AWS Certified Cloud Practitioner (CLF-C02) — Questions and Answers

Question 1: What type of encryption protects data while it is being sent between a client and an AWS service over the network?

Client-side encryption
Server-side encryption
Encryption in transit (Correct answer)
Encryption at rest

Correct answer: Encryption in transit

Encryption in transit (typically TLS/SSL) protects data as it travels across networks between a client and server, preventing interception of data in motion.

Question 2: Under the AWS Shared Responsibility Model, patching the guest operating system on an Amazon EC2 instance is the responsibility of:

AWS
Both AWS and the customer equally
The AWS Marketplace vendor
The customer (Correct answer)

Correct answer: The customer

The customer is responsible for patching the guest OS on EC2 instances; AWS only manages the underlying infrastructure.

Question 3: A company purchases a 1-year Reserved Instance for EC2. After 6 months, they no longer need it. What can they do with the unused reservation?

Convert it to a Spot Instance automatically
Request a full refund from AWS
Sell it on the AWS Reserved Instance Marketplace (Correct answer)
Transfer it to a different AWS account for free

Correct answer: Sell it on the AWS Reserved Instance Marketplace

Unused Standard Reserved Instances can be listed and sold to other AWS customers through the Reserved Instance Marketplace.

Question 4: What is the shared responsibility model in AWS?

AWS handles infrastructure, customer handles data and applications (Correct answer)
Customer handles infrastructure security.
AWS is responsible for everything.
Customer is responsible for physical data centers

Correct answer: AWS handles infrastructure, customer handles data and applications

The shared responsibility model in AWS defines the security responsibilities between AWS and the customer. AWS is responsible for the security *of* the cloud, meaning they secure the underlying infrastructure that runs all cloud services. Conversely, the customer is responsible for security *in* the cloud, which includes managing their data, applications, operating systems, network configuration, and access controls within their AWS environment.

Question 5: Which of the following infrastructure components is AWS responsible for under the Shared Responsibility Model?

VPC subnet configuration
Security group rules for EC2 instances
S3 bucket versioning settings
Fiber optic cables and networking hardware connecting AWS regions (Correct answer)

Correct answer: Fiber optic cables and networking hardware connecting AWS regions

The physical network hardware and fiber connections between AWS facilities are part of the global infrastructure that AWS is fully responsible for.

Question 6: An organization wants to apply consistent cost allocation tags across all AWS accounts for chargeback reporting. Which feature of AWS Organizations helps with this?

Service Control Policies (SCPs)
Tag Policies (Correct answer)
AWS Config Rules
Consolidated Billing

Correct answer: Tag Policies

Tag Policies in AWS Organizations allow you to define and enforce standardized tagging rules across all accounts, making cost allocation reports more consistent.

Question 7: Which document typically outlines the compliance requirements for CLF-C02 professionals?

Employee handbook
Standards of practice and code of conduct (Correct answer)
Marketing brochure
Annual financial report

Correct answer: Standards of practice and code of conduct

Standards of practice and codes of conduct define the professional and ethical requirements practitioners must follow.

Question 8: What is the primary purpose of an AWS Availability Zone (AZ)?

To separate development and production workloads
To serve content to users with low latency globally
To reduce data transfer costs between services
To provide fault isolation so a failure in one AZ does not affect others (Correct answer)

Correct answer: To provide fault isolation so a failure in one AZ does not affect others

Availability Zones are physically separate data centers within a Region, designed so failures (power, cooling, network) are isolated and do not cascade.

Question 9: A company wants to privately access Amazon S3 from their VPC without sending traffic over the internet. Which type of VPC Endpoint should they use?

Interface Endpoint
Gateway Endpoint (Correct answer)
Direct Connect Endpoint
Transit Endpoint

Correct answer: Gateway Endpoint

Gateway Endpoints are available for Amazon S3 and DynamoDB, allowing private access from a VPC by adding an entry to the route table that directs traffic to the endpoint.

Question 10: Which Amazon Route 53 health check feature automatically redirects traffic away from unhealthy endpoints?

Failover routing with health checks (Correct answer)
Simple routing
Latency-based routing
Geoproximity routing

Correct answer: Failover routing with health checks

Failover routing combined with Route 53 health checks automatically routes traffic to a standby resource when the primary resource becomes unhealthy.

Question 11: What is the best practice for maintaining networking performance over time?

