AWS
Certified Cloud Practitioner
CLF-C02 — Cloud Concepts, Core Services, Security, Pricing & Support
Exam Code: CLF-C02 | 60 Questions & Verified Answers
Covers All Official Exam Objectives
,Domain 1: Cloud Concepts
Benefits & Economics of Cloud
Q1. What is the primary benefit of cloud computing's 'pay-as-you-go' pricing model?
A. Pay more upfront to save money later
B. Pay only for what you use, eliminating large upfront capital expenditures
C. Pay a fixed monthly fee regardless of usage
D. Pay once and use forever
Answer: B. Pay only for what you use, eliminating large upfront capital expenditures
Cloud converts capital expenditure (CapEx — buying servers) to operational expenditure (OpEx —
paying for usage).
Organizations avoid over-provisioning for peak demand — scale up when needed, scale down
when not.
This reduces financial risk and improves agility for businesses of all sizes.
Q2. What does 'elasticity' mean in cloud computing?
A. The physical flexibility of server hardware
B. The ability to automatically scale resources up or down based on demand
C. The durability of cloud storage
D. The speed of network connections
Answer: B. The ability to automatically scale resources up or down based on demand
Elasticity allows applications to handle varying loads without manual intervention.
Example: an e-commerce site auto-scales during Black Friday and scales down afterwards.
AWS services for elasticity: Auto Scaling groups, Elastic Load Balancing, AWS Lambda.
Q3. Which of the following is the AWS shared responsibility model?
A. AWS is responsible for everything
B. AWS is responsible for security OF the cloud; customers are responsible for security IN the
cloud
C. Customers are responsible for everything
D. Shared responsibility only applies to storage services
Answer: B. AWS is responsible for security OF the cloud; customers are responsible for
security IN the cloud
AWS responsibility: physical hardware, data centers, network infrastructure, hypervisor, managed
service security.
Customer responsibility: OS patching (EC2), data encryption, IAM configurations, application
security, firewall rules.
For managed services (RDS, Lambda), AWS takes more responsibility; for EC2, customers take
more.
Q4. What are the six advantages of cloud computing identified by AWS?
A. Fast, cheap, secure, reliable, scalable, global
, B. Trade upfront expense for variable expense, benefit from massive economies of scale, stop
guessing capacity, increase speed and agility, stop spending on data centers, go global in
minutes
C. Pay less, scale more, secure data, faster CPUs, more storage, better support
D. IaaS, PaaS, SaaS, serverless, containers, hybrid
Answer: B. Trade upfront expense for variable expense, benefit from massive economies of
scale, stop guessing capacity, increase speed and agility, stop spending on data centers, go
global in minutes
These are AWS's official six advantages of cloud computing — memorize them for the exam.
Key themes: cost reduction, agility, global reach, and eliminating undifferentiated heavy lifting.
Additional benefit: AWS handles physical security, hardware maintenance, and capacity planning.
Q5. What is the difference between high availability and fault tolerance?
A. They are the same thing
B. High availability minimizes downtime by quickly recovering from failures; fault tolerance
continues operating with no disruption even when components fail
C. Fault tolerance is cheaper to implement
D. High availability only applies to databases
Answer: B. High availability minimizes downtime by quickly recovering from failures; fault
tolerance continues operating with no disruption even when components fail
High availability: systems recover quickly (seconds to minutes) — some brief downtime acceptable.
Fault tolerance: systems continue operating with no interruption even when components fail — zero
downtime.
Example: a car with a spare tire is highly available; a car with run-flat tires is fault tolerant.
Domain 2: Security & Compliance
AWS Security Services & IAM
Q6. What is AWS IAM and what does it control?
A. Infrastructure Access Management — controls network routing
B. Identity and Access Management — controls who can access AWS services and resources,
and what they can do
C. Internet Access Module — controls internet connectivity
D. Instance Administration Management — manages EC2 instances
Answer: B. Identity and Access Management — controls who can access AWS services and
resources, and what they can do
IAM manages: users, groups, roles, and policies that define permissions.
Key principle: grant least privilege — only the permissions needed for the task.
Best practices: never use root account for daily tasks, enable MFA on all accounts, use roles for
applications.
Q7. What is the purpose of AWS Organizations?
