Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 15 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which of the following AWS services is delivered globally rather than regionally?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which of the following AWS services is delivered globally rather than regionally?
- Which of the following is a repository service that helps in maintaining application dependencies via integra…
- Which of the following represents the correct scenario where an Auto Scaling group's (ASG) predictive scaling…
- Which of the following data sources are used by Amazon Detective to analyze events and identify potential sec…
- Which of the following AWS services are offered free of cost? (Select two)
- Due to regulatory guidelines, a company needs to encrypt data as it passes through the different layers of it…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following AWS services is delivered globally rather than regionally?
Answer: D. Amazon WorkSpaces
Amazon WorkSpaces is a managed desktop service that is delivered globally rather than being tied to a specific region. A practical exam cue is that services like Amazon S3, EFS, and Snowball are strictly regional resources.
Q2. Which of the following is a repository service that helps in maintaining application dependencies via integration with commonly used package managers and build tools like Maven, Gradle, npm, etc.?
Answer: A. AWS CodeArtifact
AWS CodeArtifact is a fully managed artifact repository service that securely stores, publishes, and shares software packages. CodeBuild compiles code, CodeCommit hosts repositories, and CodeStar manages projects, but only CodeArtifact handles package dependencies.
Q3. Which of the following represents the correct scenario where an Auto Scaling group's (ASG) predictive scaling can be effectively used to maintain the required number of AWS resources?
Answer: D. To manage a workload that exhibits recurring load patterns that are specific to the day of the week or the time of day
Predictive scaling uses machine learning to forecast capacity needs based on historical load patterns like recurring daily or weekly traffic. Target tracking is the correct tool for maintaining a specific metric like CPU utilization or an SQS queue backlog.
Q4. Which of the following data sources are used by Amazon Detective to analyze events and identify potential security issues?
Answer: D. AWS CloudTrail logs, Amazon VPC Flow Logs, and Amazon GuardDuty findings
Amazon Detective ingests AWS CloudTrail logs, VPC Flow Logs, and Amazon GuardDuty findings to create a unified, interactive view of security data. GuardDuty must be enabled before using Detective, but Detective relies on these specific three sources.
Q5. Which of the following AWS services are offered free of cost? (Select two)
Answer: D,E. AWS Auto Scaling || AWS Elastic Beanstalk
There is no additional charge for AWS Elastic Beanstalk or AWS Auto Scaling, as you only pay for the underlying resources they provision. Elastic IPs, detailed monitoring, and Spot Instances all incur direct costs depending on their usage.
Q6. Due to regulatory guidelines, a company needs to encrypt data as it passes through the different layers of its AWS architecture. The company is reviewing the capabilities of the various AWS services and their encryption options. Which of t…
Answer: C. AWS CloudTrail Logs, Amazon S3 Glacier, AWS Storage Gateway
AWS CloudTrail logs, Amazon S3 Glacier, and AWS Storage Gateway encrypt data by default without requiring user configuration. For the exam, remember that services like Application Load Balancers and EC2 instance storage require manual configuration to enable encryption.
Q7. An e-commerce company has its on-premises data storage on an NFS file system that is accessed in parallel by multiple applications. The company is looking at moving the applications and data stores to AWS Cloud. Which storage service shoul…
Answer: A. Amazon Elastic File System (Amazon EFS)
Amazon Elastic File System is correct because it provides a scalable, fully managed Network File System for Linux. It allows parallel access from multiple EC2 instances, unlike block storage.
Q8. Which of the following statements are true about AWS Regions and Availability Zones (AZ)? (Select two)
Answer: C,D. All traffic between Availability Zones (AZ) is encrypted || Each AWS Region consists of multiple, isolated, and physically separate Availability Zones (AZ) within a geographic area
Each AWS Region has multiple isolated Availability Zones, and traffic moving between these zones is always encrypted. A strong exam tip is remembering that Regions represent geographic areas, while logical data center groups are Availability Zones.
Q9. Which AWS service allows you to connect any number of IoT devices to the cloud without requiring you to provision or manage servers?
Answer: B. AWS IoT Core
AWS IoT Core is a managed service that lets you connect billions of IoT devices to the cloud without managing servers. Amazon Connect is a cloud contact center service, while AWS IoT Gateway is a fabricated distractor for this exam.
Q10. A company has defined a baseline that mentions the number of AWS resources to be used for different stages of application testing. However, the company realized that employees are not adhering to the guidelines and provisioning additional…
Answer: A. AWS CloudTrail Insights
CloudTrail Insights analyzes management events to detect unusual API call volumes, helping you identify unexpected resource provisioning. While AWS Config can also trigger alerts for non-compliant resources, CloudTrail specifically targets anomalous API activity.
Q11. A company is planning to move their traditional CRM application running on MySQL to an AWS database service. Which database service is the right fit for this requirement?
Answer: A. Amazon Aurora
Amazon Aurora is a fully managed relational database engine compatible with MySQL, making it the right choice for migrating an existing MySQL application. DynamoDB is for NoSQL, while Neptune handles graph databases, so neither fits a MySQL workload.
Q12. A healthcare company wants to implement a continuous replication based disaster recovery mechanism and provide fast, reliable recovery of physical, virtual, and cloud-based servers into AWS Cloud. Which of the following represents the best…
Answer: D. CloudEndure Disaster Recovery
CloudEndure Disaster Recovery is correct because it provides continuous block-level replication for fast recovery of physical and virtual servers. While AWS Elastic Disaster Recovery has largely replaced it on current exams, CloudEndure remains the classic correct term here.
Q13. Which of the following points have to be considered when choosing an AWS Region for a service? (Select two)
Answer: C,E. Compliance and Data Residency guidelines of the AWS Region should match your business requirements || AWS Region chosen should be geographically closer to the user base that utilizes the hosted AWS services
Data residency compliance and geographic proximity to end users are the two primary drivers when selecting an AWS Region for your workloads. All regions offer high availability, and Availability Zone distances are standardized, so focus purely on legal requirements and latency when answering.
Q14. Which of the following services/tools offers a user-friendly graphical user interface to manage AWS Snowball devices without a need for command-line interface or REST APIs?
Answer: C. AWS OpsHub
AWS OpsHub provides a graphical user interface to easily manage AWS Snowball devices. You can unlock devices, transfer data, and launch edge applications without needing command-line tools or REST APIs. The other services manage file transfers or track configurations.
Q15. Which of the following statements are correct regarding the health monitoring and reporting capabilities supported by AWS Elastic Beanstalk? (Select two)
Answer: B,C. With basic health reporting, the AWS Elastic Beanstalk service does not publish any metrics to Amazon CloudWatch || The AWS Elastic Beanstalk health monitoring can determine that the environment's Auto Scaling group is available and has a minimum of at least one instance
Basic health reporting verifies the Auto Scaling group has at least one instance and does not publish metrics to CloudWatch. For single instances, health is determined by Amazon EC2 status checks, not load balancer settings.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.