Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 17 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: A research group wants to provision an Amazon Elastic Compute Cloud (Amazon EC2) instance for a flexible application tha. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- A research group wants to provision an Amazon Elastic Compute Cloud (Amazon EC2) instance for a flexible appl…
- AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the…
- A startup has just moved its IT infrastructure to AWS Cloud. The CTO would like to receive detailed reports t…
- Which of the following statements are CORRECT regarding security groups and network access control lists (net…
- Which AWS service can be used to execute code triggered by new files being uploaded to Amazon Simple Storage…
- Which pillar of the AWS Well-Architected Framework recommends maintaining infrastructure as code (IaC)?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. A research group wants to provision an Amazon Elastic Compute Cloud (Amazon EC2) instance for a flexible application that can be interrupted. As a Cloud Practitioner, which of the following would you recommend as the MOST cost-optimal opti…
Answer: A. Spot Instance
Spot Instances are ideal for flexible workloads that can tolerate interruptions, offering steep discounts compared to On-Demand pricing. As a practical exam cue, always match the phrase 'can be interrupted' directly to Spot Instances to find the most cost-effective option.
Q2. AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the following categories? (Select two)
Answer: B,C. Cost Optimization || Service Limits
Trusted Advisor inspects your AWS environment and recommends best practices across five pillars: cost optimization, performance, security, fault tolerance, and service limits. For the exam, remember that Trusted Advisor specifically tracks service limits to help you avoid throttling.
Q3. A startup has just moved its IT infrastructure to AWS Cloud. The CTO would like to receive detailed reports that break down the startup's AWS costs by the hour in an Amazon Simple Storage Service (Amazon S3) bucket. As a Cloud Practitioner…
Answer: D. AWS Cost & Usage Report (AWS CUR)
The AWS Cost and Usage Report publishes comprehensive billing data into an S3 bucket and allows you to break down costs hourly. Cost Explorer is the strongest distractor, but it only provides visual dashboards rather than detailed raw data exports.
Q4. Which of the following statements are CORRECT regarding security groups and network access control lists (network ACL)? (Select two)
Answer: A,D. A security group is stateful, that is, it automatically allows the return traffic || A network access control list (network ACL) contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic
Security groups are stateful, automatically allowing return traffic regardless of inbound rules. Network access control lists are stateless, meaning you must explicitly allow return traffic, and they evaluate numbered rules sequentially from lowest to highest.
Q5. Which AWS service can be used to execute code triggered by new files being uploaded to Amazon Simple Storage Service (Amazon S3)?
Answer: D. AWS Lambda
AWS Lambda is a serverless compute service that runs code in response to events like S3 object uploads. While Simple Queue Service can receive S3 event notifications, it cannot execute code itself, making Lambda the correct choice.
Q6. Which pillar of the AWS Well-Architected Framework recommends maintaining infrastructure as code (IaC)?
Answer: C. Operational Excellence
The Operational Excellence pillar champions running and monitoring systems, which includes managing infrastructure as code. For your exam, associate the practice of automating operational procedures and infrastructure deployments directly with this specific pillar.
Q7. AWS Lambda pricing is based on which of the following criteria? (Select two)
Answer: D,E. Number of requests for the AWS Lambda function || The time it takes for the AWS Lambda function to execute
AWS Lambda bills you based on the total number of requests and the execution duration of your code. The deployment package size only affects storage limits, while your programming language runtime choice has no impact on the final price.
Q8. Which AWS service can be used for online analytical processing?
Answer: B. Amazon Redshift
Amazon Redshift is the correct choice because it is a fully managed data warehouse designed specifically for running complex analytical queries. For the exam, remember that traditional databases like Amazon RDS handle transactional workloads, whereas Redshift targets analytics and reporting.
Q9. An IT company has a hybrid cloud architecture and it wants to centralize the server logs for its Amazon Elastic Compute Cloud (Amazon EC2) instances and on-premises servers. Which of the following is the MOST effective for this use-case?
Answer: C. Use Amazon CloudWatch Logs for both the Amazon Elastic Compute Cloud (Amazon EC2) instance and the on-premises servers
Amazon CloudWatch Logs is correct because it can monitor and store log files from both Amazon EC2 instances and on-premises servers, creating a centralized location. Be careful not to choose AWS CloudTrail, which specifically records API activity for AWS accounts rather than application server logs.
Q10. As a Cloud Practitioner, which Amazon Simple Storage Service (Amazon S3) storage class would you recommend for data archival?
Answer: D. Amazon S3 Glacier Flexible Retrieval
Amazon S3 Glacier Flexible Retrieval is the correct choice because it provides low-cost storage designed specifically for long-term archiving and backups. For the exam, use One Zone-Infrequent Access for rarely accessed but quickly needed data, and use Glacier classes when immediate retrieval is unnecessary.
Q11. A company has a static website hosted on an Amazon Simple Storage Service (Amazon S3) bucket in an AWS Region in Asia. Although most of its users are in Asia, now it wants to drive growth globally. How can it improve the global performance…
Answer: D. Use Amazon CloudFront to improve the performance of your website
Amazon CloudFront caches your static website files at edge locations globally, significantly reducing latency for international users. S3 Transfer Acceleration is for uploads, not downloads, making it the strongest distractor for this scenario.
Q12. An organization maintains separate Amazon Virtual Private Clouds (Amazon VPC) for each of its departments. With expanding business, the organization now wants to connect all Amazon Virtual Private Clouds (Amazon VPC) for better departmenta…
Answer: A. AWS Transit Gateway
AWS Transit Gateway acts as a central hub to interconnect multiple VPCs, simplifying complex network topologies. VPC peering is a weaker distractor because it requires separate connections for each pair and lacks transitive routing.
Q13. What is the primary benefit of deploying an Amazon Relational Database Service (Amazon RDS) database in a Read Replica configuration?
Answer: B. Read Replica improves database scalability
Amazon RDS Read Replicas improve database scalability by offloading read traffic from the primary instance. Do not confuse this with Multi-AZ deployments, which provide high availability and durability instead of scaling.
Q14. Which of the following statements are CORRECT about the AWS Auto Scaling group? (Select two)
Answer: C,E. Auto Scaling group scales out and adds more number of Amazon EC2 instances to match an increase in demand || Auto Scaling group scales in and reduces the number of Amazon EC2 instances to match a decrease in demand
Auto Scaling groups scale horizontally by adding instances during scale out and removing instances during scale in. Upgrading to larger instance sizes is scaling vertically, which Auto Scaling groups do not handle automatically.
Q15. Which AWS service protects your AWS account by monitoring malicious activity and detecting threats?
Answer: D. Amazon GuardDuty
Amazon GuardDuty is an intelligent threat detection service that continuously monitors for malicious activity across your AWS accounts. CloudTrail records API activity for auditing, but it does not actively detect threats.
Q16. Which of the following is a part of the AWS Global Infrastructure?
Answer: B. AWS Region
An AWS Region is a physical geographic location hosting AWS data centers, forming the foundation of the AWS Global Infrastructure. VPCs and subnets are logical customer constructs you build inside those regions.
Q17. A financial services company must meet compliance requirements that mandate storing multiple copies of data in geographically distant locations. As the company uses Amazon Simple Storage Service (Amazon S3) as its main storage service, whi…
Answer: B. Use S3 cross-region replication (S3 CRR) to replicate data between distant AWS Regions
S3 Cross-Region Replication asynchronously copies your objects to a bucket in a different region, meeting compliance needs efficiently. Writing custom Lambda functions or EC2 scripts is a distractor that requires unnecessary operational overhead.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.