SaveMyCert
Log in
5 of 5 free questions left today·for 30 a day
CLF-C02 practice

Free CLF-C02 practice questions

Drill exam-realistic AWS Certified Cloud Practitioner questions by domain, with an explanation on every option — not just the right one. 5 fully worked examples are further down this page, answers included.

Question bank
581
across 4 domains
Free, no account
5/day
a free account allows 30 a day
Real exam
65 Qs
90 min · pass 700 / 1000
Explanations
Every option
right and wrong

Build a practice session

5 free questions left today.

Domains

How many?

Mode

Ready when you are

10 fresh questions drawn across all domains, in Learn mode.

Focused review

Every question you answer incorrectly, and every question you flag while practising, is saved here automatically. Finish a session and you can come back to re-drill just those.

5 sample CLF-C02 questions, fully explained

Real questions from the CLF-C02 bank, with the answer key and the reasoning behind every option. Read them, then go back up the page and try the rest.

Question 1Cloud Concepts

Which statement best describes the value proposition of the AWS Cloud?

Choose one.

  • a
    Use IT resources on demand and pay only for the capacity actually consumed Correct

    Correct. The AWS value proposition is on-demand access to IT resources over the internet with pay-as-you-go pricing, replacing the purchase and operation of your own hardware.

  • b
    Buy AWS-designed servers upfront and run them in the company's own data center

    This keeps the on-premises model of upfront hardware purchases and self-run facilities, which is exactly what the AWS Cloud replaces.

  • c
    Pay a fixed annual subscription that covers a set bundle of AWS services

    AWS pricing is metered by actual usage; a fixed subscription for a service bundle would mean paying for capacity whether or not it is used.

  • d
    Hand existing on-premises servers to AWS staff, who run them for a monthly fee

    That describes an outsourced managed-hosting arrangement for customer-owned hardware, not consuming AWS-owned resources on demand.

The concept

The AWS Cloud value proposition is why organizations choose AWS over traditional on-premises IT: resources are available on demand and billed pay-as-you-go, instead of being bought and operated by the customer.

Why that’s the answer

Using resources on demand and paying only for what is consumed captures both halves of the value proposition: no procurement cycle, and costs that follow usage. Buying AWS-designed servers upfront is tempting because it mentions AWS, but it keeps the capital purchase and self-run facility the cloud removes. A fixed annual subscription sounds predictable, yet AWS bills by metered usage rather than a flat bundle. Handing servers to AWS staff describes outsourced hosting of customer-owned gear, which is a different business from the AWS Cloud.

How to reason it out
  1. Recall that a value proposition states what the customer gains compared with the alternative, here on-premises IT.
  2. Identify the two defining traits of the AWS model: on-demand consumption and pay-as-you-go pricing.
  3. Eliminate anything that keeps upfront hardware purchases, flat fees regardless of use, or customer-owned servers.
  4. Select the statement that pairs on-demand resources with usage-based billing.

Exam tip: AWS value proposition = on-demand resources + pay only for what you use, instead of owning hardware.

Benefits of the AWS Cloud: Value Proposition, Elasticity & Global Reach — the lesson that teaches this.

Question 2Security and Compliance

Which statement best describes the AWS shared responsibility model?

Choose one.

  • a
    AWS is responsible for security of the cloud and for the customer data stored in it.

    AWS secures the infrastructure, but customer data stored on it is the customer's responsibility on every service. This option extends AWS's side into security IN the cloud.

  • b
    The customer is responsible for security of the cloud, and AWS is responsible for security in the cloud.

    This swaps the two sides. Customers cannot secure AWS facilities or hardware, and AWS does not decide how customer data and access are configured.

  • c
    AWS is responsible for security of the cloud, and the customer is responsible for security in the cloud. Correct

    This is the model's own summary: AWS secures the infrastructure that runs its services, and the customer secures what it deploys and stores on that infrastructure.

  • d
    AWS is responsible for security in managed services, and the customer is responsible for security in Amazon EC2.

    The split is not drawn by service type. On every service AWS owns the infrastructure and the customer owns its data and access; what changes between services is only how far AWS's side reaches.

The concept

The AWS shared responsibility model divides security duties: AWS handles security OF the cloud (the infrastructure that runs AWS services), and the customer handles security IN the cloud (what it puts on that infrastructure).

