Skip to content
Tags: aws clf-c02 cloud-practitioner

AWS Cloud Practitioner (CLF-C02) - Full Practice Exam 1

Suggested duration: 90 minutes

Exam code: CLF-C02

By Oleksandr Andrushchenko — Published on
0 Likes
0 Dislikes

A full-length, original 65-question practice exam covering cloud concepts, security and compliance, AWS technology and services, and billing and support. Includes single-answer and multiple-answer questions, explanations for every choice, and official references. Suggested practice time: 90 minutes. Independent preparation material; not an official AWS exam.

Questions — 65

  1. A finance director asks how a cloud provider can offer infrastructure pricing that benefits from serving many customers. Which concept best explains this advantage?
  2. A team needs to run a short processing task whenever a new object arrives in S3. It wants to avoid provisioning servers for the processing code. Which service is the best fit?
  3. A company wants an AWS Support plan that includes a designated Technical Account Manager to provide ongoing guidance for its AWS environment. Which of these plans meets this requirement?
  4. An operations team regularly reviews incidents, improves runbooks, and automates repeatable deployment procedures. Which AWS Well-Architected pillar most directly encourages these practices?
  5. A company asks which AWS offering provides baseline DDoS protection automatically at no additional charge to AWS customers. Which answer is correct?
  6. A team is comparing storage services for its Linux applications. Which TWO statements are correct? Select TWO.
  7. A media company needs to store a growing collection of images and videos and retrieve them through an object API. Which AWS service is most directly designed for this requirement?
  8. A security team wants managed detection of suspicious AWS activity using threat intelligence and analysis of supported data sources. Which service should it select?
  9. A company reviews whether its application can continue serving customers after an infrastructure failure and recover within agreed business objectives. Which AWS Well-Architected pillar primarily covers these concerns?
  10. An application repeatedly reads the same small set of database results. The team wants an in-memory caching service to reduce repeated database queries and improve response times. Which service should it consider?
  11. A company packages an application in containers and uses Amazon ECS. It wants AWS to manage the compute servers on which the tasks run. Which compute option should it choose?
  12. A company runs its application on Amazon EC2. Under the shared responsibility model, which task remains the customer's responsibility?
  13. A company serves customers on several continents. Its current application runs only in its headquarters data center, causing distant users to wait longer. Which cloud capability most directly helps reduce this geographic delay?
  14. A company wants to identify gaps in business alignment, employee skills, governance, and operations before a cloud transformation. Which AWS framework is designed to organize this readiness assessment?
  15. A security team needs an audit history showing which AWS identity made a supported API request, when it happened, and the requested operation. Which service is most directly suited to this task?
  16. A web application uses several EC2 instances and receives variable traffic. Which TWO capabilities are correctly matched to their AWS services? Select TWO.
  17. A team currently puts database passwords in application code. It wants a service to securely store and retrieve those passwords and support automated rotation for supported configurations. Which service is the best fit?
  18. A company needs authoritative DNS hosting for its domain so internet clients can resolve application names to configured endpoints. Which AWS service is designed for this requirement?
  19. A department wants an email notification when its monthly AWS spending exceeds a chosen threshold. It does not want the notification setup itself to automatically stop every resource. Which service is the most direct fit?
  20. A company wants to filter HTTP requests to its web application using rules that address common application attacks, including SQL injection attempts. Which service best meets this need?
  21. A team benchmarks several compute options and chooses the resource type that meets its response-time requirements with the best technical fit. Which Well-Architected pillar most directly guides this selection?
  22. A company compares keeping a workload on premises with moving it to AWS. Which TWO on-premises costs should it include in a total cost of ownership comparison? Select TWO.
  23. A company moves an existing application from its own servers to Amazon EC2 with minimal changes to the application. Which migration strategy best describes this approach?
  24. A company has a predictable baseline of compute usage but expects to change instance families and AWS Regions over time. It wants eligible discounts through an hourly spend commitment that can also apply to Fargate and Lambda. Which option best fits?
  25. A news website serves the same images and other cacheable content to readers worldwide. It wants to deliver that content from edge locations nearer to readers. Which service best fits?
  26. A company uses AWS Organizations and wants central permission guardrails across member accounts. Which TWO statements about service control policies are correct? Select TWO.
  27. A company has just created an AWS account. Which TWO practices help protect its root user? Select TWO.
  28. A retailer must buy servers months before a seasonal promotion, even though most remain idle afterward. Which cloud benefit most directly addresses this financial concern?
  29. A reporting application only needs to read objects from one S3 bucket. What is the most appropriate starting point for its permissions?
  30. A company has several AWS accounts in one AWS Organization. Which TWO benefits can consolidated billing provide? Select TWO.
  31. A governance team wants a history of supported resource configuration changes and a way to evaluate those configurations against its rules. Which service best matches this requirement?
  32. A company has moved to AWS but still runs development resources overnight and keeps instances much larger than their observed needs. Which TWO actions directly address avoidable consumption? Select TWO.
