AWS Cloud Practitioner (CLF-C02-aligned) Practice Exams

Three 50-question timed practice papers across cloud concepts, security and compliance, cloud technology and services, and billing, pricing and support, weighted to the published CLF-C02 exam guide.

3 practice papers · 150 questions · 70 minutes each · pass mark 70% · ₹196 for all papers

What the CLF-C02 practice exams cover

Written from the published AWS Certified Cloud Practitioner (CLF-C02) exam guide domains.

Practice papers

Free CLF-C02 sample questions

Sample question 1 (Cloud concepts)

A company is using the AWS Cloud Adoption Framework to guide its organization-wide migration to AWS. The leadership team wants to understand which perspectives the framework defines. Which of the following are perspectives defined in the AWS Cloud Adoption Framework? (Select three.)

  1. Business
  2. People
  3. Compliance
  4. Platform
  5. Infrastructure

Answer: A. Business; B. People; D. Platform

The AWS Cloud Adoption Framework defines six perspectives: Business, People, Governance, Platform, Security, and Operations. Option A (Business), Option B (People), and Option D (Platform) are all valid CAF perspectives. Option C (Compliance) is not a standalone CAF perspective; compliance concerns are addressed within the Governance and Security perspectives. Option E (Infrastructure) is not a CAF perspective; infrastructure concerns are covered by the Platform perspective.

Sample question 2 (Security and compliance)

A startup has a small engineering team and wants to grant an application running on an Amazon EC2 instance permission to read objects from a specific Amazon S3 bucket. The security lead wants to avoid embedding long-term credentials in the instance configuration. Which approach satisfies this requirement while following least-privilege best practice?

  1. Generate an IAM access key for a dedicated user and store it in a configuration file on the instance.
  2. Create an IAM group with S3 read permissions and add all engineers to the group.
  3. Create an IAM role with a policy that allows read access only to the specific bucket and attach the role to the instance profile.
  4. Create an IAM role that grants read access to every S3 bucket in the account and attach it to the instance profile.

Answer: C. Create an IAM role with a policy that allows read access only to the specific bucket and attach the role to the instance profile.

Option C is correct because attaching an IAM role with a tightly scoped policy to the EC2 instance lets the application obtain temporary credentials automatically, avoiding embedded long-term credentials and limiting access to only the needed bucket. Option A is wrong because access keys are long-term credentials stored on the instance, which is discouraged. Option B is wrong because adding the engineers to an IAM group grants permissions to the humans, not to the EC2 application. Option D is wrong because giving the role read access to all buckets violates least privilege.

Sample question 3 (Cloud technology and services)

A visual effects studio wants to run rendering jobs on Amazon EC2 and needs instances that include hardware accelerators designed for graphics-intensive workloads. Which EC2 instance family best meets this requirement?

  1. Accelerated computing instances
  2. General purpose instances
  3. Memory optimized instances
  4. Storage optimized instances

Answer: A. Accelerated computing instances

Accelerated computing instances (the G family and related families) use hardware accelerators such as GPUs and are designed for graphics-intensive workloads like video rendering and 3D visualization. Option B, general purpose instances, provide a balanced mix of CPU, memory and networking and are suited to everyday workloads, not GPU-accelerated graphics. Option C, memory optimized instances, are designed for in-memory databases and large analytics workloads, not rendering. Option D, storage optimized instances, provide high sequential read and write access for very large datasets and would not provide the graphics acceleration the studio needs.

Sample question 4 (Billing, pricing and support)

A company has five separate AWS accounts owned by different departments. The finance team wants to pay all AWS charges from a single payment method and qualify for volume discounts based on the combined usage across the accounts. Which two actions meet these requirements? (Select two.)

  1. Create an organization in AWS Organizations and invite the existing accounts as member accounts.
  2. Enable consolidated billing so all member account usage is rolled up to the management account.
  3. Use AWS Cost Explorer to merge the billing data from the five accounts into a single payer account.
  4. Create IAM cross-account roles in each account and trust the finance team account.
  5. Migrate all resources from the five accounts into a single shared AWS account.

Answer: A. Create an organization in AWS Organizations and invite the existing accounts as member accounts.; B. Enable consolidated billing so all member account usage is rolled up to the management account.

Option A is correct because creating an organization in AWS Organizations establishes the management structure that enables consolidated billing. Option B is correct because consolidated billing combines usage across all member accounts under one payer, which helps the company reach volume discount tiers. Option C is wrong because Cost Explorer is for visualizing and analyzing existing spend, not for merging billing across accounts. Option D is wrong because IAM cross-account roles allow access delegation, not consolidated payment or pooled usage discounts. Option E is wrong because moving resources into one account is unnecessary and reduces isolation between departments.

Sample question 5 (Cloud concepts)

A company has an on-premises web application that it wants to migrate to AWS as quickly as possible with minimal changes to the application architecture. The company plans to optimize the architecture after the initial migration. Which migration strategy is most appropriate for this initial move?

  1. Rehost
  2. Refactor
  3. Repurchase
  4. Retain

Answer: A. Rehost

Rehosting, also known as lift-and-shift, moves applications to AWS with little or no modification, making it the fastest migration strategy and the best fit when the goal is to migrate quickly and optimize later. Option B (Refactor) involves re-architecting the application to take advantage of cloud-native features, which requires significant time and changes. Option C (Repurchase) means abandoning the current application in favor of a different product, typically SaaS, which does not match the requirement to keep the existing application. Option D (Retain) means keeping the application on premises, which contradicts the goal of migrating to AWS.

About these papers

Unofficial practice material. Every question is original, written from the vendor's publicly published exam objectives, and no real exam item is reproduced or paraphrased. This paper is not affiliated with, endorsed by, sponsored by or certified by the certification owner, and passing it does not confer any certification.

More certification practice exams