AWS Certified Cloud Practitioner CLF-C02 2025 — 65 Practice
Questions Verified
Series:
CrashCourses Professional Study Series
Author:
Dr Z. Moomba, MBChB, MRCPsych | BethelWellness Ltd
Exam Target:
AWS CCP CLF-C02
Year:
2025/2026
Format:
65 Questions with Verified Answers and Rationales
>
Author's Note:
This document is an original work produced for the CrashCourses Professional Study Series.
Clinical questions and professional scenarios were composed by Dr Z. Moomba based on current
exam objectives, published guidelines, and evidence-based sources (2024–2025). All patient
names, ages, and case details are fictional. Any resemblance to existing published Q&A banks is
coincidental. For personal study use only — not for reproduction or redistribution.
SECTION A — FOUNDATIONS
A newly established clinic wants to utilise AWS services but is concerned about the upfront
costs associated with purchasing physical servers. Which cloud computing model
characteristic addresses this concern by replacing capital expenses (CAPEX) with variable
expenses (OPEX)?
A) High availability
B) Pay-as-you-go pricing
C) Global reach
D) Fault tolerance
Answer: B
,Rationale:
a) Pay-as-you-go pricing allows organisations to pay only for the individual services they
consume, for as long as they consume them, without requiring long-term contracts or complex
licensing.
b) The distinguishing feature is the shift from CAPEX (buying hardware) to OPEX (paying for what
is used as an operating expense).
c) High availability (A) is tempting but relates to system uptime, not the financial model of avoiding
upfront physical server costs.
d)
High-yield fact:
Cloud computing allows you to trade fixed expenses for variable expenses. [AWS Cloud Concepts
2025]
A healthcare startup is developing a new patient portal. They need a compute service that
allows them to run code in response to events, such as a patient uploading a document, without
provisioning or managing servers. Which AWS service should they use?
A) Amazon EC2
B) AWS Lambda
C) Amazon RDS
D) Amazon S3
Answer: B
Rationale:
a) AWS Lambda is a serverless, event-driven compute service that lets you run code for virtually
any type of application or backend service without provisioning or managing servers.
b) The key discriminators are "run code in response to events" and "without provisioning or
managing servers."
c) Amazon EC2 (A) provides compute capacity but requires the user to provision and manage the
underlying virtual servers.
d)
High-yield fact:
Lambda bills only for the compute time consumed; there is no charge when the code is not
running. [AWS Serverless 2025]
, The IT director at BethelWellness is reviewing the AWS Shared Responsibility Model. Which of
the following is considered a responsibility of the customer when using Amazon EC2?
A) Physical security of the data centre
B) Patching the guest operating system
C) Maintaining network infrastructure hardware
D) Replacing faulty disk drives
Answer: B
Rationale:
a) Under the Shared Responsibility Model, the customer is responsible for security "in" the cloud,
which includes patching the guest operating system, applications, and configuring security
groups for IaaS services like EC2.
b) The discriminator is that EC2 is Infrastructure as a Service (IaaS), leaving OS management to
the customer.
c) Physical security (A) and hardware maintenance (C, D) are responsibilities of AWS (security
"of" the cloud).
d)
High-yield fact:
For managed services like RDS, AWS handles OS patching, shifting more responsibility to the
provider. [AWS Shared Responsibility Model 2025]
To ensure rapid delivery of static medical imaging files to specialists located globally, a hospital
network needs a service that caches content close to the users. Which AWS service provides
this global Content Delivery Network (CDN) functionality?
A) Amazon CloudFront
B) AWS Global Accelerator
C) Amazon Route 53
D) AWS Direct Connect
Answer: A
Rationale:
a) Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web
content to your users by caching it at edge locations worldwide.
b) The keyword "caches content close to the users" points directly to a CDN.
, c) AWS Global Accelerator (B) improves global application availability and performance using the
AWS global network, but it does not cache content; it proxies network traffic.
d)
High-yield fact:
CloudFront uses Edge Locations, which outnumber AWS Regions and Availability Zones. [AWS
Networking 2025]
A research facility requires a highly durable, object storage service to archive years of genomic
sequencing data that will be accessed infrequently but must be retained for compliance. Which
Amazon S3 storage class is the most cost-effective for this requirement?
A) S3 Standard
B) S3 Intelligent-Tiering
C) S3 Glacier Deep Archive
D) S3 One Zone-IA
Answer: C
Rationale:
a) S3 Glacier Deep Archive is AWS's lowest-cost storage class, designed for long-term retention
and digital preservation for data that may be accessed once or twice a year.
b) The requirement for "infrequently accessed," "retained for compliance," and "most cost-
effective" perfectly matches Glacier Deep Archive.
c) S3 Standard (A) is for frequently accessed data and would be unnecessarily expensive for
archival purposes.
d)
High-yield fact:
Retrieval times for Glacier Deep Archive range from 12 to 48 hours. [AWS Storage Solutions 2025]
The Chief Information Security Officer (CISO) wants to implement a service that continuously
monitors AWS accounts for malicious activity and unauthorized behavior, such as
cryptocurrency mining on EC2 instances. Which service should be deployed?
