AWS Certified Cloud Practitioner (CLF-C02) — Questions and Answers

Question 1: When a CLF-C02 professional faces pressure to compromise professional standards, the BEST response is to:

Ignore the pressure and continue without reporting
Immediately resign from the position
Comply to maintain workplace relationships
Document the pressure and uphold professional standards (Correct answer)

Correct answer: Document the pressure and uphold professional standards

Professionals should document any pressure to compromise standards and continue upholding their professional obligations. Documentation creates a record of the situation while maintaining ethical integrity.

Question 2: What is the fundamental principle behind networking in the CLF-C02 domain?

Using the newest technology exclusively
Following a single vendor solution
Cost minimization at all costs
Balancing performance, reliability, and efficiency (Correct answer)

Correct answer: Balancing performance, reliability, and efficiency

Effective technical design requires balancing performance requirements with reliability needs and operational efficiency.

Question 3: Which AWS service provides a content delivery network (CDN) that caches content at edge locations worldwide to reduce latency?

Amazon Route 53
AWS Direct Connect
AWS Global Accelerator
Amazon CloudFront (Correct answer)

Correct answer: Amazon CloudFront

Amazon CloudFront is AWS's CDN that delivers content from a global network of edge locations closest to end users, reducing latency.

Question 4: What distinguishes a AWS Certified Cloud Practitioner certified professional from a non-certified practitioner?

There is no meaningful difference in competency
Certification validates competency through standardized assessment against established benchmarks (Correct answer)
Certified professionals always have more years of experience
Certified professionals exclusively work in larger organizations

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 5: Which approach is recommended for troubleshooting networking issues?

Rely solely on past experience
Use systematic isolation and testing methods (Correct answer)
Replace all components simultaneously
Wait for the problem to resolve itself

Correct answer: Use systematic isolation and testing methods

Systematic isolation and testing methodically narrows down the root cause, making troubleshooting efficient and accurate.

Question 6: Which AWS pricing model offers the largest discount (up to 90%) compared to On-Demand pricing in exchange for a one- or three-year commitment?

Savings Plans
Reserved Instances
Spot Instances (Correct answer)
Dedicated Hosts

Correct answer: Spot Instances

Spot Instances use spare AWS capacity and can be up to 90% cheaper than On-Demand, though AWS can reclaim them with a 2-minute warning.

Question 7: What is an AWS Region?

A single data center building
A logical grouping of AWS accounts
A global content delivery network edge location
A collection of Availability Zones in a geographic area (Correct answer)

Correct answer: A collection of Availability Zones in a geographic area

An AWS Region is a separate geographic area containing multiple, isolated Availability Zones that are physically separated data centers.

Question 8: Which of the following is an example of AWS's responsibility under the Shared Responsibility Model?

Configuring security groups for EC2 instances
Managing IAM user permissions
Maintaining the physical security of data center facilities (Correct answer)
Patching the guest operating system on EC2

Correct answer: Maintaining the physical security of data center facilities

AWS is responsible for physical security of its data centers, including facility access controls and environmental safeguards.

Question 9: Which of the following is a security best practice in AWS?

Grant access to all services by default
Avoid using IAM roles
Use least privilege principles (Correct answer)
Allow full admin access to everyone

Correct answer: Use least privilege principles

Using the least privilege principle is a fundamental security best practice in AWS. This means granting users, roles, or services only the minimum permissions necessary to perform their required tasks, and no more. By limiting access, you reduce the potential impact of a compromised credential or malicious activity, significantly enhancing the overall security posture of your AWS environment.

Question 10: Which AWS tool provides automated recommendations to help optimize your AWS environment for cost, performance, security, fault tolerance, and service limits?

AWS Config
AWS Cost Explorer
AWS Inspector
AWS Trusted Advisor (Correct answer)

Correct answer: AWS Trusted Advisor

AWS Trusted Advisor analyzes your AWS environment and provides real-time guidance across five categories: cost, performance, security, fault tolerance, and service limits.

