CLF-C02 practice questions

Q: Is this CLF-C02 practice test free?

Yes. All 15 CLF-C02 practice questions on this page are free, with instant scoring and a written explanation for each answer. You do not need an account and there is no time limit.

Q: How much does the real CLF-C02 exam cost?

The official price is $100. Cyber VK sells the same official CLF-C02 voucher for $36.99 — a saving of $63.01. The voucher is identical to one bought direct and is emailed within minutes of payment.

Q: Are these questions the same as the real CLF-C02 exam?

No. These are original practice questions written to match the published exam objectives and difficulty. They are not real exam questions — sharing or reproducing live exam content breaches every certification body's candidate agreement and can void your certification.

Q: How should I use this practice test?

Use it as a readiness check rather than a study tool. Work through the questions without notes, read the explanation for every answer including the ones you got right, and treat any domain where you miss more than a third as the area to revise before booking your exam.

Question 1

Which AWS service provides object storage for files such as images, backups, and static website content?

Accepted Answer

Amazon S3 is AWS's object storage service designed for storing and retrieving any amount of data as objects in buckets. EBS provides block storage for EC2 instances, while EFS and FSx provide file storage.

Question 2

A company wants to run a containerized application without provisioning or managing any EC2 instances. Which combination of services best meets this requirement?

Accepted Answer

AWS Fargate is a serverless compute engine that runs containers without requiring the customer to provision or manage the underlying instances. All other options require the customer to manage EC2 capacity.

Question 3

An application must deliver single-digit millisecond read latency for a session-state table with unpredictable, spiky traffic and no schema changes over time. Which AWS service is the most appropriate choice?

Accepted Answer

DynamoDB is a NoSQL key-value database purpose-built for single-digit millisecond latency, and on-demand capacity mode automatically accommodates unpredictable, spiky traffic without capacity planning. The relational and data warehouse options are not optimized for this key-value access pattern.

Question 4

Under the AWS shared responsibility model, who is responsible for patching the guest operating system on an Amazon EC2 instance?

Accepted Answer

EC2 is an IaaS offering, so the customer is responsible for everything "in" the cloud, including guest OS patching and configuration. AWS is responsible only for the underlying hardware, hypervisor, and facilities.

Question 5

Which AWS service should a security team use to continuously monitor for malicious activity and unauthorized behavior by analyzing VPC Flow Logs, DNS logs, and CloudTrail events?

Accepted Answer

Amazon GuardDuty is a threat detection service that continuously analyzes VPC Flow Logs, DNS logs, and CloudTrail events to identify malicious or unauthorized activity. AWS Config tracks resource configuration compliance and Amazon Inspector scans workloads for software vulnerabilities.

Question 6

An auditor requests documentation proving that AWS data centers meet SOC 2 and ISO 27001 standards. How should the customer obtain these reports?

Accepted Answer

AWS Artifact is the self-service portal that provides on-demand access to AWS compliance reports and agreements such as SOC and ISO certifications. Audit Manager and Security Hub assess the customer's own environment rather than supplying AWS's third-party audit reports.

Question 7

Which pricing model allows a customer to pay only for the compute capacity consumed, with no long-term contracts or upfront payments?

Accepted Answer

On-Demand pricing charges by the second or hour with no commitment, upfront cost, or long-term contract. Reserved Instances and Savings Plans both require a one- or three-year commitment in exchange for a discount.

Question 8

A company needs a support plan that includes a designated Technical Account Manager (TAM) and a 15-minute response time for business-critical system outages. Which AWS Support plan meets these requirements?

Accepted Answer

Only the Enterprise Support plan provides a designated TAM along with a 15-minute response time for business-critical system down cases. Enterprise On-Ramp offers a pool of TAMs and a 30-minute critical response time.

Question 9

An organization uses AWS Organizations with consolidated billing across 20 member accounts. Which statement accurately describes the billing benefit they receive?

Accepted Answer

Consolidated billing aggregates usage across all accounts in the organization so the combined volume qualifies for lower tiered pricing, and Reserved Instance or Savings Plans discounts can be shared across accounts by default. It does not change the underlying usage-based billing model.

Question 10

Which AWS Well-Architected Framework pillar focuses on the ability of a workload to recover from failures and meet demand?

Accepted Answer

The Reliability pillar covers a workload's ability to recover from infrastructure or service disruptions and dynamically acquire resources to meet demand. Performance Efficiency instead focuses on using computing resources efficiently as demand changes.

Question 11

A retailer moves from purchasing physical servers to launching EC2 instances on demand. Which cloud benefit does this change primarily demonstrate?

Accepted Answer

Replacing upfront hardware purchases with pay-as-you-go instance usage is the definition of trading capital expenditure for variable operational expenditure. The other benefits may also result, but the described change specifically shifts the expense model.

Question 12

A workload must remain available if an entire data center loses power, while keeping data replication latency as low as possible. What is the most appropriate deployment strategy?

Accepted Answer

Availability Zones are physically separate facilities with independent power, yet they are connected by low-latency links within a Region, providing fault isolation without the latency of cross-Region replication. Edge Locations cache content and do not host workloads.

Question 13

Which AWS service allows a customer to define and provision their infrastructure using templates written in JSON or YAML?

Accepted Answer

AWS CloudFormation is the infrastructure-as-code service that provisions and manages AWS resources from declarative JSON or YAML templates. CodeDeploy automates application deployments, and OpsWorks uses Chef or Puppet configuration management.

Question 14

An administrator needs to identify which IAM user deleted an S3 bucket last week, including the source IP address of the request. Which service provides this information?

Accepted Answer

AWS CloudTrail records API activity across the account, capturing the identity of the caller, the action taken, the time, and the source IP address. CloudWatch focuses on performance metrics and logs, while AWS Config records configuration state rather than caller identity details.

Question 15

A company must be alerted whenever an EC2 security group is modified to allow unrestricted inbound SSH access, and it needs a record of whether the resource is compliant over time. Which service is designed for this requirement?

Accepted Answer

AWS Config continuously evaluates resource configurations against managed or custom rules and maintains a compliance history for each resource. CloudTrail records the API call but does not evaluate ongoing compliance state, and Trusted Advisor provides periodic checks rather than continuous per-resource compliance tracking.

CLF-C02 — AWS CLF-C02 Cloud Practitioner Exam Voucher | AWS Certified Cloud Practitioner Practice Test

Free Practice Test

CLF-C02 practice test — common questions