This is the free Amazon CLF-C02 practice question bank —
360 of 713 total questions, each with a full explanation, free to
read with no signup required. Updated 2026-10-04.
Every answer is verified against official Amazon documentation —
see our methodology.
Question 1
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. Users can implement all AWS services in seconds.
B. AWS assumes all responsibility for the security of infrastructure and applications.
C. Users experience increased speed and agility.
D. Users benefit from massive economies of scale.
E. Users can move hardware from their data center to the AWS Cloud.
Show Answer
Correct Answer: C, D
Explanation: The primary advantages of moving to AWS include increased speed and agility through rapid provisioning and deployment, and benefiting from AWS's massive economies of scale, which reduce infrastructure costs. Option A is incorrect because not all AWS services can be implemented in seconds. Option B is incorrect because AWS follows a shared responsibility model; customers remain responsible for security in the cloud, including applications. Option E is incorrect because moving to AWS does not involve physically relocating existing hardware into the AWS Cloud.
Question 1
A company uses Amazon WorkSpaces.
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
A. Set up multi-factor authentication (MFA) for each WorkSpaces user account.
B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.
C. Provide security for WorkSpaces user accounts through AWS Identity and Access Management (IAM).
D. Configure AWS CloudTrail to log API calls and user activity.
Show Answer
Correct Answer: B
Explanation: AWS is responsible for security of the cloud, including the physical facilities and environmental protections for the infrastructure that hosts WorkSpaces. Configuring MFA, IAM access, and CloudTrail logging are customer responsibilities.
Question 2
A company wants to organize its users so that the company can grant permissions to the users as a group.
Which AWS service or tool can the company use to meet this requirement?
A. Security groups
B. AWS Identity and Access Management (IAM)
C. Resource groups
D. AWS Security Hub
Show Answer
Correct Answer: B
Explanation: AWS Identity and Access Management (IAM) lets you create groups of users and attach permissions to those groups. Users in a group receive the group’s permissions.
Question 2
Which AWS compute service gives users the ability to securely and reliably run containers at scale?
A. Amazon Elastic Container Service (Amazon ECS)
B. Amazon Aurora
C. Amazon Athena
D. Amazon Polly
Show Answer
Correct Answer: A
Explanation: Amazon Elastic Container Service (Amazon ECS) is AWS's fully managed container orchestration service for securely running and scaling containerized applications. Aurora is a relational database, Athena is a serverless query service, and Polly is a text-to-speech service.
Question 3
A developer needs to use a standardized template to create copies of a company's AWS architecture for development, test, and production environments.
Which AWS service should the developer use to meet this requirement?
A. AWS Cloud Map
B. AWS CloudFormation
C. Amazon Cloud Front
D. AWS CloudTrail
Show Answer
Correct Answer: B
Explanation: AWS CloudFormation uses infrastructure-as-code templates to model and provision AWS resources consistently across multiple environments such as development, testing, and production. AWS Cloud Map is for service discovery, Amazon CloudFront is a content delivery network, and AWS CloudTrail records API activity.
Question 3
A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.
Which AWS service or concept will meet these requirements?
A. AWS Auto Scaling
B. AWS Compute Optimizer
C. AWS Cost Explorer
D. AWS Well-Architected Framework
Show Answer
Correct Answer: A
Explanation: AWS Auto Scaling adjusts the number of EC2 instances in response to demand, adding capacity during spikes and scaling in when demand falls. This helps maintain application responsiveness while using only the capacity needed.
Question 4
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?
A. High availability
B. Economies of scale
C. Pay-as-you-go pricing
D. Global reach
Show Answer
Correct Answer: C
Explanation: Pay-as-you-go pricing lets companies pay for technology services as they use them, replacing upfront fixed expenses with variable expenses.
Question 4
A company has a website on AWS. The company wants to deliver the website to a worldwide audience and provide low-latency response times for global users.
Which AWS service will meet these requirements?
A. AWS CloudFormation
B. Amazon CloudFront
C. Amazon ElastiCache
D. Amazon DynamoDB
Show Answer
Correct Answer: B
Explanation: Amazon CloudFront is AWS's global content delivery network (CDN). It caches and delivers website content from edge locations worldwide, reducing latency and improving response times for users across the globe. CloudFormation is for infrastructure as code, ElastiCache is for in-memory caching within applications, and DynamoDB is a NoSQL database.
Question 5
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
A. Apply guest operating system patches to Amazon EC2 instances.
B. Provide monitoring of human resources information management (HRIM) systems.
C. Perform automated backups of Amazon RDS instances.
D. Optimize the costs of running AWS services.
Show Answer
Correct Answer: C
Explanation: Under the AWS shared responsibility model, AWS is responsible for managing the underlying infrastructure and, for managed services such as Amazon RDS, provides features like automated backups when enabled. Customers are responsible for patching the guest OS on EC2 instances, monitoring their own HRIM systems, and optimizing their AWS costs.
Question 5
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
A. VPC Flow Logs
B. Amazon Inspector
C. VPC endpoint services
D. NAT gateway
Show Answer
Correct Answer: A
Explanation: VPC Flow Logs capture information about IP traffic going to and from network interfaces in an Amazon VPC. The other options do not provide this traffic-logging function.
$19
Get all 713 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.