AWS Cloud Practitioner CLF-C02 Exam Questions - 2025 Edition

Updated:

Our CLF-C02 Exam Questions deliver the latest real exam questions for the AWS Certified Cloud Practitioner certification, all validated by certified experts. Youโ€™ll get accurate answers with detailed explanations, including reasoning for incorrect choices and references for deeper learning. Plus, with our online exam simulator and free sample questions, Cert Empire helps you build confidence and achieve success in your CLF-C02 exam.

Exam Questions

Question 1

At what support level do users receive access to a support concierge?
Options
A: Basic Support
B: Developer Support
C: Business Support
D: Enterprise Support
Show Answer
Correct Answer:
Enterprise Support
Explanation
The AWS Support Concierge Team is a feature exclusive to the Enterprise Support plan. This team consists of AWS billing and account experts who provide quick and efficient assistance with non-technical inquiries. Their role is to help enterprise customers manage their billing and account needs, freeing up the customer's team to focus on technical aspects. This personalized service is a key differentiator of the highest support tier and is not available at the Basic, Developer, or Business levels.
Why Incorrect Options are Wrong

A. Basic Support: This plan offers customer service for account and billing questions but does not include a dedicated, proactive concierge team.

B. Developer Support: This plan focuses on providing technical support to developers and does not include advanced account management features like a concierge.

C. Business Support: While offering more comprehensive support than the Developer plan, the Business Support plan does not include the dedicated Concierge Support Team.

References

1. AWS Support. (n.d.). AWS Support Plans. Amazon Web Services. Retrieved from https://aws.amazon.com/premiumsupport/plans/.

Reference Detail: On the "Compare AWS Support plans" feature comparison table, the row "Concierge Support Team" has a checkmark only for the "Enterprise On-Ramp" and "Enterprise" plans. The description for this feature states, "The Concierge Support team are AWS billing and account experts that specialize in working with enterprise accounts."

2. AWS Whitepapers & Guides. (2023, September). AWS Support User Guide. Amazon Web Services.

Reference Detail: In the section "AWS Support plans," the description for the Enterprise plan explicitly mentions the Concierge Team as a key feature for handling billing and account inquiries. It is not listed as a feature for Basic, Developer, or Business plans.

Question 2

Which AWS service can a company use to visually design and build serverless applications?
Options
A: AWS Lambda
B: AWS Batch
C: AWS Application Composer
D: AWS App Runner
Show Answer
Correct Answer:
AWS Application Composer
Explanation
AWS Application Composer is a visual builder specifically designed to simplify and accelerate the process of creating serverless applications. It provides a drag-and-drop interface where developers can compose an application architecture using various AWS services. As components are added to the visual canvas, Application Composer automatically generates the corresponding Infrastructure as Code (IaC) templates (AWS SAM or CloudFormation). This visual approach helps in understanding, designing, and iterating on serverless application architectures before and during development.
Why Incorrect Options are Wrong

A. AWS Lambda is a serverless compute service that runs code in response to events. It is a component of serverless applications, not a tool to visually design them.

B. AWS Batch is a fully managed service for running large-scale batch computing jobs. It is not used for designing interactive or event-driven serverless applications.

D. AWS App Runner is a managed service for quickly deploying containerized web applications and APIs. It simplifies deployment but is not a visual design or composition tool.

References

1. AWS Application Composer Developer Guide: "AWS Application Composer is a visual builder that you can use to design and build serverless applications from multiple AWS services. With Application Composer, you can drag and drop AWS services onto a visual canvas to create your application architecture." (Source: AWS Application Composer Developer Guide, "What is AWS Application Composer?", Introduction section).

2. AWS Lambda Developer Guide: "AWS Lambda is a compute service that lets you run code without provisioning or managing servers. Lambda runs your code on a high-availability compute infrastructure and performs all of the administration of the compute resources..." (Source: AWS Lambda Developer Guide, "What is AWS Lambda?", Introduction section).