Why that’s the answer

The key restates AWS's summary of the model: security OF the cloud belongs to AWS, security IN the cloud belongs to the customer. The swapped version is the classic trap for a rushed reader. The option that gives AWS the customer's data as well treats migration as outsourcing security, which the model exists to correct. The managed-versus-EC2 option confuses the model with its nuance: how much AWS manages does shift by service, but both parties have duties on every service.

How to reason it out
  1. Recall the summary phrase: OF the cloud = AWS, IN the cloud = customer.
  2. Reject the option that swaps OF and IN.
  3. Reject any option that hands customer data to AWS, since data is always the customer's.
  4. Reject a split drawn by service type; both parties have duties on every service.

Exam tip: AWS = security OF the cloud; customer = security IN the cloud.

AWS Shared Responsibility Model: Security OF the Cloud vs IN the Cloud — the lesson that teaches this.

Question 3Cloud Technology and Services

A newly hired administrator wants to explore the services in a company's AWS account by using a visual, web-based interface with guided wizards and dashboards. Which access method should the administrator use?

Choose one.

  • a
    AWS CloudShell

    CloudShell is browser-based, but it is a command-line shell with the AWS CLI preinstalled, not a visual interface with wizards and dashboards.

  • b
    AWS Management Console Correct

    The Management Console is the web-based graphical interface designed for humans to explore services visually through wizards, forms, and dashboards.

  • c
    AWS Cloud Development Kit

    The CDK is a framework for defining infrastructure in programming languages; it offers no visual way for a person to browse an account.

  • d
    AWS CloudFormation

    CloudFormation provisions infrastructure from templates; it is an infrastructure-as-code service, not an interactive way to browse an account.

The concept

AWS offers several ways to access its services: the web-based Management Console for humans, the CLI for terminal scripting, SDKs for application code, and infrastructure as code for provisioning environments.

Why that’s the answer

The scenario describes a person who is new to the account and wants a visual, guided experience, which is the defining use case for the AWS Management Console: browser sign-in, wizards, forms and dashboards with no commands or code. CloudShell is the tempting distractor because it also opens in a browser, but it is a terminal for typing CLI commands, not a graphical interface. The CDK defines infrastructure in program code, and CloudFormation provisions resources from templates; neither is a way for a person to explore an account interactively.

How to reason it out
  1. Identify the actor: a person, not a script or an application.
  2. Identify the need: visual exploration with wizards and dashboards.
  3. Separate 'runs in a browser' (CloudShell is a browser terminal) from 'graphical interface'.
  4. Match a person doing visual, exploratory work to the Management Console.

Exam tip: A person exploring AWS visually or performing one-time tasks uses the AWS Management Console.

Deploying and Operating in AWS: Console, CLI, SDKs, IaC, and Connectivity — the lesson that teaches this.

Question 4Billing, Pricing, and Support

A startup is launching a brand-new web application and has no historical data about how much traffic it will receive. The team wants to avoid any long-term commitment while it measures real usage. Which EC2 purchasing option should the startup use?

Choose one.

  • a
    Standard Reserved Instances

    Reserved Instances require a one- or three-year commitment to specific instance attributes, which makes no sense before real usage is known.

  • b
    Spot Instances

    Spot Instances can be interrupted with a two-minute warning, which is unsuitable for a customer-facing application that must stay available.

  • c
    On-Demand Instances Correct

    On-Demand requires no commitment and lets the team start, stop, and resize freely while measuring the new workload's real usage.

  • d
    Dedicated Hosts

    Dedicated Hosts allocate an entire physical server for licensing or compliance needs and are the most expensive option, none of which applies here.

The concept

On-Demand Instances are the default EC2 pricing model: pay the published rate while the instance runs, with no upfront payment and no long-term contract.

Why that’s the answer

A first-time application with unknown usage is the classic On-Demand trigger. The team cannot forecast a baseline, so committing to a Reserved Instance would risk paying for capacity that is never used, and the workload is customer-facing, so Spot interruption is unacceptable. Dedicated Hosts solve hardware isolation and BYOL licensing problems, not commitment problems, and carry the highest cost. The common AWS pattern is to run new workloads On-Demand first, measure steady-state usage, and only then cover that measured baseline with a commitment.

How to reason it out
  1. Identify the workload traits: brand new, unpredictable usage, no commitment desired.
  2. Eliminate commitment-based options (Reserved Instances) because usage cannot be forecast yet.
  3. Eliminate Spot because a customer-facing app cannot tolerate a two-minute interruption.
  4. Eliminate Dedicated Hosts because there is no licensing or physical-isolation requirement.
  5. Choose On-Demand: full flexibility now, commit later once usage is measured.

