Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which of the following criteria are used to calculate the charge for Amazon EBS volumes? (Select TWO). Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which of the following criteria are used to calculate the charge for Amazon EBS volumes? (Select TWO)
- A Cloud Practitioner would like to centrally view, manage, and operate nodes to quickly identify any issues t…
- A company needs a secure online data transfer service that can automate ongoing transfers from on-premises sy…
- Which AWS serverless service allows you to prepare data for analytics?
- Which AWS tool can provide best practice recommendations for performance, service limits, and cost optimizati…
- Which of the following AWS services can be used to generate, use, and manage encryption keys on the AWS Cloud?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following criteria are used to calculate the charge for Amazon EBS volumes? (Select TWO)
Answer: A,E. Provisioned IOPS || Volume type
EBS pricing is driven by volume type, provisioned storage space, and provisioned IOPS. Data transfer into AWS is free, and the EC2 instance type a volume attaches to does not affect the EBS price.
Q2. A Cloud Practitioner would like to centrally view, manage, and operate nodes to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?
Answer: B. AWS Systems Manager
AWS Systems Manager provides a central hub to view operational data, automate management tasks, and quickly identify issues across your nodes. Trusted Advisor provides high-level best practice checks rather than operational node control.
Q3. A company needs a secure online data transfer service that can automate ongoing transfers from on-premises systems into AWS while providing support for incremental data backups. Which AWS service is an optimal fit for this requirement?
Answer: D. AWS DataSync
AWS DataSync automates and accelerates online data transfers between on-premises storage and AWS, fully supporting incremental transfers. Snowball devices are for offline migrations, whereas Storage Gateway connects on-premises apps to cloud storage.
Q4. Which AWS serverless service allows you to prepare data for analytics?
Answer: B. AWS Glue
AWS Glue is a serverless extract, transform, and load service specifically designed to prepare and clean data for analytics. Amazon Athena and Redshift query the prepared data, while EMR handles big data processing frameworks.
Q5. Which AWS tool can provide best practice recommendations for performance, service limits, and cost optimization?
Answer: B. AWS Trusted Advisor
AWS Trusted Advisor evaluates your account against AWS best practices, offering recommendations for cost optimization, performance, security, and service limits. Amazon CloudWatch monitors resource performance but does not provide actionable best practice checks.
Q6. Which of the following AWS services can be used to generate, use, and manage encryption keys on the AWS Cloud?
Answer: B. AWS CloudHSM
AWS CloudHSM provides dedicated hardware security modules in the cloud, allowing you to securely generate, store, and manage your own cryptographic encryption keys. Remember that Secrets Manager protects application credentials like database passwords, whereas CloudHSM handles the actual cryptographic hardware boundary.
Q7. Which AWS service can be used to view the most comprehensive billing details for the past month?
Answer: C. AWS Cost & Usage Report (AWS CUR)
The AWS Cost and Usage Report provides the most comprehensive and granular billing details available, publishing hourly resource data directly into an Amazon S3 bucket. Contrast this with AWS Cost Explorer, which is better suited for high-level visual forecasting and trend analysis.
Q8. Which service or tool will you use to create and provide trusted users with temporary security credentials that can control access to your AWS resources?
Answer: B. AWS Security Token Service (AWS STS)
The AWS Security Token Service generates temporary, limited-privilege credentials for federated or IAM users to securely access your resources. While Amazon Cognito handles web and mobile user identity pools, STS is the underlying mechanism for dispensing short-term access tokens.
Q9. A company using a hybrid cloud would like to store secondary backup copies of the on-premises data. Which Amazon S3 Storage Class would you use for a cost-optimal yet rapid access solution?
Answer: B. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
Amazon S3 One Zone-Infrequent Access is the optimal choice for secondary backup copies because it stores data in a single availability zone, reducing costs while maintaining rapid access. Standard-IA offers multi-zone resilience, making it unnecessarily expensive for easily recreatable or secondary data.
Q10. The IT infrastructure at a university is deployed on the AWS Cloud and is experiencing a read-intensive workload. As a Cloud Practitioner, which AWS service would you use to take the load off databases?
Answer: C. Amazon ElastiCache
Amazon ElastiCache sits in front of your database to serve frequent read requests from fast in-memory data stores, significantly reducing database load. Standard databases like Amazon RDS handle persistent storage, while EMR and Glue process big data analytics.
Q11. According to the AWS Well-Architected Framework, which of the following statements are recommendations in the Operational Excellence pillar? (Select two)
Answer: B,D. Make frequent, small, reversible changes || Anticipate failure
The Operational Excellence pillar emphasizes making frequent, small, reversible changes and anticipating failure. Use this practical cue to separate the pillars: Security focuses on traceability, Reliability on automatic recovery, and Performance Efficiency on serverless architectures.
Q12. A company would like to define a set of rules to manage objects cost-effectively between Amazon Simple Storage Service (Amazon S3) storage classes. As a Cloud Practitioner, which Amazon S3 feature would you use?
Answer: C. Amazon Simple Storage Service (Amazon S3) Lifecycle configuration
S3 Lifecycle configurations automatically transition objects between storage classes to manage costs effectively over time. Avoid confusing this with Cross-Region Replication, which is used for compliance and disaster recovery across different geographic regions.
Q13. Which AWS tool/service will help you define your cloud infrastructure using popular programming languages such as Python and JavaScript?
Answer: B. AWS Cloud Development Kit (AWS CDK)
The Cloud Development Kit lets you define cloud infrastructure using familiar programming languages like Python. Contrast this with CloudFormation, which requires writing declarative templates using JSON or YAML instead of traditional code.
Q14. A research lab needs to be notified in case of a configuration change for security and compliance reasons. Which AWS service can assist with this task?
Answer: A. AWS Config
AWS Config is the correct choice because it continuously monitors and records resource configurations, allowing you to trigger alerts for compliance changes. Trusted Advisor provides high-level best practice checks but lacks granular configuration state tracking.
Q15. A production company would like to establish an AWS managed virtual private network (VPN) service between its on-premises network and AWS. Which item needs to be set up on the company's side?
Answer: C. A customer gateway
A customer gateway represents the physical or software appliance on your side of a Site-to-Site VPN connection. The virtual private gateway resides on the AWS side, so remember that you always manage the customer endpoint hardware.
Q16. An engineering team would like to cost-effectively run hundreds of thousands of batch computing workloads on AWS. As a Cloud Practitioner, which AWS service would you use for this task?
Answer: C. AWS Batch
AWS Batch dynamically provisions the optimal compute resources to run hundreds of thousands of batch computing workloads efficiently. While Lambda handles smaller event-driven tasks, AWS Batch is purpose-built for massive scale processing.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.