CLF-C02 Free Practice Questions — Page 6 (2026)

Question 52

According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.)

A. Network infrastructure and virtualization of infrastructure

B. Security of application data

C. Guest operating systems

D. Physical security of hardware

E. Credentials and policies

Show Answer

Correct Answer: A, D

Explanation:
Under the AWS shared responsibility model, AWS is responsible for the security **of** the cloud. This includes the physical security of data centers and hardware, as well as the underlying network infrastructure and virtualization layer. Customers are responsible for security **in** the cloud, such as guest operating systems, application data, and credentials/policies.

Question 53

Which AWS service is designed for users running workloads that include a NoSQL database?

A. Amazon RDS

B. Amazon S3

C. Amazon Redshift

D. Amazon DynamoDB

Show Answer

Correct Answer: D

Explanation:
Amazon DynamoDB is AWS’s fully managed NoSQL (non-relational) database service designed for scalable, high-performance workloads. The other options are not NoSQL databases: Amazon RDS is relational, Amazon S3 is object storage, and Amazon Redshift is a data warehouse.

Question 54

A company wants to monitor and block malicious HTTP and HTTPS requests that its Amazon CloudFront distributions receive. Which AWS service should the company use to meet these requirements?

A. Amazon GuardDuty

B. Amazon Inspector

C. AWS WAF

D. Amazon Detective

Show Answer

Correct Answer: C

Explanation:
AWS WAF integrates directly with Amazon CloudFront to inspect HTTP and HTTPS requests and allows you to create rules to block or allow malicious traffic. The other services focus on threat detection, vulnerability assessment, or investigation rather than actively filtering web requests.

Question 55

A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS. Which AWS service should the company use to meet this requirement?

A. AWS Lambda

B. Amazon Route 53

C. Amazon CloudFront

D. AWS Direct Connect

Show Answer

Correct Answer: B

Explanation:
Hosting a domain name requires a DNS service. Amazon Route 53 is AWS’s managed DNS and domain registration service, used to register domains and route internet traffic to AWS resources. The other options do not provide domain hosting or DNS functionality.

Question 56

Which AWS service allows for file sharing between multiple Amazon EC2 instances?

A. AWS Direct Connect

B. AWS Snowball Edge

C. AWS Backup

D. Amazon Elastic File System (Amazon EFS)

Show Answer

Correct Answer: D

Explanation:
Amazon Elastic File System (EFS) is a managed, scalable network file system that can be mounted concurrently by multiple Amazon EC2 instances, enabling shared file access. The other options do not provide shared file system capabilities for EC2.

Question 57

A company wants to use a serverless compute service for an application. Which AWS service will meet this requirement?

A. AWS Lambda

B. AWS CloudFormation

C. AWS Elastic Beanstalk

D. Elastic Load Balancing

Show Answer

Correct Answer: A

Explanation:
AWS Lambda is a serverless compute service that lets you run code without provisioning or managing servers. The other options are not serverless compute services: CloudFormation is infrastructure as code, Elastic Beanstalk is a PaaS that still manages underlying resources, and Elastic Load Balancing distributes traffic but does not run application code.

Question 58

A company needs to store infrequently used data for data archives and long-term backups. Which AWS service or storage class will meet these requirements MOST cost-effectively?

A. Amazon FSx for Lustre

B. Amazon Elastic Block Store (Amazon EBS)

C. Amazon Elastic File System (Amazon EFS)

D. Amazon S3 Glacier Flexible Retrieval

Show Answer

Correct Answer: D

Explanation:
The requirement is to store infrequently used data for data archives and long-term backups at the lowest possible cost. Amazon S3 Glacier Flexible Retrieval is specifically designed for archival storage, offering very low storage costs with retrieval times suitable for backup and archive use cases. FSx, EBS, and EFS are designed for active file or block storage and are significantly more expensive for long-term, infrequently accessed data.

Question 59

A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)

A. AWS Command Line Interface (AWS CLI)

B. AWS Key Management Sen/ice (AWS KMS)

C. AWS Management Console

D. AWS Resource Access Manager (AWS RAM)

E. AWS Secrets Manager

Show Answer

Correct Answer: A, C

Explanation:
An IAM user who has permission to change their own password can do so through IAM-supported interfaces. The AWS Management Console allows users to change their password from the security credentials page, and the AWS CLI provides IAM commands (such as update-login-profile) to change the user’s own password. The other services listed (KMS, RAM, Secrets Manager) are not used to manage IAM user passwords.

Question 60

Which AWS service supports user sign-up functionality and authentication to mobile and web applications?

A. Amazon Cognito

B. AWS Config

C. Amazon GuardDuty

D. AWS Systems Manager

Show Answer

Correct Answer: A

Explanation:
Amazon Cognito provides user sign-up, sign-in, and authentication/authorization features for web and mobile applications. The other options serve different purposes: AWS Config tracks resource configurations, GuardDuty is a threat detection service, and Systems Manager manages AWS infrastructure.

Question 61

A company needs to use AWS technology to deploy a static website. Which solution meets this requirement with the LEAST amount of operational overhead?

A. Deploy the website on Amazon EC2.

B. Host the website on AWS Elastic Beanstalk.

C. Deploy the website with Amazon Lightsail.

D. Host the website on Amazon S3.

Show Answer

Correct Answer: D

Explanation:
For a static website, Amazon S3 provides the least operational overhead. S3 can natively host static content (HTML, CSS, JavaScript) without any servers to provision, patch, or manage. EC2, Elastic Beanstalk, and Lightsail all require managing compute resources to some extent, which adds unnecessary operational complexity for a purely static site.