Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which AWS services can be used to decouple components of a microservices based application on AWS Cloud? (Select two). Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which AWS services can be used to decouple components of a microservices based application on AWS Cloud? (Sel…
- What are the advantages that AWS Cloud offers over a traditional on-premises IT infrastructure? (Select two)
- Which of the following entities applies patches to the underlying OS for Amazon Aurora?
- Which of the following AWS services can be used to connect a company's on-premises environment to a VPC witho…
- A startup wants to provision an EC2 instance for the lowest possible cost for a long-term duration but needs…
- A company uses reserved EC2 instances across multiple units with each unit having its own AWS account. Howeve…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which AWS services can be used to decouple components of a microservices based application on AWS Cloud? (Select two)
Answer: A,B. Amazon Simple Notification Service (SNS) || Amazon Simple Queue Service (SQS)
Amazon SNS and Amazon SQS are managed messaging services designed to decouple and scale microservices by handling communication between components. AWS Lambda and EC2 execute code, while Step Functions simply coordinate workflows rather than acting as a decoupling message broker.
Q2. What are the advantages that AWS Cloud offers over a traditional on-premises IT infrastructure? (Select two)
Answer: D,E. Trade capital expense for variable expense || Eliminate guessing on your infrastructure capacity needs
The cloud allows you to trade upfront capital expenses for pay-as-you-go variable expenses while eliminating the need to guess infrastructure capacity. Options involving on-premises hardware or early capacity decisions represent traditional IT bottlenecks, not cloud benefits.
Q3. Which of the following entities applies patches to the underlying OS for Amazon Aurora?
Answer: D. The AWS Product Team automatically
Amazon Aurora is a managed service where AWS handles the underlying infrastructure. The AWS Product Team automatically patches the operating system and database components. Customers cannot use Systems Manager or SSH into the underlying instances.
Q4. Which of the following AWS services can be used to connect a company's on-premises environment to a VPC without using the public internet?
Answer: C. AWS Direct Connect
AWS Direct Connect establishes a dedicated, private network connection from on-premises environments to AWS. Remember that Site-to-Site VPN traffic also technically goes over the public internet, even though it encrypts the data in transit.
Q5. A startup wants to provision an EC2 instance for the lowest possible cost for a long-term duration but needs to make sure that the instance would never be interrupted. As a Cloud Practitioner, which of the following options would you recom…
Answer: B. EC2 Reserved Instance (RI)
EC2 Reserved Instances provide significant discounts for long-term commitments without the risk of interruption. Spot Instances cost less but can be terminated, making them unsuitable for workloads requiring continuous uptime.
Q6. A company uses reserved EC2 instances across multiple units with each unit having its own AWS account. However, some of the units under-utilize their reserved instances while other units need more reserved instances. As a Cloud Practitione…
Answer: C. Use AWS Organizations to manage AWS accounts of all units and then share the reserved EC2 instances amongst all units
AWS Organizations allows you to centrally manage multiple accounts and enables Reserved Instance sharing across them. Cost Explorer and Trusted Advisor offer cost visibility and recommendations but cannot execute resource sharing.
Q7. Which of the following are the storage services offered by the AWS Cloud? (Select two)
Answer: B,E. Amazon Simple Storage Service (Amazon S3) || Amazon Elastic File System (Amazon EFS)
Amazon S3 provides object storage, while Amazon EFS provides managed file storage. For the exam, remember that EC2 is strictly a compute service, and SNS and SQS handle messaging, not storage.
Q8. A medical research startup wants to understand the compliance of AWS services concerning HIPAA guidelines. Which AWS service can be used to review the HIPAA compliance and governance-related documents on AWS?
Answer: D. AWS Artifact
AWS Artifact is the central portal for on-demand access to security and compliance reports like HIPAA documents. Trusted Advisor checks infrastructure against best practices but does not provide compliance artifacts.
Q9. A company runs an application on a fleet of EC2 instances. The company wants to automate the traditional maintenance job of running timely assessments and checking for OS vulnerabilities. As a Cloud Practitioner, which service will you sug…
Answer: B. Amazon Inspector
Amazon Inspector performs automated security assessments to check EC2 instances for unintended network exposure and software vulnerabilities. GuardDuty focuses on account-level threat detection, while Macie discovers sensitive data.
Q10. Which of the following are correct statements regarding the AWS Global Infrastructure? (Select two)
Answer: C,D. Each Availability Zone (AZ) consists of one or more discrete data centers || Each AWS Region consists of a minimum of three Availability Zones (AZ)
An AWS Region contains at least three Availability Zones, and each Zone consists of one or more discrete data centers. If an option claims a Region has only two Zones, it contradicts the current infrastructure baseline.
Q11. Which security service of AWS is enabled for all AWS customers, by default, at no additional cost?
Answer: D. AWS Shield Standard
AWS Shield Standard is automatically enabled for all AWS customers at no extra cost to protect against common DDoS attacks. Shield Advanced requires a paid subscription for specialized support and enhanced protection.
Q12. The DevOps team at an e-commerce company is trying to debug performance issues for its serverless application built using a microservices architecture. As a Cloud Practitioner, which AWS service would you recommend addressing this use-case?
Answer: C. AWS X-Ray
AWS X-Ray helps developers analyze, debug, and trace requests through distributed serverless microservices. CloudFormation provisions the infrastructure but cannot provide deep application performance tracing.
Q13. A big data analytics company is moving its IT infrastructure from an on-premises data center to AWS Cloud. The company has some server-bound software licenses that it wants to use on AWS. As a Cloud Practitioner, which of the following EC2…
Answer: A. Dedicated Host
Dedicated Hosts provide physical servers dedicated to your account, allowing you to use existing server-bound software licenses like Microsoft or Oracle. Dedicated Instances run on single-tenant hardware but lack the physical instance visibility needed for licenses.
Q14. Which of the following is an AWS database service?
Answer: A. Amazon Redshift
Amazon Redshift is a managed petabyte-scale data warehouse service used for large-scale data storage and analysis. AWS Glue handles extract, transform, and load operations, while DMS specifically handles database migrations rather than storage.
Q15. Which of the following is an INCORRECT statement about scaling, a design principle of the Reliability pillar of the AWS Well-Architected Framework?
Answer: A. Fault tolerance is achieved by a scale up operation
Scaling up means adding resources to a single machine, which creates a single point of failure. Fault tolerance requires scaling out across multiple instances, ensuring remaining instances handle traffic if one fails.
Q16. Which of the following AWS Support plans provide access to guidance, configuration, and troubleshooting of AWS interoperability with third-party software? (Select two)
Answer: A,E. AWS Enterprise Support || AWS Business Support
Both Business and Enterprise Support plans include guidance, configuration, and troubleshooting for third-party software and operating systems. The Basic and Developer tiers limit you to general architectural guidance or account issues, excluding deeper interoperability support.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.