Question 11: A company needs to send transactional emails (order confirmations, password resets) at scale from their AWS-hosted application. Which service should they use?

Amazon SNS
Amazon SQS
Amazon SES (Correct answer)
Amazon Pinpoint

Correct answer: Amazon SES

Amazon SES (Simple Email Service) is designed for sending large volumes of transactional or marketing emails from applications.

Question 12: How does the Shared Responsibility Model change when a customer moves from EC2 to AWS Fargate?

Responsibility remains exactly the same
The customer becomes responsible for the underlying hardware
AWS takes on more responsibility as it manages the container infrastructure (Correct answer)
The customer takes on more responsibility for OS management

Correct answer: AWS takes on more responsibility as it manages the container infrastructure

With Fargate, AWS manages the underlying container infrastructure and OS, reducing the customer's operational responsibilities compared to EC2.

Question 13: Which AWS service enables you to provision a logically isolated section of the AWS Cloud where you can launch resources in a virtual network you define?

AWS PrivateLink
AWS Transit Gateway
AWS Direct Connect
Amazon VPC (Correct answer)

Correct answer: Amazon VPC

Amazon VPC (Virtual Private Cloud) lets you define your own isolated virtual network with custom IP ranges, subnets, route tables, and gateways.

Question 14: What is the MOST important reason for AWS Certified Cloud Practitioner professionals to maintain continuing education?

To increase billing rates
To satisfy employer preferences
To stay current with evolving standards, practices, and regulations (Correct answer)
To accumulate credentials for personal prestige

Correct answer: To stay current with evolving standards, practices, and regulations

Continuing education ensures professionals remain current with evolving industry standards, best practices, and regulatory requirements. This directly impacts the quality of service provided and maintains public trust in the profession.

Question 15: Which AWS feature requires users to provide a second form of authentication in addition to a password?

Amazon GuardDuty
AWS WAF
AWS Shield
Multi-Factor Authentication (MFA) (Correct answer)

Correct answer: Multi-Factor Authentication (MFA)

MFA adds an extra layer of security by requiring a second authentication factor (such as a one-time code) beyond the username and password.

Question 16: What is the purpose of an Auto Scaling group in AWS?

To manage billing
To back up user data
To automatically adjust capacity to maintain performance (Correct answer)
To scale data manually

Correct answer: To automatically adjust capacity to maintain performance

An Auto Scaling group in AWS is designed to automatically adjust the number of EC2 instances in your application to maintain performance and availability. It dynamically adds or removes instances based on predefined policies, ensuring your application has sufficient capacity to handle demand without over-provisioning.

Question 17: An enterprise asks whether AWS is responsible for preventing data breaches caused by a customer's weak IAM password policy. What does the Shared Responsibility Model say?

No, configuring IAM password policies is the customer's responsibility (Correct answer)
Both AWS and the customer share responsibility for password policy enforcement
Yes, AWS should enforce strong password policies for all accounts
AWS automatically enforces strong password policies by default

Correct answer: No, configuring IAM password policies is the customer's responsibility

IAM password policies are configured by the customer, so the responsibility for enforcing strong passwords rests entirely with the customer.

Question 18: Which AWS service is used for managing containerized applications?

Amazon RDS
Amazon EC2
Amazon ECS (Correct answer)
AWS IAM

Correct answer: Amazon ECS

Amazon Elastic Container Service (ECS) is a fully managed container orchestration service that makes it easy to run, stop, and manage Docker containers on a cluster. It integrates with other AWS services, providing a scalable and highly available platform for containerized applications.

Question 19: Why are stateless applications ideal for cloud deployment?

They are harder to deploy.
They use more memory.
They require constant configuration.
They can scale and recover more efficiently (Correct answer)

Correct answer: They can scale and recover more efficiently

Stateless applications are ideal for cloud deployment because they do not store any session-specific data on the server, making each request independent. This characteristic allows them to be easily scaled horizontally by adding more instances without complex data synchronization. Furthermore, they can recover more efficiently from failures, as any instance can serve any request without losing user context, enhancing resilience and elasticity.

Question 20: What does MFA stand for in cloud security?

Multiple File Access
Multi-Factor Authentication (Correct answer)
Managed File Access
Mobile File Authorization

Correct answer: Multi-Factor Authentication

MFA stands for Multi-Factor Authentication, a security best practice that adds an extra layer of protection beyond just a username and password. With MFA, users must provide two or more verification factors to gain access to an account. This significantly enhances security by making it much harder for unauthorized users to access an AWS account, even if they compromise a password.

Question 21: Which personal protective equipment (PPE) principle applies to ALL CLF-C02 certified professionals regardless of their specific role?

PPE must be properly fitted, maintained, and replaced as needed (Correct answer)
PPE is only necessary during formal inspections
PPE is optional if experienced in the field
Any PPE will provide adequate protection

Correct answer: PPE must be properly fitted, maintained, and replaced as needed

Regardless of experience level or specific role, PPE must be properly fitted to the individual, regularly maintained in good condition, and replaced when worn or damaged. Improperly fitted or degraded PPE can provide a false sense of security.

Question 22: In AWS Certified Cloud Practitioner, what is the PRIMARY purpose of conducting regular safety drills and exercises?

To ensure personnel can respond effectively in emergencies (Correct answer)
To satisfy insurance requirements only
To evaluate employee performance reviews
To reduce daily workload

Correct answer: To ensure personnel can respond effectively in emergencies

Regular safety drills ensure that all personnel are prepared to respond effectively during actual emergencies. Practice builds muscle memory, identifies gaps in emergency procedures, and improves overall response times.

Question 23: A developer needs temporary AWS credentials to allow an EC2 instance to access an S3 bucket without storing long-term access keys. What should they use?

AWS Secrets Manager with manual rotation
IAM Role attached to the EC2 instance (Correct answer)
Root account credentials
IAM User access keys stored in environment variables

Correct answer: IAM Role attached to the EC2 instance

An IAM Role attached to an EC2 instance provides temporary, automatically rotated credentials without requiring hardcoded access keys.

Question 24: What does AWS Shield protect against?

DDoS attacks (Correct answer)
Phishing emails
Lost passwords
Internal data leaks

Correct answer: DDoS attacks

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency. AWS Shield offers two tiers: Standard, which is automatically included for all AWS customers, and Advanced, which provides enhanced protection and cost benefits.

Question 25: Which practice improves the security of database services implementations?

Input validation and principle of least privilege (Correct answer)
Disabling all logging
Using default credentials
Granting maximum permissions to all users

Correct answer: Input validation and principle of least privilege

Input validation prevents injection attacks while the principle of least privilege limits the damage potential of any compromised component.

Question 26: What is the benefit of continuous integration in CLF-C02 workflows?

It detects integration issues early through frequent builds and tests (Correct answer)
It removes the need for code review
It eliminates the need for development environments
It automatically fixes all bugs

Correct answer: It detects integration issues early through frequent builds and tests

Continuous integration detects integration issues early by automatically building and testing code whenever changes are committed.

Question 27: A company stores sensitive customer data in Amazon S3. According to the AWS Shared Responsibility Model, who is responsible for encrypting the data at rest?

The customer is responsible for enabling and managing encryption (Correct answer)
AWS and the customer share equal responsibility for encryption
Encryption is handled by the S3 service with no customer action needed
AWS automatically encrypts all S3 data

Correct answer: The customer is responsible for enabling and managing encryption

Customers are responsible for protecting their data in S3, including choosing to enable server-side or client-side encryption.

Question 28: Which pricing model allows you to save money on AWS services based on long-term usage?

Free tier
Spot Instances
Pay-as-you-go
Reserved Instances (Correct answer)

Correct answer: Reserved Instances

Reserved Instances is an AWS pricing model that allows customers to save money on services by committing to a specific usage level for a 1-year or 3-year term. By reserving compute capacity in advance, users receive a significant discount compared to on-demand pricing. This model is ideal for applications with predictable and steady workloads, offering substantial cost optimization for long-term usage.

