AWS Certified Cloud Practitioner (CLF-C02) Comprehensive
QUESTION Bank | Latest Practice QUESTIONs & Verified
Answers (2026/2027)
QUESTION 1
What best describes an AWS Region?
• A. A single data center located in a major metropolitan area.
• B. A physical location around the world where AWS clusters data
centers, consisting of multiple isolated Availability Zones.
• C. A global network edge location used exclusively for caching
website content.
• D. A secure virtual private network tunnel connecting on-premises
data centers to the cloud.
Correct Answer: B. A physical location around the world where AWS
clusters data centers, consisting of multiple isolated Availability Zones.
Detailed Rationale: An AWS Region is a physical geographic area
containing multiple isolated Availability Zones (AZs) designed for fault
tolerance, high availability, and low latency.
QUESTION 2
Which cloud computing advantage allows AWS to achieve lower pay-as-
you-go prices by aggregating usage across hundreds of thousands of
customers?
• A. High Availability
, • B. Economies of Scale
• C. Global Reach
• D. Elasticity
Correct Answer: B. Economies of Scale
Detailed Rationale: By aggregating usage from a massive global
customer base, AWS achieves economies of scale, allowing them to
pass savings on to customers in the form of lower pay-as-you-go pricing.
QUESTION 3
Which Amazon EC2 pricing model offers the lowest cost compute
capacity (up to 90% off On-Demand) but can be interrupted by AWS
with a two-minute warning when capacity is needed elsewhere?
• A. Reserved Instances
• B. Dedicated Hosts
• C. Spot Instances
• D. Savings Plans
Correct Answer: C. Spot Instances
Detailed Rationale: Spot Instances provide access to spare EC2 capacity
at steep discounts, making them ideal for fault-tolerant, flexible, or
stateless workloads like big data processing and CI/CD pipelines.
QUESTION 4
Which Amazon S3 storage class is specifically designed for data with
unknown or changing access patterns, automatically moving data
between access tiers to optimize costs without operational overhead?
, • A. Amazon S3 Standard
• B. Amazon S3 Intelligent-Tiering
• C. Amazon S3 Glacier Flexible Retrieval
• D. Amazon S3 Standard-Infrequent Access
Correct Answer: B. Amazon S3 Intelligent-Tiering
Detailed Rationale: S3 Intelligent-Tiering optimizes storage costs by
automatically moving data between frequent, infrequent, and archive
access tiers when access patterns change, with no operational or
retrieval fees.
QUESTION 5
What is a key difference between security groups and network access
control lists (NACLs) in an Amazon VPC?
• A. Security groups are stateless, while NACLs are stateful.
• B. Security groups operate at the subnet level, while NACLs
operate at the instance level.
• C. Security groups are stateful, while NACLs are stateless.
• D. NACLs support allow rules only, whereas security groups
support both allow and deny rules.
Correct Answer: C. Security groups are stateful, while NACLs are
stateless.
Detailed Rationale: Security groups are stateful (if you allow an
inbound request, the response is automatically allowed), whereas
NACLs are stateless (responses must be explicitly allowed via outbound
rules).
, QUESTION 6
When should an AWS IAM Role be used instead of an IAM User?
• A. When assigning permanent administrative access credentials to
an individual human developer.
• B. When granting temporary permissions to trusted users,
applications, or AWS services without sharing long-term
credentials.
• C. When creating master billing credentials for an enterprise
organization.
• D. When setting up multi-factor authentication for root accounts.
Correct Answer: B. When granting temporary permissions to trusted
users, applications, or AWS services without sharing long-term
credentials.
Detailed Rationale: IAM Roles are designed to be assumed by trusted
entities (such as EC2 instances, AWS services, or federated users) for
temporary access, eliminating the need for hardcoded long-term
credentials.
QUESTION 7
How does Amazon Aurora achieve high availability across multiple
Availability Zones?
• A. By maintaining a single database instance with manual hourly
snapshot backups.
