Get Your CertCLF-C02PlayCompete
‹ CLF-C02 tests

AWS Certified Cloud Practitioner (CLF-C02) practice questions

130 questions in 13 tests. Open one to answer it on its own, or take a whole test.

Test 1

Take Test 1 ›
  1. Under the AWS Shared Responsibility Model, which of the following is the customer's responsibility, regardless of which AWS services they use? · Cloud Concepts & Shared Responsibility
  2. A startup is deciding between buying servers for its own data center and running the same workload on AWS. On AWS it would make no upfront hardware purchase and would pay only… · Cloud Concepts
  3. An architecture review team is deciding whether to move a reporting workload to a newer instance type and to adopt a purpose-built database, so that the system keeps meeting its… · Cloud Concepts
  4. A new AWS account has just been created, and the team has been signing in with the account root user to do all of their daily work. Following AWS security best practices, what… · Security & Compliance
  5. An auditor has asked a company for AWS's latest SOC 2 and PCI DSS compliance reports as evidence for its own audit. Which AWS service provides on-demand access to these reports? · Security & Compliance
  6. Logs for a public web application running behind an Application Load Balancer show repeated SQL injection and cross-site scripting attempts in HTTP request parameters. Which AWS… · Security & Compliance
  7. An application currently runs on several EC2 instances that all sit in a single Availability Zone. The business needs the application to stay available if that entire… · Cloud Technology & Services
  8. Several Linux EC2 instances in an Auto Scaling group must read and write the same set of files concurrently through a standard file system interface, and the storage must grow… · Cloud Technology & Services
  9. Whenever an image is uploaded to an Amazon S3 bucket, a short piece of code must run to create a thumbnail. Uploads are sporadic. The team does not want to provision, patch, or… · Cloud Technology & Services
  10. A workload has a steady 24/7 compute baseline and the company is willing to commit to three years of usage to lower its bill. Over that period the team expects to change EC2… · Billing, Pricing & Support

Test 2

Take Test 2 ›
  1. During its move to AWS, a retailer runs its application servers on Amazon EC2 essentially as they were on premises, but moves its self-managed MySQL database to Amazon RDS for… · Cloud Concepts
  2. Leadership at a company starting its cloud journey is less worried about technology than about its staff: employees lack cloud skills, team structures must change, and the… · Cloud Concepts
  3. A security policy requires that data stored in Amazon S3 and on Amazon EBS volumes be encrypted with keys the company creates and controls, including who is allowed to use each… · Security & Compliance
  4. A compliance officer needs to find out which of the company's hundreds of Amazon S3 buckets contain personally identifiable information, such as passport numbers and credit card… · Security & Compliance
  5. An internal auditor asks two questions: what inbound rules did a particular security group have on a date three weeks ago, and is every Amazon EBS volume in the account… · Security & Compliance
  6. A mobile game stores player profiles and session state as simple key-value items. It must return data in single-digit milliseconds whether it has one thousand or tens of millions… · Cloud Technology & Services
  7. A company transfers several terabytes a day between its on-premises data center and its Amazon VPC. Traffic currently crosses the public internet and throughput varies widely… · Cloud Technology & Services
  8. A software company wants to add a generative AI assistant that drafts replies to customer emails. It wants to experiment with pre-trained foundation models from several AI… · Cloud Technology & Services
  9. The finance team wants to receive an email as soon as the account's spending for the current month is forecasted to exceed $5,000, rather than discovering the overrun on the… · Billing, Pricing & Support
  10. Three departments each have their own standalone AWS account, and each stores about 20 TB in Amazon S3 Standard. Because S3 storage is priced in tiers, each account pays the… · Billing, Pricing & Support

