\n
Welcome to your AWS Certified Cloud Practitioner<\/strong> preparation hub. Free AWS Cloud Practitioner (CLF-C02) Practice Test 2026. Master cloud concepts, security, billing, and pricing. Navigate the professional business scenarios below and check your rationales to ensure exam readiness.<\/p>\n<\/p><\/div>\n <\/p>\n
\n
\n
\n
1<\/span><\/p>\nAn enterprise is planning to migrate its on-premises applications to AWS. The leadership team is keen on understanding how AWS can help reduce capital expenditures. Which AWS cloud benefit primarily addresses this concern?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Elasticity<\/button><\/li>\n\n<\/span>B. Agility<\/button><\/li>\n\n<\/span>C. Pay-as-you-go pricing<\/button><\/li>\n\n<\/span>D. Global reach<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Pay-as-you-go pricing allows organizations to pay only for the resources they consume, converting large upfront capital expenditures (CapEx) into predictable operational expenditures (OpEx). Elasticity, Agility, and Global Reach are significant benefits but do not directly address the reduction of CapEx in the same way.\n <\/div>\n<\/div>\n\n
\n
2<\/span><\/p>\nA large corporation running an application on AWS EC2 instances needs to ensure the operating system is regularly patched. Under the AWS Shared Responsibility Model, who is primarily responsible for applying these OS patches?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. AWS, as part of infrastructure management.<\/button><\/li>\n\n<\/span>B. The customer, as they manage the operating system on the EC2 instance.<\/button><\/li>\n\n<\/span>C. A third-party security vendor contracted by AWS.<\/button><\/li>\n\n<\/span>D. Both AWS and the customer share equal responsibility for OS patching.<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Under the AWS Shared Responsibility Model, AWS is responsible for the security ‘of’ the cloud (the underlying infrastructure, hardware, global network, etc.), while the customer is responsible for security ‘in’ the cloud. For EC2 instances, this includes managing the guest operating system, application software, and their respective patching, configurations, and security.\n <\/div>\n<\/div>\n\n
\n
3<\/span><\/p>\nAn application development team requires a highly scalable compute service that automatically manages underlying servers, scales based on demand, and charges only for the compute time consumed. Which AWS service would best meet these requirements for running event-driven, short-duration code?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Amazon EC2<\/button><\/li>\n\n<\/span>B. AWS Lambda<\/button><\/li>\n\n<\/span>C. Amazon ECS<\/button><\/li>\n\n<\/span>D. AWS Elastic Beanstalk<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> AWS Lambda is a serverless compute service that runs code in response to events and automatically manages the underlying compute resources. It scales automatically and you pay only for the compute time consumed, making it ideal for event-driven, short-duration code without server management overhead.\n <\/div>\n<\/div>\n\n
\n
4<\/span><\/p>\nA company has a set of applications running on Amazon EC2 instances that have a consistent, predictable workload and are required to run 24\/7 for the next three years. To significantly reduce compute costs, which AWS pricing model would be most appropriate?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. On-Demand Instances<\/button><\/li>\n\n<\/span>B. Spot Instances<\/button><\/li>\n\n<\/span>C. Reserved Instances<\/button><\/li>\n\n<\/span>D. Dedicated Hosts<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Reserved Instances (RIs) offer a significant discount (up to 75% compared to On-Demand prices) in exchange for a commitment to a specific instance type and region for a 1-year or 3-year term. This is ideal for applications with predictable, consistent, and long-term workloads. Spot Instances are for fault-tolerant, flexible applications that can handle interruptions, and On-Demand is the most expensive option. Dedicated Hosts are for specific licensing requirements, not general cost optimization.\n <\/div>\n<\/div>\n\n
\n
