AWS CLF-C02: Cloud Practitioner Practice Exam

What the AWS CLF-C02 exam covers

• Cloud Concepts205 questions
• Security and Compliance257 questions
• Cloud Technology and Services282 questions
• Billing, Pricing, and Support105 questions

Free AWS CLF-C02 practice test questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 849.

1. Question 1Cloud Concepts

   A company wants to avoid the upfront cost of purchasing physical servers and instead pay only for the compute resources it actually uses. Which cloud computing advantage does this describe?

   • ATrade fixed expense for variable expenseCorrect
   • BIncreased speed and agility
   • CGlobal deployment in minutes
   • DHigh availability
   ✓ Correct answer: A

   Cloud computing eliminates the need for upfront capital expenditure on physical servers by shifting to an operational expenditure model. Instead of purchasing expensive hardware infrastructure that depreciates over time, companies pay only for the compute resources they actually use on a per-use basis. This transforms a fixed cost (buying servers) into a variable cost (paying for usage), providing financial flexibility and allowing companies to scale costs directly with business needs. This advantage is fundamental to cloud economics and represents one of the primary business drivers for cloud adoption.

   Why the other options are wrong

   • BIncreased speed and agility is incorrect because this is an advantage of cloud computing, but it refers to the ability to deploy and iterate on applications quickly rather than the cost structure.
   • CGlobal deployment in minutes is incorrect because it is another cloud benefit, but it addresses geographic distribution capabilities rather than cost transformation.
   • DHigh availability is incorrect because it is an infrastructure reliability benefit, not related to trading fixed expenses for variable expenses.
2. Question 2Cloud Concepts

   Which benefit of cloud computing eliminates the need to guess capacity?

   • AElasticityCorrect
   • BSecurity
   • CCost allocation
   • DCompliance
   ✓ Correct answer: A

   Elasticity is the ability to automatically scale compute resources up or down in response to actual demand. Because workloads can expand and contract on demand, organizations no longer need to pre-purchase or provision fixed capacity to handle peak loads, removing the costly guesswork associated with on-premises infrastructure planning.

   Why the other options are wrong

   • BSecurity addresses protection of data and systems from threats; it is unrelated to the dynamic provisioning of compute resources to match demand.
   • CCost allocation is the practice of tagging and tracking cloud spending across teams or projects; it does not address the need to predict or right-size capacity.
   • DCompliance refers to meeting regulatory and audit requirements; it does not help organizations scale resources automatically to meet variable demand.
3. Question 3Security and ComplianceSelect all that apply

   Which two best practices should you follow for the AWS root account? (Choose two.)

   • AUse the root account for daily administrative tasks
   • BEnable multi-factor authentication (MFA) on the root accountCorrect
   • CShare the root account password with all administrators
   • DDo not create access keys for the root account; use IAM users insteadCorrect
   ✓ Correct answer: B, D

   The two best practices for the AWS root account are enabling multi-factor authentication (MFA) and not creating access keys for root. MFA adds an additional authentication factor that prevents unauthorized access even if the password is compromised. Root access keys should never be created because they provide permanent, untrackable access to the entire account. Instead, create IAM users with specific permissions and monitor their activities through CloudTrail.

   Why the other options are wrong

   • AUse the root account for daily administrative tasks is incorrect because The root account should be used only for account setup and tasks requiring root-level permissions. Daily administrative work should be performed by IAM users with appropriate permissions to limit blast radius if credentials are compromised.
   • CShare the root account password with all administrators is incorrect because Root account credentials should never be shared. Sharing violates security principles and makes it impossible to audit who performed what actions. Each administrator should have their own IAM user.
4. Question 4Cloud Technology and Services

   Skyward Technologies needs a service that can send notifications to subscribers via SMS, email, and HTTP endpoints when specific events occur. Which AWS service should they use?