Test 3

Take Test 3 ›
  1. Traffic to a concert-ticketing website jumps to many times its normal level for a few hours whenever a popular event goes on sale, then drops back. The company wants EC2 capacity… · Cloud Concepts
  2. Before each major product launch, an engineering director wants every team to answer a consistent set of questions about its workload's design, get a list of high risk issues… · Cloud Concepts
  3. Twenty-five developers each sign in with their own IAM user, and all of them need the same permissions. People join and leave the team every month. What is the most manageable… · Security & Compliance
  4. A security team wants a managed service that continuously analyzes the account's AWS CloudTrail management events, VPC flow logs, and DNS logs, and raises findings for threats… · Security & Compliance
  5. A media company's website runs behind Amazon CloudFront and an Application Load Balancer. After a large DDoS attack, its AWS bill spiked with extra data transfer charges… · Security & Compliance
  6. A company serves its website from one AWS Region and keeps a standby copy in a second Region. The standby should receive no user traffic at all unless the primary site becomes… · Cloud Technology & Services
  7. An analyst occasionally needs to run ad-hoc SQL queries against log files that are already stored in Amazon S3. The company does not want to load the data into another system… · Cloud Technology & Services
  8. Visitors in Europe and Asia complain that images and videos on a website load slowly. The site's origin is an Amazon S3 bucket in a single US Region. The company wants copies of… · Cloud Technology & Services
  9. During flash sales, an online store's web tier sends orders directly to its order-processing servers faster than they can handle them, and some orders are lost. The company wants… · Cloud Technology & Services
  10. A company is moving Windows Server and SQL Server workloads to Amazon EC2 and wants to keep using the licenses it already owns. Those licenses are counted per physical socket and… · Billing, Pricing & Support

Test 4

Take Test 4 ›
  1. A product team used to wait about six weeks for the IT department to buy and rack servers before it could try out a new idea. After moving to AWS, the team launches the resources… · Cloud Concepts
  2. A company has set a corporate target to reduce the environmental impact of its IT. The architecture team is reviewing its AWS workloads to maximize the utilization of the… · Cloud Concepts
  3. An online retailer is moving its on-premises MySQL database to Amazon Aurora MySQL. The store must keep taking orders during the migration, and the final cutover can take no more… · Cloud Concepts
  4. A security review finds that an application on an Amazon EC2 instance reads objects from an Amazon S3 bucket using an IAM user's access key ID and secret access key, stored in a… · Security & Compliance
  5. A production Amazon EC2 instance was terminated overnight, and nobody on the operations team admits to doing it. The manager needs to find out which IAM user or role made the… · Security & Compliance
  6. A company runs 40 member accounts in AWS Organizations. Regulations require that no resources are ever created outside two approved European Regions. The control must also apply… · Security & Compliance
  7. A German health insurer is choosing an AWS Region for a new customer portal. Nearly all of its customers live in Germany, and a regulation requires that customer data stays… · Cloud Technology & Services
  8. A bank must keep scanned loan documents for 10 years to satisfy regulators. The documents are almost never read, and when auditors do ask for one, the bank can take up to two… · Cloud Technology & Services
  9. A team built its development environment (a VPC, a load balancer, Amazon EC2 instances and an Amazon RDS database) by clicking through the AWS Management Console. It now needs… · Cloud Technology & Services
  10. A research lab runs genome-analysis batch jobs on Amazon EC2. The number of jobs changes a lot from week to week, the jobs have no deadline, and each job saves checkpoints so… · Billing, Pricing & Support

Test 5

Take Test 5 ›
  1. Before approving a migration of about 800 on-premises servers, a company's CFO wants a data-driven business case. It must compare what the company spends on its current… · Cloud Concepts
  2. A manufacturer must keep the systems that control its factory machinery in its own data center. It is moving its customer website and its analytics platform to AWS, and it… · Cloud Concepts
  3. A company moves a PostgreSQL database from a self-managed Amazon EC2 instance to Amazon RDS for PostgreSQL. Under the shared responsibility model, which tasks become the… · Security & Compliance
  4. Web servers in a public subnet are receiving malicious requests from one specific IP address range. The security team wants to block that range for every instance in the subnet… · Security & Compliance
  5. An application has its Amazon RDS database password written into its source code. A new company policy requires the database password to be changed every 30 days, and developers… · Security & Compliance
  6. A developer stopped an Amazon EC2 instance overnight to save money. When they started it again the next morning, the files they had saved on the instance's instance store volume… · Cloud Technology & Services
  7. A news website stores its articles in an Amazon RDS database. During major stories the database slows down, and monitoring shows that most of the load comes from reading the same… · Cloud Technology & Services
  8. When a customer places an order, an application must send the same order message to three places: an Amazon SQS queue used by the warehouse, an AWS Lambda function that updates… · Cloud Technology & Services
  9. A visual effects studio in a large city wants to give its artists virtual workstations on AWS. The nearest AWS Region is several hundred miles away, and tests from there show… · Cloud Technology & Services
  10. A startup has designed its first application architecture but has not yet created an AWS account. Its founders want an estimate of the monthly and annual cost of the planned… · Billing, Pricing & Support

