CLF-C02 Free Practice Questions — Page 6 (2026)

Question 52

According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.)

A. Network infrastructure and virtualization of infrastructure

B. Security of application data

C. Guest operating systems

D. Physical security of hardware

E. Credentials and policies

Show Answer

Correct Answer: A, D

Explanation:
Under the AWS Shared Responsibility Model, AWS is responsible for security 'of' the cloud, including the underlying network infrastructure, virtualization layer, and the physical security of its data centers and hardware. Customers are responsible for security 'in' the cloud, including application data, guest operating systems (in IaaS), and IAM credentials and policies.

Question 53

Which AWS service is designed for users running workloads that include a NoSQL database?

A. Amazon RDS

B. Amazon S3

C. Amazon Redshift

D. Amazon DynamoDB

Show Answer

Correct Answer: D

Explanation:
Amazon DynamoDB is AWS's fully managed NoSQL database service, designed for key-value and document workloads. Amazon RDS is for relational databases, Amazon S3 is object storage, and Amazon Redshift is a data warehouse.

Question 54

A company wants to monitor and block malicious HTTP and HTTPS requests that its Amazon CloudFront distributions receive. Which AWS service should the company use to meet these requirements?

A. Amazon GuardDuty

B. Amazon Inspector

C. AWS WAF

D. Amazon Detective

Show Answer

Correct Answer: C

Explanation:
AWS WAF integrates with Amazon CloudFront to inspect HTTP and HTTPS requests, allowing you to monitor, filter, and block malicious web traffic using web ACLs and rules. GuardDuty detects threats, Inspector assesses vulnerabilities, and Detective investigates security findings rather than filtering web requests.

Question 55

A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS. Which AWS service should the company use to meet this requirement?

A. AWS Lambda

B. Amazon Route 53

C. Amazon CloudFront

D. AWS Direct Connect

Show Answer

Correct Answer: B

Explanation:
Amazon Route 53 is AWS's managed DNS and domain registration service. It can host the public DNS records for a website's domain name and route users to the appropriate AWS resources. AWS Lambda is a compute service, CloudFront is a CDN, and Direct Connect provides dedicated network connectivity, not domain hosting.

Question 56

Which AWS service allows for file sharing between multiple Amazon EC2 instances?

A. AWS Direct Connect

B. AWS Snowball Edge

C. AWS Backup

D. Amazon Elastic File System (Amazon EFS)

Show Answer

Correct Answer: D

Explanation:
Amazon Elastic File System (Amazon EFS) is a managed, elastic NFS file system that can be mounted concurrently by multiple Amazon EC2 instances, enabling shared file access. AWS Direct Connect provides dedicated network connectivity, Snowball Edge is for data transfer and edge computing, and AWS Backup is for centralized backup management.

Question 57

A company wants to use a serverless compute service for an application. Which AWS service will meet this requirement?

A. AWS Lambda

B. AWS CloudFormation

C. AWS Elastic Beanstalk

D. Elastic Load Balancing

Show Answer

Correct Answer: A

Explanation:
AWS Lambda is AWS's serverless compute service that runs code without provisioning or managing servers. CloudFormation is for infrastructure as code, Elastic Beanstalk is a platform for deploying applications but is not itself a serverless compute service, and Elastic Load Balancing distributes traffic across targets.

Question 58

A company needs to store infrequently used data for data archives and long-term backups. Which AWS service or storage class will meet these requirements MOST cost-effectively?

A. Amazon FSx for Lustre

B. Amazon Elastic Block Store (Amazon EBS)

C. Amazon Elastic File System (Amazon EFS)

D. Amazon S3 Glacier Flexible Retrieval

Show Answer

Correct Answer: D

Explanation:
Amazon S3 Glacier Flexible Retrieval is designed for infrequently accessed data, archives, and long-term backups at low cost. Amazon EBS provides block storage for active workloads, Amazon EFS provides managed shared file storage, and Amazon FSx for Lustre is optimized for high-performance compute workloads rather than archival storage.

Question 59

A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)

A. AWS Command Line Interface (AWS CLI)

B. AWS Key Management Sen/ice (AWS KMS)

C. AWS Management Console

D. AWS Resource Access Manager (AWS RAM)

E. AWS Secrets Manager

Show Answer

Correct Answer: A, C

Explanation:
IAM users who have permission to change their own password can do so through the AWS Management Console or by using the IAM ChangePassword API, which is accessible via the AWS CLI. AWS KMS manages encryption keys, AWS RAM shares resources, and Secrets Manager stores and rotates secrets rather than changing IAM user passwords.

Question 60

Which AWS service supports user sign-up functionality and authentication to mobile and web applications?

A. Amazon Cognito

B. AWS Config

C. Amazon GuardDuty

D. AWS Systems Manager

Show Answer

Correct Answer: A

Explanation:
Amazon Cognito provides user sign-up, sign-in, authentication, authorization, and user management for web and mobile applications. AWS Config tracks resource configurations, Amazon GuardDuty is a threat detection service, and AWS Systems Manager is used for operational management of AWS resources.

Question 61

A company needs to use AWS technology to deploy a static website. Which solution meets this requirement with the LEAST amount of operational overhead?

A. Deploy the website on Amazon EC2.

B. Host the website on AWS Elastic Beanstalk.

C. Deploy the website with Amazon Lightsail.

D. Host the website on Amazon S3.

Show Answer

Correct Answer: D

Explanation:
Amazon S3 static website hosting is purpose-built for serving static HTML, CSS, JavaScript, and assets without managing servers or application platforms. It provides the least operational overhead compared with EC2, Elastic Beanstalk, or Lightsail, all of which require managing compute resources or application environments.