Implement scheduled preventive maintenance (Correct answer)
Wait for failures before acting
Upgrade all equipment annually
Outsource all maintenance

Correct answer: Implement scheduled preventive maintenance

Scheduled preventive maintenance catches potential issues before they cause failures, maintaining reliability and extending equipment life.

Question 12: A company is migrating from a single large server to the cloud and wants to handle growing traffic. Which scaling strategy adds more instances rather than upgrading existing ones?

Vertical scaling (scaling up)
Diagonal scaling
Horizontal scaling (scaling out) (Correct answer)
Manual capacity planning

Correct answer: Horizontal scaling (scaling out)

Horizontal scaling adds more instances to distribute load, while vertical scaling increases the size/power of existing instances.

Question 13: Which approach best describes risk-based compliance management in the CLF-C02 field?

Eliminating all possible risks
Treating all risks equally
Focusing only on past incidents
Prioritizing resources based on risk severity and likelihood (Correct answer)

Correct answer: Prioritizing resources based on risk severity and likelihood

Risk-based compliance management involves assessing and prioritizing risks by their severity and likelihood to allocate resources effectively.

Question 14: A developer needs temporary AWS credentials to allow an EC2 instance to access an S3 bucket without storing long-term access keys. What should they use?

IAM Role attached to the EC2 instance (Correct answer)
IAM User access keys stored in environment variables
Root account credentials
AWS Secrets Manager with manual rotation

Correct answer: IAM Role attached to the EC2 instance

An IAM Role attached to an EC2 instance provides temporary, automatically rotated credentials without requiring hardcoded access keys.

Question 15: A company wants to cache frequently accessed data to reduce database load. Which AWS service is best suited for this?

Amazon S3
Amazon ElastiCache (Correct answer)
AWS Glue
Amazon Kinesis

Correct answer: Amazon ElastiCache

Amazon ElastiCache is a fully managed in-memory caching service compatible with Redis and Memcached that reduces database read pressure.

Question 16: Which encryption option allows Amazon S3 to manage the encryption keys on behalf of the customer?

Client-side encryption
SSE-C
SSE-S3 (Correct answer)
SSE-KMS

Correct answer: SSE-S3

SSE-S3 (Server-Side Encryption with S3-managed keys) lets S3 handle key management entirely on the customer's behalf.

Question 17: What is the MOST effective way for new CLF-C02 professionals to build competency in their field?

Studying certification materials exclusively
Learning entirely through trial and error
Focusing solely on the most advanced topics
Combining formal education, mentored practice, and ongoing professional development (Correct answer)

Correct answer: Combining formal education, mentored practice, and ongoing professional development

Building professional competency requires a multi-faceted approach: formal education provides foundational knowledge, mentored practice develops applied skills under guidance, and ongoing professional development ensures continuous growth and currency in the field.

Question 18: Which AWS service runs managed Kubernetes clusters, abstracting away the control plane management?

AWS App Runner
AWS Fargate
Amazon ECS
Amazon EKS (Correct answer)

Correct answer: Amazon EKS

Amazon Elastic Kubernetes Service (EKS) provides a managed Kubernetes control plane, handling upgrades, patching, and availability automatically.

Question 19: In CLF-C02 certification, what is the primary purpose of regulatory compliance programs?

To ensure adherence to laws and standards (Correct answer)
To eliminate competition
To reduce staffing needs
To increase revenue

Correct answer: To ensure adherence to laws and standards

Regulatory compliance programs are designed to ensure organizations follow applicable laws, regulations, and standards.

Question 20: A company is migrating to AWS and wants to understand the Total Cost of Ownership compared to their on-premises infrastructure. Which tool helps with this analysis?

AWS Pricing Calculator
AWS Migration Hub
AWS TCO Calculator (now part of Pricing Calculator) (Correct answer)
AWS Trusted Advisor

Correct answer: AWS TCO Calculator (now part of Pricing Calculator)

The TCO analysis functionality, now integrated into the AWS Pricing Calculator, helps compare on-premises costs to AWS cloud costs to quantify potential savings.

Question 21: Under the AWS Shared Responsibility Model, which of the following is AWS responsible for?

Configuring security groups on customer EC2 instances
Encrypting customer data in Amazon S3
Maintaining physical security of data center facilities (Correct answer)
Managing customer IAM policies

Correct answer: Maintaining physical security of data center facilities

AWS is responsible for the security 'of' the cloud, including physical infrastructure, hardware, and facilities — the data center itself.

Question 22: Which AWS support plan includes access to a Technical Account Manager (TAM)?

