AWS Certified Cloud Practitioner CLF-C01 – Practice Questions with Correct Answers (2025)
Which AWS service enables users to deploy infrastructure as code by automating the process of
provisioning resources?
A. Amazon GameLift
B. AWS CloudFormation
C. AWS Data Pipeline
D. AWS Glue
Which AWS services provide a way to extend an on-premises architecture to the AWS Cloud?
(Choose two.)
A. Amazon EBS
B. AWS Direct Connect
C. Amazon CloudFront
D. AWS Storage Gateway
E. Amazon Connect
Which of the following allows users to provision a dedicated network connection from their
internal network to AWS?
A. AWS CloudHSM
B. AWS Direct Connect
C. AWS VPN
D. Amazon Connect
Which services use AWS edge locations? (Choose two.)
A. Amazon CloudFront
B. AWS Shield
C. Amazon EC2
,D. Amazon RDS
E. Amazon ElastiCache
Which service would provide network connectivity in a hybrid architecture that includes the
AWS Cloud?
A. Amazon VPC
B. AWS Direct Connect
C. AWS Directory Service
D. Amazon API Gateway
Which tool can be used to compare the costs of running a web application in a traditional
hosting environment to running it on AWS?
A. AWS Cost Explorer
B. AWS Budgets
C. AWS Cost and Usage report
D. AWS Total Cost of Ownership (TCO) Calculator
What is the value of using third-party software from AWS Marketplace instead of installing
third-party software on Amazon EC2? (Choose two.)
A. Users pay for software by the hour or month depending on licensing.
B. AWS Marketplace enables the user to launch applications with 1-Click.
C. AWS Marketplace data encryption is managed by a third-party vendor.
D. AWS Marketplace eliminates the need to upgrade to newer software versions.
E. Users can deploy third-party software without testing.
Which of the following is a cloud architectural design principle?
A. Scale up, not out.
,B. Loosely couple components.
C. Build monolithic systems.
D. Use commercial database software.
Under the shared responsibility model; which of the following areas are the customer's
responsibility? (Choose two.)
A. Firmware upgrades of network infrastructure
B. Patching of operating systems
C. Patching of the underlying hypervisor
D. Physical security of data centers
E. Configuration of the security group
Which service enables customers to audit and monitor changes in AWS resources?
A. AWS Trusted Advisor
B. Amazon GuardDuty
C. Amazon Inspector
D. AWS Config
Which AWS service identifies security groups that allow unrestricted access to a user's AWS
resources?
A. AWS CloudTrail
B. AWS Trusted Advisor
C. Amazon CloudWatch
D. Amazon Inspector
According to the AWS shared responsibility model, who is responsible for configuration
management?
, A. It is solely the responsibility of the customer.
B. It is solely the responsibility of AWS.
C. It is shared between AWS and the customer.
D. It is not part of the AWS shared responsibility model.
Which AWS service is a content delivery network that securely delivers data, video, and
applications to users globally with low latency and high speeds?
A. AWS CloudFormation
B. AWS Direct Connect
C. Amazon CloudFront
D. Amazon Pinpoint
Which benefit of the AWS Cloud supports matching the supply of resources with changing
workload demands?
A. Security
B. Reliability
C. Elasticity
D. High availability
A user is running an application on AWS and notices that one or more AWS-owned IP addresses
is involved in a distributed denial-of-service (DDoS) attack.
Who should the user contact FIRST about this situation?
A. AWS Premium Support
B. AWS Technical Account Manager
C. AWS Solutions Architect
D. AWS Abuse team
Which AWS service enables users to deploy infrastructure as code by automating the process of
provisioning resources?
A. Amazon GameLift
B. AWS CloudFormation
C. AWS Data Pipeline
D. AWS Glue
Which AWS services provide a way to extend an on-premises architecture to the AWS Cloud?
(Choose two.)
A. Amazon EBS
B. AWS Direct Connect
C. Amazon CloudFront
D. AWS Storage Gateway
E. Amazon Connect
Which of the following allows users to provision a dedicated network connection from their
internal network to AWS?
A. AWS CloudHSM
B. AWS Direct Connect
C. AWS VPN
D. Amazon Connect
Which services use AWS edge locations? (Choose two.)
A. Amazon CloudFront
B. AWS Shield
C. Amazon EC2
,D. Amazon RDS
E. Amazon ElastiCache
Which service would provide network connectivity in a hybrid architecture that includes the
AWS Cloud?
A. Amazon VPC
B. AWS Direct Connect
C. AWS Directory Service
D. Amazon API Gateway
Which tool can be used to compare the costs of running a web application in a traditional
hosting environment to running it on AWS?
A. AWS Cost Explorer
B. AWS Budgets
C. AWS Cost and Usage report
D. AWS Total Cost of Ownership (TCO) Calculator
What is the value of using third-party software from AWS Marketplace instead of installing
third-party software on Amazon EC2? (Choose two.)
A. Users pay for software by the hour or month depending on licensing.
B. AWS Marketplace enables the user to launch applications with 1-Click.
C. AWS Marketplace data encryption is managed by a third-party vendor.
D. AWS Marketplace eliminates the need to upgrade to newer software versions.
E. Users can deploy third-party software without testing.
Which of the following is a cloud architectural design principle?
A. Scale up, not out.
,B. Loosely couple components.
C. Build monolithic systems.
D. Use commercial database software.
Under the shared responsibility model; which of the following areas are the customer's
responsibility? (Choose two.)
A. Firmware upgrades of network infrastructure
B. Patching of operating systems
C. Patching of the underlying hypervisor
D. Physical security of data centers
E. Configuration of the security group
Which service enables customers to audit and monitor changes in AWS resources?
A. AWS Trusted Advisor
B. Amazon GuardDuty
C. Amazon Inspector
D. AWS Config
Which AWS service identifies security groups that allow unrestricted access to a user's AWS
resources?
A. AWS CloudTrail
B. AWS Trusted Advisor
C. Amazon CloudWatch
D. Amazon Inspector
According to the AWS shared responsibility model, who is responsible for configuration
management?
, A. It is solely the responsibility of the customer.
B. It is solely the responsibility of AWS.
C. It is shared between AWS and the customer.
D. It is not part of the AWS shared responsibility model.
Which AWS service is a content delivery network that securely delivers data, video, and
applications to users globally with low latency and high speeds?
A. AWS CloudFormation
B. AWS Direct Connect
C. Amazon CloudFront
D. Amazon Pinpoint
Which benefit of the AWS Cloud supports matching the supply of resources with changing
workload demands?
A. Security
B. Reliability
C. Elasticity
D. High availability
A user is running an application on AWS and notices that one or more AWS-owned IP addresses
is involved in a distributed denial-of-service (DDoS) attack.
Who should the user contact FIRST about this situation?
A. AWS Premium Support
B. AWS Technical Account Manager
C. AWS Solutions Architect
D. AWS Abuse team
