Certbie
← Choose a practice path

30 original questions · Free

AWS Cloud Practitioner CLF-C02 practice

Practice 30 original CLF-C02 questions mapped to official AWS domains, with multiple-response items, worked explanations and eight optional cloud-learning emails.

How this free test works: Questions 1–10 show feedback immediately. Complete questions 11–30, then enter your email to reveal your score and every explanation. The eight-lesson email course is optional.
Question 1 of 30Learn with immediate feedback
A company currently buys servers years in advance because it cannot predict demand. Which benefit of the AWS Cloud directly addresses this problem?

Cloud Concepts · Select one answer.

What this set prepares you for

This introductory diagnostic samples all four CLF-C02 domains using 7 cloud concepts, 9 security, 10 technology and 4 billing questions. Items map to official task statements; a short set cannot cover every subtopic or reproduce the real exam’s difficulty. The eight emails teach selected foundations, not a complete syllabus. Use the current official guide for full coverage. These are original AI-assisted questions, not AWS exam items or an official score predictor.

The official CLF-C02 domains are Cloud Concepts (24%), Security and Compliance (30%), Cloud Technology and Services (34%), and Billing, Pricing and Support (12%). This short set contains 7, 9, 10, and 4 questions respectively: an approximate distribution, not a full mock exam.

Each explanation maps to a task statement in the official CLF-C02 guide. The real exam uses scaled scoring; a percentage on this short practice set cannot be converted into an AWS exam score. Review every official task statement and use additional unseen practice.

Source check: 2026-09-20. Original AI-assisted questions with automated and editorial checks. Not endorsed by Amazon or AWS.

Your optional eight-lesson course

Each lesson teaches a specific skill, gives you a short exercise, and explains the worked answer. Choose the course after completing the test, then confirm your email.

  1. Lesson 1 · Day 0

    Welcome: The value proposition of the AWS Cloud

  2. Lesson 2 · Day 1

    Well-Architected Framework: match the practice to the pillar

  3. Lesson 3 · Day 3

    Security and compliance begins with the shared responsibility model

  4. Lesson 4 · Day 5

    Access management: grant the permissions a task needs

  5. Lesson 5 · Day 7

    The global infrastructure: three building blocks, three purposes

  6. Lesson 6 · Day 10

    Compute services: match the workload to the model

  7. Lesson 7 · Day 14

    Storage classes, file services, and database families

  8. Lesson 8 · Day 21

    Billing, pricing, and cost management: the final 12 percent

Ten free worked examples

Use these explanations to learn at your own pace. The remaining 20 questions are reviewed in your completed results.

1. A company currently buys servers years in advance because it cannot predict demand. Which benefit of the AWS Cloud directly addresses this problem?

  1. A requirement to reserve peak capacity in every Region
  2. A commitment to keep every instance running continuously
  3. Elastic capacity that can expand and contract as demand changes
  4. A fixed three-year hardware procurement cycle
Show answer and explanation

C. Elastic capacity that can expand and contract as demand changes

A core value proposition of the AWS Cloud is going from guessing capacity to scaling on demand. Provisioning ahead of peak wastes money, while under-provisioning hurts users. On AWS, capacity adjusts with demand and costs follow usage. Security is shared, not eliminated; the cloud does not fix code quality; and staff still need cloud skills.

Official reference

2. A team wants to reduce the environmental impact of its workloads by minimizing idle resources and unnecessary data processing. Which Well-Architected pillar most directly addresses this goal?

  1. Operational excellence
  2. Performance efficiency
  3. Security
  4. Sustainability
Show answer and explanation

D. Sustainability

The Sustainability pillar focuses on minimizing the environmental impact of workloads, including reducing energy consumption and idle resources. Operational excellence concerns running and monitoring systems effectively, performance efficiency concerns using resources efficiently to meet requirements, and security concerns protecting data and systems. Recognizing which pillar a practice belongs to is a stated exam skill.

Official reference

3. A company historically spent large upfront amounts on data center construction and hardware. How does moving to the AWS Cloud change this cost structure?

  1. Upfront hardware expense can shift toward variable, usage-based expense
  2. Every workload must use a fixed annual infrastructure contract
  3. The organization must purchase the physical servers AWS operates
  4. Network and storage charges are replaced by software licence fees only
Show answer and explanation

A. Upfront hardware expense can shift toward variable, usage-based expense

Cloud economics centers on trading capital expense for variable expense. Instead of large fixed investments in facilities and hardware, customers pay for resources as they consume them. AWS is not free, moving to the cloud is the opposite direction (fixed to variable, not variable to fixed), and cloud pricing does change over time.

Official reference

4. A company runs a database on Amazon RDS. Under the AWS shared responsibility model, which task is the customer's responsibility?

