CertKeen
AWSBeta · expanding bank

AWS Cloud Practitioner (CLF-C02) Practice Exam

Practice questions for the AWS Certified Cloud Practitioner (CLF-C02) exam: cloud benefits and economics, the Well-Architected Framework, the Cloud Adoption Framework, migration strategies, the shared responsibility model, IAM and root user security, AWS security services and compliance, Regions and Availability Zones, compute, databases, networking, storage, AI/ML and analytics services, developer and management tools, pricing models, cost management tools, AWS Organizations, and Support plans. Every question includes a written explanation.

100 questions · 12 free preview

$19 · lifetime access
Try free sample

Studying more than one? All AWS exams for $29 · every exam for $79

Free sample questions

  1. Sample · question 1 · Definition of cloud computing

    A manager at Thistledown Bakeries asks what cloud computing means in AWS terms. Which of the following describe cloud computing as AWS defines it? (Select TWO.)

    • A.On-demand delivery of IT resources over the internetcorrect
    • B.A requirement to sign multi-year hardware leases
    • C.Customers racking and cabling their own physical servers
    • D.Pay-as-you-go pricing for the resources usedcorrect
    • E.Fixed capacity purchased upfront for expected peak load

    Why: AWS describes cloud computing as the on-demand delivery of IT resources over the internet with pay-as-you-go pricing. Multi-year hardware leases, managing physical servers yourself, and buying fixed capacity upfront are characteristics of traditional on-premises IT rather than cloud computing.

    Open this question on its own page →
  2. Sample · question 2 · Well-Architected Cost optimization pillar

    Which pillar of the AWS Well-Architected Framework focuses on running systems that deliver business value at the lowest price point, for example by analyzing spending and removing unused resources?

    • A.Reliability
    • B.Cost optimizationcorrect
    • C.Security
    • D.Operational excellence

    Why: The Cost optimization pillar is about avoiding unnecessary costs, understanding where money is spent, and selecting the most cost-effective resources. Reliability focuses on recovering from failures, Security on protecting information and systems, and Operational excellence on running and improving operations.

    Open this question on its own page →
  3. Sample · question 3 · Retain migration strategy

    During migration planning, Pembrook Distribution decides to keep its warehouse management system in its own data center for another two years because it was just upgraded and depends on local equipment. Which migration strategy is this?

    • A.Rehost
    • B.Repurchase
    • C.Retaincorrect
    • D.Refactor

    Why: Retaining means keeping an application in its current environment for now, often because of recent investment, dependencies, or business constraints, and revisiting it later. Rehosting and refactoring move the application to AWS with or without changes, and repurchasing replaces it with a different product.

    Open this question on its own page →
  4. Sample · question 4 · Detective security investigations

    Amazon GuardDuty has flagged unusual API activity from an IAM role at Coralline Media. The security team wants to analyze related logs and visualize how the activity connects to other resources to find the root cause. Which service is designed for this investigation?

    • A.Amazon Detectivecorrect
    • B.AWS Artifact
    • C.AWS Pricing Calculator
    • D.Amazon Polly

    Why: Amazon Detective automatically collects log data and uses graph models to help you analyze and visualize security findings so you can investigate their root cause. AWS Artifact provides compliance reports, the Pricing Calculator estimates costs, and Amazon Polly converts text to speech.

    Open this question on its own page →
  5. Sample · question 5 · Cognito customer app sign-in

    Brindle Fitness is building a mobile app and wants its customers to sign up, sign in, and optionally use social identity providers, without building its own user directory. Which AWS service should it use?

    • A.AWS IAM users for each customer
    • B.AWS Organizations
    • C.AWS Key Management Service
    • D.Amazon Cognitocorrect

    Why: Amazon Cognito adds user sign-up, sign-in, and access control to web and mobile apps and supports federation with social and enterprise identity providers. IAM users are meant for identities that manage AWS resources, not large numbers of app customers. Organizations manages multiple AWS accounts, and KMS manages encryption keys.

    Open this question on its own page →
  6. Sample · question 6 · Aurora MySQL PostgreSQL compatible

    Sedgewick Travel wants a fully managed relational database that is compatible with MySQL and PostgreSQL and is built by AWS for cloud-scale performance and availability. Which service fits this description?

