© Cloud Certification Store Page 1

AWS Certified Cloud Practitioner

Practice Exam Questions
(AWS-CLF-002-0010) - PREVIEW 20
out of over 300 questions

The AWS Certified Cloud Practitioner validates

foundational, high-level understanding of AWS Cloud,
services, and terminology. This is a good starting point
on the AWS Certification journey for individuals with no
prior IT or cloud experience switching to a cloud career
or for line-of-business employees looking for
foundational cloud literacy.

Category

Foundational

Exam duration

90 minutes

Exam format

65 questions; either multiple choice or multiple response

Cost

100 USD. Visit Exam pricing for additional cost information, including foreign exchange rates
 © Cloud Certification Store Page 2

1. Get to know the exam

Follow the 4-step plan.

Review the exam guide.

Take the AWS Certification Official Practice Question Set to understand exam-style questions.

Take the AWS Certification Official Pretest to identify any areas where you need to refresh your AWS
knowledge and skills.​

2. Refresh your AWS Knowledge and skills

Enroll in digital courses where you need to fill gaps in knowledge and skills, practice with AWS
Builder Labs, AWS Cloud Quest, and AWS Jam.

3. Review and practice for your exam

Review the scope of the exam. Explore each exam domain’s topics and how they align to AWS
services. Reinforce your knowledge and identify learning gaps with exam-style questions and
flashcards. Follow instructors as they walk through exam-style questions and provide test-taking
strategies. Continue practicing with AWS Builder Labs, AWS SimuLearn, and/or AWS Escape Room.

4. Assess your exam readiness

Take the AWS Certification Official Practice Exam: https://explore.skillbuilder.aws/

https://wmx-api-production.s3.amazonaws.com/courses/56802/supplementary/AWS%20Exam%
20Preparation%20Official%20Practice%20Question%20Sets%20Overview%20and%20Instructi
ons.pdf
 © Cloud Certification Store Page 3

⚠️ DISCLAIMER ⚠️
📝 This practice test includes questions compiled from various exam preparation platforms.
🤖 Important Note: Most answers and explanations were generated and “curated” by our team,
with assisted AI. While AI can provide helpful insights, it may also introduce inaccuracies,

misinterpretations, or incorrect information, even when sounding confident or authoritative.

✅ Users are strongly encouraged to double-check all content against official

documentation and trusted sources before using it for exam preparation or making important

decisions.

📌 The creators of this material assume no responsibility for any errors, inaccuracies, or
outcomes, including exam results, based on the use of this content.

PLEASE SHARE THIS PREVIEW DOCUMENT. IF YOU PURCHASE THE FULL DOCUMENT

THEN IT WILL NOT BE SHAREABLE.

 © Cloud Certification Store Page 4

Practice Questions

Question 1​
A company needs to continuously run an experimental workload on an Amazon EC2 instance
and stop the instance after 12 hours. Which instance purchasing option will meet this
requirement MOST cost-effectively?​
A. On-Demand Instances​
B. Reserved Instances​
C. Spot Instances​
D. Dedicated Instances Amazon

✅ Correct answer: C. Spot Instances​

📌 Spot Instances provide significant discounts and can be configured to terminate
automatically when capacity is interrupted, making them ideal for short, experimental runs.

❌
Incorrect answers:​
A. On-Demand Instances – Billed at full price with no built-in stop/terminate automation, so

❌
not cost-optimized.​
B. Reserved Instances – Require 1- or 3-year commitments, unsuitable for a one-time

❌
12-hour workload.​
D. Dedicated Instances – Offer isolated tenancy at higher cost, unnecessary for an
experimental workload.

Question 2​
A company wants to automate infrastructure deployment by using infrastructure as code (IaC).
The company wants to scale production stacks so the stacks can be deployed in multiple AWS
Regions. Which AWS service will meet these requirements?​
A. Amazon CloudWatch​
B. AWS Config​
C. AWS Trusted Advisor​
D. AWS CloudFormation Amazon

✅ Correct answer: D. AWS CloudFormation​

📌 CloudFormation lets you define and deploy stacks as code and supports multi-region
deployments consistently.

