10 beginner questions on the CLF-C02 domains: Cloud Concepts (cloud benefits, migration strategies), Security and Compliance (shared responsibility, AWS Artifact, root user), Cloud Technology and Services (Availability Zones, DynamoDB, CloudFront) and Billing, Pricing, and Support (Spot Instances, AWS Budgets).

Ready to test yourself? Take the graded Beginner test (free; sign in with Google, one click) to get your score.

  1. A startup does not want to buy servers before it knows how much capacity it will need. It wants to pay only for the computing resources it actually consumes. Which advantage of cloud computing does this describe?

    • A. Go global in minutes
    • B. Increase speed and agility
    • C. Trade fixed expense for variable expense ✔ correct
    • D. Benefit from massive economies of scale

    Answer: C. Instead of investing heavily in data centers and servers up front (a fixed expense), you pay only when you consume computing resources and only for how much you use (a variable expense).

    Source: docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-comp · Domain: Cloud Concepts

  2. A company wants to move an on-premises application to Amazon EC2 as quickly as possible, without changing the application's code or architecture. Which migration strategy is this?

    • A. Rehost (lift and shift) ✔ correct
    • B. Refactor (re-architect)
    • C. Repurchase (move to SaaS)
    • D. Retire (decommission)

    Answer: A. Rehosting moves an application to the cloud as it is, without code changes. Refactoring modernizes the application, repurchasing replaces it with a different product, and retiring switches it off.

    Source: docs.aws.amazon.com/prescriptive-guidance/latest/large-migration-guide/migration · Domain: Cloud Concepts

  3. Under the AWS shared responsibility model, AWS is responsible for patching the guest operating system on a customer's Amazon EC2 instances.

    • A. True
    • B. False ✔ correct

    Answer: B. False. For EC2 (infrastructure as a service), the customer manages the guest operating system, including updates and security patches, plus applications and security group settings. AWS secures the underlying infrastructure.

    Source: aws.amazon.com/compliance/shared-responsibility-model/ · Domain: Security and Compliance

  4. An auditor asks a company for AWS's own SOC and ISO compliance reports. Where can the company download these reports on demand?

    • A. AWS Config
    • B. AWS Artifact ✔ correct
    • C. Amazon Inspector
    • D. AWS Trusted Advisor

    Answer: B. AWS Artifact is the self-service portal for AWS security and compliance reports (such as SOC and ISO reports) and online agreements. AWS Config records your own resource configurations; Inspector scans for vulnerabilities.

    Source: docs.aws.amazon.com/artifact/latest/ug/what-is-aws-artifact.html · Domain: Security and Compliance

  5. Which two actions are AWS best practices for protecting the AWS account root user? (Select TWO)

    • A. Turn on multi-factor authentication (MFA) for the root user ✔ correct
    • B. Create root user access keys for automation scripts
    • C. Share the root user password with every administrator
    • D. Use the root user only for tasks that require it ✔ correct
    • E. Sign in as the root user for daily administrative work

    Answer: A, D. AWS recommends enabling MFA on the root user and using it only for the few tasks that require root credentials. Daily work should use identities with limited permissions, and root access keys should not be created.

    Source: docs.aws.amazon.com/IAM/latest/UserGuide/root-user-best-practices.html · Domain: Security and Compliance

  6. A company runs its application in one AWS Region and wants it to keep working if a single data center fails. What should it do?

    • A. Move the application to a larger EC2 instance type
    • B. Cache the application at many edge locations
    • C. Store the application data in one EBS volume
    • D. Deploy the application across multiple Availability Zones ✔ correct

    Answer: D. Each Availability Zone is one or more discrete data centers with redundant power and networking, isolated from the other zones in the Region. Running across several AZs keeps the application available if one fails.

    Source: docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html · Domain: Cloud Technology and Services

  7. A developer needs a fully managed, serverless NoSQL database for key-value data that delivers single-digit millisecond performance at any scale. Which service fits?

    • A. Amazon RDS
    • B. Amazon Redshift
    • C. Amazon DynamoDB ✔ correct
    • D. Amazon Aurora

    Answer: C. Amazon DynamoDB is a serverless, fully managed NoSQL database for key-value and document data with single-digit millisecond performance. RDS and Aurora are relational databases; Redshift is a data warehouse.

    Source: docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html · Domain: Cloud Technology and Services

  8. Which AWS service speeds up delivery of website content to users around the world by caching it at edge locations?

    • A. Amazon CloudFront ✔ correct
    • B. Amazon Route 53
    • C. AWS Direct Connect
    • D. Amazon VPC

    Answer: A. Amazon CloudFront is a content delivery network that caches content at edge locations close to users, lowering latency. Route 53 is DNS, Direct Connect is a private network link, and a VPC is your private network.

    Source: docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html · Domain: Cloud Technology and Services

  9. A company runs batch image-processing jobs that are fault tolerant and can be stopped and restarted at any time. Which EC2 purchasing option usually gives the lowest cost for this workload?

    • A. On-Demand Instances
    • B. Dedicated Hosts
    • C. Reserved Instances
    • D. Spot Instances ✔ correct

    Answer: D. Spot Instances use spare EC2 capacity at a steep discount, but AWS can interrupt them. That suits flexible, interruption-tolerant work such as batch jobs. Dedicated Hosts and On-Demand cost more; Reserved Instances need a commitment.

    Source: docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html · Domain: Billing, Pricing, and Support

  10. A finance manager wants an email alert when the company's actual or forecasted monthly AWS costs go over a set amount. Which service should be used?

    • A. AWS Pricing Calculator
    • B. AWS Budgets ✔ correct
    • C. AWS Organizations
    • D. AWS Trusted Advisor

    Answer: B. AWS Budgets lets you set a cost or usage budget and sends alerts when actual or forecasted values exceed the threshold. Pricing Calculator only estimates costs before you build; Organizations manages accounts.

    Source: docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html · Domain: Billing, Pricing, and Support

Original practice questions written by xOps School (DevOpsSchool Private Limited) from the public AWS exam objectives (CLF-C02 exam guide (docs.aws.amazon.com, current edition)), checked 2026-10-25. They are not actual exam questions. xOps School is not affiliated with or endorsed by AWS; exam names are trademarks of their owners. Official exam page: aws.amazon.com/certification/certified-cloud-practitioner/.

Last modified: Sunday, 25 October 2026, 9:57 PM