3. AWS Batch User Guide: "AWS Batch enables you to run batch computing workloads on the AWS Cloud. Batch computing is a common way for developers, scientists, and engineers to access large amounts of compute resources." (Source: AWS Batch User Guide, "What is AWS Batch?", Introduction section).

4. AWS App Runner Developer Guide: "AWS App Runner is an AWS service that provides a fast, simple, and cost-effective way to deploy from source code or a container image directly to a scalable and secure web application." (Source: AWS App Runner Developer Guide, "What is AWS App Runner?", Introduction section).

Question 3

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS. Where can the company purchase the security solution?
Options
A: AWS Partner Solutions Finder
B: AWS Support Center
C: AWS Management Console
D: AWS Marketplace
Show Answer
Correct Answer:
AWS Marketplace
Explanation
AWS Marketplace is a curated digital catalog that customers can use to find, buy, deploy, and manage third-party software, data, and services that run on AWS. The scenario describes a company needing to purchase a security solution from a vendor that offers it on AWS. AWS Marketplace is the designated service for this type of transaction, simplifying the procurement and deployment process. It allows customers to purchase software and have the charges integrated into their existing AWS bill, fulfilling the company's requirement directly.
Why Incorrect Options are Wrong

A. AWS Partner Solutions Finder is a directory to locate AWS Partners for consulting or technology services, not a direct software purchasing platform.

B. AWS Support Center is for obtaining technical assistance, managing support cases, and handling billing inquiries, not for procuring software.

C. AWS Management Console is the broad web interface for managing AWS services, whereas AWS Marketplace is the specific service within it for software procurement.

References

1. AWS Marketplace Documentation. (n.d.). What is AWS Marketplace? AWS. Retrieved from https://docs.aws.amazon.com/marketplace/latest/buyerguide/what-is-marketplace.html. In the introductory paragraph, it states, "AWS Marketplace is a curated digital catalog that you can use to find, buy, deploy, and manage third-party software, data, and services that you need to build solutions and run your businesses."

2. AWS Marketplace Documentation. (n.d.). Finding products. AWS Marketplace Buyer Guide. Retrieved from https://docs.aws.amazon.com/marketplace/latest/buyerguide/finding-products.html. This section details how customers can search for and discover software from independent software vendors.

3. AWS Partner Network Documentation. (n.d.). Find an AWS Partner. AWS. Retrieved from https://aws.amazon.com/partners/find/. This source describes the tool's function as helping customers find partners for specific business needs, which is distinct from a software marketplace.

Question 4

A company has deployed an Amazon EC2 instance. Which option is an AWS responsibility under the AWS shared responsibility model?
Options
A: Managing and encrypting application data
B: Installing updates and security patches of guest operating system
C: Configuration of infrastructure devices
D: Configuration of security groups on each instance
Show Answer
Correct Answer:
Configuration of infrastructure devices
Explanation
Under the AWS Shared Responsibility Model, AWS is responsible for the security of the cloud. This includes the hardware, software, networking, and facilities that run AWS Cloud services. For an Infrastructure as a Service (IaaS) offering like Amazon EC2, AWS manages the physical infrastructure, including compute, storage, and networking devices, as well as the virtualization layer. The customer is responsible for security in the cloud, which involves managing the guest operating system, applications, and security configurations like security groups and data encryption.
Why Incorrect Options are Wrong

A. Managing and encrypting application data is a customer responsibility. AWS provides the tools, but the customer implements and manages data security.

B. The customer is responsible for the guest operating system, including applying security patches and updates.

D. Configuring security groups, which act as a virtual firewall for instances, is a fundamental customer security responsibility.

References

1. AWS Documentation, "Shared Responsibility Model": This official page clearly outlines the division of responsibilities. The diagram under the "Shared Responsibility Model" section shows that AWS is responsible for the "Hardware" and "Software" of the "AWS Global Infrastructure," while the customer is responsible for "Operating system, network & firewall configuration" and "Client-side data encryption." This directly supports that AWS manages infrastructure devices (C) and the customer manages the other options (A, B, D).