Test 6

Take Test 6 ›
  1. An operations team ships one large release per quarter. An engineer deploys each release by hand, following a 60-step runbook. Releases often break something, and rolling back… · Cloud Concepts
  2. A company is starting its cloud transformation. In a first series of leadership workshops, executives identify and prioritize the opportunities where cloud could speed up the… · Cloud Concepts
  3. A company plans to close its leased data center and move every workload onto Amazon EC2 and other AWS services. When building its cost comparison, which of these costs does the… · Cloud Concepts
  4. A security team must find known software vulnerabilities (CVEs) in the company's Amazon EC2 instances and in the container images it stores in Amazon ECR. It does not want to… · Security & Compliance
  5. A company has 25 AWS accounts in AWS Organizations. Its employees already sign in to every internal tool with the corporate identity provider. Instead of creating IAM users in… · Security & Compliance
  6. A company's website runs on Amazon EC2 instances behind an Application Load Balancer and is only available over HTTP. The company needs to serve it over HTTPS with a publicly… · Security & Compliance
  7. A retail company wants to bring many years of sales, inventory and customer data from several systems together in one place. Analysts will run complex SQL queries across… · Cloud Technology & Services
  8. Application servers run in a private subnet and have no public IP addresses. They need to download operating system security patches from the internet, but nothing on the… · Cloud Technology & Services
  9. A team has packaged a long-running web API as Docker containers and wants to run it on Amazon ECS. The team does not want to choose server types, patch operating systems, or… · Cloud Technology & Services
  10. Four departments share one standalone AWS account. Every resource has a Department tag, but when the finance team opens the billing reports and AWS Cost Explorer, it cannot group… · Billing, Pricing & Support

Test 7

Take Test 7 ›
  1. After a lift-and-shift migration, a company copied the sizes of its on-premises servers onto Amazon EC2. It now suspects that many instances are larger than they need to be. The… · Cloud Concepts
  2. A company must leave its data center within three months. It has about 200 physical servers and VMware virtual machines running Windows and Linux, and there is no time to change… · Cloud Concepts
  3. A startup is building a mobile fitness app. Its customers must be able to sign up and sign in with an email address and password, or with their existing Google or Apple accounts… · Security & Compliance
  4. Amazon GuardDuty reports that an IAM role made unusual API calls from an unfamiliar IP address. An analyst now needs to find the root cause: what else the role did in the… · Security & Compliance
  5. A bank's regulator requires that its cryptographic keys be generated and stored in single-tenant hardware security modules (HSMs) dedicated to the bank. The bank must have full… · Security & Compliance
  6. An online store collects thousands of written product reviews every day. It wants to label each review automatically as positive, negative, neutral or mixed, so the product teams… · Cloud Technology & Services
  7. A company has 30 VPCs in one Region and two on-premises data centers. Today the VPCs are linked by dozens of individual VPC peering connections, and each data center has its own… · Cloud Technology & Services
  8. An operations team wants to receive an email automatically whenever the average CPU utilization of a production Amazon EC2 instance stays above 80% for 15 minutes. What should… · Cloud Technology & Services
  9. A small company wants one AWS service that inspects its account and recommends improvements based on AWS best practices. It wants to be told about security groups that allow… · Billing, Pricing & Support
  10. A company wants to deploy a commercial firewall product from an independent software vendor (ISV) on Amazon EC2. It wants to launch the software preconfigured with a few clicks… · Billing, Pricing & Support

Test 8

Take Test 8 ›
  1. At a company, engineers regularly sign in to production database servers to run ad hoc queries against customer records, and they change firewall rules by hand in the console. A… · Cloud Concepts
  2. A company runs a self-managed customer relationship management (CRM) application on its own servers, and pays for both the software licenses and the hardware. As part of its move… · Cloud Concepts
  3. A new data analyst needs to read report files stored in one specific Amazon S3 bucket, and nothing else. An administrator is deciding how to grant this access. Which approach… · Security & Compliance
  4. A company has hundreds of Amazon S3 buckets in one AWS account. The security team is worried that a developer could accidentally make a bucket public by editing a bucket policy… · Security & Compliance
  5. A company has 60 AWS accounts in AWS Organizations. The security team must make sure that the same set of AWS WAF rules protects every Application Load Balancer and Amazon… · Security & Compliance
  6. A company runs a busy MySQL database on premises. It wants a fully managed relational database on AWS that is compatible with MySQL, so its existing code and tools keep working… · Cloud Technology & Services
  7. An application writes log files to an Amazon S3 bucket. The logs are read often during their first 30 days, rarely after that, and must be deleted once they are one year old. The… · Cloud Technology & Services
  8. Developers have written their application's business logic as AWS Lambda functions. They need a managed "front door" so that mobile apps can call those functions as a REST API… · Cloud Technology & Services
  9. An e-commerce website wants to capture clickstream events from millions of shoppers continuously and make them available for processing within about a second. Two separate… · Cloud Technology & Services
  10. A retailer expects a huge spike in traffic on one sales day each year. It must be certain it can launch 200 instances of a specific EC2 instance type in a specific Availability… · Billing, Pricing & Support