Exam tip: Unpredictable, short-term, or first-time workloads point to On-Demand Instances.

AWS Pricing Models Explained: On-Demand, Reserved, Spot & Savings Plans — the lesson that teaches this.

Question 5Cloud Concepts

For years, a company purchased servers based on demand forecasts made two years in advance, and it frequently ended up with idle hardware. After moving to AWS, the company provisions resources for current demand and adjusts them as demand changes. Which advantage of the AWS Cloud does this describe?

Choose one.

  • a
    Stop guessing capacity Correct

    Correct. The scenario is about replacing long-range demand forecasting and overprovisioning with provisioning for actual demand, which is exactly the stop-guessing-capacity advantage.

  • b
    Benefit from massive economies of scale

    Economies of scale explains why AWS unit prices are low due to aggregated customer usage; the scenario is about capacity forecasting, not pricing.

  • c
    Go global in minutes

    Going global concerns deploying to new geographic Regions quickly; nothing in the scenario involves geography.

  • d
    Increase speed and agility

    Agility is about faster experimentation and time to market; the scenario focuses on eliminating capacity forecasts and idle hardware, not innovation speed.

The concept

Stop guessing capacity is the advantage that removes long-range demand forecasting: instead of overprovisioning or underprovisioning years ahead, you provision for actual demand and adjust at any time.

Why that’s the answer

The stem's signals are multi-year forecasts and idle hardware from overbuying, followed by provisioning to actual demand in AWS. That is the textbook description of stop guessing capacity. Economies of scale is tempting because both relate to cost, but it explains low unit prices from aggregated customer demand, not capacity planning. Go global in minutes involves geographic expansion, which is absent here. Speed and agility would require language about experimentation or time to market, which the scenario never mentions.

How to reason it out
  1. Identify the pain in the scenario: forecasting demand years ahead and buying hardware that sits idle.
  2. Identify the change after AWS: capacity matches current demand and can be adjusted anytime.
  3. Map forecasting-and-overprovisioning language to the stop-guessing-capacity advantage.
  4. Rule out economies of scale (pricing), global reach (geography), and agility (experimentation speed).

Exam tip: Forecasting demand and overprovisioning or underprovisioning hardware points to stop guessing capacity.

Benefits of the AWS Cloud: Value Proposition, Elasticity & Global Reach — the lesson that teaches this.

The CLF-C02 question bank, by domain

The bank is built to the exam's own weighting, so the practice you get reflects the marks that are actually on offer — not whichever domain was easiest to write questions for.

Published CLF-C02 practice questions per exam domain
DomainExam weightTopicsQuestions
Cloud Concepts24%4139
Security and Compliance30%4173
Cloud Technology and Services34%8200
Billing, Pricing, and Support12%369
Total100%19581

Practise CLF-C02 one domain at a time

How CLF-C02 questions are worded

Most CLF-C02 questions are not asking whether you can recall a definition. They describe a situation and ask which option satisfies it — so the skill being tested is reading the requirement precisely and eliminating options that fail it.

Single-response vs multiple-response

A single-response question has exactly one right answer. A multiple-response question tells you how many to pick ("Choose TWO") and there is no partial credit — getting one of the two right scores nothing. Read that instruction before you read the options.

Read the last line first

The final sentence is the actual question; everything before it is scenario. Read it first, then read the scenario knowing what you are looking for. It stops you from building an answer in your head that the question never asked for.

Hunt for the qualifier

Most scenarios turn on one word — MOST cost-effective, LEAST operational overhead, with the LEAST latency, without changing application code. Two options are frequently both technically correct, and the qualifier is the only thing separating them.

Eliminate, then choose

Distractors are almost always real AWS services doing a real job — just not this job. Rule out the ones that break a stated constraint before you compare what's left. On a question you truly don't know, eliminating two options turns a guess into a coin flip.

Practise CLF-C02 from your browser

The SaveMyCert Chrome extension opens a daily drill of 5 CLF-C02 questions in the side panel, with the full explanation behind every answer. No account needed.

Get the Chrome extension (opens in a new tab)

Beyond CLF-C02 practice

CLF-C02 practice questions: your questions

Yes. You can answer 5 questions a day with no account at all, and a free account raises that to 30 a day across the full 581-question CLF-C02 bank, with an explanation on every option. Pro removes the daily cap entirely.

Source

Exam structure, domain weights and scoring on this page come from the official CLF-C02 exam guide.