Source: AWS Documentation, https://aws.amazon.com/compliance/shared-responsibility-model/

2. AWS Whitepaper, "AWS Security Pillar - AWS Well-Architected Framework": This whitepaper details the shared responsibility model. In the section "Shared Responsibility Model," it states, "AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services." This confirms that infrastructure device configuration (C) is an AWS responsibility.

Source: AWS Well-Architected Framework, Security Pillar, Page 5, "Shared Responsibility Model" section.

3. Cornell University, CS 5412: Cloud Computing, Lecture 2: University courseware often clarifies these concepts. Materials for cloud computing courses explain that for IaaS (like EC2), the cloud provider (AWS) manages the physical layers up to the hypervisor. The user manages everything from the guest OS upwards. This aligns with AWS being responsible for the underlying infrastructure devices.

Source: Cornell University, Department of Computer Science, Course materials for CS 5412. (General reference to common academic curriculum on IaaS models).

Question 5

Elasticity in the AWS Cloud refers to which of the following? (Select TWO.)
Options
A: How quickly an Amazon EC2 instance can be restarted
B: The ability to rightsized resources as demand shifts
C: The maximum amount of RAM an Amazon EC2 instance can use
D: The pay-as-you-go billing model
E: How easily resources can be procured when they are needed
Show Answer
Correct Answer:
The ability to rightsized resources as demand shifts, How easily resources can be procured when they are needed
Explanation
Elasticity in the AWS Cloud is the ability to dynamically acquire and release computing resources to match workload demands precisely. This means you can automatically scale out (add resources) when demand increases and scale in (remove resources) when demand subsides. This capability allows for "rightsizing" resources as demand shifts (B), ensuring optimal performance without over-provisioning. A core component of this is the ease and speed with which resources can be procured on-demand (E), eliminating the long lead times associated with traditional on-premises hardware acquisition.
Why Incorrect Options are Wrong

A. How quickly an Amazon EC2 instance can be restarted relates to the availability and operational performance of a single resource, not the system's ability to scale capacity.

C. The maximum amount of RAM an Amazon EC2 instance can use is a static hardware specification of an instance type, not a dynamic characteristic of the cloud environment.

D. The pay-as-you-go billing model is a financial benefit enabled by elasticity, but it is not the definition of elasticity itself. Elasticity is the technical capability.

References

1. AWS Whitepaper, "Overview of Amazon Web Services" (July 2023): In the section "Six advantages of cloud computing," it states, "With cloud computing, you donโ€™t have to provision resources up front to handle peak levels of business activity in the future. Instead, you provision the amount of resources that you actually need. You can scale these resources up or down to instantly grow and shrink capacity as your business needs change. This is known as elasticity." (p. 4). This directly supports options B and E.

2. AWS Well-Architected Framework, "Performance Efficiency Pillar" (July 2023): Under the principle "Democratize advanced technologies," it explains, "In the cloud, you can provision the amount of resources that you actually need... You can easily scale your resources up or down to meet demand without long delays or lead times." (p. 6). This highlights the ease of procurement (E) and scaling to meet demand (B).

3. AWS Cloud Practitioner Essentials, Digital Training: The module on "Cloud Concepts Overview" defines elasticity as the ability to "acquire resources as you need them and release resources when you no longer need them." This concept directly maps to procuring resources when needed (E) and rightsizing as demand shifts (B).

Question 6

A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently. Which AWS service or resource will meet these requirements with the LEAST management overhead?
Options
A: PostgreSQL on Amazon EC2
B: Amazon RDS for PostgreSQL
C: Amazon Aurora PostgreSQL-Compatible Edition
D: Amazon Aurora Serverless
Show Answer
Correct Answer:
Amazon Aurora Serverless
Explanation
The key requirements are a PostgreSQL-compatible database that is used infrequently and requires the least management overhead. Amazon Aurora Serverless is specifically designed for applications with intermittent, infrequent, or unpredictable workloads. It automatically starts up, shuts down, and scales compute capacity based on application demand. When the database is not in use, it can scale down to zero, minimizing costs. This on-demand, auto-scaling nature eliminates the need for capacity planning and management, thus offering the lowest management overhead among the given options.
Why Incorrect Options are Wrong

A. PostgreSQL on Amazon EC2: This option has the highest management overhead, as the user is responsible for all database administration, patching, and backups.

B. Amazon RDS for PostgreSQL: While a managed service, it requires provisioning a specific instance size that runs continuously, which is not cost-effective or optimal for infrequent use.

C. Amazon Aurora PostgreSQL-Compatible Edition: This is a provisioned service. It requires manual capacity management and runs 24/7, incurring higher costs and management effort for an infrequent workload compared to the serverless version.

References

1. Amazon Aurora User Guide, "Amazon Aurora Serverless v2": "Aurora Serverless v2 is ideal for a broad set of applications. For example, it's well-suited for applications that have infrequent or unpredictable workloads... With Aurora Serverless v2, you don't have to provision, scale, and manage any database servers." This directly supports the choice for infrequent workloads and least management overhead.

2. AWS Documentation, "Databases on AWS": This page outlines the spectrum of database services. It positions self-managed databases on Amazon EC2 as requiring the most customer management, while managed services like Amazon RDS and Amazon Aurora reduce that burden. Aurora Serverless is presented as the option that further minimizes management by automating scaling and capacity.

3. AWS Documentation, "Amazon RDS features": Under "Easy to Manage," the documentation states that RDS "reduces your administrative burden," but it still involves provisioning and managing DB instances. This contrasts with Aurora Serverless, which automates this process entirely.

4. AWS Documentation, "Best practices for running PostgreSQL on Amazon EC2": This guide details the user's responsibilities, including "installing and maintaining the PostgreSQL software," "configuring high availability and disaster recovery," and "managing backups." This confirms it is the highest-overhead option.

Question 7

A company is using Amazon DynamoDB for its application database. Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)
Options
A: Classify data.
B: Configure access permissions.
C: Manage encryption options.
D: Provide public endpoints to store and retrieve data.
E: Manage the infrastructure layer and the operating system.
Show Answer
Correct Answer:
Provide public endpoints to store and retrieve data., Manage the infrastructure layer and the operating system.
Explanation
Under the AWS Shared Responsibility Model for managed services like Amazon DynamoDB, AWS is responsible for the security of the cloud. This includes managing and securing the underlying physical infrastructure, the host operating system, the virtualization layer, and the physical security of the facilities where the service operates. AWS also provides and manages the service endpoints, which are the access points for customers to store and retrieve data. The customer's responsibility (security in the cloud) includes managing their data, classifying it, configuring access controls using IAM, and managing encryption settings for their data within the service.
Why Incorrect Options are Wrong

A. Classify data: Data classification is always the customer's responsibility, as they own the data and understand its sensitivity.

B. Configure access permissions: The customer is responsible for defining and configuring who can access their DynamoDB tables using AWS IAM policies and roles.

C. Manage encryption options: The customer is responsible for choosing and configuring encryption settings for their data, such as selecting AWS owned, AWS managed, or customer managed keys.

References

1. AWS Shared Responsibility Model Documentation: AWS is responsible for the "Software" components of its managed services, which includes the underlying systems for services like DynamoDB, and the "Hardware/AWS Global Infrastructure," which includes the physical servers and networking. The customer is responsible for "Customer Data" and "Identity & Access Management."

Source: AWS Compliance, "AWS Shared Responsibility Model." (aws.amazon.com/compliance/shared-responsibility-model/)

2. Amazon DynamoDB Developer Guide: The documentation explicitly states, "AWS is responsible for protecting the global infrastructure that runs all of the AWS Cloud... You are responsible for maintaining control over your data that is hosted on this infrastructure. This includes the security configuration controls you use for your DynamoDB resources." This confirms that infrastructure (E) is an AWS responsibility, while configuration (B, C) and data management (A) are customer responsibilities.

Source: AWS Documentation, "Security in Amazon DynamoDB," Shared Responsibility Model section. (docs.aws.amazon.com/amazondynamodb/latest/developerguide/security.html)

3. University Courseware: Reputable university courses on cloud computing reinforce this model. For instance, course materials often illustrate that for "abstracted services" like DynamoDB, AWS manages the infrastructure, OS, and platform, while the user manages access control and their data.

Source: Patterson, D. A., & Armbrust, M. (2017). CS 61C: Great Ideas in Computer Architecture (Machine Structures), Lecture 26: Cloud Computing. University of California, Berkeley. Slide 33, "AWS Shared Responsibility Model."

Question 8

A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and scalable DNS web service to connect users to the platform. Which AWS service will meet these requirements?
Options
A: Amazon EC2
B: Amazon VPC
C: Amazon Route 53
D: Amazon RDS
Show Answer
Correct Answer:
Amazon Route 53
Explanation
Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. Its primary function is to translate human-readable domain names (e.g., www.company.com) into the numeric IP addresses that computers use to connect to each other. This service is designed to route end users to internet applications, making it the correct choice for a company needing a DNS service to connect customers to its global ecommerce platform. Route 53 is engineered for 100% availability and offers various routing policies to direct traffic globally.
Why Incorrect Options are Wrong

A. Amazon EC2 provides scalable virtual server compute capacity in the cloud. It is used to run the application, not to perform DNS routing.

B. Amazon VPC provides a logically isolated section of the AWS Cloud. It is a foundational networking service, not a public DNS service for routing users.

D. Amazon RDS is a managed service for relational databases. It is used for storing and managing application data, not for directing user traffic.

References

1. Amazon Route 53 Documentation: "Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. You can use Route 53 to perform three main functions in any combination: domain registration, DNS routing, and health checking."

Source: AWS Documentation, "What is Amazon Route 53?", Section: "Route 53 as a DNS service".

2. Overview of Amazon Web Services Whitepaper: "Amazon Route 53 provides a highly available and scalable Domain Name System (DNS)... It effectively connects user requests to infrastructure running in AWSโ€”such as Amazon EC2 instances...โ€”as well as to infrastructure outside of AWS."

Source: AWS Whitepapers, "Overview of Amazon Web Services", August 2022, Page 31.

3. Amazon EC2 Documentation: "Amazon Elastic Compute Cloud (Amazon EC2) provides scalable computing capacity in the Amazon Web Services (AWS) Cloud. Using Amazon EC2 eliminates your need to invest in hardware up front, so you can develop and deploy applications faster."

Source: AWS Documentation, "What is Amazon EC2?".

4. Amazon VPC Documentation: "Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you've defined. This virtual network closely resembles a traditional network that you'd operate in your own data center..."

Source: AWS Documentation, "What is Amazon VPC?".

Question 9

Which maintenance task is the customer's responsibility, according to the AWS shared responsibility model?
Options
A: Physical connectivity among Availability Zones
B: Network switch maintenance
C: Hardware updates and firmware patches
D: Amazon EC2 updates and security patches
Show Answer
Correct Answer:
Amazon EC2 updates and security patches
Explanation
According to the AWS shared responsibility model, AWS is responsible for the security of the cloud, which includes the hardware, software, networking, and facilities that run AWS Cloud services. The customer is responsible for security in the cloud. For Infrastructure as a Service (IaaS) products like Amazon EC2, the customer's responsibility includes managing the guest operating system. This management task explicitly involves installing updates and applying security patches to protect the instance from vulnerabilities. AWS manages the hypervisor and the physical host machine, but the OS and applications running on the EC2 instance are under the customer's control and responsibility.
Why Incorrect Options are Wrong

A. Physical connectivity among Availability Zones is part of the AWS Global Infrastructure, which AWS manages and maintains.

B. Network switch maintenance is a component of the physical data center infrastructure, for which AWS is solely responsible.

C. Hardware updates and firmware patches for the underlying physical servers are managed by AWS as part of their responsibility for the cloud infrastructure.

References

1. AWS Documentation, "Shared Responsibility Model": The official documentation clearly outlines the division of responsibilities. For IaaS services like Amazon EC2, the model shows that the customer is responsible for the "Guest Operating System (including updates and security patches)". AWS's responsibility ends at the hypervisor level.

Source: AWS Documentation, Shared Responsibility Model, aws.amazon.com/compliance/shared-responsibility-model/.

2. AWS Well-Architected Framework, Security Pillar (July 2023): This whitepaper reinforces the model. In the section "Understanding the shared responsibility model," it states, "For IaaS services, such as Amazon EC2, AWS manages the infrastructure... You are responsible for the guest operating system (including security patches and updates), any application software or utilities you install on the instances, and the configuration of the AWS-provided firewall (called a security group) on each instance."

Source: AWS Whitepaper, AWS Well-Architected Framework, Security Pillar, Page 6.

3. Amazon EC2 User Guide for Linux Instances, "Security and network concepts in Amazon EC2": The user guide specifies the customer's role in securing their instances. It states, "You are responsible for the security of your instances, including patching and maintaining the operating systems and applications, configuring the operating system firewall, and configuring the security groups and network ACLs."

Source: AWS Documentation, Amazon EC2 User Guide for Linux Instances, docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-concepts.html.

Question 10

Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?
Options
A: AWS Direct Connect
B: VPC peering
C: AWS VPN
D: Amazon Route 53
Show Answer
Correct Answer:
AWS Direct Connect
Explanation
AWS Direct Connect is a cloud service that establishes a dedicated, private network connection from an on-premises data center to AWS. This connection does not traverse the public internet, which can reduce network costs, increase bandwidth throughput, and provide a more consistent network experience compared to internet-based connections. It is the specific service designed for the requirement of a "dedicated network connection" as stated in the question.
Why Incorrect Options are Wrong

B. VPC peering is used to connect two Amazon VPCs together, not an on-premises data center to the AWS Cloud.

C. AWS VPN establishes a secure connection over the public internet using IPsec tunnels, not a dedicated, private physical connection.

D. Amazon Route 53 is a scalable Domain Name System (DNS) web service used for domain registration and routing traffic to resources, not for establishing network connectivity.

References

1. AWS Direct Connect User Guide. (2023). What is AWS Direct Connect? Amazon Web Services. "AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS."

2. AWS Site-to-Site VPN User Guide. (2023). What is AWS Site-to-Site VPN? Amazon Web Services. "AWS Site-to-Site VPN creates a secure connection between your data center or branch office and your AWS resources." This guide clarifies that the connection is made via IPsec tunnels over the internet.

3. Amazon VPC Peering Guide. (2023). What is VPC peering? Amazon Web Services. "A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them privately."

4. Amazon Route 53 Developer Guide. (2023). What is Amazon Route 53? Amazon Web Services. "Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service."

Sale!
Total Questions821
Last Update Check October 16, 2025
Online Simulator PDF Downloads
50,000+ Students Helped So Far
$30.00 $50.00 40% off
Rated 5 out of 5
5.0 (9 reviews)

Instant Download & Simulator Access

Secure SSL Encrypted Checkout

100% Money Back Guarantee

What Users Are Saying:

Rated 5 out of 5

โ€œThe practice questions were spot on. Felt like I had already seen half the exam. Passed on my first try!โ€

Sarah J. (Verified Buyer)

Download Free Demo PDF Free CLF-C02 Practice Test
Shopping Cart
Scroll to Top

FLASH OFFER

Days
Hours
Minutes
Seconds

avail $6 DISCOUNT on YOUR PURCHASE