Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following reso. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the fol…
- An IT company is planning to migrate from an on-premises environment to AWS Cloud. Which of the following exp…
- A startup wants to migrate its data and applications from the on-premises data center to AWS Cloud. Which of…
- Which AWS service will help you receive alerts when the reservation utilization falls below the defined thres…
- Which of the following AWS Support plans provide access to only core checks from the AWS Trusted Advisor Best…
- The DevOps team at an IT company is moving 500 GB of data from an EC2 instance to an S3 bucket in the same re…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two)
Answer: D,E. AWS Global Accelerator || Amazon Route 53
AWS Shield Advanced provides expanded DDoS protection for Route 53 and Global Accelerator, along with CloudFront, Elastic Load Balancing, and EC2. Be careful with API Gateway and Elastic Beanstalk, as they are covered by Shield Standard, not Advanced.
Q2. An IT company is planning to migrate from an on-premises environment to AWS Cloud. Which of the following expense areas would result in cost savings when the company moves to AWS Cloud? (Select two)
Answer: B,E. Data center hardware infrastructure expenditure || Data center physical security expenditure
Migrating to AWS shifts data center hardware and physical security costs from fixed capital expenses to variable operational expenses. Software licenses and personnel salaries remain unaffected by this infrastructure transition, making them incorrect choices here.
Q3. A startup wants to migrate its data and applications from the on-premises data center to AWS Cloud. Which of the following options can be used by the startup to help with this migration? (Select two)
Answer: C,D. Leverage AWS Professional Services to accelerate the infrastructure migration || Utilize AWS Partner Network (APN) to build a custom solution for this infrastructure migration
AWS Professional Services and the AWS Partner Network provide the expert consulting needed to accelerate and build custom infrastructure migration solutions. Standard AWS Support and Trusted Advisor cannot execute complex migrations, and forums lack official migration authority.
Q4. Which AWS service will help you receive alerts when the reservation utilization falls below the defined threshold?
Answer: D. AWS Budgets
AWS Budgets lets you set custom reservation utilization or coverage targets and triggers alerts when usage drops below your defined threshold. Trusted Advisor offers general best practices, while CloudTrail simply logs API actions without cost monitoring capabilities.
Q5. Which of the following AWS Support plans provide access to only core checks from the AWS Trusted Advisor Best Practice Checks? (Select two)
Answer: A,E. AWS Basic Support || AWS Developer Support
The Basic and Developer Support plans only provide access to the core Trusted Advisor checks for service limits and basic security. Business and Enterprise support tiers unlock the full suite of Trusted Advisor best practice checks across all categories.
Q6. The DevOps team at an IT company is moving 500 GB of data from an EC2 instance to an S3 bucket in the same region. Which of the following scenario captures the correct charges for this data transfer?
Answer: C. The company would not be charged for this data transfer
Data transfer between AWS services within the same region is free, so moving data between EC2 and S3 incurs no transfer charges. Watch out for outbound data transfer to the public internet, as AWS aggregates and charges for that specific traffic.
Q7. A cyber forensics team has detected that AWS owned IP-addresses are being used to carry out malicious attacks. As this constitutes prohibited use of AWS services, which of the following is the correct solution to address this issue?
Answer: A. Contact AWS Abuse Team
The AWS Abuse team is the correct contact for reporting prohibited behaviors, such as malicious attacks originating from AWS-owned IP addresses. Standard AWS Support handles technical issues and cannot process abuse reports or enforce prohibited usage violations.
Q8. Which of the following is a recommended way to provide programmatic access to AWS resources?
Answer: C. Use Access Key ID and Secret Access Key to access AWS resources programmatically
Access keys, consisting of an access key ID and a secret access key, authenticate programmatic requests via the API or CLI. Remember that MFA secures console logins but cannot directly authenticate programmatic requests without specialized temporary credential configurations.
Q9. An e-commerce company has deployed an RDS database in a single Availability Zone (AZ). The engineering team wants to ensure that in case of an AZ outage, the database should continue working on the same endpoint without any manual administ…
Answer: B. Configure the database in RDS Multi-AZ deployment with automatic failover to the standby
Multi-AZ deployments provide high availability via a synchronous standby instance and an automatic failover mechanism. RDS keeps the same endpoint after failover, allowing the application to reconnect seamlessly. Read replicas require manual promotion and do not use a standby.
Q10. A company wants to identify the optimal AWS resource configuration for its workloads so that the company can reduce costs and increase workload performance. Which of the following services can be used to meet this requirement?
Answer: B. AWS Compute Optimizer
Compute Optimizer uses machine learning to analyze historical utilization and recommend optimal resource configurations for instances, volumes, and functions. Cost Explorer is a strong distractor, but it focuses on visualizing past spending and broad cost trends rather than active performance rightsizing.
Q11. A startup wants to set up its IT infrastructure on AWS Cloud. The CTO would like to get an estimate of the monthly AWS bill based on the AWS services that the startup wants to use. As a Cloud Practitioner, which AWS service would you sugge…
Answer: C. AWS Pricing Calculator
The AWS Pricing Calculator estimates monthly bills by modeling services before deployment. Cost Explorer is a strong distractor, but it analyzes historical spending and existing resources rather than forecasting costs for new infrastructure.
Q12. A unicorn startup is building an analytics application with support for a speech-based interface. The application will accept speech-based input from users and then convey results via speech. As a Cloud Practitioner, which solution would y…
Answer: A. Use Amazon Transcribe to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech
Amazon Transcribe converts speech into text for analytics, while Amazon Polly turns text into lifelike speech. Amazon Translate is a distractor because it handles language-to-language translation, not speech recognition or text-to-speech.
Q13. Which of the following are the advantages of cloud computing? (Select three)
Answer: A,E,F. Trade capital expense for variable expense || Benefit from massive economies of scale || Go global in minutes and deploy applications in multiple regions around the world with just a few clicks
Trading capital expense for variable expense, benefiting from massive economies of scale, and going global in minutes are all core advantages of cloud computing. The incorrect options describe the rigid capacity planning and heavy upfront costs of traditional infrastructure.
Q14. A company wants to improve the resiliency of its flagship application so it wants to move from its traditional database system to a managed AWS NoSQL database service to support active-active configuration in both the East and West US AWS…
Answer: A. Amazon DynamoDB with global tables
Amazon DynamoDB global tables provide an active-active cross-region configuration for a fully managed NoSQL database. DAX only provides in-memory caching for a single region, while Aurora multi-master is a relational database rather than a NoSQL solution.
Q15. A silicon valley based healthcare startup stores anonymized patient health data on Amazon S3. The CTO further wants to ensure that any sensitive data on S3 is discovered and identified to prevent any sensitive data leaks. As a Cloud Practi…
Answer: D. Amazon Macie
Amazon Macie uses machine learning and pattern matching to discover and protect sensitive data stored in Amazon S3 buckets. AWS Secrets Manager is for storing credentials securely, not for automatically scanning and identifying sensitive data within files.
Q16. Which of the following statements are CORRECT regarding the Availability Zone (AZ) specific characteristics of Amazon Elastic Block Store (EBS) and Amazon Elastic File System (Amazon EFS) storage types?
Answer: D. EBS volume can be attached to a single instance in the same Availability Zone (AZ) whereas EFS file system can be mounted on instances across multiple Availability Zones (AZ)
An EBS volume is attached to a single instance within the same Availability Zone, whereas an EFS file system can be mounted across multiple instances and zones. EFS provides regional scalability, distinguishing it from the strictly zonal EBS volumes.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.