Test 9

Take Test 9 ›
  1. A startup based in Brazil suddenly gains many customers in Japan and Germany, who complain that its application feels slow. In a single afternoon, and with a few clicks, the… · Cloud Concepts
  2. A cloud readiness assessment finds three gaps at a company. Nobody checks whether its cloud initiatives deliver the benefits that were promised. Cloud spending cannot be traced… · Cloud Concepts
  3. A company's development and test environments are used only about eight hours a day on weekdays, but they run around the clock. The team schedules them to stop outside working… · Cloud Concepts
  4. A small company has one standalone AWS account that is not part of AWS Organizations. Following best practice, it keeps the root user credentials locked away and gives… · Security & Compliance
  5. Administrators currently reach Linux EC2 instances by connecting over SSH through a bastion host, using shared key pairs, with port 22 open in the security groups. The security… · Security & Compliance
  6. An application on an Amazon EC2 instance is not receiving connections from its clients, and an engineer suspects that a security group rule is too restrictive. The engineer wants… · Security & Compliance
  7. A company is migrating Windows-based business applications that store their files on Windows file shares. The applications access the shares over the SMB protocol, users are… · Cloud Technology & Services
  8. A multiplayer game runs its servers behind Network Load Balancers in two AWS Regions, and the game traffic uses UDP. Players around the world need consistent low latency. The… · Cloud Technology & Services
  9. A manufacturer's data science team wants to build its own machine learning model that predicts equipment failures from years of proprietary sensor data. The team needs managed… · Cloud Technology & Services
  10. A finance manager wants to see how the company's monthly AWS costs have changed over the past year, broken down by service, and to see a forecast of spending for the coming… · Billing, Pricing & Support

Test 10

Take Test 10 ›
  1. A company is migrating an on-premises Oracle database to Amazon Aurora PostgreSQL-Compatible Edition. The database contains many stored procedures, functions and views written… · Cloud Concepts
  2. An online store tracks a business metric, orders successfully processed per minute. When that metric drops below a threshold, automation immediately replaces or repairs the… · Cloud Concepts
  3. A developer's IAM user belongs to a group whose policy allows all Amazon S3 actions on every bucket in the account. A second policy, attached directly to the same user… · Security & Compliance
  4. A security team uses Amazon GuardDuty, Amazon Inspector and Amazon Macie across 20 AWS accounts, and their findings are spread across three separate consoles. The team wants one… · Security & Compliance
  5. A company's policy requires every new Amazon EBS volume it creates to be encrypted, even if an engineer forgets to select encryption when launching an instance. The company works… · Security & Compliance
  6. Users occasionally overwrite or delete important files in an Amazon S3 bucket by mistake, and the company has no way to get the earlier content back. It wants to be able to… · Cloud Technology & Services
  7. A company wants to run an AWS Lambda function every night at 2 AM to generate reports. It also wants a different Lambda function to run automatically whenever one of its Amazon… · Cloud Technology & Services
  8. The owner of a small bakery has little AWS experience and wants to launch a WordPress website. They want a virtual server with storage, a static IP address and DNS management… · Cloud Technology & Services
  9. A data team receives CSV and JSON files from several systems into Amazon S3. It wants to discover the files' schemas automatically and record them in a central data catalog, then… · Cloud Technology & Services
  10. A media company stores millions of objects, most of them larger than 1 MB, in Amazon S3. Their access patterns are unknown and change over time: an old clip can suddenly become… · Billing, Pricing & Support