  33. A company must run commercial software that requires administrator access to its server operating system and installation of a custom agent. Which AWS compute option best fits this requirement?
  34. An auditor asks a company for AWS compliance reports, such as applicable SOC reports, to support a vendor assessment. Which AWS service should the company use to obtain these documents?
  35. A company must retain documents for many years. Access is extremely rare, and the business accepts a retrieval process that can take hours. Which S3 storage class is most aligned with this requirement?
  36. A company moves a database from a self-managed EC2 instance to Amazon RDS. Which TWO responsibilities still belong to the customer? Select TWO.
  37. A small team wants to spend less time on infrastructure maintenance and more time on features that differentiate its business. Which TWO choices generally support this goal? Select TWO.
  38. A gaming application stores player records accessed primarily by a unique player identifier. The team wants a managed key-value database with flexible attributes and no database server administration. Which service best matches?
  39. An administrator wants to perform AWS service operations from a terminal and reuse those commands in shell scripts. Which AWS tool is specifically designed for this approach?
  40. An organization keeps a regulated legacy system in its own data center while operating a connected customer portal on AWS. Which deployment model best describes this arrangement?
  41. An online ticket seller experiences short traffic surges when events go on sale. It wants capacity to rise during a surge and fall afterward. Which cloud characteristic describes this behavior?
  42. A team wants to add text generation to an application by accessing managed foundation models through APIs, rather than training a model from scratch. Which AWS service most directly supports this approach?
  43. A development team currently waits several weeks for hardware procurement before testing a new product idea. Which cloud benefit most directly shortens the time needed to begin experiments?
  44. A team is choosing traffic controls for resources in an Amazon VPC. Which TWO statements correctly describe security groups and network ACLs? Select TWO.
  45. An application on an EC2 instance needs permission to read from an S3 bucket. The team wants to avoid distributing long-lived AWS access keys. Which approach best meets this requirement?
  46. A business application requires relational tables, SQL queries, and a managed database service offering familiar engines such as PostgreSQL or MySQL. Which service family best fits?
  47. A company wants an AWS-managed relational database designed for the cloud that offers compatibility with MySQL or PostgreSQL. Which database is the most specific match?
  48. An operations team wants to monitor EC2 CPU utilization and receive a notification when a configured threshold is exceeded. Which service provides the relevant metrics and alarm capability?
  49. An organization wants employees to sign in through its existing identity provider and access several AWS accounts using centrally assigned permissions. Which service is designed for this workforce access use case?
  50. A company wants automated vulnerability findings for supported EC2 instances and container images stored in Amazon ECR. Which service is designed for this requirement?
  51. A team wants repeatable AWS environments defined in templates, with related resources provisioned and updated together as a stack. Which service most directly provides this capability?
  52. A company needs centralized control of encryption keys used with supported AWS services, including permissions for key use and an audit trail of key-related activity. Which service should it use?
  53. A company wants to define a logically isolated network in AWS, choose its IP address range, create subnets, and control routing for its resources. Which service provides these capabilities?
  54. An analyst wants to run occasional SQL queries directly against supported data files in Amazon S3 without managing database servers or loading the files into a relational database first. Which service should the analyst use?
  55. After several months on AWS, a finance team wants to visualize historical spending, compare service costs over time, and investigate which services contributed to an increase. Which tool best matches?
  56. A company has standardized its container workloads on Kubernetes and wants an AWS service that provides a managed Kubernetes control plane. Which service should it use?
  57. A developer has a web application using a supported runtime and wants to upload its code while AWS handles environment provisioning, load balancing, and scaling capabilities. Which service best matches this deployment model?
  58. A team is planning an application that has not been deployed. It wants an estimated monthly cost based on proposed services, resource sizes, and expected usage. Which tool should it use?
  59. A business stops operating its self-hosted customer relationship management application and subscribes to a SaaS product that provides the required functionality. Which migration strategy is this?
  60. A learner is reviewing AWS global infrastructure. Which TWO statements correctly describe Regions and Availability Zones? Select TWO.
  61. A company stores many documents in Amazon S3 and wants help identifying objects that contain sensitive information, such as personally identifiable information. Which service is most appropriate?
  62. A company wants to reduce the environmental impact of a workload by removing unused resources and improving utilization. Which Well-Architected pillar most directly addresses this goal?
  63. A company needs EC2 instances for a short experiment with unpredictable duration. It wants to avoid a one-year or three-year usage commitment and does not want interruptions caused by spare-capacity reclamation. Which purchasing option is the best fit?
  64. A company runs flexible batch jobs that can checkpoint progress and restart if compute capacity is interrupted. Start times are flexible, and reducing compute cost is the main priority. Which EC2 purchasing option should it evaluate first?
  65. A company is selecting application messaging services. Which TWO service-to-purpose mappings are correct? Select TWO.

Comments — 0

Related exams