AWS CLF-C02: Cloud Practitioner Practice Exam

What the AWS CLF-C02 exam covers

• Cloud Concepts205 questions
• Security and Compliance257 questions
• Cloud Technology and Services281 questions
• Billing, Pricing, and Support105 questions

Free AWS CLF-C02 practice test questions

A sample of 10 questions with answers and explanations. A free account includes a fixed set of 20 practice questions for this exam, retryable anytime. Paid access unlocks the full 848-question bank.

1. Question 1Cloud Concepts

   A company wants to avoid the upfront cost of purchasing physical servers and instead pay only for the compute resources it actually uses. Which cloud computing advantage does this describe?

   • ATrade fixed expense for variable expenseCorrect
   • BIncreased speed and agility
   • CGlobal deployment in minutes
   • DHigh availability
   ✓ Correct answer: A

   Cloud computing eliminates the need for upfront capital expenditure on physical servers by shifting to an operational expenditure model. Instead of purchasing expensive hardware infrastructure that depreciates over time, companies pay only for the compute resources they actually use on a per-use basis. This transforms a fixed cost (buying servers) into a variable cost (paying for usage), providing financial flexibility and allowing companies to scale costs directly with business needs. This advantage is fundamental to cloud economics and represents one of the primary business drivers for cloud adoption.

   Why the other options are wrong

   • BIncreased speed and agility is incorrect because this is an advantage of cloud computing, but it refers to the ability to deploy and iterate on applications quickly rather than the cost structure.
   • CGlobal deployment in minutes is incorrect because it is another cloud benefit, but it addresses geographic distribution capabilities rather than cost transformation.
   • DHigh availability is incorrect because it is an infrastructure reliability benefit, not related to trading fixed expenses for variable expenses.
2. Question 2Cloud Concepts

   Which benefit of cloud computing eliminates the need to guess capacity?

   • AElasticityCorrect
   • BSecurity
   • CCost allocation
   • DCompliance
   ✓ Correct answer: A

   Elasticity is the ability to automatically scale compute resources up or down in response to actual demand. Because workloads can expand and contract on demand, organizations no longer need to pre-purchase or provision fixed capacity to handle peak loads, removing the costly guesswork associated with on-premises infrastructure planning.

   Why the other options are wrong

   • BSecurity addresses protection of data and systems from threats; it is unrelated to the dynamic provisioning of compute resources to match demand.
   • CCost allocation is the practice of tagging and tracking cloud spending across teams or projects; it does not address the need to predict or right-size capacity.
   • DCompliance refers to meeting regulatory and audit requirements; it does not help organizations scale resources automatically to meet variable demand.
3. Question 3Security and ComplianceSelect all that apply

   Which two best practices should you follow for the AWS root account? (Choose two.)

   • AUse the root account for daily administrative tasks
   • BEnable multi-factor authentication (MFA) on the root accountCorrect
   • CShare the root account password with all administrators
   • DDo not create access keys for the root account; use IAM users insteadCorrect
   ✓ Correct answer: B, D

   The two best practices for the AWS root account are enabling multi-factor authentication (MFA) and not creating access keys for root. MFA adds an additional authentication factor that prevents unauthorized access even if the password is compromised. Root access keys should never be created because they provide permanent, untrackable access to the entire account. Instead, create IAM users with specific permissions and monitor their activities through CloudTrail.

   Why the other options are wrong

   • AUse the root account for daily administrative tasks is incorrect because The root account should be used only for account setup and tasks requiring root-level permissions. Daily administrative work should be performed by IAM users with appropriate permissions to limit blast radius if credentials are compromised.
   • CShare the root account password with all administrators is incorrect because Root account credentials should never be shared. Sharing violates security principles and makes it impossible to audit who performed what actions. Each administrator should have their own IAM user.
4. Question 4Cloud Technology and Services

   Skyward Technologies needs a service that can send notifications to subscribers via SMS, email, and HTTP endpoints when specific events occur. Which AWS service should they use?

   • AAWS Step Functions
   • BAmazon SQS
   • CAmazon SNSCorrect
   • DAmazon Kinesis
   ✓ Correct answer: C

   Amazon SNS is a publish-subscribe service that sends notifications to subscribers via SMS, email, HTTP endpoints, and other protocols. It's designed for event-driven notifications and can trigger subscriptions based on events.

   Why the other options are wrong

   • AAWS Step Functions is incorrect because Step Functions orchestrate workflows, not send notifications.
   • BAmazon SQS is incorrect because SQS is for message queuing, not notifications.
   • DAmazon Kinesis is incorrect because Kinesis is for real-time streaming, not notifications.
5. Question 5Cloud Technology and Services

   A company has a web application that experiences highly variable traffic. During peak hours, the application needs 10 EC2 instances, but during off-peak hours, only 2 instances are sufficient. The company wants to automatically adjust the number of instances based on demand. Which AWS feature should be configured?

   • AElastic Load Balancing
   • BAWS Lambda
   • CAmazon EC2 Auto ScalingCorrect
   • DAmazon CloudFront
   ✓ Correct answer: C

   Amazon EC2 Auto Scaling monitors application load and automatically increases or decreases the number of EC2 instances in response to defined scaling policies. You set minimum and maximum instance counts and define scaling triggers - such as CPU utilization or request count - so the fleet scales out during peak traffic and scales in during quiet periods, optimizing both performance and cost.

   Why the other options are wrong

   • AElastic Load Balancing distributes incoming traffic across multiple existing instances, but it does not add or remove instances in response to changing demand.
   • BAWS Lambda is a serverless compute service for event-driven functions and does not manage EC2 instance fleets or provide auto-scaling for server-based workloads.
   • DAmazon CloudFront is a content delivery network that caches and delivers content from edge locations to reduce latency, but it does not control EC2 instance counts.
6. Question 6Cloud Technology and Services

   A company wants to define and provision its AWS infrastructure using declarative templates so environments can be recreated consistently. Which service supports this?