   • AAWS Step Functions
   • BAmazon SQS
   • CAmazon SNSCorrect
   • DAmazon Kinesis
   ✓ Correct answer: C

   Amazon SNS is a publish-subscribe service that sends notifications to subscribers via SMS, email, HTTP endpoints, and other protocols. It's designed for event-driven notifications and can trigger subscriptions based on events.

   Why the other options are wrong

   • AAWS Step Functions is incorrect because Step Functions orchestrate workflows, not send notifications.
   • BAmazon SQS is incorrect because SQS is for message queuing, not notifications.
   • DAmazon Kinesis is incorrect because Kinesis is for real-time streaming, not notifications.
5. Question 5Cloud Technology and Services

   A company has a web application that experiences highly variable traffic. During peak hours, the application needs 10 EC2 instances, but during off-peak hours, only 2 instances are sufficient. The company wants to automatically adjust the number of instances based on demand. Which AWS feature should be configured?

   • AElastic Load Balancing
   • BAWS Lambda
   • CAmazon EC2 Auto ScalingCorrect
   • DAmazon CloudFront
   ✓ Correct answer: C

   Amazon EC2 Auto Scaling monitors application load and automatically increases or decreases the number of EC2 instances in response to defined scaling policies. You set minimum and maximum instance counts and define scaling triggers - such as CPU utilization or request count - so the fleet scales out during peak traffic and scales in during quiet periods, optimizing both performance and cost.

   Why the other options are wrong

   • AElastic Load Balancing distributes incoming traffic across multiple existing instances, but it does not add or remove instances in response to changing demand.
   • BAWS Lambda is a serverless compute service for event-driven functions and does not manage EC2 instance fleets or provide auto-scaling for server-based workloads.
   • DAmazon CloudFront is a content delivery network that caches and delivers content from edge locations to reduce latency, but it does not control EC2 instance counts.
6. Question 6Cloud Technology and ServicesSelect all that apply

   Which TWO methods can a user use to interact with AWS services programmatically or manually? (Select TWO.)

   • AAWS Command LineCorrect
   • BAWS ConsoleCorrect
   • CAmazon Machine Image
   • DAmazon VPC peering
   • EAWS Region selector
   ✓ Correct answer: A, B

   AWS provides several ways to access services: the AWS Management Console for a browser-based interface, the AWS Command Line Interface for scripting and automation, and SDKs for programmatic access. The CLI and Console are two valid interaction methods.

   Why the other options are wrong

   • CAn Amazon Machine Image is a template for launching EC2 instances, not an access method.
   • DVPC peering connects two VPCs; it is not a way to interact with AWS services.
   • EThere is no AWS Region selector file used to interact with services.
7. Question 7Cloud Technology and Services

   A company needs a block storage volume that can be attached to an EC2 instance and persists independently from the life of the instance. Which service should they use?

   • AAmazon S3
   • BAmazon EBSCorrect
   • CAmazon EFS
   • DEC2 Instance Store
   ✓ Correct answer: B

   Amazon EBS provides block storage volumes that attach to an EC2 instance and exist independently of it, so stopping or terminating the instance can leave the volume and its data intact depending on the delete-on-termination setting. Volumes are replicated within an Availability Zone, can be snapshotted to Amazon S3 for backup or to create new volumes, and can be resized or have their type changed while in use. That independent lifecycle is the property the question is testing.

   Why the other options are wrong

   • AAmazon S3 is object storage reached over HTTPS. It is durable and independent of any instance, but it does not present a block device that an operating system can format and mount.
   • CAmazon EFS is a shared file system rather than block storage. It persists independently but is mounted over NFS by many instances at once.
   • DEC2 Instance Store is physically attached to the host and its data is lost when the instance stops or terminates, which is the opposite of persisting independently.
8. Question 8Billing, Pricing, and Support

   Which AWS service provides the most detailed level of billing information, including hourly usage data for each service by account?