❌
Incorrect answers:​
A. Amazon CloudWatch – Provides monitoring and observability, not IaC.​
 © Cloud Certification Store Page 5

❌ B. AWS Config – Tracks resource configuration, not for deployment orchestration.​

❌ C. AWS Trusted Advisor – Offers recommendations, not deployment automation.
Question 3​
Which AWS service or feature provides log information of the inbound and outbound traffic on
network interfaces in a VPC?​
A. Amazon CloudWatch Logs​
B. AWS CloudTrail​
C. VPC Flow Logs​
D. AWS Identity and Access Management (IAM) Amazon

✅ Correct answer: C. VPC Flow Logs​

📌 VPC Flow Logs capture IP traffic flow information to and from network interfaces.
❌
Incorrect answers:​

❌
A. CloudWatch Logs – Stores log data but does not capture VPC network flows.​

❌
B. CloudTrail – Logs API calls, not network packet data.​
D. IAM – Manages identities and permissions, not network traffic logging.

Question 4​
A company plans to migrate to the AWS Cloud. The company is gathering information about its
on-premises infrastructure and requires information such as the hostname, IP address, and
MAC address. Which AWS service will meet these requirements?​
A. AWS DataSync​
B. AWS Application Migration Service​
C. AWS Application Discovery Service​
D. AWS Database Migration Service (AWS DMS) Amazon

✅ Correct answer: C. AWS Application Discovery Service​

📌 Application Discovery Service collects on-prem metadata—including hostnames, IPs,
MACs—to plan migrations.

❌
Incorrect answers:​

❌
A. DataSync – Automates data transfer, not environment discovery.​
B. Application Migration Service – Automates server migration but relies on discovery

❌
data.​
D. DMS – Migrates databases, not infrastructure inventory.
 © Cloud Certification Store Page 6

Question 5​
A company wants an AWS service to provide product recommendations based on its customer
data. Which AWS service will meet this requirement?​
A. Amazon Polly​
B. Amazon Personalize​
C. Amazon Comprehend​
D. Amazon Rekognition Amazon

✅ Correct answer: B. Amazon Personalize​

📌 Personalize offers ML-based recommendation APIs tailored to user data.
❌
Incorrect answers:​

❌
A. Polly – Converts text to speech.​

❌
C. Comprehend – Performs NLP tasks, not recommender systems.​
D. Rekognition – Analyzes images and video, not recommendations.

Question 6​
A company wants a unified tool to provide a consistent method to interact with AWS services.
Which AWS service or tool will meet this requirement?​
A. AWS CLI​
B. Amazon Elastic Container Service (Amazon ECS)​
C. AWS Cloud9​
D. AWS VPN Amazon

✅ Correct answer: A. AWS CLI​

📌 The AWS CLI enables scriptable, consistent interaction with all AWS APIs and services.
❌
Incorrect answers:​

❌
B. ECS – Orchestrates containers, not a generic access tool.​

❌
C. Cloud9 – Cloud-based IDE, not a universal service interface.​
D. VPN – Provides network connectivity, not service interactions.

Question 7​
Which pricing model will interrupt a running Amazon EC2 instance if capacity becomes
temporarily unavailable?​
A. On-Demand Instances​
B. Standard Reserved Instances​
C. Spot Instances​
D. Convertible Reserved Instances Amazon
 © Cloud Certification Store Page 7

✅ Correct answer: C. Spot Instances​

📌 Spot Instances can be reclaimed with two-minute interruption notices when capacity is
needed.

❌
Incorrect answers:​

❌
A. On-Demand – Runs continuously until you stop it.​

❌
B. Standard Reserved – Guaranteed capacity at discounted rate, no interruptions.​
D. Convertible Reserved – Similar to Standard Reserved with flexibility, not interruptible.