Developer
Basic
Enterprise (Correct answer)
Business

Correct answer: Enterprise

The AWS Enterprise Support plan is designed for large-scale, mission-critical workloads and includes access to a dedicated Technical Account Manager (TAM). A TAM provides proactive guidance, best practices, and helps you plan and review your AWS architecture. This personalized support is crucial for complex deployments and ensuring operational excellence.

Question 23: Which deployment model describes running workloads on infrastructure you own and operate in your own facilities, without using cloud services?

Private cloud (on-premises) (Correct answer)
Community cloud
Hybrid cloud
Public cloud

Correct answer: Private cloud (on-premises)

A private/on-premises deployment means infrastructure is owned and managed internally, not hosted by a cloud provider like AWS.

Question 24: Which pricing model for Amazon DynamoDB is best for applications with consistent, predictable traffic patterns?

Spot Instances
On-Demand Mode
Provisioned Mode with Auto Scaling (Correct answer)
Reserved Instances

Correct answer: Provisioned Mode with Auto Scaling

Provisioned Mode with Auto Scaling is cost-effective for predictable workloads as you specify expected read/write capacity and pay for reserved throughput.

Question 25: Which feature of Amazon Aurora makes it different from standard MySQL or PostgreSQL?

It automatically replicates data across 3 Availability Zones with 6 copies (Correct answer)
It is a NoSQL database
It requires manual backups
It stores data in S3 buckets directly

Correct answer: It automatically replicates data across 3 Availability Zones with 6 copies

Aurora automatically replicates data six times across three Availability Zones, providing high availability and durability.

Question 26: Which cloud deployment benefit allows a company to stop paying for resources during non-business hours and restart them the next day?

Pay-as-you-go pricing (Correct answer)
High availability
Fault tolerance
Global reach

Correct answer: Pay-as-you-go pricing

Pay-as-you-go pricing means you only pay for resources while they are running, so stopping instances during off-hours directly reduces costs.

Question 27: Which professional attribute is most valued in billing and pricing within the CLF-C02 field?

Accountability and commitment to standards (Correct answer)
Working in isolation
Prioritizing personal convenience
Avoiding challenging situations

Correct answer: Accountability and commitment to standards

Accountability and commitment to professional standards build trust and ensure consistent, high-quality practice.

Question 28: Which AWS service would you use to migrate an on-premises Oracle database to Amazon Aurora with minimal downtime?

AWS Snowball
AWS Database Migration Service (DMS) (Correct answer)
Amazon S3 Transfer Acceleration
AWS DataSync

Correct answer: AWS Database Migration Service (DMS)

AWS DMS enables continuous data replication from source to target databases, minimizing downtime during migration.

Question 29: What distinguishes a AWS Certified Cloud Practitioner certified professional from a non-certified practitioner?

Certified professionals exclusively work in larger organizations
Certified professionals always have more years of experience
There is no meaningful difference in competency
Certification validates competency through standardized assessment against established benchmarks (Correct answer)

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 30: What is the key advantage of using Amazon Redshift Serverless compared to provisioned Redshift clusters?

It supports more SQL functions than provisioned clusters
It only works with data stored in Amazon S3
It charges only when queries are running, with no idle cluster costs (Correct answer)
It stores data in DynamoDB tables instead of columnar storage

Correct answer: It charges only when queries are running, with no idle cluster costs

Redshift Serverless automatically provisions capacity and charges only for the compute used during query execution, eliminating idle cluster costs.

Question 31: Which AWS Support plan is the minimum level that offers 24/7 access to Cloud Support Engineers via phone, chat, and email?

Enterprise
Basic
Developer
Business (Correct answer)

Correct answer: Business

The Business Support plan is the lowest tier that provides 24/7 phone, chat, and email access to Cloud Support Engineers for production issues.

Question 32: Which AWS pricing concept means customers pay less per unit as their usage of a service increases?

Spot pricing
Pay-as-you-go
Volume-based discounts (tiered pricing) (Correct answer)
Reserved capacity pricing

Correct answer: Volume-based discounts (tiered pricing)

Many AWS services use tiered pricing where the per-unit cost decreases as monthly usage crosses higher volume thresholds.

Question 33: Which pricing model allows you to save money on AWS services based on long-term usage?

Spot Instances
Reserved Instances (Correct answer)
Pay-as-you-go
Free tier

Correct answer: Reserved Instances

Reserved Instances is an AWS pricing model that allows customers to save money on services by committing to a specific usage level for a 1-year or 3-year term. By reserving compute capacity in advance, users receive a significant discount compared to on-demand pricing. This model is ideal for applications with predictable and steady workloads, offering substantial cost optimization for long-term usage.

