Practice Exam CLF-C02: AWS Certified Cloud Practitioner

Question bank: 115 · timed mock exam: 90 min

Official exam page on the vendor's site (opens in a new tab) Official exam guide (opens in a new tab)

  • Cloud Technology and Services 39 questions
  • Security and Compliance 33 questions
  • Cloud Concepts 29 questions
  • Billing, Pricing, and Support 14 questions

Free: 25 questions in study mode, all domains, no account.

Subscription: the 115 questions of this certification, the timed exam mode, and all other certifications too.

Subscribe · €9.99 / month

Secure card payment (Stripe) · No commitment · Cancel online

How to prepare for AWS Certified Cloud Practitioner with InfraPrep

The 115 questions cover 4 domains: Cloud Technology and Services, Security and Compliance, Cloud Concepts, Billing, Pricing, and Support. 25 of them are free, without an account.

Study mode

Answer at your pace: each answer is corrected straight away, with an explanation and the link to the documentation it relies on.

Exam mode

A timed exam of 90 minutes, with a question map to flag and come back to questions before you submit.

Results by domain

Your score is broken down by domain, so you know what to review first.

Original questions

Every question is written from the public documentation, never copied from the exam. You can contest an answer from study mode.

10 free sample questions

Question 1 Cloud Concepts

A junior cloud architect wants to understand the purpose of the AWS Well-Architected Framework before starting an architecture review. According to the official documentation, what is the purpose of this framework?

  1. To replace the mandatory security audit required by the industry regulator
  2. To learn best practices for designing secure and sustainable workloads
  3. To provide dedicated technical support available 24 hours a day, 7 days a week
  4. To fully automate application deployment with no human intervention
Show the answer and the explanation

Correct answer: B

The documentation explicitly states that the framework helps you learn best practices for this type of workload.

Source: official documentation

Question 2 Security and Compliance

A team hosts a PostgreSQL database directly on Amazon EC2 instances (not on Amazon RDS). Under the AWS shared responsibility model, who must apply the updates and security patches to the guest operating system of these instances?

  1. The database software vendor
  2. The external compliance auditor
  3. AWS only
  4. The customer
Show the answer and the explanation

Correct answer: D

The shared responsibility model places management of the guest operating system, including its updates and security patches, on the customer side.

Source: official documentation

Question 3 Cloud Technology and Services

A small team wants to deploy a web application on AWS without manually configuring load balancing, health monitoring, and the underlying compute capacity. Which service meets this need?

  1. AWS Direct Connect
  2. Amazon EC2 used on its own, without any other service
  3. Amazon S3
  4. AWS Elastic Beanstalk
Show the answer and the explanation

Correct answer: D

The documentation states that Elastic Beanstalk provisions EC2 instances or EKS clusters, configures load balancing, and sets up health monitoring automatically.

Source: official documentation

Question 4 Billing, Pricing, and Support

A finance manager wants to set a monthly spending threshold for an AWS project and receive an automatic alert as soon as that threshold is exceeded. Which AWS tool should be used?

  1. AWS Trusted Advisor
  2. AWS Artifact
  3. AWS Cost Explorer
  4. AWS Budgets
Show the answer and the explanation

Correct answer: D

The documentation states that AWS Budgets lets you set custom budgets and receive alerts when costs exceed your defined thresholds.

Source: official documentation

Question 5 Cloud Concepts

A team wants to obtain, at no charge, concrete recommendations for making its architecture more reliable, secure, efficient, and cost-effective, based on the AWS Well-Architected Framework. Which AWS service should it use?

  1. AWS Trusted Advisor Basic
  2. AWS Well-Architected Tool
  3. AWS Config
  4. Amazon CloudWatch
Show the answer and the explanation

Correct answer: B

The documentation states that this service provides recommendations for making workloads more reliable, secure, efficient, and cost-effective, based on the framework.

Source: official documentation

Question 6 Security and Compliance

A company has several AWS accounts and wants to give its employees centralized access to these accounts through single sign-on, without duplicating identities in each account. Which AWS service directly meets this need?

  1. AWS Key Management Service
  2. Amazon Cognito
  3. AWS IAM Identity Center
  4. AWS IAM (in a single account)
Show the answer and the explanation

Correct answer: C

The documentation describes the ability to centrally manage workforce access to multiple AWS accounts.

Source: official documentation

Question 7 Cloud Technology and Services

A team wants to describe its AWS infrastructure as a text template so that it can reproduce it identically in several environments without recreating it manually each time. Which service matches this deployment method?

  1. AWS CloudFormation
  2. Amazon Athena
  3. Amazon Simple Notification Service
  4. Amazon Elastic File System
Show the answer and the explanation

Correct answer: A

The documentation states that this service helps you model and set up AWS resources so that you spend less time managing them manually.

Source: official documentation

Question 8 Billing, Pricing, and Support

A team runs an unpredictable, short-lived workload, cannot make any commitment on the duration of use, and wants to pay only for the seconds actually consumed. Which Amazon EC2 pricing model best meets this need?

  1. On-Demand Instances
  2. Reserved Instances
  3. Dedicated Instances purchased in advance for 3 years
  4. Savings Plans
Show the answer and the explanation

Correct answer: A

The documentation states that On-Demand Instances are billed per second of use, with no long-term commitments or upfront payments.

Source: official documentation

Question 9 Cloud Concepts

A company wants to migrate a large number of physical and virtual servers to AWS with minimal downtime, without rewriting its applications as a first step. Which AWS service matches this migration strategy?

  1. AWS Key Management Service
  2. Amazon Route 53
  3. Amazon SageMaker
  4. AWS Transform MGN
Show the answer and the explanation

Correct answer: D

The documentation states that this service automates the migration of physical, virtual, and cloud servers to AWS with minimal downtime.

Source: official documentation

Question 10 Security and Compliance

A company manages several AWS accounts grouped in AWS Organizations and wants to prevent, at the organization level, certain member accounts from using services that the group security policy does not allow. Which mechanism should it use?

  1. Network access control lists (network ACLs)
  2. Service control policies (SCPs)
  3. AWS KMS keys
  4. Security groups
Show the answer and the explanation

Correct answer: B

The documentation states that SCPs let you control access to AWS resources, services, and Regions within the organization, so that users perform only the actions that meet security and compliance requirements.

Source: official documentation

Frequently asked questions

Are there free questions, and do I need an account?

Yes. 25 questions of this certification are free in study mode, across all its domains, without a subscription and without registration. The account is created when you subscribe, at checkout.

How does the subscription work, and can I cancel?

One monthly subscription covers all certifications and the timed practice exams. There is no minimum period. You cancel online, at any time, with the "Cancel your contract" function in My account; cancellation takes effect at the end of the month already paid, and no further payment is taken.

Where do the questions come from?

Every question is original, written from the vendor's public documentation. Each answer comes with an explanation and a link to the documentation page it relies on. InfraPrep is not affiliated with the vendors, and certification names belong to their owners.

In which language are the questions?

The questions are written in English. When a French translation exists for a question, the French version of the site shows it.

Is the catalog updated?

Yes, the catalog changes over time: new certifications and new questions are added.