  1. Replacing failed physical disks in the storage hardware
  2. Controlling which users and network sources can reach the database
  3. Applying patches to the underlying database engine software
  4. Managing the operating system that hosts the database
Show answer and explanation

B. Controlling which users and network sources can reach the database

Amazon RDS is a managed service: AWS handles the hardware, hypervisor, operating system, and database engine patching. The customer is responsible for security in the cloud, including IAM access, security group rules, database user accounts, and encryption settings. Responsibilities shift by service type, and this question tests that boundary on a managed database.

Official reference

5. Which two practices help protect an AWS account root user? (Select two.)

  1. Protect root sign-in with multi-factor authentication
  2. Use appropriately scoped roles or federated identities for routine work
  3. Share root credentials with the operations team
  4. Create root access keys for each application
  5. Use the root identity for daily deployments
Show answer and explanation

A. Protect root sign-in with multi-factor authentication; B. Use appropriately scoped roles or federated identities for routine work

Protect the root identity with MFA and avoid using it for routine tasks. Prefer scoped roles or federated access for daily work. Shared root credentials, root access keys for applications and routine root usage unnecessarily expose broad account privileges.

Official reference

6. An auditor asks a company to provide AWS compliance documentation, such as third-party reports and certifications. Which resource should the company use to obtain these documents?

  1. AWS Trusted Advisor
  2. Amazon CloudWatch
  3. AWS Config
  4. AWS Artifact
Show answer and explanation

D. AWS Artifact

AWS Artifact is the self-service portal where customers can download AWS compliance documents, such as security and audit reports and agreements. Trusted Advisor provides configuration best-practice checks, CloudWatch is for monitoring metrics and logs, and AWS Config records resource configuration histories. Knowing where to locate compliance information is an explicit domain 2 skill.

Official reference

7. A developer wants to run short, event-driven code, such as resizing an image whenever one is uploaded to storage, without provisioning or managing any servers. Which compute option fits best?

  1. AWS Lambda
  2. Amazon EC2
  3. Amazon ECS on self-managed EC2 hosts
  4. Amazon Lightsail virtual servers
Show answer and explanation

A. AWS Lambda

AWS Lambda runs code in response to events without the customer provisioning or managing servers. This is the classic serverless compute use case: short, event-triggered work. EC2, whether compute optimized or with instance storage, requires the customer to manage running servers. A load balancer distributes traffic and does not run application code at all.

Official reference

8. A company must retain regulatory records for many years. The records are almost never read, so the lowest cost matters far more than retrieval speed. Which Amazon S3 storage class fits best?

  1. S3 One Zone-IA
  2. S3 Glacier Deep Archive
  3. S3 Standard
  4. S3 Standard-IA
Show answer and explanation

B. S3 Glacier Deep Archive

S3 storage classes trade retrieval speed and cost. S3 Standard suits frequently accessed data. Standard-IA and One Zone-IA suit infrequent access at lower cost, with One Zone-IA storing data in a single Availability Zone. For archival data accessed rarely and retained long term, S3 Glacier Deep Archive offers the lowest storage cost, accepting longer retrieval times.

Official reference

9. A team deploys its application across multiple Availability Zones within one AWS Region. What is the primary reason this improves the application's resilience?

  1. Availability Zones are separate AWS accounts that isolate billing
  2. Using multiple Availability Zones removes the need for any backups
  3. Each Availability Zone has independent power, cooling, and networking, so a failure in one zone does not take down the others
  4. Availability Zones share a single internet connection, which simplifies routing
Show answer and explanation

C. Each Availability Zone has independent power, cooling, and networking, so a failure in one zone does not take down the others

Availability Zones are physically separate locations within a Region, each with independent power, cooling, and networking, and connected by low-latency links. They do not share single points of failure, so deploying across multiple zones keeps an application available if one zone fails. Zones are not separate accounts, and backups remain necessary regardless of zone spread.

Official reference

10. A company runs predictable Amazon EC2 capacity all day and can commit to a consistent amount of compute usage for one or three years. Which pricing option should it evaluate for a discount compared with On-Demand?

  1. On-Demand pricing without a commitment
  2. Spot Instances for an interruption-intolerant workload
  3. An On-Demand Capacity Reservation alone
  4. Savings Plans
Show answer and explanation

D. Savings Plans

Savings Plans exchange a one- or three-year usage commitment for eligible compute discounts. They are a pricing benefit, not a capacity reservation. On-Demand has no commitment discount; Spot suits interruption-tolerant work; an On-Demand Capacity Reservation alone does not provide a commitment discount.

Official reference

Turn mistakes into your next study session

After finishing, filter your results to missed questions. Write one sentence explaining the rule you missed, try a different example, then return tomorrow without looking at the answer. A rising repeated-question score is useful feedback, but it may reflect memory of this set.

Explore IT career and salary guides →