Question 34: A CLF-C02 certified professional is asked to provide services outside their scope of competence. The CORRECT ethical response is to:

Accept the work to gain new experience
Decline and refer to a qualified professional (Correct answer)
Accept but charge a lower rate
Accept and learn as they go

Correct answer: Decline and refer to a qualified professional

Ethical practice requires professionals to work within their scope of competence. Accepting work beyond one's qualifications can lead to substandard results and potential harm. Referring to qualified professionals ensures proper service delivery.

Question 35: Which AWS service enables management of user access and permissions?

AWS Shield
AWS IAM (Correct answer)
Amazon SQS
AWS CloudTrail

Correct answer: AWS IAM

AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM, you can manage users, groups, and roles, and define granular permissions to specify who can access which services and resources under what conditions. This ensures that only authorized entities can perform specific actions within your AWS environment.

Question 36: Which AWS architecture pattern distributes incoming traffic across multiple targets to improve availability?

Sharding
Load balancing (Correct answer)
Caching
Partitioning

Correct answer: Load balancing

Load balancing distributes incoming application traffic across multiple targets such as EC2 instances to improve availability and fault tolerance.

Question 37: Which S3 feature allows you to automatically move objects to cheaper storage tiers as they age?

S3 Object Lock
S3 Versioning
S3 Lifecycle Policies (Correct answer)
S3 Replication

Correct answer: S3 Lifecycle Policies

S3 Lifecycle Policies automate transitions of objects between storage classes based on age, reducing storage costs over time.

Question 38: Which AWS service provides a managed Kubernetes container orchestration service?

Amazon ECR
Amazon ECS
Amazon EKS (Correct answer)
AWS Fargate

Correct answer: Amazon EKS

Amazon EKS (Elastic Kubernetes Service) is a managed Kubernetes service that runs the Kubernetes control plane across multiple AWS AZs.

Question 39: Which AWS tool provides automated recommendations to help optimize your AWS environment for cost, performance, security, fault tolerance, and service limits?

AWS Cost Explorer
AWS Trusted Advisor (Correct answer)
AWS Config
AWS Inspector

Correct answer: AWS Trusted Advisor

AWS Trusted Advisor analyzes your AWS environment and provides real-time guidance across five categories: cost, performance, security, fault tolerance, and service limits.

Question 40: Which AWS service enables you to provision a logically isolated section of the AWS Cloud where you can launch resources in a virtual network you define?

AWS PrivateLink
AWS Transit Gateway
Amazon VPC (Correct answer)
AWS Direct Connect

Correct answer: Amazon VPC

Amazon VPC (Virtual Private Cloud) lets you define your own isolated virtual network with custom IP ranges, subnets, route tables, and gateways.

Question 41: Which AWS support plan is best suited for experimenting and testing?

Enterprise
Basic
Developer (Correct answer)
Business

Correct answer: Developer

The AWS Developer Support plan is best suited for customers who are experimenting with AWS or performing development and testing. It provides technical support during business hours via email, with a response time of 12-24 hours for general guidance. While it doesn't offer the comprehensive features of Business or Enterprise plans, it's a good option for non-production workloads and learning.

Question 42: What is the AWS best practice recommendation for the root account?

Delete it after creating IAM users
Enable MFA and avoid using it for everyday tasks (Correct answer)
Share it with trusted administrators only
Use it for all daily administrative tasks

Correct answer: Enable MFA and avoid using it for everyday tasks

AWS recommends enabling MFA on the root account and reserving its use only for tasks that specifically require root-level access.

Question 43: According to the AWS Shared Responsibility Model, which of the following is the customer's responsibility?

Hardware maintenance of servers
Network infrastructure management
Patching the guest operating system on EC2 instances (Correct answer)
Physical security of data centers

Correct answer: Patching the guest operating system on EC2 instances

Customers are responsible for patching and maintaining the guest OS on their EC2 instances, while AWS manages the underlying hardware and hypervisor.

Question 44: Which approach best demonstrates mastery of storage services in CLF-C02 practice?

Relying entirely on technology
Avoiding complex scenarios
Applying principles to novel situations with sound judgment (Correct answer)
Following procedures without understanding

Correct answer: Applying principles to novel situations with sound judgment

True mastery involves understanding underlying principles well enough to apply them to new and unfamiliar situations with professional judgment.

