Home / AWS / CLF-C02
AWS · CLF-C02

CLF-C02 Exam Practice Questions

AWS Certified Cloud Practitioner

CLF-C02 English PDF practice questions: 719 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For newcomers and business professionals learning AWS services, security, cloud concepts and billing.

AWS has announced changes to language availability. Check the official page for affected languages and dates.

Exam code
CLF-C02
Official exam / credential
AWS Certified Cloud Practitioner
Exam format
Single-answer and multiple-response questions
Exam duration
90 minutes
Official exam questions
65 questions
Official exam languages
Arabic, English, French (France), German, Italian, Japanese, Korean, Portuguese (Brazil), Spanish (Latin America), Spanish (Spain), Simplified Chinese, Traditional Chinese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
  • Japanese
Try before you buy

First 20 practice questions

719 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 1

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.
Which activities related to a Snowball Edge device are available to the company at no cost?

  1. A. Use of the Snowball Edge appliance for a 10-day period
  2. B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
  3. C. The transfer of data from the Snowball Edge appliance into Amazon S3
  4. D. Daily use of the Snowball Edge appliance after 10 days
Show answer

Answer

C

Question 2

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.
Which AWS service can the company use to meet these requirements?

  1. A. AWS Trusted Advisor
  2. B. Amazon Inspector
  3. C. AWS Config
  4. D. Amazon GuardDuty
Show answer

Answer

B

Question 3

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.
What is the MOST operationally efficient AWS solution for this scenario?

  1. A. Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
  2. B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.
  3. C. Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
  4. D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.
Show answer

Answer

B

Question 4

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

  1. A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file.
  2. B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.
  3. C. Have the EC2 instance assume a role to obtain the privileges to upload the file.
  4. D. Modify the S3 bucket policy so that any service can upload to it at any time.
Show answer

Answer

C

Question 5

Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?

  1. A. Physical security of DynamoDB
  2. B. Patching of DynamoDB
  3. C. Access to DynamoDB tables
  4. D. Encryption of data at rest in DynamoDB
Show answer

Answer

C

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, My Library shows the generation status. We will email you when your PDF is ready to download.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification