1|Page
AWS Certified Cloud Practitioner CLF-C02 Exam –
Amazon Web Services (AWS)||Verified Exam!!|| –
2026/2027 Edition – Questions and Answers for IT
Professionals and Cloud Certification Candidates
A security management tool to configure your AWS WAF
rules across your accounts. - Answer-AWS Firewall
Manager
Compliance-related documents in AWS such as Service
Organization Controls (SOC) reports - Answer-AWS
Artifact
An IAM identity that uses access keys to manage cloud
resources via AWS CLI. - Answer-IAM User
A role that grants temporary access to your AWS
resources. - Answer-IAM Role
Manages the common access permissions to a large
number of IAM users in AWS. - Answer-IAM Group
,2|Page
A resource-based policy that you can use to grant access
permissions to your bucket and the objects in it. - Answer-
Bucket Policy
Provides AWS credentials to grant your users access to
other AWS services. - Answer-Amazon Cognito Identity
Pools
A service that discovers, classifies, and protects sensitive
data such as personally identifiable information (PII) or
intellectual property. - Answer-Amazon Macie
A threat detection service that continuously monitors for
malicious activity to protect your AWS account. - Answer-
Amazon GuardDuty
An authentication method that prevents unauthorized
deletion of Amazon S3 objects. - Answer-Multi-Factor
Authentication (MFA)
A change or a failure in one component should not
cascade to other components. - Answer-Loose coupling
, 3|Page
A gateway that enables your Amazon EC2 instances in the
public subnet to connect to the public Internet. - Answer-
Internet Gateway
A gateway that enables your EC2 instances in the private
subnet to connect to the public Internet. - Answer-NAT
Gateway
It acts as a virtual firewall in AWS that controls the traffic at
the EC2 instance level. - Answer-Security Group
An automated security assessment service to improve the
security and compliance of your applications. - Answer-
Amazon Inspector
An AWS global network that improves availability of
deployed applications on AWS using an anycast static IP
address. - Answer-AWS Global Accelerator
A data transport service that securely moves petabyte-
scale data into and out of the AWS Cloud. - Answer-AWS
Snowball
AWS Certified Cloud Practitioner CLF-C02 Exam –
Amazon Web Services (AWS)||Verified Exam!!|| –
2026/2027 Edition – Questions and Answers for IT
Professionals and Cloud Certification Candidates
A security management tool to configure your AWS WAF
rules across your accounts. - Answer-AWS Firewall
Manager
Compliance-related documents in AWS such as Service
Organization Controls (SOC) reports - Answer-AWS
Artifact
An IAM identity that uses access keys to manage cloud
resources via AWS CLI. - Answer-IAM User
A role that grants temporary access to your AWS
resources. - Answer-IAM Role
Manages the common access permissions to a large
number of IAM users in AWS. - Answer-IAM Group
,2|Page
A resource-based policy that you can use to grant access
permissions to your bucket and the objects in it. - Answer-
Bucket Policy
Provides AWS credentials to grant your users access to
other AWS services. - Answer-Amazon Cognito Identity
Pools
A service that discovers, classifies, and protects sensitive
data such as personally identifiable information (PII) or
intellectual property. - Answer-Amazon Macie
A threat detection service that continuously monitors for
malicious activity to protect your AWS account. - Answer-
Amazon GuardDuty
An authentication method that prevents unauthorized
deletion of Amazon S3 objects. - Answer-Multi-Factor
Authentication (MFA)
A change or a failure in one component should not
cascade to other components. - Answer-Loose coupling
, 3|Page
A gateway that enables your Amazon EC2 instances in the
public subnet to connect to the public Internet. - Answer-
Internet Gateway
A gateway that enables your EC2 instances in the private
subnet to connect to the public Internet. - Answer-NAT
Gateway
It acts as a virtual firewall in AWS that controls the traffic at
the EC2 instance level. - Answer-Security Group
An automated security assessment service to improve the
security and compliance of your applications. - Answer-
Amazon Inspector
An AWS global network that improves availability of
deployed applications on AWS using an anycast static IP
address. - Answer-AWS Global Accelerator
A data transport service that securely moves petabyte-
scale data into and out of the AWS Cloud. - Answer-AWS
Snowball