   • ACloudFormationCorrect
   • BAmazon CloudWatch
   • CAWS Config rules
   • DAWS CloudTrail
   ✓ Correct answer: A

   AWS CloudFormation lets you model and provision AWS resources using declarative templates in JSON or YAML. This infrastructure as code approach makes environments repeatable and consistent across accounts and Regions.

   Why the other options are wrong

   • BCloudWatch monitors metrics and logs, it does not provision infrastructure.
   • CAWS Config records and evaluates resource configurations for compliance.
   • DCloudTrail logs API activity for auditing, not resource provisioning.
7. Question 7Cloud Technology and Services

   Which Amazon S3 feature automatically moves objects between different storage classes based on access patterns?

   • AS3 Intelligent-TieringCorrect
   • BS3 Lifecycle policies
   • CS3 Transfer Acceleration
   • DS3 Cross-Region Replication
   ✓ Correct answer: A

   S3 Intelligent-Tiering monitors each object access pattern and automatically moves objects between frequent, infrequent, and archive access tiers to optimize cost, with no retrieval fees and no operational overhead. It is the S3 feature designed to react to actual usage. S3 Lifecycle policies also transition objects, but only on user-defined age or date rules, not on observed access patterns.

   Why the other options are wrong

   • BS3 Lifecycle policies transition objects on age/date rules you define, not on observed access patterns.
   • CS3 Transfer Acceleration speeds uploads over long distances using edge locations; it does not change storage classes.
   • DS3 Cross-Region Replication copies objects to another Region for resilience; it does not move objects between storage classes.
8. Question 8Cloud Technology and Services

   Which AWS service enables you to build, train, and deploy machine learning models at scale?

   • AAmazon Rekognition
   • BAmazon SageMakerCorrect
   • CAmazon Comprehend
   • DAWS DeepLens
   ✓ Correct answer: B

   Amazon SageMaker is a fully managed ML platform that provides every component needed across the entire machine learning lifecycle - data labeling, experiment tracking, distributed training with built-in or custom algorithms, model tuning, and one-click deployment to scalable inference endpoints.

   Why the other options are wrong

   • AAmazon Rekognition is a pre-built computer vision service for image and video analysis tasks like object detection and facial recognition, not a general-purpose platform for building and training custom ML models.
   • CAmazon Comprehend is a natural language processing service for text analysis tasks like sentiment detection and entity extraction, not a platform for building, training, and deploying arbitrary machine learning models.
   • DAWS DeepLens reached end of support on 31 January 2024 and can no longer be used; it was a deep-learning video camera for edge inference demonstrations, never a scalable platform for the full ML development and deployment lifecycle.
9. Question 9Cloud Technology and Services

   Which AWS service provides a managed message broker service for Apache ActiveMQ and RabbitMQ?

   • AAmazon SQS
   • BAmazon MQCorrect
   • CAmazon SNS
   • DAmazon Kinesis
   ✓ Correct answer: B

   Amazon MQ is a managed message broker service that supports industry-standard messaging protocols including AMQP, MQTT, OpenWire, and STOMP. It is specifically designed to make it easy to migrate existing applications that rely on open-source message brokers like Apache ActiveMQ and RabbitMQ to the cloud without needing to rewrite messaging code. AWS manages the broker infrastructure, including provisioning, patching, and maintenance.

   Why the other options are wrong

   • AAmazon SQS is a fully managed message queuing service with its own proprietary API, not a managed broker for open-source frameworks like ActiveMQ or RabbitMQ.
   • CAmazon SNS is a pub/sub notification service that pushes messages to subscribers, not a managed broker for ActiveMQ or RabbitMQ protocols.
   • DAmazon Kinesis is a platform for streaming large volumes of data in real time, not a message broker compatible with ActiveMQ or RabbitMQ.
10. Question 10Security and Compliance

    In the AWS Shared Responsibility Model, how is AWS's overall area of responsibility best summarized?

    • ASecurity of the cloudCorrect
    • BSecurity in the cloud
    • CConfiguration of customer applications
    • DManagement of customer identities
    ✓ Correct answer: A

    AWS describes its responsibility as security 'of' the cloud, which covers the infrastructure that runs all AWS services, including hardware, software, networking, and physical facilities. The customer is responsible for security 'in' the cloud, meaning how they configure and use the services. This distinction is central to the model.

    Why the other options are wrong

    • BSecurity 'in' the cloud describes the customer's responsibility, not AWS's.
    • CConfiguring customer applications is done by the customer.
    • DManaging customer identities and access is the customer's responsibility.

Who this AWS CLF-C02 practice exam is for

This practice set is for anyone preparing for the AWS CLF-C02: Cloud Practitioner exam at the foundational level - from first-time candidates building a foundation to experienced AWS practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this AWS CLF-C02 practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real AWS CLF-C02 exam.

Related AWS resources

• AWS CLF-C02 study guideKey concepts
• AWS practice examsAll AWS
• Certification pathWhere this fits
• Best AWS SAA-C03 Practice Exams (2026)Comparison
• AWS CLF-C02 vs AZ-900Comparison
• AWS CLF-C02 vs SAA-C03Comparison
• Cloud Concepts practice questions205 questions
• Security and Compliance practice questions257 questions
• Cloud Technology and Services practice questions281 questions
• Billing, Pricing, and Support practice questions105 questions
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• AWS DOP-C02 practice examRelated
• AWS MLA-C02 practice examRelated
• AWS SAA-C03 practice examRelated

AWS CLF-C02 practice exam FAQ