CLF-C02 Free Practice Questions — Page 2 (2026)

Question 6

Which AWS service provides a fully managed graph database for highly connected datasets?

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Neptune

D. Amazon Aurora

Show Answer

Correct Answer: C

Explanation:
Amazon Neptune is AWS's fully managed graph database service, designed for storing and querying highly connected datasets using graph models such as Property Graph and RDF. DynamoDB is a NoSQL key-value/document database, while RDS and Aurora are relational database services.

Question 6

Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?

A. AWS WAF

B. AWS Trusted Advisor

C. Amazon Inspector

D. AWS Shield

Show Answer

Correct Answer: C

Explanation:
Amazon Inspector assesses Amazon EC2 instances for security vulnerabilities using predefined assessment templates. AWS WAF protects web applications, Trusted Advisor provides best-practice recommendations, and AWS Shield helps protect against DDoS attacks.

Question 7

A company wants to run relationship databases in the AWS Cloud. The company wants to use a managed service that will install the database and run regular software updates. Which AWS service will meet these requirements?

A. Amazon S3

B. Amazon RDS

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon DynamoDB

Show Answer

Correct Answer: B

Explanation:
Amazon RDS is AWS's managed relational database service. It provisions the database, automates software patching and updates, backups, and other operational tasks. Amazon S3 is object storage, Amazon EBS is block storage, and DynamoDB is a managed NoSQL database rather than a relational database.

Question 7

Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)

A. AWS VPN

B. Elastic Load Balancing

C. AWS Direct Connect

D. VPC peering

E. Amazon CloudFront

Show Answer

Correct Answer: A, C

Explanation:
AWS VPN (specifically Site-to-Site VPN) creates an encrypted connection between an on-premises network and a VPC. AWS Direct Connect provides a dedicated network connection from an on-premises location to AWS. VPC peering connects VPCs to each other, not an on-premises network to a VPC.

Question 8

A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?

A. AWS Identity and Access Management (IAM)

B. Amazon Cognito

C. AWS IAM Identity Center (AWS Single Sign-On)

D. AWS CLI

Show Answer

Correct Answer: C

Explanation:
AWS IAM Identity Center provides a central user portal for workforce users to access third-party applications that support SAML 2.0. Amazon Cognito primarily provides identity and authentication for customer-facing applications, rather than a workforce SSO portal.

Question 8

Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

A. Third-party vendors

B. Customers

C. Reseller partners

D. Internet providers

Show Answer

Correct Answer: B

Explanation:
Under the AWS Shared Responsibility Model, AWS is responsible for security of the cloud, while customers are responsible for security in the cloud, including securing their AWS accounts, configurations, and resources. Therefore, customers share responsibility with AWS for security and compliance.

Question 9

Why are AWS CloudFormation templates used?

A. To reduce provisioning time by using automation.

B. To transfer existing infrastructure to another company.

C. To reuse on-premises infrastructure in the AWS Cloud.

D. To deploy large infrastructure with no cost implications.

Show Answer

Correct Answer: A

Explanation:
AWS CloudFormation templates define infrastructure as code, allowing automated, repeatable provisioning of AWS resources. This reduces manual effort and provisioning time. They are not used to transfer infrastructure to another company, reuse on-premises infrastructure directly in AWS, or guarantee deployments with no cost implications.

Question 9

A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?

A. Deliver the content through Amazon CloudFront.

B. Store the content on Amazon S3 and enable S3 cross-region replication.

C. Implement a VPN across multiple AWS Regions.

D. Deliver the content through AWS PrivateLink.

Show Answer

Correct Answer: A

Explanation:
Amazon CloudFront is a content delivery network that caches images and videos at global edge locations, delivering them to users with low latency. It is a cost-effective fit for global content delivery. S3 cross-region replication is for copying data between regions, while VPNs and PrivateLink are for network connectivity, not public content distribution.

Question 10

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)

A. Control access to AWS service APIs and to other specific resources.

B. Provide intelligent threat detection and continuous monitoring.

C. Protect the AWS environment using multi-factor authentication (MFA).

D. Grant users access to AWS data centers.

E. Provide firewall protection for applications from common web attacks.

Show Answer

Correct Answer: A, C

Explanation:
IAM is used to manage authentication and authorization for AWS. It controls access to AWS service APIs and resources through users, roles, groups, and policies, and it supports multi-factor authentication (MFA) to strengthen account security. Intelligent threat detection is provided by services such as Amazon GuardDuty, firewall protection for web applications is provided by AWS WAF, and IAM does not grant physical access to AWS data centers.

Question 10

Which option is a benefit of the economies of scale based on the advantages of cloud computing?

A. The ability to trade variable expense for fixed expense

B. Increased speed and agility

C. Lower variable costs over fixed costs

D. Increased operational costs across data centers

Show Answer

Correct Answer: C

Explanation:
Cloud providers aggregate demand across many customers, allowing them to benefit from economies of scale and offer lower variable costs than an organization could achieve on its own.