    • A.Amazon DynamoDB
    • B.Amazon Auroracorrect
    • C.Amazon Neptune
    • D.Amazon Timestream

    Why: Amazon Aurora is a fully managed relational database engine, compatible with MySQL and PostgreSQL, that AWS designed for high performance and availability. DynamoDB is a NoSQL key-value database, Neptune is a graph database, and Timestream is a time series database.

    Open this question on its own page →
  7. Sample · question 7 · SNS publish/subscribe notifications

    When an order ships, Galloway Goods wants to publish one message that is delivered at the same time to an email address, an SMS number, and several subscribing applications. Which AWS service provides this publish/subscribe messaging?

    • A.Amazon Simple Storage Service (Amazon S3)
    • B.Amazon Athena
    • C.Amazon Simple Notification Service (Amazon SNS)correct
    • D.AWS Direct Connect

    Why: Amazon SNS is a managed publish/subscribe service where a message published to a topic is pushed to all subscribers, such as email addresses, SMS numbers, and applications. Amazon S3 stores objects, Athena queries data in S3, and Direct Connect provides a private network connection.

    Open this question on its own page →
  8. Sample · question 8 · Lightsail simple virtual servers

    A freelance designer wants to launch a simple personal website on AWS with a virtual server, storage, and networking included in one easy-to-understand monthly bundle. Which service is designed for this kind of simple use case?

    • A.Amazon Lightsailcorrect
    • B.Amazon EMR
    • C.AWS Outposts
    • D.Amazon Redshift

    Why: Amazon Lightsail offers virtual private servers, storage, and networking in simple bundles with predictable pricing, which suits small websites and simple applications. Amazon EMR runs big data frameworks, Outposts places AWS infrastructure on-premises, and Redshift is a data warehouse.

    Open this question on its own page →
  9. Sample · question 9 · QuickSight business intelligence dashboards

    Business managers at Wickham Foods want interactive dashboards and visualizations of their sales data that they can share with colleagues, without installing any business intelligence servers. Which AWS service should they use?

    • A.Amazon Kinesis Data Streams
    • B.AWS Glue
    • C.Amazon Transcribe
    • D.Amazon QuickSightcorrect

    Why: Amazon QuickSight is a cloud-based business intelligence service for building and sharing interactive dashboards and visualizations. Kinesis Data Streams ingests streaming data, AWS Glue prepares and catalogs data through ETL, and Transcribe converts speech to text.

    Open this question on its own page →
  10. Sample · question 10 · Storage Gateway hybrid storage

    Ottery Engineering has on-premises applications that write backups to local file shares. It wants those applications to keep using standard file protocols while the data is stored durably in Amazon S3. Which service provides this hybrid storage connection?

    • A.Amazon EBS
    • B.AWS Storage Gatewaycorrect
    • C.Amazon ElastiCache
    • D.AWS Lambda

    Why: AWS Storage Gateway is a hybrid cloud storage service that gives on-premises applications access to cloud storage through standard protocols, for example presenting file shares whose data is stored in Amazon S3. EBS provides block storage for EC2, ElastiCache is an in-memory cache, and Lambda runs code.

    Open this question on its own page →
  11. Sample · question 11 · Basic Support included plan

    A student opening a new AWS account wonders which AWS Support plan is included for all customers at no additional cost. Which plan is it?

    • A.Business Support+
    • B.Enterprise Support
    • C.Basic Supportcorrect
    • D.Unified Operations

    Why: Basic Support is included for all AWS customers and provides 24/7 customer service for account and billing questions, documentation, whitepapers, AWS re:Post, AWS Health, and Trusted Advisor core checks. Business Support+, Enterprise Support, and Unified Operations are paid plans that add technical support from AWS experts.

    Open this question on its own page →
  12. Sample · question 12 · Compute Optimizer rightsizing recommendations

    Rosehill Games suspects many of its EC2 instances are larger than necessary. Which AWS service analyzes utilization metrics and recommends optimal instance types and sizes to reduce cost and improve performance?

    • A.AWS Artifact
    • B.Amazon Macie
    • C.AWS Shield
    • D.AWS Compute Optimizercorrect

    Why: AWS Compute Optimizer analyzes the historical utilization of resources such as EC2 instances and recommends better-fitting instance types and sizes. Artifact provides compliance reports, Macie discovers sensitive data in S3, and Shield protects against DDoS attacks.

    Open this question on its own page →

Like the sample?

Other practice exams