AWS Certified Cloud Practitioner (CLF-C02) Certification Exam
| Complete Practice QUESTIONs, Verified Answers & Detailed
Explanations (2026/2027)
QUESTION 1
Which AWS tool or calculator is best used to create cost estimates and
model solutions for new architectures before deploying them on AWS?
• A. AWS Cost Explorer
• B. AWS Pricing Calculator
• C. AWS Budgets
• D. AWS Trusted Advisor
Correct Answer: B. AWS Pricing Calculator
Detailed Rationale: The AWS Pricing Calculator enables users to explore
AWS services and create customized cost estimates for their
architectural use cases. Cost Explorer tracks historical spending,
Budgets monitors cost thresholds, and Trusted Advisor provides
optimization recommendations.
QUESTION 2
According to the AWS Shared Responsibility Model, which of the
following security tasks is the sole responsibility of the customer when
using Amazon EC2?
• A. Physical security of data center facilities
, • B. Maintenance and patching of underlying host virtualization
hypervisors
• C. Guest operating system configuration, patches, and security
updates
• D. Replacement of failed physical hard disk drives
Correct Answer: C. Guest operating system configuration, patches, and
security updates
Detailed Rationale: Under the shared responsibility model, AWS is
responsible for security of the cloud (hardware, software, networking,
and facilities), while the customer is responsible for security in the
cloud, which includes configuring the guest operating system,
application software, and firewall settings.
QUESTION 3
Which Amazon S3 storage class is optimized for long-term archival data
that is accessed rarely, is not time-sensitive, and requires retrieval times
ranging from minutes to hours?
• A. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
• B. Amazon S3 Intelligent-Tiering
• C. Amazon S3 Glacier Flexible Retrieval
• D. Amazon S3 Express One Zone
Correct Answer: C. Amazon S3 Glacier Flexible Retrieval
Detailed Rationale: Amazon S3 Glacier Flexible Retrieval is designed for
low-cost archive storage with retrieval options ranging from 1 minute to
12 hours. Standard-IA is for data accessed less frequently but requiring
,rapid access. Intelligent-Tiering automates cost savings for unknown or
changing access patterns.
QUESTION 4
Which Amazon EC2 pricing model provides unused compute capacity at
steep discounts (up to 90%) but can be interrupted by AWS with a 2-
minute notification when capacity is needed?
• A. On-Demand Instances
• B. Reserved Instances
• C. Dedicated Hosts
• D. Spot Instances
Correct Answer: D. Spot Instances
Detailed Rationale: Spot Instances take advantage of unused EC2
capacity in the AWS Cloud, offering major cost savings. However, AWS
can reclaim this capacity with a 2-minute warning if it requires the
resources back for On-Demand or Reserved customers.
QUESTION 5
What is the primary function of AWS Identity and Access Management
(IAM)?
• A. To monitor and log all API requests made to an AWS account
• B. To securely manage access to AWS services and resources by
creating users, groups, and policies
• C. To automatically scale web application infrastructure based on
user traffic
, • D. To route end-user internet traffic to global application
endpoints
Correct Answer: B. To securely manage access to AWS services and
resources by creating users, groups, and policies
Detailed Rationale: AWS IAM enables administrators to control access
to AWS resources securely. It allows management of authentication
(who can sign in) and authorization (what resources they can use)
through granular permission policies.
QUESTION 6
Which AWS tool provides real-time guidance and automated checks to
help provision resources following AWS best practices across cost
optimization, security, fault tolerance, and performance?
• A. AWS CloudTrail
• B. AWS Trusted Advisor
• C. Amazon CloudWatch
• D. AWS Inspector
Correct Answer: B. AWS Trusted Advisor
Detailed Rationale: AWS Trusted Advisor evaluates an AWS
environment and generates recommendations aligned with core pillars:
cost optimization, security, fault tolerance, performance, and service
limits.
QUESTION 7
| Complete Practice QUESTIONs, Verified Answers & Detailed
Explanations (2026/2027)
QUESTION 1
Which AWS tool or calculator is best used to create cost estimates and
model solutions for new architectures before deploying them on AWS?
• A. AWS Cost Explorer
• B. AWS Pricing Calculator
• C. AWS Budgets
• D. AWS Trusted Advisor
Correct Answer: B. AWS Pricing Calculator
Detailed Rationale: The AWS Pricing Calculator enables users to explore
AWS services and create customized cost estimates for their
architectural use cases. Cost Explorer tracks historical spending,
Budgets monitors cost thresholds, and Trusted Advisor provides
optimization recommendations.
QUESTION 2
According to the AWS Shared Responsibility Model, which of the
following security tasks is the sole responsibility of the customer when
using Amazon EC2?
• A. Physical security of data center facilities
, • B. Maintenance and patching of underlying host virtualization
hypervisors
• C. Guest operating system configuration, patches, and security
updates
• D. Replacement of failed physical hard disk drives
Correct Answer: C. Guest operating system configuration, patches, and
security updates
Detailed Rationale: Under the shared responsibility model, AWS is
responsible for security of the cloud (hardware, software, networking,
and facilities), while the customer is responsible for security in the
cloud, which includes configuring the guest operating system,
application software, and firewall settings.
QUESTION 3
Which Amazon S3 storage class is optimized for long-term archival data
that is accessed rarely, is not time-sensitive, and requires retrieval times
ranging from minutes to hours?
• A. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
• B. Amazon S3 Intelligent-Tiering
• C. Amazon S3 Glacier Flexible Retrieval
• D. Amazon S3 Express One Zone
Correct Answer: C. Amazon S3 Glacier Flexible Retrieval
Detailed Rationale: Amazon S3 Glacier Flexible Retrieval is designed for
low-cost archive storage with retrieval options ranging from 1 minute to
12 hours. Standard-IA is for data accessed less frequently but requiring
,rapid access. Intelligent-Tiering automates cost savings for unknown or
changing access patterns.
QUESTION 4
Which Amazon EC2 pricing model provides unused compute capacity at
steep discounts (up to 90%) but can be interrupted by AWS with a 2-
minute notification when capacity is needed?
• A. On-Demand Instances
• B. Reserved Instances
• C. Dedicated Hosts
• D. Spot Instances
Correct Answer: D. Spot Instances
Detailed Rationale: Spot Instances take advantage of unused EC2
capacity in the AWS Cloud, offering major cost savings. However, AWS
can reclaim this capacity with a 2-minute warning if it requires the
resources back for On-Demand or Reserved customers.
QUESTION 5
What is the primary function of AWS Identity and Access Management
(IAM)?
• A. To monitor and log all API requests made to an AWS account
• B. To securely manage access to AWS services and resources by
creating users, groups, and policies
• C. To automatically scale web application infrastructure based on
user traffic
, • D. To route end-user internet traffic to global application
endpoints
Correct Answer: B. To securely manage access to AWS services and
resources by creating users, groups, and policies
Detailed Rationale: AWS IAM enables administrators to control access
to AWS resources securely. It allows management of authentication
(who can sign in) and authorization (what resources they can use)
through granular permission policies.
QUESTION 6
Which AWS tool provides real-time guidance and automated checks to
help provision resources following AWS best practices across cost
optimization, security, fault tolerance, and performance?
• A. AWS CloudTrail
• B. AWS Trusted Advisor
• C. Amazon CloudWatch
• D. AWS Inspector
Correct Answer: B. AWS Trusted Advisor
Detailed Rationale: AWS Trusted Advisor evaluates an AWS
environment and generates recommendations aligned with core pillars:
cost optimization, security, fault tolerance, performance, and service
limits.
QUESTION 7
