AWS CLF-C02 Certification Mastery
Guide 2026–2027 | Cloud Practitioner
Exam Review, Practice Questions &
Study Resources
1. A company wants to move an on-premises application to AWS without
changing its application architecture. Which cloud migration strategy best
describes this approach?
A. Refactoring
B. Replatforming
C. Rehosting
D. Repurchasing
Answer: C. Rehosting
Rationale: Rehosting, commonly called “lift and shift,” moves workloads to AWS
with minimal or no modification to the underlying application architecture.
2. Which AWS service provides object storage designed for high durability and
virtually unlimited scalability?
A. Amazon EBS
B. Amazon S3
,C. Amazon EFS
D. Amazon FSx
Answer: B. Amazon S3
Rationale: Amazon S3 is an object storage service designed for scalable storage,
high durability, and access to data through APIs and other AWS services.
3. A workload requires a database that supports automatic scaling, high
availability, and a key-value data model. Which service is most appropriate?
A. Amazon RDS
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon Redshift
Answer: C. Amazon DynamoDB
Rationale: DynamoDB is a fully managed NoSQL database service supporting
key-value and document data models with built-in scalability and high
availability.
4. Which AWS pricing model provides the greatest flexibility for workloads
that can tolerate interruptions?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Hosts
Answer: C. Spot Instances
Rationale: Spot Instances use spare Amazon EC2 capacity and can provide
substantial discounts, but AWS can interrupt them when capacity is needed.
5. A company needs to run code automatically in response to an Amazon S3
object upload without managing servers. Which service should it use?
,A. Amazon EC2
B. AWS Lambda
C. Amazon ECS
D. AWS Batch
Answer: B. AWS Lambda
Rationale: AWS Lambda runs code in response to events without requiring
customers to provision or manage servers.
6. Which AWS service is primarily designed to distribute incoming application
traffic across multiple targets?
A. Amazon Route 53
B. Elastic Load Balancing
C. AWS Direct Connect
D. Amazon CloudFront
Answer: B. Elastic Load Balancing
Rationale: Elastic Load Balancing distributes incoming traffic across healthy
targets such as EC2 instances, containers, and IP addresses.
7. An organization wants to use a private, dedicated network connection from
its data center to AWS. Which service should it consider?
A. AWS VPN
B. AWS Direct Connect
C. Amazon Route 53
D. AWS Transit Gateway
Answer: B. AWS Direct Connect
Rationale: AWS Direct Connect provides a dedicated network connection
between an on-premises environment and AWS, generally offering more
consistent network performance than internet-based connectivity.
8. Which AWS service provides DNS hosting and domain name management?
, A. Amazon CloudFront
B. Amazon Route 53
C. AWS Global Accelerator
D. Amazon VPC
Answer: B. Amazon Route 53
Rationale: Amazon Route 53 is a highly available and scalable DNS and domain
registration service.
9. A company wants to protect its web application against common SQL
injection and cross-site scripting attacks. Which AWS service is most
appropriate?
A. AWS Shield
B. AWS WAF
C. Amazon GuardDuty
D. AWS Config
Answer: B. AWS WAF
Rationale: AWS WAF helps protect web applications by filtering HTTP and HTTPS
requests based on configurable rules, including rules targeting common web
exploits.
10.Which AWS service provides managed distributed denial-of-service
protection?
A. AWS WAF
B. AWS Shield
C. Amazon Inspector
D. Amazon Macie
Answer: B. AWS Shield
Rationale: AWS Shield provides managed protection against DDoS attacks. AWS
Shield Standard is automatically available, while Shield Advanced provides
additional protection and capabilities.
Guide 2026–2027 | Cloud Practitioner
Exam Review, Practice Questions &
Study Resources
1. A company wants to move an on-premises application to AWS without
changing its application architecture. Which cloud migration strategy best
describes this approach?
A. Refactoring
B. Replatforming
C. Rehosting
D. Repurchasing
Answer: C. Rehosting
Rationale: Rehosting, commonly called “lift and shift,” moves workloads to AWS
with minimal or no modification to the underlying application architecture.
2. Which AWS service provides object storage designed for high durability and
virtually unlimited scalability?
A. Amazon EBS
B. Amazon S3
,C. Amazon EFS
D. Amazon FSx
Answer: B. Amazon S3
Rationale: Amazon S3 is an object storage service designed for scalable storage,
high durability, and access to data through APIs and other AWS services.
3. A workload requires a database that supports automatic scaling, high
availability, and a key-value data model. Which service is most appropriate?
A. Amazon RDS
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon Redshift
Answer: C. Amazon DynamoDB
Rationale: DynamoDB is a fully managed NoSQL database service supporting
key-value and document data models with built-in scalability and high
availability.
4. Which AWS pricing model provides the greatest flexibility for workloads
that can tolerate interruptions?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Hosts
Answer: C. Spot Instances
Rationale: Spot Instances use spare Amazon EC2 capacity and can provide
substantial discounts, but AWS can interrupt them when capacity is needed.
5. A company needs to run code automatically in response to an Amazon S3
object upload without managing servers. Which service should it use?
,A. Amazon EC2
B. AWS Lambda
C. Amazon ECS
D. AWS Batch
Answer: B. AWS Lambda
Rationale: AWS Lambda runs code in response to events without requiring
customers to provision or manage servers.
6. Which AWS service is primarily designed to distribute incoming application
traffic across multiple targets?
A. Amazon Route 53
B. Elastic Load Balancing
C. AWS Direct Connect
D. Amazon CloudFront
Answer: B. Elastic Load Balancing
Rationale: Elastic Load Balancing distributes incoming traffic across healthy
targets such as EC2 instances, containers, and IP addresses.
7. An organization wants to use a private, dedicated network connection from
its data center to AWS. Which service should it consider?
A. AWS VPN
B. AWS Direct Connect
C. Amazon Route 53
D. AWS Transit Gateway
Answer: B. AWS Direct Connect
Rationale: AWS Direct Connect provides a dedicated network connection
between an on-premises environment and AWS, generally offering more
consistent network performance than internet-based connectivity.
8. Which AWS service provides DNS hosting and domain name management?
, A. Amazon CloudFront
B. Amazon Route 53
C. AWS Global Accelerator
D. Amazon VPC
Answer: B. Amazon Route 53
Rationale: Amazon Route 53 is a highly available and scalable DNS and domain
registration service.
9. A company wants to protect its web application against common SQL
injection and cross-site scripting attacks. Which AWS service is most
appropriate?
A. AWS Shield
B. AWS WAF
C. Amazon GuardDuty
D. AWS Config
Answer: B. AWS WAF
Rationale: AWS WAF helps protect web applications by filtering HTTP and HTTPS
requests based on configurable rules, including rules targeting common web
exploits.
10.Which AWS service provides managed distributed denial-of-service
protection?
A. AWS WAF
B. AWS Shield
C. Amazon Inspector
D. Amazon Macie
Answer: B. AWS Shield
Rationale: AWS Shield provides managed protection against DDoS attacks. AWS
Shield Standard is automatically available, while Shield Advanced provides
additional protection and capabilities.
