AWS CLF-C02: AWS Certified Cloud Practitioner

Last checked October 22, 2026 against the official AWS exam page.

1. Question 1Security and Compliance

   Under the AWS shared responsibility model, which task belongs to the customer?

   1. AMaintaining the physical security of the data center perimeter fencing
   2. BSecuring the configuration of their own guest operating system and applications
   3. CPatching the Nitro hypervisor on which customer EC2 instances run
   4. DMaintaining the physical network hardware in the Region, including routers
   Show answer and explanationHide answer

   Correct answer: B

   Customers are responsible for configuring and securing their guest operating systems, applications, and data. AWS is responsible for the physical facilities, hardware, and the hypervisor infrastructure.

2. Question 2Cloud Technology and Services

   A company needs to run a web application across several Availability Zones in one AWS Region so that it survives the failure of one data center. Which concept should it use?

   1. AMultiple Regions with manual data copies only
   2. BA single on-premises server
   3. CMultiple Availability Zones within the Region
   4. DA single Availability Zone with a larger instance
   Show answer and explanationHide answer

   Correct answer: C

   Availability Zones are isolated locations within a Region, and spreading resources across them improves resilience. A single zone, manual cross-region copies, and one on-premises server do not provide the same automatic resilience.

3. Question 3Cloud Concepts

   A startup wants to avoid buying servers up front and pay only for the computing it uses each month. Which cloud benefit does this describe?

   1. ATrading capital expense for variable expense
   2. BFixed monthly hardware purchase cost
   3. COwning the on-site data center building
   4. DLong-term contracts with fixed capacity reservations
   Show answer and explanationHide answer

   Correct answer: A

   Cloud services let customers pay for consumption instead of purchasing hardware in advance, which converts capital spending into variable operating spending. Fixed hardware costs, owned buildings, and fixed capacity contracts describe the traditional model.

4. Question 4Billing, Pricing, and Support

   A team wants to estimate the monthly cost of a planned architecture before deploying it. Which tool should it use?

   1. AAWS Trusted Advisor only
   2. BAmazon CloudWatch dashboards
   3. CAWS Config rules
   4. DAWS Pricing Calculator
   Show answer and explanationHide answer

   Correct answer: D

   The AWS Pricing Calculator estimates the cost of planned architectures. Trusted Advisor reviews existing accounts, CloudWatch monitors metrics, and Config evaluates resource configuration.

5. Question 5Security and Compliance

   Which two actions help protect an AWS account's root user? (Choose two.)

   1. ACreate access keys for the root user for daily scripts
   2. BUse the root user for everyday administrative tasks
   3. CStore the root password in a shared document
   4. DLimit root use to the few tasks that require it
   5. EEnable multi-factor authentication for the root user
   Show answer and explanationHide answer

   Correct answer: D, E

   MFA and limiting root use to the few tasks that require it reduce the risk of takeover and misuse. Root access keys, daily root use, and shared passwords each increase exposure.