5<\/span><\/p>\nA multinational enterprise wants to deploy an application in AWS that requires high availability and disaster recovery capabilities within a specific geographical region. Which AWS architectural component should be utilized to achieve these goals by distributing resources?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. A single Availability Zone<\/button><\/li>\n\n<\/span>B. A single AWS Region<\/button><\/li>\n\n<\/span>C. Multiple Availability Zones within a single Region<\/button><\/li>\n\n<\/span>D. Multiple AWS Regions<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> To achieve high availability and resilience within a specific geographical region, resources should be distributed across multiple Availability Zones (AZs). Each AZ is an isolated location within an AWS Region, designed to be isolated from failures in other AZs, providing fault tolerance for applications. Using multiple AWS Regions would be for global disaster recovery or compliance requirements across different geographies, not typically for high availability within a single region.\n <\/div>\n<\/div>\n<\/p>\n
\n [ ADVERTISEMENT SPACE – HIGH CPC ]\n<\/div>\n
\n
\n
6<\/span><\/p>\nAn IT administrator needs to grant a new department specific permissions to access S3 buckets, but only for read-only operations. Following the principle of least privilege, which AWS service and feature should be used to assign these permissions?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. AWS IAM user with an attached inline policy.<\/button><\/li>\n\n<\/span>B. AWS IAM role with a managed policy allowing S3 read-only access.<\/button><\/li>\n\n<\/span>C. AWS Organizations to create a new OU with restricted S3 access.<\/button><\/li>\n\n<\/span>D. AWS KMS to encrypt S3 buckets and control access.<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> AWS IAM (Identity and Access Management) is the service for managing access. Creating an IAM role and attaching an AWS managed policy like ‘AmazonS3ReadOnlyAccess’ is a best practice. This adheres to the principle of least privilege by granting only the necessary permissions and allows for flexible assignment to users or services as needed within the department. While an inline policy on an IAM user could work, managed policies on roles are more scalable and maintainable for organizational use cases.\n <\/div>\n<\/div>\n\n
\n
7<\/span><\/p>\nA media company needs to store petabytes of archival video footage that is infrequently accessed but must be highly durable and accessible when needed. Cost-effectiveness for long-term storage is a primary concern. Which AWS storage service is best suited for this use case?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Amazon EBS General Purpose SSD (gp3)<\/button><\/li>\n\n<\/span>B. Amazon S3 Standard-IA<\/button><\/li>\n\n<\/span>C. Amazon S3 Glacier Deep Archive<\/button><\/li>\n\n<\/span>D. Amazon EFS Standard<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Amazon S3 Glacier Deep Archive is designed for long-term data archiving with retrieval times ranging from hours, offering the lowest cost storage in the cloud. This aligns perfectly with the need for cost-effective storage for petabytes of infrequently accessed archival video footage. Amazon EBS is block storage for EC2 instances, S3 Standard-IA is for less frequently accessed data but not deep archive, and Amazon EFS is a scalable file system for EC2 instances.\n <\/div>\n<\/div>\n\n
\n
8<\/span><\/p>\nAn enterprise finance team needs to visualize AWS spending trends, identify cost drivers, and get forecasts of future costs to better manage their cloud budget. Which AWS tool is specifically designed for these purposes?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. AWS Budgets<\/button><\/li>\n\n<\/span>B. AWS Cost Explorer<\/button><\/li>\n\n<\/span>C. AWS Trusted Advisor<\/button><\/li>\n\n<\/span>D. AWS Personal Health Dashboard<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> AWS Cost Explorer is a tool that allows you to visualize, understand, and manage your AWS costs and usage over time. You can use it to analyze your spending, identify cost drivers, and get forecasts of future costs. AWS Budgets allows you to set custom budgets and receive alerts, while Trusted Advisor provides recommendations for cost optimization, security, and performance. Personal Health Dashboard provides personalized views of AWS service health.\n <\/div>\n<\/div>\n\n
\n
