AWS Certified Cloud Practitioner CLF-
C02 Practice Exam 2026/2027 – Verified
Q&As with Detailed Rationales (Test
Bank Bundle - 95 Questions)
---
**QUESTION 1:**
Which AWS service provides a fully managed, serverless data warehouse that automatically scales and
requires no infrastructure management?
A) Amazon Redshift
B) Amazon RDS
C) Amazon Athena
D) Amazon DynamoDB
> 🎯 **CORRECT ANSWER:** A) Amazon Redshift
> 💡 **CLINICAL RATIONALE:** Redshift is a managed petabyte-scale data warehouse. RDS is
relational DB. Athena queries S3. DynamoDB is NoSQL.
---
**QUESTION 2:**
A company wants to store frequently accessed documents with low latency. Which storage class is
most cost-effective for this use case?
A) Amazon S3 Standard
B) Amazon S3 Glacier Deep Archive
C) Amazon S3 One Zone-IA
D) Amazon S3 Intelligent-Tiering
> 🎯 **CORRECT ANSWER:** A) Amazon S3 Standard
,> 💡 **CLINICAL RATIONALE:** S3 Standard is for frequently accessed data. Glacier is archival. One
Zone-IA is infrequent. Intelligent-Tiering automates but costs more.
---
**QUESTION 3:**
What is the primary benefit of using AWS Global Accelerator?
A) Improves application availability and performance by directing traffic over the AWS global network
B) Provides DNS resolution
C) Encrypts data in transit
D) Manages database backups
> 🎯 **CORRECT ANSWER:** A) Improves application availability and performance by directing traffic
over the AWS global network
> 💡 **CLINICAL RATIONALE:** Global Accelerator uses AWS backbone for faster routing. DNS is
Route 53. Encryption via TLS. Backups via AWS Backup.
---
**QUESTION 4:**
Which pricing model allows a customer to pay a lower hourly rate by committing to a one-year or
three-year term?
A) On-Demand
B) Spot Instances
C) Reserved Instances
D) Savings Plans
> 🎯 **CORRECT ANSWER:** C) Reserved Instances
> 💡 **CLINICAL RATIONALE:** RIs provide discounts for term commitments. On-Demand is pay-as-
you-go. Spot is variable. Savings Plans are flexible.
---
**QUESTION 5:**
Which AWS service is used to automate the deployment of infrastructure using code?
,A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS OpsWorks
D) AWS Elastic Beanstalk
> 🎯 **CORRECT ANSWER:** A) AWS CloudFormation
> 💡 **CLINICAL RATIONALE:** CloudFormation is IaC. CodeDeploy is app deployment. OpsWorks is
Chef/Puppet. Beanstalk is PaaS.
---
**QUESTION 6:**
What is the default quota for the number of security groups per VPC in AWS?
A) 5
B) 10
C) 100
D) 500
> 🎯 **CORRECT ANSWER:** C) 100
> 💡 **CLINICAL RATIONALE:** Default is 100 security groups per VPC. Can increase via service quota
request.
---
**QUESTION 7:**
Which AWS service provides a managed NoSQL database with single-digit millisecond latency at any
scale?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Neptune
D) Amazon ElastiCache
> 🎯 **CORRECT ANSWER:** A) Amazon DynamoDB
> 💡 **CLINICAL RATIONALE:** DynamoDB is key-value NoSQL. RDS is relational. Neptune is graph.
ElastiCache is in-memory cache.
, ---
**QUESTION 8:**
Which responsibility is the customer's responsibility under the AWS Shared Responsibility Model for
EC2?
A) Patching the guest operating system
B) Patching the hypervisor
C) Securing the physical data center
D) Managing the host network
> 🎯 **CORRECT ANSWER:** A) Patching the guest operating system
> 💡 **CLINICAL RATIONALE:** AWS patches infrastructure. Customer patches OS/apps. Physical/data
center is AWS.
---
**QUESTION 9:**
What is the primary purpose of an AWS Identity and Access Management (IAM) role?
A) To delegate permissions to an entity or service
B) To store user passwords
C) To encrypt data at rest
D) To manage VPC subnets
> 🎯 **CORRECT ANSWER:** A) To delegate permissions to an entity or service
> 💡 **CLINICAL RATIONALE:** IAM roles grant permissions to services/users. Not for
passwords/encryption/subnets.
