A W S   C E R T I F I C A T I O N

CLF C02 Certified Cloud Practitioner Practice Exam

Exam Number: 1201 | Last updated April 24, 2026 | 700+ questions across 4 vendor-aligned objectives

The AWS CLF C02 Certified Cloud Practitioner is the foundational AWS credential, designed for candidates who need to demonstrate broad understanding of the AWS Cloud regardless of their technical role. It targets project managers, sales professionals, line-of-business stakeholders, and early-career technologists who collaborate with cloud teams. Successful candidates can describe the AWS value proposition, identify core services, and reason about cost, security, and operational basics on AWS.

Cloud Concepts and Technology and Services are the two heaviest domains. Cloud Concepts (24%) covers the Benefits of the AWS Cloud, the AWS Well-Architected Framework, cloud economics, and migration drivers. Technology and Services (34%) is the largest section and spans Compute (Amazon EC2, AWS Lambda), Storage (Amazon S3, Amazon EBS, Amazon EFS), Databases (Amazon RDS, Amazon DynamoDB), Networking (Amazon VPC, Amazon Route 53), and global infrastructure concepts including Regions, Availability Zones, and edge locations.

The remaining domains round out the breadth expected of a cloud-aware professional. Security and Compliance (30%) covers the AWS Shared Responsibility Model, AWS Identity and Access Management, and AWS compliance programs. Billing, Pricing, and Support (12%) covers AWS pricing models, AWS Cost Explorer, AWS Budgets, AWS Organizations, and the tiers of AWS Support plans. Expect plain-English questions that test recognition of service purpose rather than deep configuration.

 Memorize which service belongs to which category (compute, storage, database, networking) before tackling scenario wording — most wrong answers are services from the wrong category. Read every Shared Responsibility question twice: AWS handles security ‘of’ the cloud, customers handle security ‘in’ the cloud. Pay close attention to Support plan differences — Developer, Business, Enterprise On-Ramp, and Enterprise — because two questions on this topic are almost guaranteed.

Every answer links to the source. Each explanation below includes a hyperlink to the exact AWS documentation page the question was derived from. PowerKram is the only practice platform with source-verified explanations. Learn about our methodology →

712

practice exam users

93.4%

satisfied users

86.5%

passed the exam

4.7/5

quality rating

Test your CLF C02 Certified Cloud Practitioner knowledge

10 of 700+ questions

Question #1 - Cloud Concepts

A startup is comparing on-premises infrastructure to AWS for a new web application that has unpredictable traffic spikes during product launches.

Which AWS Cloud value proposition most directly addresses unpredictable traffic spikes?

A) Trade capital expense for variable expense
B) Increase speed and agility
C) Stop guessing about capacity
D) Elasticity to scale capacity up and down as needed

 

Correct answers: D – Explanation:
Elasticity is the ability to acquire resources as you need them and release them when you don’t, which directly handles unpredictable traffic spikes. The other options describe real benefits of AWS, but variable expense is about cost model, capacity guessing is about long-term planning, and agility is about deployment speed. Source: [Six Advantages of Cloud Computing](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html)

An auditor asks who is responsible for patching the guest operating system on an EC2 instance and who patches the underlying hypervisor.

Under the AWS Shared Responsibility Model, who is responsible for each task?

A) AWS patches both the guest OS and the hypervisor
B) The customer patches both the guest OS and the hypervisor
C) AWS patches the guest OS; the customer patches the hypervisor
D) The customer patches the guest OS; AWS patches the hypervisor

 

Correct answers: D – Explanation:
AWS is responsible for security ‘of’ the cloud (hardware, hypervisor, facilities) while the customer is responsible for security ‘in’ the cloud, which includes guest OS patching, configuration, and data on EC2. Source: [AWS Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/)

A team wants to deploy the same workload in two AWS Regions for disaster recovery and needs to understand the physical isolation guarantees.

Which statement best describes the relationship between Regions and Availability Zones?

A) A Region is a single data center; AZs are racks within it
B) A Region contains multiple isolated AZs, each consisting of one or more discrete data centers
C) AZs are virtual partitions within a single physical data center
D) Regions and AZs are interchangeable terms for the same construct

 

Correct answers: B – Explanation:
An AWS Region is a physical location with multiple, isolated, and physically separate Availability Zones; each AZ has independent power, cooling, and networking. This is the foundation of AWS’s high-availability design. The other options misrepresent the architecture. Source: [Regions and Availability Zones](https://aws.amazon.com/about-aws/global-infrastructure/regions_az/)

A finance team needs to forecast monthly EC2 spend for a steady-state production workload that will run 24/7 for the next three years.

Which pricing model offers the largest discount versus On-Demand for this scenario?

A) Spot Instances
B) On-Demand with consolidated billing
C) Reserved capacity at hourly On-Demand rates
D) Compute Savings Plans for 3 years, all upfront

 

Correct answers: D – Explanation:
A 3-year all-upfront Compute Savings Plan provides the deepest discount (up to ~66%) for predictable, steady-state workloads. Spot is cheaper but not appropriate for steady production due to interruption risk; consolidated billing alone gives no compute discount; option D is not a real model. Source: [AWS Savings Plans](https://aws.amazon.com/savingsplans/compute-pricing/)

A small business wants to host a static marketing site (HTML/CSS/JS) at the lowest possible cost without managing servers.

Which AWS service combination is the most cost-effective starting point?