• B. By continuously replicating six copies of your database volume
across three Availability Zones.
QUESTION Bank | Latest Practice QUESTIONs & Verified
Answers (2026/2027)
QUESTION 1
What best describes an AWS Region?
• A. A single data center located in a major metropolitan area.
• B. A physical location around the world where AWS clusters data
centers, consisting of multiple isolated Availability Zones.
• C. A global network edge location used exclusively for caching
website content.
• D. A secure virtual private network tunnel connecting on-premises
data centers to the cloud.
Correct Answer: B. A physical location around the world where AWS
clusters data centers, consisting of multiple isolated Availability Zones.
Detailed Rationale: An AWS Region is a physical geographic area
containing multiple isolated Availability Zones (AZs) designed for fault
tolerance, high availability, and low latency.
QUESTION 2
Which cloud computing advantage allows AWS to achieve lower pay-as-
you-go prices by aggregating usage across hundreds of thousands of
customers?
• A. High Availability
, • B. Economies of Scale
• C. Global Reach
• D. Elasticity
Correct Answer: B. Economies of Scale
Detailed Rationale: By aggregating usage from a massive global
customer base, AWS achieves economies of scale, allowing them to
pass savings on to customers in the form of lower pay-as-you-go pricing.
QUESTION 3
Which Amazon EC2 pricing model offers the lowest cost compute
capacity (up to 90% off On-Demand) but can be interrupted by AWS
with a two-minute warning when capacity is needed elsewhere?
• A. Reserved Instances
• B. Dedicated Hosts
• C. Spot Instances
• D. Savings Plans
Correct Answer: C. Spot Instances
Detailed Rationale: Spot Instances provide access to spare EC2 capacity
at steep discounts, making them ideal for fault-tolerant, flexible, or
stateless workloads like big data processing and CI/CD pipelines.
QUESTION 4
Which Amazon S3 storage class is specifically designed for data with
unknown or changing access patterns, automatically moving data
between access tiers to optimize costs without operational overhead?
, • A. Amazon S3 Standard
• B. Amazon S3 Intelligent-Tiering
• C. Amazon S3 Glacier Flexible Retrieval
• D. Amazon S3 Standard-Infrequent Access
Correct Answer: B. Amazon S3 Intelligent-Tiering
Detailed Rationale: S3 Intelligent-Tiering optimizes storage costs by
automatically moving data between frequent, infrequent, and archive
access tiers when access patterns change, with no operational or
retrieval fees.
QUESTION 5
What is a key difference between security groups and network access
control lists (NACLs) in an Amazon VPC?
• A. Security groups are stateless, while NACLs are stateful.
• B. Security groups operate at the subnet level, while NACLs
operate at the instance level.
• C. Security groups are stateful, while NACLs are stateless.
• D. NACLs support allow rules only, whereas security groups
support both allow and deny rules.
Correct Answer: C. Security groups are stateful, while NACLs are
stateless.
Detailed Rationale: Security groups are stateful (if you allow an
inbound request, the response is automatically allowed), whereas
NACLs are stateless (responses must be explicitly allowed via outbound
rules).
, QUESTION 6
When should an AWS IAM Role be used instead of an IAM User?
• A. When assigning permanent administrative access credentials to
an individual human developer.
• B. When granting temporary permissions to trusted users,
applications, or AWS services without sharing long-term
credentials.
• C. When creating master billing credentials for an enterprise
organization.
• D. When setting up multi-factor authentication for root accounts.
Correct Answer: B. When granting temporary permissions to trusted
users, applications, or AWS services without sharing long-term
credentials.
Detailed Rationale: IAM Roles are designed to be assumed by trusted
entities (such as EC2 instances, AWS services, or federated users) for
temporary access, eliminating the need for hardcoded long-term
credentials.
QUESTION 7
How does Amazon Aurora achieve high availability across multiple
Availability Zones?
• A. By maintaining a single database instance with manual hourly
snapshot backups.
• B. By continuously replicating six copies of your database volume
across three Availability Zones.
