWS Lambda also enables automation through serverless functions, so some test-takers could argue for it, but the intended pair is B and C.
Q8. Which AWS service or feature can be used to restrict the individual API actions that users and roles in each member account can access?
Answer: B. AWS Organizations
AWS Organizations uses service control policies to centrally restrict the maximum available API actions across all member accounts. IAM policies grant permissions but do not centrally control actions across accounts the way SCPs do, which is the key distinction on the exam.
Q9. Which AWS service helps you deploy application configuration changes with features like validation checks and timely deployment while avoiding the need to write additional code or restart application services?
Answer: B. AWS AppConfig
AWS AppConfig deploys application configuration changes with validation checks and controlled rollout, without code changes or service restarts. CloudFormation provisions infrastructure, not runtime application configuration with validators, so it does not fit this scenario.
Q10. How can a user block a suspicious IP address from connecting to an Amazon EC2 instance?
Answer: C. Block the IP on the inbound rule of a network ACL.
Network ACLs support explicit deny rules, so you can block a specific inbound IP address at the subnet level. Security groups are allow-only, so they cannot explicitly block individual IPs, which makes any option involving security groups incorrect.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days.