A) AWS WAF
B) AWS Shield
C) Amazon GuardDuty
D) Amazon Inspector
Questions Verified
Series:
CrashCourses Professional Study Series
Author:
Dr Z. Moomba, MBChB, MRCPsych | BethelWellness Ltd
Exam Target:
AWS CCP CLF-C02
Year:
2025/2026
Format:
65 Questions with Verified Answers and Rationales
>
Author's Note:
This document is an original work produced for the CrashCourses Professional Study Series.
Clinical questions and professional scenarios were composed by Dr Z. Moomba based on current
exam objectives, published guidelines, and evidence-based sources (2024–2025). All patient
names, ages, and case details are fictional. Any resemblance to existing published Q&A banks is
coincidental. For personal study use only — not for reproduction or redistribution.
SECTION A — FOUNDATIONS
A newly established clinic wants to utilise AWS services but is concerned about the upfront
costs associated with purchasing physical servers. Which cloud computing model
characteristic addresses this concern by replacing capital expenses (CAPEX) with variable
expenses (OPEX)?
A) High availability
B) Pay-as-you-go pricing
C) Global reach
D) Fault tolerance
Answer: B
,Rationale:
a) Pay-as-you-go pricing allows organisations to pay only for the individual services they
consume, for as long as they consume them, without requiring long-term contracts or complex
licensing.
b) The distinguishing feature is the shift from CAPEX (buying hardware) to OPEX (paying for what
is used as an operating expense).
c) High availability (A) is tempting but relates to system uptime, not the financial model of avoiding
upfront physical server costs.
d)
High-yield fact:
Cloud computing allows you to trade fixed expenses for variable expenses. [AWS Cloud Concepts
2025]
A healthcare startup is developing a new patient portal. They need a compute service that
allows them to run code in response to events, such as a patient uploading a document, without
provisioning or managing servers. Which AWS service should they use?
A) Amazon EC2
B) AWS Lambda
C) Amazon RDS
D) Amazon S3
Answer: B
Rationale:
a) AWS Lambda is a serverless, event-driven compute service that lets you run code for virtually
any type of application or backend service without provisioning or managing servers.
b) The key discriminators are "run code in response to events" and "without provisioning or
managing servers."
c) Amazon EC2 (A) provides compute capacity but requires the user to provision and manage the
underlying virtual servers.
d)
High-yield fact:
Lambda bills only for the compute time consumed; there is no charge when the code is not
running. [AWS Serverless 2025]
, The IT director at BethelWellness is reviewing the AWS Shared Responsibility Model. Which of
the following is considered a responsibility of the customer when using Amazon EC2?
A) Physical security of the data centre
B) Patching the guest operating system
C) Maintaining network infrastructure hardware
D) Replacing faulty disk drives
Answer: B
Rationale:
a) Under the Shared Responsibility Model, the customer is responsible for security "in" the cloud,
which includes patching the guest operating system, applications, and configuring security
groups for IaaS services like EC2.
b) The discriminator is that EC2 is Infrastructure as a Service (IaaS), leaving OS management to
the customer.
c) Physical security (A) and hardware maintenance (C, D) are responsibilities of AWS (security
"of" the cloud).
d)
High-yield fact:
For managed services like RDS, AWS handles OS patching, shifting more responsibility to the
provider. [AWS Shared Responsibility Model 2025]
To ensure rapid delivery of static medical imaging files to specialists located globally, a hospital
network needs a service that caches content close to the users. Which AWS service provides
this global Content Delivery Network (CDN) functionality?
A) Amazon CloudFront
B) AWS Global Accelerator
C) Amazon Route 53
D) AWS Direct Connect
Answer: A
Rationale:
a) Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web
content to your users by caching it at edge locations worldwide.
b) The keyword "caches content close to the users" points directly to a CDN.
, c) AWS Global Accelerator (B) improves global application availability and performance using the
AWS global network, but it does not cache content; it proxies network traffic.
d)
High-yield fact:
CloudFront uses Edge Locations, which outnumber AWS Regions and Availability Zones. [AWS
Networking 2025]
A research facility requires a highly durable, object storage service to archive years of genomic
sequencing data that will be accessed infrequently but must be retained for compliance. Which
Amazon S3 storage class is the most cost-effective for this requirement?
A) S3 Standard
B) S3 Intelligent-Tiering
C) S3 Glacier Deep Archive
D) S3 One Zone-IA
Answer: C
Rationale:
a) S3 Glacier Deep Archive is AWS's lowest-cost storage class, designed for long-term retention
and digital preservation for data that may be accessed once or twice a year.
b) The requirement for "infrequently accessed," "retained for compliance," and "most cost-
effective" perfectly matches Glacier Deep Archive.
c) S3 Standard (A) is for frequently accessed data and would be unnecessarily expensive for
archival purposes.
d)
High-yield fact:
Retrieval times for Glacier Deep Archive range from 12 to 48 hours. [AWS Storage Solutions 2025]
The Chief Information Security Officer (CISO) wants to implement a service that continuously
monitors AWS accounts for malicious activity and unauthorized behavior, such as
cryptocurrency mining on EC2 instances. Which service should be deployed?
A) AWS WAF
B) AWS Shield
C) Amazon GuardDuty
D) Amazon Inspector
