Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- Which AWS service should be used when you want to run container applications, but want to avoid the operation…
- The AWS Cloud Adoption Framework (AWS CAF) recommends four iterative and incremental cloud transformation pha…
- Which tool will help you review your workloads against current AWS best practices for cost optimization, secu…
- A data analytics company stores its data on Amazon Simple Storage Service (Amazon S3) and wants to do SQL bas…
- Which of the following AWS services allows a database to have flexible schema and supports document data mode…
- Which of the following statements is INCORRECT about AWS Auto Scaling?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?
Answer: C. Amazon Elastic Container Service (Amazon ECS) – Fargate launch type
The Fargate launch type for Amazon ECS is correct because it is a serverless compute engine that removes the need to provision and manage underlying servers. For the exam, associate Fargate with serverless containers, whereas the EC2 launch type requires you to manage the infrastructure.
Q2. The AWS Cloud Adoption Framework (AWS CAF) recommends four iterative and incremental cloud transformation phases. Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud…
Answer: B. Envision
The Envision phase focuses on demonstrating how cloud adoption accelerates business outcomes and ties directly to strategic goals. For the exam, associate Align with addressing capability gaps, Launch with delivering pilot initiatives, and Scale with expanding production workloads.
Q3. Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?
Answer: D. AWS Trusted Advisor
AWS Trusted Advisor evaluates your AWS environment against established best practices for cost optimization, security, and performance. While Amazon Inspector is the stronger distractor, it strictly scans applications for code vulnerabilities rather than broader architectural improvements.
Q4. A data analytics company stores its data on Amazon Simple Storage Service (Amazon S3) and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for th…
Answer: A. Amazon Athena
Amazon Athena is a serverless query service that allows you to analyze data directly in S3 using standard SQL without complex setups. While Amazon Redshift is a strong distractor, it is a full data warehouse requiring data loading rather than direct analysis.
Q5. Which of the following AWS services allows a database to have flexible schema and supports document data models?
Answer: B. Amazon DynamoDB
Amazon DynamoDB is a fast NoSQL database service that supports flexible schemas alongside key-value and document data models. Relational database options like Amazon Relational Database Service require rigid, predefined table structures that cannot easily adapt.
Q6. Which of the following statements is INCORRECT about AWS Auto Scaling?
Answer: A. You can automatically deploy AWS Shield when a DDoS attack is detected
AWS Auto Scaling cannot automatically deploy AWS Shield during an attack because Shield must be configured independently as a dedicated service. Remember that Auto Scaling strictly handles capacity by adjusting instance counts, removing unhealthy resources, and integrating load balancers.
Q7. Which Amazon Elastic Compute Cloud (Amazon EC2) pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?
Answer: B. On-demand Instance
On-Demand Instances offer maximum flexibility without requiring upfront payments or long-term commitments while guaranteeing continuous operation. Spot Instances are the strongest distractor, but they carry a strict risk of interruption, which violates the specific requirement.
Q8. Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management (AWS IAM) entities?
Answer: A. IAM User
The correct answer works because access key IDs and secret access keys act as long-term credentials directly tied to an IAM user for programmatic access. Remember that IAM roles use temporary security tokens instead of long-term keys, making them ideal for cross-account access or granting permissions to AWS services.
Q9. Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?
Answer: C. AWS Health – Your Account Health Dashboard
Your Account Health Dashboard works because it provides a personalized view of service events directly impacting your specific AWS resources. Remember that the Service Health Dashboard only shows the general global status of AWS services, while CloudWatch monitors your application and resource performance metrics.
Q10. Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?
Answer: D. AWS Marketplace
AWS Marketplace works because it serves as a digital catalog where you can easily find, purchase, and immediately deploy third-party software solutions. The other options fail because they handle infrastructure provisioning, configuration auditing, or operational management rather than software sales and distribution.
Q11. A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?
Answer: C. AWS Organizations
AWS Organizations works because it lets you centrally manage multiple accounts, enabling consolidated billing under a single payment method. The other options fail because Cost Explorer and Budgets only analyze or track spending, while Secrets Manager securely stores application credentials.
Q12. What is the primary benefit of deploying an Amazon RDS Multi-AZ database with one standby?
Answer: C. Amazon RDS Multi-AZ enhances database availability
Multi-AZ deployment works because it automatically provisions a synchronous standby replica in a different availability zone to ensure high availability. Remember that read replicas, not standby instances, are used to improve read performance, and deploying across regions is required to survive regional failures.
Q13. Which policy describes prohibited uses of the web services offered by Amazon Web Services?
Answer: A. AWS Acceptable Use Policy
The AWS Acceptable Use Policy describes prohibited uses of AWS web services. Do not confuse this with Trusted Advisor, which provides best practice checks, not acceptable use rules.
Q14. An e-commerce company wants to store data from a recommendation engine in a database. As a Cloud Practitioner, which AWS service would you recommend to provide this functionality with the LEAST operational overhead for any scale?
Answer: B. Amazon DynamoDB
Amazon DynamoDB is a serverless NoSQL database that scales automatically with minimal operational overhead. Neptune is for graph databases, while RDS requires more management overhead compared to DynamoDB.
Q15. A company's flagship application runs on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to Amazon EC2 instances…
Answer: C. AWS Systems Manager Session Manager
AWS Systems Manager Session Manager provides shell access without opening inbound ports or managing SSH keys. EC2 Instance Connect still requires port 22 to be open, making it incorrect here.
Q16. Which Amazon Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience?
Answer: B. Latency-based routing
Latency-based routing directs users to the AWS endpoint with the lowest network delay. Weighted routing distributes traffic by percentages, and failover routing is for disaster recovery scenarios.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.