Question 8​
Which EC2 instance purchasing option offers a discounted hourly rate compared to
On-Demand Instances for a continuous workload running more than one year?​
A. AWS Graviton processor​
B. Dedicated Hosts​
C. EC2 Instance Savings Plans​
D. Amazon EC2 Auto Scaling instances Amazon

✅ Correct answer: C. EC2 Instance Savings Plans​

📌 Savings Plans provide up to 72% off On-Demand rates in exchange for a usage
commitment.

❌
Incorrect answers:​

❌
A. Graviton – A CPU architecture, not a purchasing model.​

❌
B. Dedicated Hosts – Higher cost for isolated tenancy.​
D. Auto Scaling – Adjusts capacity, not a pricing discount.

Question 9​
Which AWS service or feature is a fully managed Windows file server for Windows-based
applications?​
A. Amazon FSx​
B. Amazon EKS​
C. Amazon ECS​
D. Amazon EMR Amazon

✅ Correct answer: A. Amazon FSx​

📌 FSx for Windows File Server is a fully managed, native-Windows file system.
❌
Incorrect answers:​

❌
B. EKS – Kubernetes service, not file storage.​

❌
C. ECS – Container orchestration, not file storage.​
D. EMR – Big data processing platform, not file server.
 © Cloud Certification Store Page 8

Question 10​
Which option is an AWS value proposition that describes a user’s ability to scale infrastructure
based on demand?​
A. Speed of innovation​
B. Resource elasticity​
C. Decoupled architecture​
D. Global deployment Amazon

✅ Correct answer: B. Resource elasticity​

📌 Elasticity lets you automatically provision and deprovision resources in response to
demand.

❌
Incorrect answers:​

❌
A. Speed of innovation – Refers to faster development cycles, not auto-scaling.​

❌
C. Decoupled architecture – Design pattern, not direct scaling feature.​
D. Global deployment – Deploy worldwide, not specific to scaling.

Question 11​
Which fully managed AWS service assists with the creation, testing, and management of
custom Amazon EC2 images?​
A. EC2 Image Builder​
B. Amazon Machine Image (AMI)​
C. AWS Launch Wizard​
D. AWS Elastic Beanstalk Amazon

✅ Correct answer: A. EC2 Image Builder​

📌 EC2 Image Builder automates building, testing, and distributing AMIs.
❌
Incorrect answers:​

❌
B. AMI – A VM image format, not a service.​

❌
C. Launch Wizard – Simplifies deployments of specific applications.​
D. Elastic Beanstalk – PaaS for app deployment, not image creation.

Question 12​
Which design principle is a recommended AWS Cloud architecture best practice?​
A. Design tightly coupled components​
B. Build a single application component that can handle all functionality​
C. Make large changes on fewer iterations to reduce failure chances​
D. Avoid monolithic architecture by segmenting workloads Amazon
 © Cloud Certification Store Page 9

✅ Correct answer: D. Avoid monolithic architecture by segmenting workloads​

📌 Decomposing workloads improves agility, scalability, and fault isolation.
❌
Incorrect answers:​

❌
A. Tightly coupled components – Reduces resilience and scalability.​

❌
B. Single “all-in-one” component – Creates monolith, harder to change.​
C. Large changes infrequently – Increases blast radius and risk.

Question 13​
Which AWS service provides interactive business intelligence dashboards that include machine
learning insights?​
A. Amazon Athena​
B. Amazon Kendra​
C. Amazon QuickSight​
D. Amazon Redshift Amazon

✅ Correct answer: C. Amazon QuickSight​

📌 QuickSight is a fully managed BI service with ML-powered insights.
❌
Incorrect answers:​

❌
A. Athena – Serverless query service for S3, not BI dashboards.​

❌
B. Kendra – Enterprise search, not BI visualization.​
D. Redshift – Data warehouse, not front-end BI service.