9<\/span><\/p>\nAn application requires maximum uptime and resilience against failures of individual servers or data centers within a region. How does AWS recommend architecting an application to achieve this level of availability?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Deploying all application components in a single Availability Zone.<\/button><\/li>\n\n<\/span>B. Deploying application components across multiple Availability Zones within an AWS Region.<\/button><\/li>\n\n<\/span>C. Deploying application components across multiple AWS Regions.<\/button><\/li>\n\n<\/span>D. Utilizing a single dedicated host for all application components.<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> AWS recommends deploying application components across multiple Availability Zones (AZs) within an AWS Region to achieve high availability and fault tolerance. AZs are physically separate data centers, so distributing resources across them protects against failures of individual servers or an entire data center. Deploying in a single AZ creates a single point of failure. Deploying across multiple regions is for even higher levels of disaster recovery, not primarily ‘within a region’ availability. Dedicated hosts are for specific hardware requirements, not inherently for high availability.\n <\/div>\n<\/div>\n\n
\n
10<\/span><\/p>\nA security team needs to configure stateless filtering for incoming and outgoing traffic at the subnet level within their Amazon VPC. Which AWS networking security feature should they use?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Security Groups<\/button><\/li>\n\n<\/span>B. Network Access Control Lists (NACLs)<\/button><\/li>\n\n<\/span>C. AWS WAF<\/button><\/li>\n\n<\/span>D. Amazon Route 53<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Network Access Control Lists (NACLs) are stateless firewall rules that operate at the subnet level, allowing or denying traffic into and out of subnets. Security Groups are stateful firewalls that operate at the instance level. AWS WAF is a web application firewall, and Route 53 is a DNS service.\n <\/div>\n<\/div>\n<\/p>\n
\n [ ADVERTISEMENT SPACE – HIGH CPC ]\n<\/div>\n
\n
\n
11<\/span><\/p>\nA company needs to create a logically isolated section of the AWS Cloud where they can launch AWS resources in a virtual network that they define. This network should be completely separate from other AWS customer networks. Which AWS service provides this functionality?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Amazon S3<\/button><\/li>\n\n<\/span>B. Amazon EC2<\/button><\/li>\n\n<\/span>C. Amazon VPC<\/button><\/li>\n\n<\/span>D. Amazon RDS<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you’ve defined. This virtual network is logically isolated from other virtual networks in the AWS Cloud, giving you complete control over your virtual networking environment.\n <\/div>\n<\/div>\n\n
\n
12<\/span><\/p>\nA large organization has multiple AWS accounts for different departments and projects. To simplify billing management and potentially reduce costs, which AWS Organizations feature should they leverage?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Cost Allocation Tags<\/button><\/li>\n\n<\/span>B. Consolidated Billing<\/button><\/li>\n\n<\/span>C. AWS Budgets<\/button><\/li>\n\n<\/span>D. AWS Pricing Calculator<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Consolidated Billing, a feature of AWS Organizations, allows you to consolidate billing and payment for multiple AWS accounts into one master account. This simplifies billing management and can lead to cost savings through volume pricing discounts and Reserved Instance utilization across all linked accounts.\n <\/div>\n<\/div>\n\n
\n
13<\/span><\/p>\nA retail company experiences significant, unpredictable spikes in website traffic during holiday sales. Which AWS cloud characteristic allows their application infrastructure to automatically scale up or down to meet these fluctuating demands without manual intervention?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. Agility<\/button><\/li>\n\n<\/span>B. Global Reach<\/button><\/li>\n\n<\/span>C. Elasticity<\/button><\/li>\n\n<\/span>D. Durability<\/button><\/li>\n<\/ul>\n\n
\u2705 Verification & Rationale:<\/strong> Elasticity is the ability of a system to automatically scale computing resources up or down to meet fluctuating demands. This ensures that resources are always available when needed and that costs are optimized by not over-provisioning during low-demand periods. Agility refers to the speed of deploying resources, Global Reach to the worldwide infrastructure, and Durability to the long-term integrity of data.\n <\/div>\n<\/div>\n\n
\n
14<\/span><\/p>\nAn organization needs to ensure that data stored in their Amazon S3 buckets is encrypted at rest. Which AWS service is primarily used to manage encryption keys for various AWS services, including S3?<\/p>\n<\/p><\/div>\n
\n\n<\/span>A. AWS Shield<\/button><\/li>\n\n