Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Historically, IT departments had to over-provision for peak demand. IT professionals may bring this legacy mindset to th. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Historically, IT departments had to over-provision for peak demand. IT professionals may bring this legacy mi…
- A company provides you with a completed product that is run and managed by the company itself. As a customer…
- A company wants to establish a private, dedicated connection between AWS and its on-premises data center. Whi…
- As a Cloud Practitioner, which of the following credentials would you recommend for signing in to the AWS Man…
- As an AWS Cloud Practitioner, you have been tasked to find examples of AWS Cloud solution designs. Which serv…
- AWS Support offers five support plans for its customers. Which of the following features are covered as part…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Historically, IT departments had to over-provision for peak demand. IT professionals may bring this legacy mindset to the table when they build their cloud infrastructure leading to over-provisioned resources and unnecessary costs. Right-s…
Answer: C. Elasticity
Elasticity is correct because it refers to the ability to automatically scale resources up or down to match current demand, preventing costly over-provisioning. Horizontal scaling only adds capacity, whereas elasticity actively contracts resources when demand drops.
Q2. A company provides you with a completed product that is run and managed by the company itself. As a customer, you only use the product without worrying about maintaining or managing the product. Which cloud computing model does this kind o…
Answer: D. Software as a Service (SaaS)
Software as a Service provides a completed product run and managed by the service provider, requiring no underlying maintenance. Web-based email is a classic example, whereas infrastructure and platform models require you to manage operating systems or applications.
Q3. A company wants to establish a private, dedicated connection between AWS and its on-premises data center. Which AWS service is the right choice for this requirement?
Answer: B. AWS Direct Connect
AWS Direct Connect establishes a private, dedicated network connection from your on-premises data center to AWS. Site-to-Site VPN also connects networks but routes encrypted traffic over the public internet instead of a dedicated line.
Q4. As a Cloud Practitioner, which of the following credentials would you recommend for signing in to the AWS Management Console to meet security best practices? (Select two)
Answer: C,E. IAM Username and password || Multi Factor Authentication (MFA)
To securely sign in to the AWS Management Console, you should use an IAM username and password, supplemented by Multi-Factor Authentication. Access keys are strictly for programmatic access via the CLI or SDKs and should never be used for console sign-ins.
Q5. As an AWS Cloud Practitioner, you have been tasked to find examples of AWS Cloud solution designs. Which service/feature would you recommend?
Answer: D. AWS Architecture Center
The AWS Architecture Center provides reference architecture diagrams, vetted solutions, and Well-Architected best practices. For the exam, remember that the AWS Marketplace is a software catalog, while Trusted Advisor provides real-time cost and security checks.
Q6. AWS Support offers five support plans for its customers. Which of the following features are covered as part of the AWS Basic Support Plan? (Select two)
Answer: A,C. One-on-one responses to account and billing questions || Service health checks
The AWS Basic Support plan covers one-on-one responses for account and billing questions, service health checks, and access to support forums. Use-case guidance and diagnostic tools are only available on Developer, Business, and Enterprise support plans.
Q7. Which feature/functionality will help you organize your AWS resources, manage and automate tasks on large numbers of resources at a time?
Answer: D. AWS Resource Groups
AWS Resource Groups let you organize and manage multiple AWS resources as a single unit for bulk automation tasks. Tags are just metadata properties, while Organizations manage multiple AWS accounts rather than individual resources.
Q8. Which of the following is the responsibility of the customer when running applications using AWS Lambda?
Answer: D. Writing and maintaining the function code and its dependencies
Under the shared responsibility model, customers must write and maintain their own AWS Lambda function code and dependencies. AWS automatically handles the underlying infrastructure, operating system, and runtime environments for the service.
Q9. Which of the following statements are true about AWS Shared Responsibility Model? (Select two)
Answer: A,C. AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest operating system and applications || AWS trains AWS employees, but a customer must train their own employees
AWS handles infrastructure patching, while customers must patch their guest operating systems and applications. AWS trains its own employees, but the customer is strictly responsible for training their own internal staff on cloud security.
Q10. By default, which of the following events are logged by AWS CloudTrail?
Answer: A. Management events
By default, AWS CloudTrail logs management events, which capture control plane operations within your account. Data events and CloudTrail Insights events incur additional charges and must be explicitly enabled on your trail.
Q11. A media company uses Amazon Simple Storage Service (Amazon S3) for storing all its data. Which storage class should it consider for cost-optimal storage of the data that has random access patterns?
Answer: C. Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering)
Amazon S3 Intelligent-Tiering automatically moves data between access tiers to optimize costs when access patterns are unknown or unpredictable. S3 Standard is only for frequently accessed data, while Standard-IA applies retrieval fees.
Q12. A university provides access to AWS services for its students to submit their research data for analysis. The university is looking at the most cost-effective approach for recovering from disasters and it can tolerate data loss of a few ho…
Answer: B. Backup and restore strategy
A backup and restore strategy is the most cost-effective disaster recovery approach and perfectly accommodates tolerating a few hours of data loss. Pilot light, warm standby, and multi-site strategies offer lower recovery times but cost significantly more.
Q13. Which of the following are NoSQL database services from AWS? (Select two)
Answer: C,E. Amazon Neptune || Amazon DocumentDB
Amazon Neptune and Amazon DocumentDB are correct because they are fully managed NoSQL database services that store data as graphs and documents. Remember that Amazon RDS and Aurora are relational databases, making them incorrect choices for NoSQL questions.
Q14. Which of the following use-cases can be solved using the Amazon Forecast service?
Answer: A. Predict the web traffic of a website for the next few weeks
Amazon Forecast is correct because it uses machine learning to predict future time-series data like web traffic. For the exam, associate Forecast exclusively with time-series predictions, whereas Amazon Personalize is used for product recommendations.
Q15. AWS Web Application Firewall (AWS WAF) can be deployed on which of the following services?
Answer: D. Amazon CloudFront, Application Load Balancer, Amazon API Gateway, AWS AppSync
Amazon CloudFront, Application Load Balancer, Amazon API Gateway, and AWS AppSync are correct because AWS WAF integrates directly with these services to filter web traffic. Remember that WAF cannot be deployed directly on Amazon EC2 instances without an intermediary load balancer.
Q16. A weather-tracking application is built using Amazon DynamoDB. The performance of the application has been consistently good. But lately, the team has realized that during holidays and travel seasons, the load on the application is high an…
Answer: B. Amazon DynamoDB Accelerator
Amazon DynamoDB Accelerator is correct because it is a fully managed in-memory cache built specifically to reduce DynamoDB read latency. While ElastiCache provides general caching, AWS recommends using the purpose-built DynamoDB Accelerator for DynamoDB workloads.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.