A. Manage a single AWS account
Certified Cloud Practitioner
CLF-C02 — Cloud Concepts, Core Services, Security, Pricing & Support
Exam Code: CLF-C02 | 60 Questions & Verified Answers
Covers All Official Exam Objectives
,Domain 1: Cloud Concepts
Benefits & Economics of Cloud
Q1. What is the primary benefit of cloud computing's 'pay-as-you-go' pricing model?
A. Pay more upfront to save money later
B. Pay only for what you use, eliminating large upfront capital expenditures
C. Pay a fixed monthly fee regardless of usage
D. Pay once and use forever
Answer: B. Pay only for what you use, eliminating large upfront capital expenditures
Cloud converts capital expenditure (CapEx — buying servers) to operational expenditure (OpEx —
paying for usage).
Organizations avoid over-provisioning for peak demand — scale up when needed, scale down
when not.
This reduces financial risk and improves agility for businesses of all sizes.
Q2. What does 'elasticity' mean in cloud computing?
A. The physical flexibility of server hardware
B. The ability to automatically scale resources up or down based on demand
C. The durability of cloud storage
D. The speed of network connections
Answer: B. The ability to automatically scale resources up or down based on demand
Elasticity allows applications to handle varying loads without manual intervention.
Example: an e-commerce site auto-scales during Black Friday and scales down afterwards.
AWS services for elasticity: Auto Scaling groups, Elastic Load Balancing, AWS Lambda.
Q3. Which of the following is the AWS shared responsibility model?
A. AWS is responsible for everything
B. AWS is responsible for security OF the cloud; customers are responsible for security IN the
cloud
C. Customers are responsible for everything
D. Shared responsibility only applies to storage services
Answer: B. AWS is responsible for security OF the cloud; customers are responsible for
security IN the cloud
AWS responsibility: physical hardware, data centers, network infrastructure, hypervisor, managed
service security.
Customer responsibility: OS patching (EC2), data encryption, IAM configurations, application
security, firewall rules.
For managed services (RDS, Lambda), AWS takes more responsibility; for EC2, customers take
more.
Q4. What are the six advantages of cloud computing identified by AWS?
A. Fast, cheap, secure, reliable, scalable, global
, B. Trade upfront expense for variable expense, benefit from massive economies of scale, stop
guessing capacity, increase speed and agility, stop spending on data centers, go global in
minutes
C. Pay less, scale more, secure data, faster CPUs, more storage, better support
D. IaaS, PaaS, SaaS, serverless, containers, hybrid
Answer: B. Trade upfront expense for variable expense, benefit from massive economies of
scale, stop guessing capacity, increase speed and agility, stop spending on data centers, go
global in minutes
These are AWS's official six advantages of cloud computing — memorize them for the exam.
Key themes: cost reduction, agility, global reach, and eliminating undifferentiated heavy lifting.
Additional benefit: AWS handles physical security, hardware maintenance, and capacity planning.
Q5. What is the difference between high availability and fault tolerance?
A. They are the same thing
B. High availability minimizes downtime by quickly recovering from failures; fault tolerance
continues operating with no disruption even when components fail
C. Fault tolerance is cheaper to implement
D. High availability only applies to databases
Answer: B. High availability minimizes downtime by quickly recovering from failures; fault
tolerance continues operating with no disruption even when components fail
High availability: systems recover quickly (seconds to minutes) — some brief downtime acceptable.
Fault tolerance: systems continue operating with no interruption even when components fail — zero
downtime.
Example: a car with a spare tire is highly available; a car with run-flat tires is fault tolerant.
Domain 2: Security & Compliance
AWS Security Services & IAM
Q6. What is AWS IAM and what does it control?
A. Infrastructure Access Management — controls network routing
B. Identity and Access Management — controls who can access AWS services and resources,
and what they can do
C. Internet Access Module — controls internet connectivity
D. Instance Administration Management — manages EC2 instances
Answer: B. Identity and Access Management — controls who can access AWS services and
resources, and what they can do
IAM manages: users, groups, roles, and policies that define permissions.
Key principle: grant least privilege — only the permissions needed for the task.
Best practices: never use root account for daily tasks, enable MFA on all accounts, use roles for
applications.
Q7. What is the purpose of AWS Organizations?
A. Manage a single AWS account