Test 11

Take Test 11 ›
  1. A company wants to run Oracle Database Standard Edition 2 on Amazon RDS for a new application. It does not own any Oracle Database licenses and does not want to buy them… · Cloud Concepts
  2. During a migration portfolio assessment, a company sorts its applications by migration strategy. Which applications are the best candidates for the retain strategy, keeping them… · Cloud Concepts
  3. A product company wants to add machine learning features and a NoSQL database to its application. Instead of training its IT team to host, tune and run these specialized… · Cloud Concepts
  4. A security team wants to know whether any Amazon S3 buckets, IAM roles or AWS KMS keys in its organization can be accessed by principals outside the organization, such as another… · Security & Compliance
  5. A company is moving .NET applications and Microsoft SQL Server workloads to AWS. They need real Microsoft Active Directory features: joining Windows EC2 instances to a domain… · Security & Compliance
  6. A company created a new Amazon S3 bucket last week and uploaded files to it. Nobody configured any encryption settings on the bucket. An auditor asks whether those files are… · Security & Compliance
  7. Applications in a company's data center read and write files on a local file share using NFS and SMB, and the company is running out of on-premises storage. It wants the files to… · Cloud Technology & Services
  8. A small development team has built a Python web application. The team wants to upload its code and have AWS automatically provision the Amazon EC2 instances, set up load… · Cloud Technology & Services
  9. Amazon EC2 instances in a private subnet must read and write objects in an Amazon S3 bucket in the same Region. Security rules say this traffic must not go through an internet… · Cloud Technology & Services
  10. A company is reviewing the data transfer charges for a web application that runs on Amazon EC2 in one AWS Region. Which statement about EC2 data transfer pricing is correct? · Billing, Pricing & Support

Test 12

Take Test 12 ›
  1. A company's monolithic order-management application can no longer keep up with demand, and every new feature takes months to release. As part of moving it to AWS, the company… · Cloud Concepts
  2. An operations team spends much of its week patching, backing up and upgrading the databases and message brokers it runs itself on Amazon EC2 instances. To reduce this operational… · Cloud Concepts
  3. A company is growing from 3 AWS accounts to more than 50. It wants to set up a secure multi-account environment that follows AWS prescriptive best practices in a short time… · Security & Compliance
  4. A three-tier application has web servers in an Auto Scaling group that uses the security group web-sg, and database instances that use the security group db-sg. The databases… · Security & Compliance
  5. An external auditor asks a company for a downloadable list of every IAM user in its AWS account, showing whether each user has a password enabled, when their access keys were… · Security & Compliance
  6. A company backs up its Amazon EBS volumes, Amazon RDS databases, Amazon DynamoDB tables and Amazon EFS file systems using a different script for each service. It wants a single… · Cloud Technology & Services
  7. A company runs critical applications on servers in its own data center and wants a disaster recovery site on AWS with minimal downtime and data loss. It wants ongoing replication… · Cloud Technology & Services
  8. A company runs the same application behind load balancers in the US West (Oregon) Region and the Asia Pacific (Singapore) Region. When a user looks up the application's domain… · Cloud Technology & Services
  9. A bank wants to add a chatbot to its website and mobile app. Customers should be able to type or speak requests such as "check my balance" or "report a lost card", and the bot… · Cloud Technology & Services
  10. An operations team wants to be told about AWS service events that affect the specific resources in its own account, and about planned AWS activities, such as scheduled… · Billing, Pricing & Support

Test 13

Take Test 13 ›
  1. After moving to AWS, a company's engineering teams launch resources freely and costs keep rising. Leadership decides to invest in a dedicated function, with its own programs… · Cloud Concepts
  2. During discovery for a large migration, a company finds an internal reporting application that has had no inbound connections in the last 90 days and averages about 2% CPU usage… · Cloud Concepts
  3. A central networking team owns a VPC and its subnets in a shared-services account in AWS Organizations. Application teams in other accounts in the organization need to launch… · Security & Compliance
  4. A European company stores all of its customer data in the Europe (Frankfurt) Region. Its legal team asks whether AWS might move that data to another Region, for example in the… · Security & Compliance
  5. A compliance rule states that an Amazon S3 bucket holding customer statements must reject every request that is not sent over an encrypted HTTPS (TLS) connection, including… · Security & Compliance
  6. A company runs containerized applications on self-managed Kubernetes clusters in its own data center, and its teams rely on standard Kubernetes tooling and manifests. It wants to… · Cloud Technology & Services
  7. A lender automates its loan approval process. Each application must be validated by an AWS Lambda function, then sent to a credit-check service, then wait for a human underwriter… · Cloud Technology & Services
  8. A company is moving a real-time analytics application to Amazon EC2. The application loads very large data sets entirely into RAM so it can process them quickly, and it is… · Cloud Technology & Services
  9. A company's website, which is not hosted on AWS, keeps receiving attack traffic and spam from IP addresses that belong to AWS. The company suspects that someone is using AWS… · Billing, Pricing & Support
  10. A company is launching a three-month marketing campaign application on Amazon EC2. It can't predict how much capacity the campaign will need from week to week, the application… · Billing, Pricing & Support