AWS Certified Cloud Practitioner (CLF-C02) Practice Exam Questions and Answers – Part 23/24

Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 15 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Amazon Simple Queue Service (Amazon SQS). Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.

Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →

What you will practice

  • Amazon Simple Queue Service (Amazon SQS)
  • An e-commerce company needs to generate custom reports and graphs every week for analyzing product sales data…
  • As part of a flexible pricing model, AWS offers two types of Savings Plans. Which of the following are the Sa…
  • Which tool/service will help you get a forecast of your spending for the next 12 months?
  • A blogging company is looking for an easy-to-use solution to host WordPress blogs. The company needs a cost-e…
  • Which of the following statements are correct regarding Amazon API Gateway? (Select two)

Answers and explanations

Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.

Q1. Amazon Simple Queue Service (Amazon SQS)

Answer: D. Amazon Simple Queue Service (SQS)

Amazon Simple Queue Service allows you to decouple applications by storing messages securely until the downstream application processes them. Simple Notification Service uses a push mechanism, which risks message loss if the receiving application is unavailable.

Q2. An e-commerce company needs to generate custom reports and graphs every week for analyzing product sales data. The company is looking at a tool/service that will help them analyze this data using interactive dashboards with minimal effort…

Answer: C. Amazon Quicksight

Amazon QuickSight is a serverless business intelligence service that lets you create and publish interactive, machine-learning-powered dashboards accessible from any device. Athena runs SQL queries but does not build visual dashboards, and SageMaker is meant for machine learning models.

Q3. As part of a flexible pricing model, AWS offers two types of Savings Plans. Which of the following are the Savings Plans from AWS?

Answer: D. Compute Savings Plans, EC2 Instance Savings Plans

AWS offers Compute Savings Plans and EC2 Instance Savings Plans to provide flexible pricing in exchange for a usage commitment. Compute plans apply broadly to Fargate and Lambda, while EC2 Instance plans offer deeper discounts tied to a specific instance family in a region.

Q4. Which tool/service will help you get a forecast of your spending for the next 12 months?

Answer: B. AWS Cost Explorer

AWS Cost Explorer lets you view historical usage data and provides a forecast of your expected spending for the next twelve months. The Pricing Calculator estimates costs for new architectures, whereas Cost Explorer analyzes existing account spend.

Q5. A blogging company is looking for an easy-to-use solution to host WordPress blogs. The company needs a cost-effective, readily available solution without the need to manage the configurations for servers or databases. Which AWS service wil…

Answer: C. Amazon Lightsail

Amazon Lightsail provides a low, predictable monthly price and pre-configured blueprints, making it the easiest way to deploy and manage WordPress without server overhead. Standard EC2 requires manual configuration, and S3 cannot host dynamic PHP applications like WordPress.

Q6. Which of the following statements are correct regarding Amazon API Gateway? (Select two)

Answer: C,D. API Gateway can be configured to send data directly to Amazon Kinesis Data Stream || Amazon API Gateway can call an AWS Lambda function to create the front door of a serverless application

Amazon API Gateway securely routes requests to AWS Lambda, serving as the front door for serverless applications. It can also integrate directly with services like Kinesis; be aware that cached API responses are still counted as API calls for billing.

Q7. Which of the following statements are correct regarding the AWS Control Tower and Service Control Policies? (Select two)

Answer: B,D. Service Control Policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization || AWS Control Tower is an AWS native service providing a pre-defined set of blueprints and guardrails to help customers implement a landing zone for new AWS accounts

AWS Control Tower provides a pre-configured landing zone, and Service Control Policies manage the maximum available permissions in an organization. A key exam cue is that SCPs act as guardrails to set permission limits but do not actually grant any permissions themselves.

Q8. A company is looking at a service/tool to automate and minimize the time spent on keeping the server images up-to-date. These server images are used by Amazon Elastic Compute Cloud (Amazon EC2) instances as well as the on-premises systems…

Answer: C. Amazon EC2 Image Builder

Amazon EC2 Image Builder is correct because it automates the creation, testing, and deployment of secure server images for AWS and on-premises use. An Amazon Machine Image is simply the resulting artifact, not the automated pipeline tool that keeps images updated.

Q9. A Cloud Practitioner wants to use CIDR block notation when providing an IP address range. Which of the following AWS network services/utilities allow this feature? (Select two)

Answer: A,E. Network access control list (network ACL) || Security group

Security groups and network access control lists are correct because both virtual private cloud firewall features allow the use of CIDR block notation to manage traffic. Services like Amazon S3 and AWS Lambda do not use CIDR blocks for direct IP configuration.

Q10. A financial consulting company is looking for automated reference deployments, that will speed up the process of deploying its financial solutions on AWS Cloud. The reference deployment should be able to deploy most of the well-known funct…

Answer: C. AWS Partner Solutions(formerly Quick Starts)

AWS Partner Solutions are correct because they provide customizable, automated reference deployments built by AWS experts to accelerate cloud adoption. While AWS CloudFormation provisions resources, Partner Solutions specifically offer pre-built architectural templates for quick deployment.

Q11. A gaming company needs compute and storage services close to edge locations in order to ensure ultra-low latency for end-users and devices that connect through mobile networks. Which AWS service is the best fit for this requirement?

Answer: C. AWS Wavelength

AWS Wavelength is the correct choice because it embeds compute and storage services directly within communication service provider data centers at the 5G network edge. For the exam, associate Wavelength with 5G and mobile devices, whereas Outposts brings AWS infrastructure directly into your own private data centers.

Q12. Which of the following statements are true about AWS Elastic Beanstalk? (Select two)

Answer: B,C. There is no additional charge for AWS Elastic Beanstalk. You pay only for the underlying AWS resources that your application consumes || With AWS Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that runs those applications

Elastic Beanstalk is a Platform as a Service offering that provisions capacity and manages infrastructure automatically without additional software charges. You only pay for the underlying resources. Remember that it fully supports Docker and automatically handles auto-scaling for your applications.

Q13. As part of log analysis, you have realized that one or more AWS-owned IP addresses are being used for port scanning your on-premises server. Which service/team should you connect to resolve this issue?

Answer: B. Contact AWS Abuse team

The AWS Abuse team is the dedicated resource for reporting abusive behavior originating from AWS-owned IP addresses, such as port scanning or denial of service attacks. Standard AWS Support explicitly cannot process these reports, so always route malicious activity complaints directly to the abuse team.

Q14. A company is looking for ways to make its desktop applications available to the employees from browsers on their devices/laptops. Which AWS service will help achieve this requirement without having to procure servers or maintain infrastruc…

Answer: B. Amazon AppStream 2.0

Amazon AppStream 2.0 streams desktop applications directly to users via a web browser, fully eliminating the need to procure backend servers or manage local infrastructure. Contrast this with Amazon WorkSpaces, which provisions an entire virtual desktop operating system environment.

Q15. Which AWS service is used to store and commit code privately and also offer features for version control?

Answer: D. AWS CodeCommit

AWS CodeCommit is a fully managed source control service that securely hosts private Git-based repositories. For the exam, easily distinguish the developer tools by remembering CodePipeline automates deployments, CodeBuild compiles code, and CodeCommit stores it.

More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.

Scroll to Top