Question 14​
Which AWS service will meet a company’s need to perform data processing once a week that
typically takes about 5 hours to complete?​
A. AWS Lambda​
B. Amazon EC2​
C. AWS CodeDeploy​
D. AWS Wavelength Amazon

✅ Correct answer: B. Amazon EC2​

📌 EC2 can run long-running workloads on a schedule; Lambda’s max runtime is 15 minutes.
❌
Incorrect answers:​

❌
A. Lambda – Limited to 15-minute execution per invocation.​

❌
C. CodeDeploy – Manages application deployments, not data processing.​
D. Wavelength – Brings services to edge, not relevant to batch jobs.
 © Cloud Certification Store Page 10

Question 15​
Which AWS service helps users visualize, understand, and manage spending and usage over
time?​
A. AWS Organizations​
B. AWS Pricing Calculator​
C. AWS Cost Explorer​
D. AWS Service Catalog Amazon

✅ Correct answer: C. AWS Cost Explorer​

📌 Cost Explorer provides interactive charts and insights into historical spend.
❌
Incorrect answers:​

❌
A. Organizations – Manages accounts and policies, not cost visualization.​

❌
B. Pricing Calculator – Estimates future costs, not analyze past usage.​
D. Service Catalog – Manages approved products for deployment.

Question 16​
Which AWS service or feature can a company use to create templates that can be reused to
deploy multiple AWS resources?​
A. AWS Marketplace​
B. Amazon Machine Image (AMI)​
C. AWS CloudFormation​
D. AWS OpsWorks Amazon

✅ Correct answer: C. AWS CloudFormation​

📌 CloudFormation templates define and provision stacks of AWS resources as code.
❌
Incorrect answers:​

❌
A. Marketplace – A catalog of third-party products, not infrastructure templates.​

❌
B. AMI – A server image format, not a provisioning template.​
D. OpsWorks – Configuration management service, not broad IaC templating.

Question 17​
A company wants to design a centralized storage system to manage configuration data and
passwords for its critical business applications. Which AWS service or capability will meet these
requirements MOST cost-effectively?​
A. AWS Systems Manager Parameter Store​
B. AWS Secrets Manager​
C. AWS Config​
D. Amazon S3 Amazon
 © Cloud Certification Store Page 11

✅ Correct answer: A. AWS Systems Manager Parameter Store​

📌 Parameter Store offers secure storage of configuration and secrets at no additional cost.
❌
Incorrect answers:​

❌
B. Secrets Manager – Provides more features but incurs per-secret charges.​

❌
C. AWS Config – Tracks resource configuration history, not secret storage.​
D. Amazon S3 – Object storage but lacks secrets-management features.

Question 18​
A company needs to block SQL injection attacks. Which AWS service or feature should the
company use to meet this requirement?​
A. AWS WAF​
B. Network ACLs​
C. Security groups​
D. AWS Certificate Manager (ACM) Amazon

✅ Correct answer: A. AWS WAF​

📌 WAF lets you define rules that block common web exploits such as SQL injection.
❌
Incorrect answers:​

❌
B. Network ACLs – Operate at subnet level; cannot inspect HTTP payloads.​

❌
C. Security groups – Stateful firewalls at instance level, not application-layer rules.​
D. ACM – Manages SSL/TLS certificates, not web application filtering.

Question 19​
Which EC2 instance purchasing option will meet the requirements for an application that runs
for two months each year with zero allowable downtime?​
A. Reserved Instances​
B. Dedicated Hosts​
C. Spot Instances​
D. On-Demand Instances Amazon

✅ Correct answer: A. Reserved Instances​

📌 Reserved Instances guarantee capacity and offer lower rates for predictable, continuous
use.