Question 45: What happens to an EC2 Spot Instance when AWS needs the capacity back?

It receives a 2-minute warning and is then terminated (Correct answer)
It is paused and resumed later
It is migrated to another Availability Zone
It is converted to On-Demand automatically

Correct answer: It receives a 2-minute warning and is then terminated

AWS provides a 2-minute interruption notice before reclaiming a Spot Instance, after which it is stopped or terminated.

Question 46: A startup wants to reduce the risk of a single point of failure in their AWS architecture. What approach should they use?

Use redundancy across multiple AZs (Correct answer)
Use a single RDS instance with maximum storage
Deploy everything to a single large EC2 instance
Store all data in one S3 bucket

Correct answer: Use redundancy across multiple AZs

Using redundancy across multiple Availability Zones eliminates single points of failure by ensuring no one failure can take down the entire system.

Question 47: What is the purpose of an AWS Virtual Private Cloud (VPC)?

To provide a CDN for faster content delivery
To provision logically isolated sections of the AWS cloud (Correct answer)
To manage DNS for AWS resources
To automate infrastructure deployment

Correct answer: To provision logically isolated sections of the AWS cloud

A VPC lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network you define.

Question 48: Which AWS service allows you to logically isolate a section of the AWS Cloud where you can launch AWS resources in a virtual network you define?

Amazon VPC (Correct answer)
AWS Transit Gateway
AWS PrivateLink
AWS Direct Connect

Correct answer: Amazon VPC

Amazon VPC (Virtual Private Cloud) lets you provision a logically isolated section of AWS where you can launch resources in a virtual network you define.

Question 49: A customer wants to understand who is responsible for applying security patches to an AWS managed NAT Gateway. Who handles this?

The customer and AWS share patching responsibility equally
The customer, because network components are the customer's responsibility
AWS provides patches but the customer must apply them
AWS, because NAT Gateway is a managed service maintained by AWS (Correct answer)

Correct answer: AWS, because NAT Gateway is a managed service maintained by AWS

NAT Gateway is a fully managed AWS service, so AWS is responsible for patching and maintaining the underlying infrastructure.

Question 50: What AWS service provides content delivery with low latency?

Amazon S3
Amazon CloudFront (Correct answer)
Amazon Route 53
AWS Elastic Beanstalk

Correct answer: Amazon CloudFront

Amazon CloudFront is a Content Delivery Network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency. It achieves this by caching content at edge locations closer to users, reducing the distance data travels. This significantly improves performance and user experience for web applications and content delivery.

Question 51: Which service allows you to define your AWS infrastructure as code using templates?

AWS CloudFormation (Correct answer)
AWS Config
AWS CloudTrail
AWS Systems Manager

Correct answer: AWS CloudFormation

AWS CloudFormation enables you to model and provision AWS infrastructure resources using templates, following infrastructure-as-code practices.

Question 52: Which AWS service enables you to evaluate the security and compliance of your EC2 instances against predefined rules and best practices?

Amazon GuardDuty
Amazon Inspector (Correct answer)
AWS Audit Manager
AWS Config

Correct answer: Amazon Inspector

Amazon Inspector automatically assesses EC2 instances and container images for software vulnerabilities and unintended network exposure.

Question 53: What is the best practice for maintaining aws architecture performance over time?

Wait for failures before acting
Implement scheduled preventive maintenance (Correct answer)
Outsource all maintenance
Upgrade all equipment annually

Correct answer: Implement scheduled preventive maintenance

Scheduled preventive maintenance catches potential issues before they cause failures, maintaining reliability and extending equipment life.

Question 54: Which feature of AWS Organizations allows the management account to pay for all member accounts' charges?

Consolidated Billing (Correct answer)
AWS Control Tower
Service Control Policies
AWS Config Aggregator

Correct answer: Consolidated Billing

Consolidated Billing in AWS Organizations designates a single management (payer) account that receives one combined bill covering usage charges from all member accounts.

Question 55: What is the primary benefit of cloud computing?

On-demand resource availability and cost savings (Correct answer)
Unlimited internet access
Permanent software ownership
Manual hardware scaling

Correct answer: On-demand resource availability and cost savings

The primary benefit of cloud computing is its ability to provide on-demand access to computing resources, such as servers, storage, and databases, over the internet. This eliminates the need for organizations to purchase and maintain their own physical infrastructure, leading to significant cost savings. Users only pay for the resources they consume, allowing for greater flexibility, scalability, and efficiency compared to traditional IT setups.