   • AAWS Cost Explorer
   • BAWS Budgets
   • CAWS Cost and Usage ReportCorrect
   • DAWS Trusted Advisor
   ✓ Correct answer: C

   The AWS Cost and Usage Report (CUR) is the most granular billing data source AWS offers, delivering hourly or daily line-item records for every service and resource across all linked accounts, including usage quantities, rates, tags, and reservation credits - it can be exported to Amazon S3 and queried with Athena for deep analysis.

   Why the other options are wrong

   • AAWS Cost Explorer provides pre-built visualizations and filtering for historical cost trends over days, months, or years but does not expose the raw hourly per-resource detail available in the Cost and Usage Report.
   • BAWS Budgets allows you to define spending thresholds and receive alerts, and it can show current versus budgeted costs, but it does not deliver the raw detailed usage records provided by the Cost and Usage Report.
   • DAWS Trusted Advisor offers recommendations across cost optimization, security, performance, and fault tolerance but does not provide detailed billing data or raw usage records at the hourly level.
9. Question 9Cloud Technology and Services

   A company wants to improve the performance of their DynamoDB read-heavy workload. Which service provides a fully managed in-memory cache specifically designed for DynamoDB?

   • AAmazon ElastiCache for Redis or Memcached caching
   • BAmazon DynamoDB Accelerator (DAX)Correct
   • CAmazon CloudFront content delivery network edge caching
   • DAmazon Aurora relational database engine for MySQL
   ✓ Correct answer: B

   Amazon DynamoDB Accelerator (DAX) is a fully managed, highly available, in-memory cache built specifically for DynamoDB. It delivers up to 10x performance improvement for read-heavy workloads, reducing read response times from milliseconds to microseconds. DAX is seamlessly compatible with existing DynamoDB API calls, so applications need minimal code changes to take advantage of caching.

   Why the other options are wrong

   • AAmazon ElastiCache is a general-purpose in-memory caching service supporting Redis and Memcached, but it is not purpose-built for DynamoDB and requires more custom integration work.
   • CAmazon CloudFront is a content delivery network that caches web content at edge locations, not an in-memory cache layer for DynamoDB database operations.
   • DAmazon Aurora is a relational database service compatible with MySQL and PostgreSQL, not an in-memory caching solution for DynamoDB.
10. Question 10Security and Compliance

    In the AWS Shared Responsibility Model, how is AWS's overall area of responsibility best summarized?

    • ASecurity of the cloudCorrect
    • BSecurity in the cloud
    • CConfiguration of customer applications
    • DManagement of customer identities
    ✓ Correct answer: A

    AWS describes its responsibility as security 'of' the cloud, which covers the infrastructure that runs all AWS services, including hardware, software, networking, and physical facilities. The customer is responsible for security 'in' the cloud, meaning how they configure and use the services. This distinction is central to the model.

    Why the other options are wrong

    • BSecurity 'in' the cloud describes the customer's responsibility, not AWS's.
    • CConfiguring customer applications is done by the customer.
    • DManaging customer identities and access is the customer's responsibility.

Who this AWS CLF-C02 practice exam is for

This practice set is for anyone preparing for the AWS CLF-C02: Cloud Practitioner exam at the foundational level - from first-time candidates building a foundation to experienced AWS practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this AWS CLF-C02 practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real AWS CLF-C02 exam.

Related AWS resources

• AWS CLF-C02 study guideKey concepts
• AWS practice examsAll AWS
• Certification pathWhere this fits
• Best AWS SAA-C03 Practice Exams (2026)Comparison
• AWS CLF-C02 vs AZ-900Comparison
• AWS CLF-C02 vs SAA-C03Comparison
• Cloud Concepts practice questions205 questions
• Security and Compliance practice questions257 questions
• Cloud Technology and Services practice questions282 questions
• Billing, Pricing, and Support practice questions105 questions
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• AWS DOP-C02 practice examRelated
• AWS DVA-C02 practice examRelated
• AWS MLA-C02 practice examRelated

AWS CLF-C02 practice exam FAQ