❌
Incorrect answers:​

❌
B. Dedicated Hosts – More expensive and unnecessary tenancy isolation.​

❌
C. Spot Instances – Can be interrupted, unacceptable for zero downtime.​
D. On-Demand Instances – No capacity guarantee and higher hourly cost.
 © Cloud Certification Store Page 12

Question 20​
A company wants to migrate its NFS on-premises workload to AWS. Which AWS Storage
Gateway type should the company use to meet this requirement?​
A. Tape Gateway​
B. Volume Gateway​
C. Amazon FSx File Gateway​
D. Amazon S3 File Gateway Amazon

✅ Correct answer: C. Amazon FSx File Gateway​

📌 FSx File Gateway provides an on-prem NFS interface backed by FSx’s file system in AWS.
❌
Incorrect answers:​

❌
A. Tape Gateway – For virtual tape libraries, not NFS file access.​

❌
B. Volume Gateway – Presents block volumes (iSCSI) not file protocols.​
D. S3 File Gateway – Exposes S3 over NFS/SMB but not full FSx features.
 © Cloud Certification Store Page 13

🧾 𝐅𝐢𝐧𝐚𝐥 𝐑𝐞𝐯𝐢𝐞𝐰 𝐂𝐡𝐞𝐜𝐤𝐥𝐢𝐬𝐭 & 𝐄𝐱𝐚𝐦 𝐑𝐞𝐚𝐝𝐢𝐧𝐞𝐬𝐬 𝐒𝐜𝐨𝐫𝐞𝐜𝐚𝐫𝐝

Before you schedule your exam, use these tools to ensure you’re truly ready.

✅ Final Review Checklist

This quick-hit checklist helps you confirm that you’ve mastered the key domains covered in the
CLF-C02 exam:

Here’s the updated checklist with larger, copy-paste friendly checkbox squares that will
retain formatting across most platforms (including PDFs, Word, Notion, and plain text editors):

🔐 Cloud Security & Compliance

☐ Can explain the AWS Shared Responsibility Model​
☐ Understand how IAM roles, policies, MFA, and least privilege work​
☐ Familiar with compliance programs (e.g., HIPAA, SOC, ISO)

💸 Billing & Pricing

☐ Can calculate basic costs using AWS Pricing Calculator​
☐ Know the difference between On-Demand, Savings Plans, and Reserved Instances​
☐ Understand consolidated billing, billing alerts, and support tiers

🧠 Cloud Concepts
☐ Can define elasticity, high availability, scalability, and fault tolerance​
☐ Know the benefits of cloud computing (agility, pay-as-you-go, etc.)​
☐ Understand the Well-Architected Framework pillars at a high level

☁️ Core AWS Services

☐ Know the purpose of EC2, S3, Lambda, RDS, CloudFront, etc.​
☐ Can identify which service is best for common use cases​
☐ Understand regions, availability zones, edge locations

🧭 Deployment & Support

☐ Familiar with the AWS global infrastructure​
☐ Know what AWS Trusted Advisor and AWS Support Plans offer​
☐ Understand the basics of CloudFormation and auto-scaling
 © Cloud Certification Store Page 14

📊 Exam Readiness Scorecard

Use this self-assessment to rate your confidence per domain:

Domain Confidence Level Notes / Gaps to Review

(1-5)

Cloud Concepts ⭐⭐⭐⭐☆ Confident, but review scalability

Security & Compliance ⭐⭐⭐⭐☆ IAM policies need final review

Technology (Core AWS ⭐⭐⭐⭐⭐ Solid on EC2, Lambda, S3

Services)

Billing & Pricing ⭐⭐⭐☆☆ Review Pricing Calculator

scenarios

AWS Support & Documentation ⭐⭐⭐⭐☆ Review Trusted Advisor benefits

Once you’re consistently scoring 4 or 5 stars across all domains—and you’re scoring above
80% on practice tests—you’re exam ready.
 © Cloud Certification Store Page 15

💫 Congratulations!! You are on the right path to certification.

All our practice exams contain more than 300 questions. We personally took this exam
recently, and quite a few of us, plus many of our buyers that leave a review, assure you,
we had more than 90% of the same questions in the recent exam.

So go ahead, invest in your future, and find more practice exams at our Payhip Google
Certification Store at https://payhip.com/CloudCertificationStore.