Question 29: What is the primary consideration when implementing changes to networking?

Speed of implementation
Impact assessment and change management (Correct answer)
Vendor preference
Personal convenience

Correct answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

Question 30: Under the Shared Responsibility Model, who is responsible for ensuring high availability of a web application deployed on AWS?

The customer is responsible for designing the application for high availability using AWS services (Correct answer)
AWS guarantees application-level availability as part of its SLA
High availability is jointly designed by AWS and the customer together
AWS automatically makes all deployed applications highly available

Correct answer: The customer is responsible for designing the application for high availability using AWS services

While AWS provides highly available infrastructure, customers must architect their applications to use multiple AZs and fault-tolerant design patterns.

Question 31: A company is evaluating whether to use AWS for storing health data subject to HIPAA. What does the Shared Responsibility Model imply about HIPAA compliance?

AWS provides HIPAA-eligible services, but customers must configure and use them correctly to achieve compliance (Correct answer)
HIPAA compliance is not possible on public cloud platforms
AWS handles all HIPAA requirements on behalf of the customer
Using AWS automatically makes the application HIPAA-compliant

Correct answer: AWS provides HIPAA-eligible services, but customers must configure and use them correctly to achieve compliance

AWS offers HIPAA-eligible services and signs a BAA, but customers must properly configure those services and implement appropriate safeguards to be compliant.

Question 32: Which AWS service helps you manage access to AWS resources?

AWS CloudWatch
AWS IAM (Correct answer)
Amazon S3
Amazon EC2

Correct answer: AWS IAM

AWS Identity and Access Management (IAM) is the service specifically designed to help you securely manage access to AWS services and resources. It allows you to create and manage AWS users and groups, and use permissions to allow or deny their access to specific AWS resources. This ensures that only authorized individuals and services can interact with your cloud environment.

Question 33: What is Infrastructure as Code (IaC)?

Using code to provision and manage infrastructure (Correct answer)
Manual server management
Physical hardware provisioning
UI-based configuration

Correct answer: Using code to provision and manage infrastructure

Infrastructure as Code (IaC) is the practice of managing and provisioning computing infrastructure through machine-readable definition files, rather than manual hardware configuration or interactive configuration tools. This approach allows infrastructure to be treated like software, enabling version control, automation, and consistent deployments.

Question 34: Under the Shared Responsibility Model, who is responsible for the availability of the AWS global infrastructure?

Third-party providers contracted by AWS
Both share equal responsibility for global availability
AWS, by maintaining its global network and data centers (Correct answer)
The customer, by designing for multi-region redundancy

Correct answer: AWS, by maintaining its global network and data centers

AWS is responsible for the availability and reliability of its global infrastructure, including regions, Availability Zones, and edge locations.

Question 35: Which foundational principle is MOST important for success in the AWS Certified Cloud Practitioner profession?

Specializing in only one narrow area of practice
Maximizing financial returns on every engagement
Maintaining the minimum requirements for certification
Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)

Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes

Success in any professional field requires a commitment to continuous learning to stay current, ethical practice to maintain trust and integrity, and a focus on quality outcomes that serve stakeholders and the public interest.

Question 36: What role does documentation play in CLF-C02 compliance?

It is only needed for audits
It replaces practical competency
It is optional
It provides evidence of adherence to standards (Correct answer)

Correct answer: It provides evidence of adherence to standards

Documentation provides verifiable evidence that standards and regulations are being followed, serving as proof of compliance.

Question 37: What is the primary consideration when implementing changes to aws architecture?

Impact assessment and change management (Correct answer)
Vendor preference
Speed of implementation
Personal convenience

Correct answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

Question 38: Which AWS feature helps enforce security policies?

S3 Replication
SCPs in AWS Organizations (Correct answer)
AWS Elastic Beanstalk
EC2 Auto Scaling

Correct answer: SCPs in AWS Organizations

Service Control Policies (SCPs) in AWS Organizations are a powerful feature that allows you to centrally manage permissions for all accounts in your organization. SCPs define the maximum available permissions for accounts, acting as guardrails to ensure that all member accounts adhere to your organization's security policies. They are crucial for enforcing security best practices across multiple AWS accounts.