A) Amazon S3 for static hosting fronted by Amazon CloudFront
B) EC2 with an Elastic Load Balancer
C) Amazon ECS on Fargate
D) AWS Lambda behind API Gateway returning HTML

 

Correct answers: A – Explanation:
S3 static website hosting with CloudFront in front is the canonical low-cost, serverless pattern for static sites — no servers, pay-per-request, with edge caching. EC2 ELB is overkill and costly; ECS/Fargate is for containers; Lambda API Gateway is for dynamic APIs, not static asset hosting. Source: [Hosting a Static Website on Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteHosting.html)

A new developer needs programmatic access to AWS to run scripts. The security team insists on least privilege and no long-lived credentials on the laptop.

Which approach best satisfies these requirements?

A) Create an IAM user with AdministratorAccess and store the access key in the script
B) Share the root account access keys among the developer team
C) Use IAM Identity Center (SSO) with short-term credentials and a role granting only the needed permissions
D) Embed the AWS account password in environment variables

 

Correct answers: C – Explanation:
IAM Identity Center issues short-term credentials via federation and lets you scope permissions to a specific role, satisfying both least privilege and the no-long-lived-credentials requirement. Root keys must never be used; AdministratorAccess violates least privilege; account passwords are not used for programmatic access. Source: [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html)

An operations team wants automatic alerts when their monthly AWS spend is forecasted to exceed $5,000.

Which AWS service should they configure?

A) AWS Budgets with a forecasted-cost alert
B) AWS Trusted Advisor cost checks
C) AWS Cost Explorer reports only
D) Amazon CloudWatch billing dashboard

 

Correct answers: A – Explanation:
AWS Budgets supports forecasted-cost alerts that notify you before a threshold is crossed. Cost Explorer visualizes spend but does not push proactive alerts; Trusted Advisor surfaces cost recommendations, not budget alerts; CloudWatch billing alarms work on actual spend, not forecast. Source: [AWS Budgets](https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html)

A developer is choosing a managed relational database for a transactional application and wants automated backups, patching, and Multi-AZ failover.

Which service best fits these requirements?

A) Amazon RDS
B) Amazon Redshift
C) Amazon DynamoDB
D) Self-managed MySQL on EC2

 

Correct answers: A – Explanation:
Amazon RDS is a managed relational database service with automated backups, patching, and Multi-AZ failover built in. DynamoDB is NoSQL; Redshift is a data warehouse for analytics, not OLTP; self-managed EC2 puts patching and HA on the customer. Source: [Amazon RDS Features](https://aws.amazon.com/rds/features/)

A compliance officer needs an audit trail of every API call made in the AWS account, including who made the call, when, and from where.

Which service provides this capability?

A) Amazon CloudWatch Metrics
B) AWS CloudTrail
C) AWS Config
D) VPC Flow Logs

 

Correct answers: B – Explanation:
CloudTrail records account activity (API calls) with identity, time, source IP, and parameters — exactly the audit trail described. CloudWatch Metrics is for performance data; AWS Config tracks resource configuration history; VPC Flow Logs capture network traffic, not API calls. Source: [AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html)

A solutions architect is reviewing a workload against the AWS Well-Architected Framework and wants to ensure the design recovers gracefully from component failures.

Which Well-Architected pillar is most directly concerned with this goal?

A) Cost Optimization
B) Operational Excellence
C) Reliability
D) Performance Efficiency

 

Correct answers: C – Explanation:
The Reliability pillar focuses on the ability of a workload to perform its intended function correctly and consistently, including recovery from failures. Operational Excellence is about running and monitoring; Cost Optimization is about spend; Performance Efficiency is about using resources efficiently. Source: [AWS Well-Architected Framework](https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html)

Get 700+ more questions with source-linked explanations

Every answer traces to the exact AWS documentation page — so you learn from the source, not just memorize answers.

Exam mode & learn mode · Score by objective · Updated April 24, 2026

Learn more...

What the aws-cloud-practitioner exam measures

  • Cloud Concepts (24%) — Define the AWS Cloud value proposition, identify aspects of cloud economics, and explain principles of the AWS Well-Architected Framework.
  • Security and Compliance (30%) — Apply the AWS Shared Responsibility Model, identify AWS access management capabilities, and recognize components of AWS compliance and governance.
  • Cloud Technology and Services (34%) — Describe methods of deploying and operating in the AWS Cloud, define AWS global infrastructure, identify core compute, storage, database, and networking services.
  • Billing, Pricing, and Support (12%) — Compare AWS pricing models, recognize cost management tools (AWS Cost Explorer, AWS Budgets), and identify the technical resources and AWS Support options available.

  • Review the official AWS exam guide and confirm the latest domain weights and content scope before scheduling.
  • Complete the matching learning plan on AWS Skill Builder, including the digital courses and exam prep modules.
  • Build hands-on muscle memory in an AWS Free Tier account by deploying the services that appear in the Technology and Services domain.
  • Apply your skills to a real-world project — workplace assignments, volunteer work, or open-source contributions where AWS services solve a concrete problem.
  • Master one objective at a time, beginning with the highest-weighted domain so the score impact of each study session is maximized.
  • Run PowerKram in Learn mode to read the explanations and follow every sourced documentation link until you can predict the right answer before reading the choices.
  • Switch to PowerKram Exam mode across all objectives once your accuracy in Learn mode passes 85%, simulating the timed exam experience.

The Cloud Practitioner credential opens entry-level paths and complements non-technical roles that touch cloud projects:

Related certifications to explore

Related reading from our Learning Hub