AWS CLF-C02 200 Exam Questions
2026–2027 | Cloud Practitioner
Certification Study Guide with Answers
& Explanations
Question 1
A company is migrating a customer-facing application from an on-premises data
center to AWS. The application requires compute capacity that can automatically
increase during traffic spikes and decrease when demand falls. Which AWS
capability BEST addresses this requirement?
A. AWS Artifact
B. Elasticity
C. AWS Organizations
D. AWS CloudTrail
Answer: Elasticity
Rationale: Elasticity allows AWS resources to automatically scale up or down
based on workload demand. This helps accommodate traffic fluctuations while
avoiding unnecessary infrastructure costs during periods of low utilization.
,Question 2
A company wants to deploy workloads across geographically separated
infrastructure to reduce the risk that a regional outage will affect its entire
application. Which approach is MOST appropriate?
A. Use multiple Availability Zones within one Region
B. Use multiple AWS Regions
C. Use multiple edge locations
D. Use multiple VPCs in the same Availability Zone
Answer: Use multiple AWS Regions
Rationale: AWS Regions are geographically separated locations. Deploying
across multiple Regions can provide protection against a regional-level
disruption, although it introduces additional architectural and operational
complexity.
Question 3
Which AWS service provides highly durable, scalable object storage?
A. Amazon EBS
B. Amazon S3
C. Amazon EC2 Instance Store
D. Amazon FSx
Answer: Amazon S3
Rationale: Amazon S3 is an object storage service designed for high durability
and virtually unlimited scalability. It is commonly used for backups, data lakes,
static content, and archival data.
Question 4
A developer has a batch-processing workload that can tolerate interruptions.
Which EC2 purchasing option can provide significant discounts when spare AWS
capacity is available?
,A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Hosts
Answer: Spot Instances
Rationale: Spot Instances use available AWS compute capacity at discounted
rates. Because AWS can reclaim Spot capacity, they are best suited for flexible
and interruption-tolerant workloads.
Question 5
A company needs centrally managed workforce access to several AWS accounts.
Which service is MOST appropriate?
A. Amazon Cognito
B. AWS IAM Identity Center
C. AWS WAF
D. Amazon GuardDuty
Answer: AWS IAM Identity Center
Rationale: AWS IAM Identity Center provides centralized workforce identity and
access management across multiple AWS accounts and supported applications.
Question 6
Which service records AWS API activity for security auditing and investigation?
A. Amazon GuardDuty
B. AWS CloudTrail
C. AWS Trusted Advisor
D. AWS Config
Answer: AWS CloudTrail
, Rationale: AWS CloudTrail records API calls and other account activity. These
records are useful for auditing, security investigations, governance, and
troubleshooting.
Question 7
An organization wants recommendations for improving security, fault tolerance,
performance, and cost efficiency. Which AWS service can provide these
recommendations?
A. AWS Trusted Advisor
B. AWS CloudFormation
C. Amazon Inspector
D. AWS Artifact
Answer: AWS Trusted Advisor
Rationale: AWS Trusted Advisor provides recommendations across areas such as
cost optimization, security, performance, service quotas, and fault tolerance,
subject to the checks available for the account.
Question 8
Which AWS service is designed to protect web applications against common
attacks such as SQL injection?
A. AWS Shield
B. AWS WAF
C. Amazon GuardDuty
D. AWS Artifact
Answer: AWS WAF
Rationale: AWS WAF filters HTTP and HTTPS requests using configurable rules. It
can help protect applications against common web exploits such as SQL
injection and cross-site scripting.
Question 9
2026–2027 | Cloud Practitioner
Certification Study Guide with Answers
& Explanations
Question 1
A company is migrating a customer-facing application from an on-premises data
center to AWS. The application requires compute capacity that can automatically
increase during traffic spikes and decrease when demand falls. Which AWS
capability BEST addresses this requirement?
A. AWS Artifact
B. Elasticity
C. AWS Organizations
D. AWS CloudTrail
Answer: Elasticity
Rationale: Elasticity allows AWS resources to automatically scale up or down
based on workload demand. This helps accommodate traffic fluctuations while
avoiding unnecessary infrastructure costs during periods of low utilization.
,Question 2
A company wants to deploy workloads across geographically separated
infrastructure to reduce the risk that a regional outage will affect its entire
application. Which approach is MOST appropriate?
A. Use multiple Availability Zones within one Region
B. Use multiple AWS Regions
C. Use multiple edge locations
D. Use multiple VPCs in the same Availability Zone
Answer: Use multiple AWS Regions
Rationale: AWS Regions are geographically separated locations. Deploying
across multiple Regions can provide protection against a regional-level
disruption, although it introduces additional architectural and operational
complexity.
Question 3
Which AWS service provides highly durable, scalable object storage?
A. Amazon EBS
B. Amazon S3
C. Amazon EC2 Instance Store
D. Amazon FSx
Answer: Amazon S3
Rationale: Amazon S3 is an object storage service designed for high durability
and virtually unlimited scalability. It is commonly used for backups, data lakes,
static content, and archival data.
Question 4
A developer has a batch-processing workload that can tolerate interruptions.
Which EC2 purchasing option can provide significant discounts when spare AWS
capacity is available?
,A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Hosts
Answer: Spot Instances
Rationale: Spot Instances use available AWS compute capacity at discounted
rates. Because AWS can reclaim Spot capacity, they are best suited for flexible
and interruption-tolerant workloads.
Question 5
A company needs centrally managed workforce access to several AWS accounts.
Which service is MOST appropriate?
A. Amazon Cognito
B. AWS IAM Identity Center
C. AWS WAF
D. Amazon GuardDuty
Answer: AWS IAM Identity Center
Rationale: AWS IAM Identity Center provides centralized workforce identity and
access management across multiple AWS accounts and supported applications.
Question 6
Which service records AWS API activity for security auditing and investigation?
A. Amazon GuardDuty
B. AWS CloudTrail
C. AWS Trusted Advisor
D. AWS Config
Answer: AWS CloudTrail
, Rationale: AWS CloudTrail records API calls and other account activity. These
records are useful for auditing, security investigations, governance, and
troubleshooting.
Question 7
An organization wants recommendations for improving security, fault tolerance,
performance, and cost efficiency. Which AWS service can provide these
recommendations?
A. AWS Trusted Advisor
B. AWS CloudFormation
C. Amazon Inspector
D. AWS Artifact
Answer: AWS Trusted Advisor
Rationale: AWS Trusted Advisor provides recommendations across areas such as
cost optimization, security, performance, service quotas, and fault tolerance,
subject to the checks available for the account.
Question 8
Which AWS service is designed to protect web applications against common
attacks such as SQL injection?
A. AWS Shield
B. AWS WAF
C. Amazon GuardDuty
D. AWS Artifact
Answer: AWS WAF
Rationale: AWS WAF filters HTTP and HTTPS requests using configurable rules. It
can help protect applications against common web exploits such as SQL
injection and cross-site scripting.
Question 9
