___________________________________________________________________
AWS Cloud Practitioner CLF-C02 Case
Study Practice Test 2026–2027 | Real-
World AWS Scenarios, Questions &
Detailed Rationales
1. A retail company hosts its online store on Amazon EC2. Traffic increases
dramatically during holiday promotions and decreases afterward. The
company wants to automatically adjust compute capacity based on
demand. Which AWS capability is most appropriate?
A. AWS Trusted Advisor
B. Amazon EC2 Auto Scaling
C. AWS Artifact
D. AWS Cost Explorer
Answer: Amazon EC2 Auto Scaling
Rationale: EC2 Auto Scaling automatically increases or decreases the number of
EC2 instances based on demand, helping maintain application performance
while avoiding unnecessary compute costs.
, 2. A company stores millions of product images that customers access
through its website. The images do not require a traditional file system and
must be highly durable. Which AWS service should the company use?
A. Amazon EBS
B. Amazon S3
C. Amazon RDS
D. Amazon EC2 Instance Store
Answer: Amazon S3
Rationale: Amazon S3 provides highly durable object storage and is well suited
for images, documents, backups, and other unstructured data.
3. A financial application requires a relational database with automated
backups, patching, and maintenance. Which service best meets these
requirements?
A. Amazon DynamoDB
B. Amazon S3
C. Amazon RDS
D. Amazon ElastiCache
Answer: Amazon RDS
Rationale: Amazon RDS is a managed relational database service that handles
many administrative tasks such as backups, software patching, and
infrastructure provisioning.
4. A startup wants to deploy a web application without managing servers or
operating systems. Which approach is most appropriate?
A. Amazon EC2
B. AWS Elastic Beanstalk
C. Amazon EBS
D. AWS Direct Connect
Answer: AWS Elastic Beanstalk
,Rationale: Elastic Beanstalk provides a managed application deployment
environment while AWS handles much of the underlying infrastructure
management.
5. A company wants users to authenticate to a mobile application using email
addresses, passwords, and optional social identity providers. Which AWS
service is designed for this use case?
A. AWS IAM
B. Amazon Cognito
C. AWS Organizations
D. AWS KMS
Answer: Amazon Cognito
Rationale: Amazon Cognito provides authentication, authorization, and user-
management capabilities for web and mobile applications.
6. An organization wants to distribute website content globally with low
latency. Which AWS service should it primarily consider?
A. Amazon CloudFront
B. Amazon RDS
C. AWS Batch
D. Amazon EFS
Answer: Amazon CloudFront
Rationale: CloudFront is AWS's content delivery network that caches content at
edge locations closer to users, reducing latency.
7. A company needs to give an EC2 instance permission to access a specific S3
bucket without storing long-term access keys on the instance. What should
the company use?
A. IAM role
B. IAM user access key
, C. AWS account root user
D. AWS Organizations policy only
Answer: IAM role
Rationale: IAM roles provide temporary credentials to AWS resources and avoid
the need to embed long-term credentials in applications or instances.
8. A company wants to detect suspicious API activity across its AWS
environment. Which service is specifically designed for intelligent threat
detection?
A. Amazon GuardDuty
B. AWS Budgets
C. AWS Artifact
D. Amazon Inspector
Answer: Amazon GuardDuty
Rationale: GuardDuty continuously analyzes relevant AWS data sources for
indicators of compromise and suspicious activity.
9. A development team wants to know whether its EC2 instances contain
software vulnerabilities. Which service is most appropriate?
A. Amazon Inspector
B. AWS Shield
C. Amazon Macie
D. AWS Config
Answer: Amazon Inspector
Rationale: Amazon Inspector automatically assesses supported AWS workloads
for software vulnerabilities and unintended network exposure.
10.A company must encrypt sensitive data stored in Amazon S3 and wants
centralized management of encryption keys. Which service should it use?
AWS Cloud Practitioner CLF-C02 Case
Study Practice Test 2026–2027 | Real-
World AWS Scenarios, Questions &
Detailed Rationales
1. A retail company hosts its online store on Amazon EC2. Traffic increases
dramatically during holiday promotions and decreases afterward. The
company wants to automatically adjust compute capacity based on
demand. Which AWS capability is most appropriate?
A. AWS Trusted Advisor
B. Amazon EC2 Auto Scaling
C. AWS Artifact
D. AWS Cost Explorer
Answer: Amazon EC2 Auto Scaling
Rationale: EC2 Auto Scaling automatically increases or decreases the number of
EC2 instances based on demand, helping maintain application performance
while avoiding unnecessary compute costs.
, 2. A company stores millions of product images that customers access
through its website. The images do not require a traditional file system and
must be highly durable. Which AWS service should the company use?
A. Amazon EBS
B. Amazon S3
C. Amazon RDS
D. Amazon EC2 Instance Store
Answer: Amazon S3
Rationale: Amazon S3 provides highly durable object storage and is well suited
for images, documents, backups, and other unstructured data.
3. A financial application requires a relational database with automated
backups, patching, and maintenance. Which service best meets these
requirements?
A. Amazon DynamoDB
B. Amazon S3
C. Amazon RDS
D. Amazon ElastiCache
Answer: Amazon RDS
Rationale: Amazon RDS is a managed relational database service that handles
many administrative tasks such as backups, software patching, and
infrastructure provisioning.
4. A startup wants to deploy a web application without managing servers or
operating systems. Which approach is most appropriate?
A. Amazon EC2
B. AWS Elastic Beanstalk
C. Amazon EBS
D. AWS Direct Connect
Answer: AWS Elastic Beanstalk
,Rationale: Elastic Beanstalk provides a managed application deployment
environment while AWS handles much of the underlying infrastructure
management.
5. A company wants users to authenticate to a mobile application using email
addresses, passwords, and optional social identity providers. Which AWS
service is designed for this use case?
A. AWS IAM
B. Amazon Cognito
C. AWS Organizations
D. AWS KMS
Answer: Amazon Cognito
Rationale: Amazon Cognito provides authentication, authorization, and user-
management capabilities for web and mobile applications.
6. An organization wants to distribute website content globally with low
latency. Which AWS service should it primarily consider?
A. Amazon CloudFront
B. Amazon RDS
C. AWS Batch
D. Amazon EFS
Answer: Amazon CloudFront
Rationale: CloudFront is AWS's content delivery network that caches content at
edge locations closer to users, reducing latency.
7. A company needs to give an EC2 instance permission to access a specific S3
bucket without storing long-term access keys on the instance. What should
the company use?
A. IAM role
B. IAM user access key
, C. AWS account root user
D. AWS Organizations policy only
Answer: IAM role
Rationale: IAM roles provide temporary credentials to AWS resources and avoid
the need to embed long-term credentials in applications or instances.
8. A company wants to detect suspicious API activity across its AWS
environment. Which service is specifically designed for intelligent threat
detection?
A. Amazon GuardDuty
B. AWS Budgets
C. AWS Artifact
D. Amazon Inspector
Answer: Amazon GuardDuty
Rationale: GuardDuty continuously analyzes relevant AWS data sources for
indicators of compromise and suspicious activity.
9. A development team wants to know whether its EC2 instances contain
software vulnerabilities. Which service is most appropriate?
A. Amazon Inspector
B. AWS Shield
C. Amazon Macie
D. AWS Config
Answer: Amazon Inspector
Rationale: Amazon Inspector automatically assesses supported AWS workloads
for software vulnerabilities and unintended network exposure.
10.A company must encrypt sensitive data stored in Amazon S3 and wants
centralized management of encryption keys. Which service should it use?