---
**QUESTION 10:**
Which service is used to monitor AWS resources and set alarms?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
C02 Practice Exam 2026/2027 – Verified
Q&As with Detailed Rationales (Test
Bank Bundle - 95 Questions)
---
**QUESTION 1:**
Which AWS service provides a fully managed, serverless data warehouse that automatically scales and
requires no infrastructure management?
A) Amazon Redshift
B) Amazon RDS
C) Amazon Athena
D) Amazon DynamoDB
> 🎯 **CORRECT ANSWER:** A) Amazon Redshift
> 💡 **CLINICAL RATIONALE:** Redshift is a managed petabyte-scale data warehouse. RDS is
relational DB. Athena queries S3. DynamoDB is NoSQL.
---
**QUESTION 2:**
A company wants to store frequently accessed documents with low latency. Which storage class is
most cost-effective for this use case?
A) Amazon S3 Standard
B) Amazon S3 Glacier Deep Archive
C) Amazon S3 One Zone-IA
D) Amazon S3 Intelligent-Tiering
> 🎯 **CORRECT ANSWER:** A) Amazon S3 Standard
,> 💡 **CLINICAL RATIONALE:** S3 Standard is for frequently accessed data. Glacier is archival. One
Zone-IA is infrequent. Intelligent-Tiering automates but costs more.
---
**QUESTION 3:**
What is the primary benefit of using AWS Global Accelerator?
A) Improves application availability and performance by directing traffic over the AWS global network
B) Provides DNS resolution
C) Encrypts data in transit
D) Manages database backups
> 🎯 **CORRECT ANSWER:** A) Improves application availability and performance by directing traffic
over the AWS global network
> 💡 **CLINICAL RATIONALE:** Global Accelerator uses AWS backbone for faster routing. DNS is
Route 53. Encryption via TLS. Backups via AWS Backup.
---
**QUESTION 4:**
Which pricing model allows a customer to pay a lower hourly rate by committing to a one-year or
three-year term?
A) On-Demand
B) Spot Instances
C) Reserved Instances
D) Savings Plans
> 🎯 **CORRECT ANSWER:** C) Reserved Instances
> 💡 **CLINICAL RATIONALE:** RIs provide discounts for term commitments. On-Demand is pay-as-
you-go. Spot is variable. Savings Plans are flexible.
---
**QUESTION 5:**
Which AWS service is used to automate the deployment of infrastructure using code?
,A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS OpsWorks
D) AWS Elastic Beanstalk
> 🎯 **CORRECT ANSWER:** A) AWS CloudFormation
> 💡 **CLINICAL RATIONALE:** CloudFormation is IaC. CodeDeploy is app deployment. OpsWorks is
Chef/Puppet. Beanstalk is PaaS.
---
**QUESTION 6:**
What is the default quota for the number of security groups per VPC in AWS?
A) 5
B) 10
C) 100
D) 500
> 🎯 **CORRECT ANSWER:** C) 100
> 💡 **CLINICAL RATIONALE:** Default is 100 security groups per VPC. Can increase via service quota
request.
---
**QUESTION 7:**
Which AWS service provides a managed NoSQL database with single-digit millisecond latency at any
scale?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Neptune
D) Amazon ElastiCache
> 🎯 **CORRECT ANSWER:** A) Amazon DynamoDB
> 💡 **CLINICAL RATIONALE:** DynamoDB is key-value NoSQL. RDS is relational. Neptune is graph.
ElastiCache is in-memory cache.
, ---
**QUESTION 8:**
Which responsibility is the customer's responsibility under the AWS Shared Responsibility Model for
EC2?
A) Patching the guest operating system
B) Patching the hypervisor
C) Securing the physical data center
D) Managing the host network
> 🎯 **CORRECT ANSWER:** A) Patching the guest operating system
> 💡 **CLINICAL RATIONALE:** AWS patches infrastructure. Customer patches OS/apps. Physical/data
center is AWS.
---
**QUESTION 9:**
What is the primary purpose of an AWS Identity and Access Management (IAM) role?
A) To delegate permissions to an entity or service
B) To store user passwords
C) To encrypt data at rest
D) To manage VPC subnets
> 🎯 **CORRECT ANSWER:** A) To delegate permissions to an entity or service
> 💡 **CLINICAL RATIONALE:** IAM roles grant permissions to services/users. Not for
passwords/encryption/subnets.
---
**QUESTION 10:**
Which service is used to monitor AWS resources and set alarms?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