Question 39: What is the main benefit of AWS consolidated billing?

Offers centralized billing and volume discounts (Correct answer)
Improves compute performance
Provides security reports
Simplifies user access

Correct answer: Offers centralized billing and volume discounts

AWS consolidated billing, a feature of AWS Organizations, allows you to receive a single bill for all AWS accounts in your organization. This simplifies billing management and provides volume discounts across all accounts, as usage is combined to qualify for lower pricing tiers. It's a powerful way to reduce costs and streamline financial operations for multiple AWS accounts.

Question 40: Which approach best demonstrates mastery of billing and pricing in CLF-C02 practice?

Applying principles to novel situations with sound judgment (Correct answer)
Relying entirely on technology
Following procedures without understanding
Avoiding complex scenarios

Correct answer: Applying principles to novel situations with sound judgment

True mastery involves understanding underlying principles well enough to apply them to new and unfamiliar situations with professional judgment.

Question 41: What is the role of Amazon CloudFront in cloud architecture?

Content delivery with low latency (Correct answer)
Compute orchestration
Data analytics
Database management

Correct answer: Content delivery with low latency

Amazon CloudFront is a Content Delivery Network (CDN) service. Its primary role is to securely deliver data, videos, applications, and APIs to customers globally with low latency. It achieves this by caching content at edge locations closer to users, reducing the distance data needs to travel.

Question 42: A company is evaluating cloud providers and wants to benefit from the massive purchasing power AWS has built through millions of customers. Which cloud advantage does this describe?

Benefit from massive economies of scale (Correct answer)
Global reach
High availability
Increased agility

Correct answer: Benefit from massive economies of scale

AWS aggregates usage from hundreds of thousands of customers, achieving economies of scale that result in lower pay-as-you-go prices.

Question 43: Which AWS support plan is best suited for experimenting and testing?

Developer (Correct answer)
Business
Basic
Enterprise

Correct answer: Developer

The AWS Developer Support plan is best suited for customers who are experimenting with AWS or performing development and testing. It provides technical support during business hours via email, with a response time of 12-24 hours for general guidance. While it doesn't offer the comprehensive features of Business or Enterprise plans, it's a good option for non-production workloads and learning.

Question 44: Which principle is fundamental to good database services practice?

Writing as much code as possible
Separation of concerns and modularity (Correct answer)
Never refactoring code
Avoiding all abstraction

Correct answer: Separation of concerns and modularity

Separation of concerns and modularity make code easier to understand, test, maintain, and extend over time.

Question 45: Which AWS service is used to store and retrieve any amount of data at any time?

Amazon RDS
AWS Lambda
Amazon EC2
Amazon S3 (Correct answer)

Correct answer: Amazon S3

Amazon S3 (Simple Storage Service) is the AWS service specifically designed for storing and retrieving any amount of data from anywhere on the web. It is an object storage service known for its scalability, data availability, security, and performance. S3 is commonly used for backups, data archiving, content distribution, and hosting static websites, making it a versatile solution for various data storage needs.

Question 46: Which deployment model describes running workloads on infrastructure you own and operate in your own facilities, without using cloud services?

Private cloud (on-premises) (Correct answer)
Public cloud
Hybrid cloud
Community cloud

Correct answer: Private cloud (on-premises)

A private/on-premises deployment means infrastructure is owned and managed internally, not hosted by a cloud provider like AWS.

Question 47: Which AWS service provides virtual servers?

Amazon EC2 (Correct answer)
Amazon Redshift
Amazon CloudFront
Amazon S3

Correct answer: Amazon EC2

Amazon EC2 (Elastic Compute Cloud) is the AWS service that provides resizable compute capacity in the cloud, essentially offering virtual servers. Users can launch and configure virtual machines (instances) with various operating systems and software, scaling them up or down as needed. EC2 is fundamental for running applications, websites, and performing computational tasks without the need for physical hardware.

Question 48: Which risk management approach is MOST effective for CLF-C02 professionals when evaluating potential workplace hazards?

Proactive hazard identification and assessment (Correct answer)
Reactive analysis after incidents occur
Delegating all safety decisions to management
Relying solely on historical accident data

Correct answer: Proactive hazard identification and assessment

Proactive hazard identification and assessment allows professionals to identify and mitigate risks before incidents occur, which is far more effective than reactive approaches that only address problems after they happen.

Question 49: Which AWS service allows centralized management of security policies?

AWS Organizations (Correct answer)
Amazon CloudFront
AWS WAF
Amazon Aurora

Correct answer: AWS Organizations

AWS Organizations is the service that allows you to centrally manage and govern your environment as you grow and scale your AWS resources. It enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. This includes applying security policies, such as Service Control Policies (SCPs), across all accounts from a single master account.

Question 50: A company wants to avoid upfront capital expenses for IT infrastructure and instead pay only for what they use. Which cloud benefit does this represent?

Economies of scale
Increased speed and agility
Trade capital expense for variable expense (Correct answer)
Stop guessing capacity

Correct answer: Trade capital expense for variable expense

Trading capital expense (CapEx) for variable expense (OpEx) is a key cloud benefit that lets companies pay only for what they consume.

Question 51: Which AWS tool can help visualize and manage your AWS spending and usage over time?

AWS Shield
Amazon CloudWatch
AWS Cost Explorer (Correct answer)
AWS Config

Correct answer: AWS Cost Explorer

AWS Cost Explorer is a tool that allows you to visualize, understand, and manage your AWS spending and usage over time. You can view your costs and usage data in various charts and graphs, analyze trends, and identify areas for optimization. It helps you gain insights into your spending patterns and make informed decisions to control costs.

Question 52: Which AWS service allows you to run code without provisioning or managing servers?

Amazon EC2
Amazon ECS
AWS Elastic Beanstalk
AWS Lambda (Correct answer)

Correct answer: AWS Lambda

AWS Lambda is a serverless compute service that runs your code in response to events without requiring server management.

Question 53: What is the shared responsibility model in AWS?

Security is managed by third-party services only.
AWS and the customer share different responsibilities based on services used (Correct answer)
The customer is responsible for everything in the cloud.
AWS is responsible for securing all customer data.

Correct answer: AWS and the customer share different responsibilities based on services used

The AWS Shared Responsibility Model defines security responsibilities between AWS and the customer. AWS is responsible for the security *of* the cloud, meaning the underlying infrastructure, while the customer is responsible for security *in* the cloud, which includes their data, applications, operating systems, and network configurations. This division ensures clarity and accountability for different aspects of cloud security.

Question 54: Which AWS networking component acts as a virtual firewall controlling inbound and outbound traffic at the instance level?

Network ACL
Security Group (Correct answer)
Internet Gateway
Route Table

Correct answer: Security Group

Security Groups are stateful virtual firewalls applied to EC2 instances that control inbound and outbound traffic at the instance level.

Question 55: Which approach best demonstrates mastery of shared responsibility in CLF-C02 practice?

Relying entirely on technology
Following procedures without understanding
Avoiding complex scenarios
Applying principles to novel situations with sound judgment (Correct answer)

Correct answer: Applying principles to novel situations with sound judgment

True mastery involves understanding underlying principles well enough to apply them to new and unfamiliar situations with professional judgment.

Question 56: What does the AWS concept of 'elasticity' primarily refer to?

Encrypting data at rest and in transit
Distributing traffic across multiple servers
Automatically scaling resources up or down to match demand (Correct answer)
The ability to recover from failures automatically

Correct answer: Automatically scaling resources up or down to match demand

Elasticity means automatically acquiring or releasing resources to match current demand, avoiding over- or under-provisioning.

Question 57: Which AWS support plan includes access to a Technical Account Manager (TAM)?

Business
Developer
Basic
Enterprise (Correct answer)

Correct answer: Enterprise

The AWS Enterprise Support plan is designed for large-scale, mission-critical workloads and includes access to a dedicated Technical Account Manager (TAM). A TAM provides proactive guidance, best practices, and helps you plan and review your AWS architecture. This personalized support is crucial for complex deployments and ensuring operational excellence.

Question 58: In CLF-C02 practice, what is the best approach to quality improvement in shared responsibility?

Wait for problems to occur before acting
Copy what other organizations do without analysis
Use data-driven methods with measurable outcomes (Correct answer)
Make changes without measuring results

Correct answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Question 59: In CLF-C02 practice, what is the best approach to quality improvement in compute services?

Make changes without measuring results
Wait for problems to occur before acting
Use data-driven methods with measurable outcomes (Correct answer)
Copy what other organizations do without analysis

Correct answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Question 60: Which AWS service helps you create budgets and sends alerts when you exceed them?

AWS Billing Dashboard
AWS Budgets (Correct answer)
AWS Pricing Calculator
AWS Cost Explorer

Correct answer: AWS Budgets

AWS Budgets is a service that allows you to set custom budgets to track your costs and usage. You can create budgets for specific services, tags, or even for your entire account. When your actual or forecasted costs exceed your defined budget thresholds, AWS Budgets sends alerts via email or SNS, helping you stay within your spending limits.

Question 61: In CLF-C02 practice, what is the best approach to quality improvement in billing and pricing?

Wait for problems to occur before acting
Use data-driven methods with measurable outcomes (Correct answer)
Make changes without measuring results
Copy what other organizations do without analysis

Correct answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Question 62: Which scenario represents a violation of the AWS Certified Cloud Practitioner code of professional conduct?

Reporting safety concerns to regulatory authorities
Misrepresenting qualifications or certification status (Correct answer)
Seeking continuing education beyond minimum requirements
Declining work outside one's area of competence

Correct answer: Misrepresenting qualifications or certification status

Misrepresenting qualifications or certification status is a serious violation of professional conduct. It undermines public trust and can lead to harm when unqualified individuals perform specialized work.

Question 63: What is the value of continuing education in billing and pricing for CLF-C02 professionals?

It replaces workplace experience
It keeps professionals current with evolving standards and practices (Correct answer)
It is primarily a social activity
It is only needed for recertification

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 64: Which service provides a fully managed NoSQL key-value and document database with single-digit millisecond performance at any scale?

Amazon ElastiCache
Amazon Aurora
Amazon DynamoDB (Correct answer)
Amazon RDS

Correct answer: Amazon DynamoDB

Amazon DynamoDB is a fully managed NoSQL database that delivers consistent single-digit millisecond performance regardless of scale.

Question 65: In CLF-C02 practice, what is the best approach to quality improvement in storage services?

Copy what other organizations do without analysis
Use data-driven methods with measurable outcomes (Correct answer)
Make changes without measuring results
Wait for problems to occur before acting

Correct answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Question 66: What is the primary benefit of cloud computing?

Unlimited internet access
On-demand resource availability and cost savings (Correct answer)
Permanent software ownership
Manual hardware scaling

Correct answer: On-demand resource availability and cost savings

The primary benefit of cloud computing is its ability to provide on-demand access to computing resources, such as servers, storage, and databases, over the internet. This eliminates the need for organizations to purchase and maintain their own physical infrastructure, leading to significant cost savings. Users only pay for the resources they consume, allowing for greater flexibility, scalability, and efficiency compared to traditional IT setups.

AWS Certified Cloud Practitioner (CLF-C02)

The AWS Certified Cloud Practitioner exam validates a candidate's overall understanding of the AWS Cloud, including its core services, security, architecture, pricing, and support.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

aws.amazon.com — Test delivery, fees, time limit, score validity, eligibility, retake policy, score release, renewal, exam information · verified Nov 2026
docs.aws.amazon.com — Passing score · verified Nov 2026