Question 56: Which EBS volume type is recommended for boot volumes and general-purpose workloads on AWS?

st1 (Throughput Optimized HDD)
gp3 (General Purpose SSD) (Correct answer)
sc1 (Cold HDD)
io1 (Provisioned IOPS SSD)

Correct answer: gp3 (General Purpose SSD)

gp3 is the latest general-purpose SSD EBS volume type, recommended for most workloads including boot volumes, offering a good balance of price and performance.

Question 57: Which AWS service provides a managed relational database that automates backups, patching, and failover?

Amazon DynamoDB
Amazon ElastiCache
Amazon RDS (Correct answer)
Amazon Redshift

Correct answer: Amazon RDS

Amazon RDS (Relational Database Service) automates common DBA tasks like backups, software patching, and multi-AZ failover.

Question 58: Under the Shared Responsibility Model, who is responsible for the availability of the AWS global infrastructure?

Third-party providers contracted by AWS
AWS, by maintaining its global network and data centers (Correct answer)
Both share equal responsibility for global availability
The customer, by designing for multi-region redundancy

Correct answer: AWS, by maintaining its global network and data centers

AWS is responsible for the availability and reliability of its global infrastructure, including regions, Availability Zones, and edge locations.

Question 59: A company wants to resolve domain names for resources within their VPC using a private DNS namespace not accessible from the internet. Which service enables this?

Amazon Route 53 Public Hosted Zone
Amazon CloudFront
Amazon Route 53 Private Hosted Zone (Correct answer)
AWS Global Accelerator

Correct answer: Amazon Route 53 Private Hosted Zone

Amazon Route 53 Private Hosted Zones allow DNS resolution for domain names within one or more VPCs without exposing that DNS information publicly.

Question 60: What is the value of continuing education in shared responsibility for CLF-C02 professionals?

It is only needed for recertification
It replaces workplace experience
It is primarily a social activity
It keeps professionals current with evolving standards and practices (Correct answer)

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 61: What is the value of continuing education in storage services for CLF-C02 professionals?

It is only needed for recertification
It is primarily a social activity
It replaces workplace experience
It keeps professionals current with evolving standards and practices (Correct answer)

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 62: Which AWS service provides security recommendations across categories like cost optimization, performance, and security, including checks for open S3 buckets and MFA on the root account?

AWS Security Hub
AWS Config
AWS Trusted Advisor (Correct answer)
Amazon Inspector

Correct answer: AWS Trusted Advisor

AWS Trusted Advisor inspects your AWS environment and provides recommendations across five categories including security, such as flagging publicly accessible S3 buckets and missing MFA.

Question 63: A company needs a fully managed in-memory caching service to reduce database load. Which AWS service should they use?

Amazon DynamoDB Accelerator (DAX)
Amazon RDS
Amazon ElastiCache (Correct answer)
Amazon Aurora

Correct answer: Amazon ElastiCache

Amazon ElastiCache is a fully managed in-memory caching service supporting Redis and Memcached to improve application performance.

Question 64: Which AWS billing feature lets you set custom actions — such as stopping EC2 instances — automatically when a budget threshold is reached?

AWS Trusted Advisor
AWS Cost Anomaly Detection
AWS CloudWatch Billing Alarms
AWS Budgets Actions (Correct answer)

Correct answer: AWS Budgets Actions

AWS Budgets Actions allows you to define automated responses like applying IAM policies or stopping EC2/RDS instances when a cost or usage budget threshold is exceeded.

Question 65: A company needs to ensure that only approved AWS services can be used across all accounts in their organization. Which AWS service enables this policy enforcement?

AWS Organizations with Service Control Policies (Correct answer)
AWS Security Hub
AWS Config
AWS IAM

Correct answer: AWS Organizations with Service Control Policies

AWS Organizations with Service Control Policies (SCPs) allows you to centrally control the maximum permissions available to all accounts in your organization.

Question 66: Which AWS service provides a central location to manage security alerts and compliance status across multiple AWS accounts and services?

AWS Trusted Advisor
Amazon CloudWatch
AWS CloudTrail
AWS Security Hub (Correct answer)

Correct answer: AWS Security Hub

AWS Security Hub aggregates, organizes, and prioritizes security alerts and compliance findings from multiple AWS services and third-party tools.

AWS Certified Cloud Practitioner (CLF-C02)

The AWS Certified Cloud Practitioner exam validates a candidate's overall understanding of the AWS Cloud, including its core services, security, architecture, pricing, and support.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds