العربية

AWS Certified Cloud Practitioner (CLF-C02): free practice test

Start with 10 free questions to see what needs more practice. Finish to see your score, weakest units and every option explained.

700 on the 100–1,000 scale This is your practice accuracy. It cannot be converted to the exam’s scaled score or used to determine whether you pass.

Back to AWS Certified Cloud Practitioner (CLF-C02)

Practice test questions with answers and explanations

Try the questions in the test above first, then open each one here to see the correct answer and why every other option is wrong.

01A retailer's traffic triples during a seasonal sale and returns to normal a week later. Which cloud characteristic lets it match capacity to this pattern?

Practice question Unit: Cloud Concepts

  1. AElasticity ✓ Correct answer

    Elasticity adds and removes capacity as demand rises and falls.

  2. BScalability

    Scalability describes handling growth; the question specifically includes contraction as well as expansion.

  3. CHigh availability

    High availability concerns keeping the service operational through faults, rather than matching capacity to load.

  4. DData residency

    Data residency concerns where data is stored, not how capacity changes.

Reference: AWS Certified Cloud Practitioner (CLF-C02), Cloud Concepts – 1.1 Benefits of the AWS Cloud

02Which Well-Architected pillar focuses on using computing resources efficiently as demand and technology change?

Practice question Unit: Cloud Concepts

  1. ASustainability

    Sustainability focuses on reducing environmental impact, not the primary resource-performance question stated.

  2. BReliability

    Reliability concerns correct operation and recovery from failures.

  3. COperational excellence

    Operational excellence concerns running, observing and improving operations and procedures.

  4. DPerformance efficiency ✓ Correct answer

    Performance efficiency concerns selecting and adapting resources to meet workload requirements efficiently.

Reference: AWS Certified Cloud Practitioner (CLF-C02), Cloud Concepts – 1.2 Design principles (Well-Architected)

03A customer runs Amazon EC2. Who must patch the guest operating system?

Practice question Unit: Security and Compliance

  1. AThe hypervisor vendor

    The hypervisor vendor does not administer the customer’s guest operating system.

  2. BAWS, automatically on every instance

    AWS maintains underlying infrastructure, but does not automatically patch every EC2 guest OS.

  3. CThe customer ✓ Correct answer

    For EC2, the customer remains responsible for guest-OS updates, even when using automation to apply them.

  4. DAWS Support under any plan

    A support plan provides assistance; it does not transfer guest-OS management responsibility by default.

Reference: AWS Shared Responsibility Model, Customer responsibility; https://aws.amazon.com/compliance/shared-responsibility-model/

04An auditor asks for evidence of who deleted an S3 bucket last week. Where should the team look first?

Practice question Unit: Security and Compliance

  1. AAmazon CloudWatch CPU metrics

    CPU metrics describe processor utilisation and do not identify who deleted an S3 bucket.

  2. BAWS Artifact agreements

    Artifact provides compliance reports and agreements, not the account’s deletion activity history.

  3. CAWS Cost Explorer

    Cost Explorer analyses spending, not the identity behind an API deletion.

  4. DAWS CloudTrail event history ✓ Correct answer

    CloudTrail management-event history can identify the principal and details of the bucket deletion.

Reference: AWS CloudTrail User Guide, Working with event history; https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html

05An application on EC2 needs to read from an S3 bucket. What is the most secure way to grant access?

Practice question Unit: Security and Compliance

  1. AUse the root user's credentials stored in an encrypted file on the instance

    Root credentials are overprivileged and should not be distributed to an application.

  2. BAttach an IAM role to the instance ✓ Correct answer

    An instance role provides temporary credentials to the application; grant it only the required S3 permissions.

  3. CMake the bucket public

    Public access exposes data beyond the application and is not a secure credential-management method.

  4. DStore an IAM user's access keys in the code

    Hard-coded long-term keys are difficult to rotate and risk exposure in code and deployments.

Reference: AWS IAM User Guide, Use a role for applications running on EC2; https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html

06Which AWS service provisions infrastructure from declarative templates (infrastructure as code)?

Practice question Unit: Cloud Technology and Services

  1. AAWS CloudFormation ✓ Correct answer

    CloudFormation provisions and manages resource stacks from declarative templates.

  2. BAWS Elastic Beanstalk

    Elastic Beanstalk is an application deployment platform, not the general template-based infrastructure service asked for.

  3. CAWS Config

    Config records and evaluates resource configurations; it is not the stack-provisioning service.

  4. DAWS Systems Manager

    Systems Manager supports operational management and automation, rather than serving as the named template-stack service.

Reference: AWS CloudFormation User Guide, What is CloudFormation?; https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html

07What is the main resilience benefit of designing a production application to run redundantly across at least two Availability Zones?

Practice question Unit: Cloud Technology and Services

  1. AConsolidating all components into a single failure domain

    Consolidating into one zone is not a resilience benefit of multi-AZ deployment.

  2. BReducing the impact of the failure of one Availability Zone ✓ Correct answer

    Properly designed redundant components across zones reduce dependence on a single zone.

  3. CPlacing the workload close to users on every continent

    Zones are within a Region; serving distant continents may require other regional or edge design choices.

  4. DEliminating all data-transfer charges

    Multi-AZ deployment does not eliminate data-transfer charges and may introduce cross-zone costs.

Reference: AWS Certified Cloud Practitioner (CLF-C02), Cloud Technology and Services – 3.1–3.2 Deployment methods and global infrastructure

08Which service is a managed relational database supporting MySQL, PostgreSQL, Oracle and SQL Server?

Practice question Unit: Cloud Technology and Services

  1. AAmazon Redshift

    Redshift is a data-warehouse service for analytics rather than the multi-engine RDS service described.

  2. BAmazon Neptune

    Neptune is designed for graph data and relationships, not this family of relational engines.

  3. CAmazon DynamoDB

    DynamoDB is a managed NoSQL key-value and document database.

  4. DAmazon RDS ✓ Correct answer

    RDS manages common relational engines, including the engines named in the question.

Reference: Amazon RDS User Guide, What is Amazon RDS?; https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

09Which AWS service stores files such as images and backups as objects in buckets?

Practice question Unit: Cloud Technology and Services

  1. AAmazon EBS

    EBS provides block volumes for workloads such as EC2 operating systems and databases.

  2. BAmazon S3 ✓ Correct answer

    S3 stores data as objects in buckets; this is the object-storage service requested.

  3. CAmazon EFS

    EFS is a managed shared file system, rather than an object store.

  4. DEC2 instance store

    Instance store is local storage tied to the underlying instance host, not durable object storage.

Reference: Amazon S3 User Guide, What is Amazon S3?; https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html

10Which workload is best suited to Spot Instances?

Practice question Unit: Billing, Pricing, and Support

  1. AA licensed application bound to a host

    Host-bound licensing requirements do not by themselves make a workload tolerant of Spot interruption.

  2. BA single critical web server

    A single critical web server without a failover design cannot safely depend on interruptible capacity.

  3. CFlexible, fault-tolerant batch processing ✓ Correct answer

    Flexible batch jobs can checkpoint or retry when spare capacity is reclaimed.

  4. DA production database that must not stop

    A database that must not stop does not meet the stated interruption-tolerance requirement.

Reference: Amazon EC2 User Guide, Spot Instances; https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html

Keep preparing for AWS Certified Cloud Practitioner (CLF-C02)

See also: Engineering Exams

All Engineering Exams (15)