AWS Certified Cloud Practitioner CLF-C02
Practice Exam 2026 Guide
1. A change or a failure in one component should not Loose coupling
cascade to other components.
2. A gateway that enables your Amazon EC2 instances in Internet Gateway
the public subnet to connect to the public Internet.
3. A gateway that enables your EC2 instances in the pri- NAT Gateway
vate subnet to connect to the public Internet.
4. A security management tool to configure your AWS AWS Firewall Manager
WAF rules across your accounts.
5. Compliance-related documents in AWS such as Ser- AWS Artifact
vice Organization Controls (SOC) reports
6. An IAM identity that uses access keys to manage cloud IAM User
resources via AWS CLI.
7. A role that grants temporary access to your AWS re- IAM Role
sources.
8. Manages the common access permissions to a large IAM Group
number of IAM users in AWS.
9. A resource-based policy that you can use to grant Bucket Policy
access permissions to your bucket and the objects in
it.
10. Provides AWS credentials to grant your users access Amazon Cognito Identity
to other AWS services. Pools
11. A service that discovers, classifies, and protects sensi- Amazon Macie
tive data such as personally identifiable information
(PII) or intellectual property.
, AWS Certified Cloud Practitioner CLF-C02
Practice Exam 2026 Guide
12. A threat detection service that continuously monitors Amazon GuardDuty
for malicious activity to protect your AWS account.
13. An authentication method that prevents unautho- Multi-Factor Authentica-
rized deletion of Amazon S3 objects. tion (MFA)
14. It acts as a virtual firewall in AWS that controls the Security Group
traffic at the EC2 instance level.
15. An automated security assessment service to improve Amazon Inspector
the security and compliance of your applications.
16. An AWS global network that improves availability of AWS Global Accelerator
deployed applications on AWS using an anycast static
IP address.
17. A data transport service that securely moves AWS Snowball
petabyte-scale data into and out of the AWS Cloud.
18. A service that allows you to continuously monitor and AWS CloudTrail
log account activities such as the user actions made
from the AWS Management Console and AWS SDKs.
19. A source control service that allows you to host AWS CodeCommit
Git-based repositories.
20. A type of an EC2 instance that allows you to use your Dedicated Host
existing server-bound software licenses.
21. A highly available and scalable cloud DNS web service Amazon Route 53
in AWS.
22. AWS Auto Scaling
Practice Exam 2026 Guide
1. A change or a failure in one component should not Loose coupling
cascade to other components.
2. A gateway that enables your Amazon EC2 instances in Internet Gateway
the public subnet to connect to the public Internet.
3. A gateway that enables your EC2 instances in the pri- NAT Gateway
vate subnet to connect to the public Internet.
4. A security management tool to configure your AWS AWS Firewall Manager
WAF rules across your accounts.
5. Compliance-related documents in AWS such as Ser- AWS Artifact
vice Organization Controls (SOC) reports
6. An IAM identity that uses access keys to manage cloud IAM User
resources via AWS CLI.
7. A role that grants temporary access to your AWS re- IAM Role
sources.
8. Manages the common access permissions to a large IAM Group
number of IAM users in AWS.
9. A resource-based policy that you can use to grant Bucket Policy
access permissions to your bucket and the objects in
it.
10. Provides AWS credentials to grant your users access Amazon Cognito Identity
to other AWS services. Pools
11. A service that discovers, classifies, and protects sensi- Amazon Macie
tive data such as personally identifiable information
(PII) or intellectual property.
, AWS Certified Cloud Practitioner CLF-C02
Practice Exam 2026 Guide
12. A threat detection service that continuously monitors Amazon GuardDuty
for malicious activity to protect your AWS account.
13. An authentication method that prevents unautho- Multi-Factor Authentica-
rized deletion of Amazon S3 objects. tion (MFA)
14. It acts as a virtual firewall in AWS that controls the Security Group
traffic at the EC2 instance level.
15. An automated security assessment service to improve Amazon Inspector
the security and compliance of your applications.
16. An AWS global network that improves availability of AWS Global Accelerator
deployed applications on AWS using an anycast static
IP address.
17. A data transport service that securely moves AWS Snowball
petabyte-scale data into and out of the AWS Cloud.
18. A service that allows you to continuously monitor and AWS CloudTrail
log account activities such as the user actions made
from the AWS Management Console and AWS SDKs.
19. A source control service that allows you to host AWS CodeCommit
Git-based repositories.
20. A type of an EC2 instance that allows you to use your Dedicated Host
existing server-bound software licenses.
21. A highly available and scalable cloud DNS web service Amazon Route 53
in AWS.
22. AWS Auto Scaling
