10 CLF-C02 practice questions with answer reveals and spoken explanations. Choose before the reveal and keep your score.
Certification: AWS Certified Cloud Practitioner (CLF-C02). Independent practice, not an official exam.
How to use this round:
– Pause each question if you need more time to decide.
– Compare your answer after the reveal.
– Review the concepts you missed, then practice again.
Practice free with CertPunch:
Web: https://certpunch.com/
iPhone and iPad: https://apps.apple.com/app/certpunch/id6797541734
Android: https://play.google.com/store/apps/details?id=com.certpunch.app
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- A financial services firm wants to build a real-time analytics platform where data can be streamed and analyz…
- Which of the following statements best describes the concept of agility in relation to cloud computing on AWS…
- AWS is able to continually reduce its pricing due to:
- A company is deploying an application on Amazon EC2 that requires low-latency access to application component…
- How much data can a company store in the Amazon S3 service?
- What is one method of protecting against distributed denial of service (DDoS) attacks in the AWS Cloud?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. A financial services firm wants to build a real-time analytics platform where data can be streamed and analyzed on the fly. They are looking to use Apache Kafka for this, but they want to avoid the overhead of managing the Kafka infrastruc…
Answer: C. Amazon MSK
Amazon MSK is the fully managed Apache Kafka service, so the firm gets Kafka without managing brokers or ZooKeeper. Kinesis also does real-time streaming, but the requirement explicitly names Kafka compatibility.
Q2. Which of the following statements best describes the concept of agility in relation to cloud computing on AWS? (Select TWO.)
Answer: B,D. The speed at which AWS resources can be created. || The ability to experiment quickly.
Agility on AWS means resources are provisioned in minutes, so teams can experiment and develop quickly at low cost. Elasticity and eliminating wasted capacity are cost and scaling benefits, not agility itself.
Q3. AWS is able to continually reduce its pricing due to:
Answer: A. Economies of scale.
Aggregated usage from hundreds of thousands of customers gives AWS economies of scale, which lowers unit prices over time. Pay-as-you-go pricing is a customer benefit, not the driver behind price reductions.
Q4. A company is deploying an application on Amazon EC2 that requires low-latency access to application components in an on-premises data center. Which AWS service or resource can the company use to extend their existing VPC to the on-premises…
Answer: A. AWS Outposts
AWS Outposts brings AWS infrastructure and services into your on-premises data center, letting you extend a VPC there. Direct Connect only provides a private low-latency network link and does not extend the VPC itself, which is the key wording cue to watch for.
Q5. How much data can a company store in the Amazon S3 service?
Answer: C. Virtually unlimited
Amazon S3 provides virtually unlimited storage with no limit on total volume or number of objects. Just remember the per-object maximum is 5 TB, a commonly tested detail that is different from the overall capacity question asked here.
Q6. What is one method of protecting against distributed denial of service (DDoS) attacks in the AWS Cloud?
Answer: A. Configure a firewall in front of resources.
Placing a firewall, such as AWS WAF or a security group layer, in front of resources reduces the attack surface and helps mitigate DDoS attacks. CloudWatch, CloudTrail, and the Health Dashboard are monitoring tools that detect issues but do not actively block traffic.
Q7. Which AWS service or feature can assist with protecting a website that is hosted outside of AWS?
Answer: D. AWS Web Application Firewall (WAF)
AWS WAF can protect websites hosted outside AWS when they sit behind an Application Load Balancer with on-premises servers registered by IP address. Route tables, security groups, and network ACLs only work inside a VPC.
Q8. Which resource should a new user on AWS use to get help with deploying popular technologies based on AWS best practices, including architecture and deployment instructions?
Answer: C. AWS Partner Solutions
AWS Partner Solutions, formerly Quick Starts, provide automated deployments of popular technologies using CloudFormation with best-practice architecture guides. CloudFormation is the underlying tool, but the packaged accelerators with deployment instructions are the resource being asked about.
Q9. What is the best practice for managing AWS IAM access keys?
Answer: D. Customers should rotate access keys regularly.
Regularly rotating access keys is the documented IAM security best practice because it limits exposure if a key is compromised. AWS never rotates customer keys automatically; that responsibility belongs to the customer.
Q10. Which AWS service can a company use to discover and protect sensitive data that is stored in Amazon S3 buckets?
Answer: B. Amazon Macie
Amazon Macie uses machine learning and pattern matching to discover and help protect sensitive data such as PII in Amazon S3 buckets. GuardDuty is the strongest distractor, but it detects threats and malicious activity rather than scanning content for sensitive data.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days.