Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which of the following options is NOT a feature of Amazon Inspector?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which of the following options is NOT a feature of Amazon Inspector?
- Which of the following statements is INCORRECT regarding Amazon EBS Elastic Volumes?
- A multinational company has just moved its infrastructure to AWS Cloud and has employees traveling to differe…
- The development team at a company manages 300 microservices and it is now trying to automate the code reviews…
- A company would like to optimize Amazon Elastic Compute Cloud (Amazon EC2) costs. Which of the following acti…
- A company would like to reserve Amazon Elastic Compute Cloud (Amazon EC2) compute capacity for three years to…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following options is NOT a feature of Amazon Inspector?
Answer: A. Track configuration changes
Tracking resource configuration changes is the primary function of AWS Config. Amazon Inspector focuses on automated security assessments, scanning for software vulnerabilities, and checking for unintended network accessibility.
Q2. Which of the following statements is INCORRECT regarding Amazon EBS Elastic Volumes?
Answer: B. Amazon EBS Elastic Volumes can be bound to several Availability Zones (AZs)
Elastic Block Store volumes are locked to a specific Availability Zone and cannot natively span multiple zones. To move data across zones, you must take a snapshot and restore it. Remember that at the foundational level, standard volumes attach to a single instance at a time.
Q3. A multinational company has just moved its infrastructure to AWS Cloud and has employees traveling to different offices around the world. How should the company set the AWS accounts?
Answer: A. There is nothing to do, AWS Identity and Access Management (AWS IAM) is a global service
Identity and Access Management is a global service, meaning user identities and roles are available across all regions without any extra configuration. Resist the trap of creating regional accounts or users, and never share credentials between employees.
Q4. The development team at a company manages 300 microservices and it is now trying to automate the code reviews to improve the code quality. Which tool/service is the right fit for this requirement?
Answer: C. Amazon CodeGuru
Amazon CodeGuru uses machine learning to automate code reviews and identify expensive lines of code, perfectly fitting this requirement. Rule out CodeBuild because it only compiles code and runs tests without providing intelligent recommendations.
Q5. A company would like to optimize Amazon Elastic Compute Cloud (Amazon EC2) costs. Which of the following actions can help with this task? (Select TWO)
Answer: B,D. Purchase Amazon EC2 Reserved instances (RIs) || Set up Auto Scaling groups to align the number of instances with the demand
Reserved Instances offer discounts for steady workloads, while Auto Scaling matches capacity to live demand to eliminate waste. Vertical scaling often costs more without trimming excess capacity, and support plans do not directly lower compute fees.
Q6. A company would like to reserve Amazon Elastic Compute Cloud (Amazon EC2) compute capacity for three years to reduce costs. The company also plans to increase their workloads during this period. As a Cloud Practitioner, which Amazon Elasti…
Answer: B. Convertible reserved instance (RI)
Convertible Reserved Instances allow you to exchange instances to adapt to changing workloads over a three-year term. Standard Reserved Instances offer larger discounts but lock you into specific instance families without flexibility.
Q7. A brand-new startup would like to remove its need to manage the underlying infrastructure and focus on the deployment and management of its applications. Which type of cloud computing does this refer to?
Answer: B. Platform as a Service (PaaS)
Platform as a Service removes the need to manage underlying infrastructure, allowing you to focus entirely on deploying and managing applications. On the exam, remember the shared responsibility shift: IaaS gives you the most control, while SaaS provides a completed product managed by the provider.
Q8. A company would like to audit requests made to an Amazon S3 bucket. As a Cloud Practitioner, which Amazon S3 feature would you recommend addressing this use case?
Answer: C. Amazon Simple Storage Service (Amazon S3) Access Logs
Amazon S3 server access logging provides detailed records of every request made to a bucket, making it the right choice for security and access audits. Bucket policies only control access permissions, and versioning simply preserves object variants.
Q9. A growing startup has trouble identifying and protecting sensitive data at scale. Which AWS fully managed service can assist with this task?
Answer: D. Amazon Macie
Amazon Macie is a managed data security service that uses machine learning to automatically discover and protect sensitive data in S3 buckets. Remember that AWS Artifact only provides compliance reports, while Secrets Manager safeguards credentials.
Q10. Which of the following are best practices when using AWS Organizations? (Select TWO)
Answer: A,B. Create AWS accounts per department || Restrict account privileges using Service Control Policies (SCP)
Creating individual accounts for each department and restricting privileges with Service Control Policies are core best practices for governance and isolation. Avoid disabling CloudTrail or ignoring tags, as you need monitoring and proper billing categorization.
Q11. A startup would like to quickly deploy a popular technology on AWS. As a cloud practitioner, which AWS tool would you use for this task?
Answer: D. AWS Partner Solutions (formerly Quick Starts)
AWS Partner Solutions provide automated reference deployments to help you quickly launch popular technologies using best practices. Note that AWS CodeDeploy is strictly for automating application code updates, whereas Partner Solutions deploy the entire infrastructure stack quickly.
Q12. A company would like to move its infrastructure to the AWS Cloud. Which of the following should be included in the Total Cost of Ownership (TCO) estimate? (Select TWO)
Answer: C,E. Server administration || Power/Cooling
Total Cost of Ownership calculations for cloud migration include IT labor for server administration and facility costs like power and cooling. The number of end-users or office electronics are not direct infrastructure TCO factors.
Q13. A Cloud Practitioner would like to deploy identical resources across all AWS regions and accounts using templates while estimating costs. Which AWS service can assist with this task?
Answer: A. AWS CloudFormation
CloudFormation templates deploy standardized resources across accounts and regions while providing cost estimates for your stack. Avoid CodeDeploy since it only handles application code delivery, not the underlying infrastructure provisioning.
Q14. According to the AWS Shared Responsibility Model, which of the following is both the responsibility of AWS and the customer? (Select two)
Answer: A. Configuration management
Shared controls like configuration management apply to both the infrastructure layer and customer layers in different contexts. While AWS manages its hardware configurations, customers must configure their own guest operating systems.
Q15. A company based in Sydney hosts its application on an Amazon EC2 instance in ap-southeast-2. They would like to deploy the same Amazon EC2 instances in eu-south-1. Which of the following AWS entities can address this use case?
Answer: C. Amazon Machine Image (AMI)
An Amazon Machine Image contains the information required to launch an instance, allowing you to deploy identical configurations across different regions. Elastic Load Balancing distributes network traffic across existing instances, while an EBS snapshot only backs up block storage.
Q16. Which of the following services are provided by Amazon Route 53? (Select TWO)
Answer: B. Health checks and monitoring
Amazon Route 53 is primarily a Domain Name System web service, but it also provides health checks and monitoring to route traffic reliably. Transfer acceleration is an Amazon S3 feature, and Route 53 routes traffic to load balancers rather than acting as one.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.