5.5 Practice Exam — Mixed Domain Questions
Key Takeaways
- Practice questions covering all four domains help identify knowledge gaps before taking the actual exam.
- Focus on understanding WHY each answer is correct — not just memorizing answers.
- The CLF-C02 tests breadth of knowledge across 200+ AWS services, not deep technical expertise.
- Scenario-based questions require matching the described need to the correct AWS service or concept.
- Questions about the Shared Responsibility Model, Well-Architected Framework, and pricing models appear most frequently.
The following practice questions simulate the format and difficulty of the actual CLF-C02 exam. They span all four domains with scenario-based items that test your ability to apply knowledge rather than simply recall facts. Treat them as a graded checkpoint, not a reading assignment.
Tips for this practice section:
- Answer each question before revealing the explanation
- Note which domains you miss and reread those chapters
- On the real exam, process of elimination is your strongest tool
How to Use This Practice Set
Work the full set under light time pressure before looking at any explanation, then mark every miss by domain, rule, and service name. For each wrong answer, write one sentence on why the correct option wins and why the most tempting distractor fails — because real exam items frequently retest the same concept with different wording. If several misses cluster in one domain, pause and reread that chapter before continuing rather than pushing ahead.
A strong review loop is: a timed first attempt, an explanation review, a targeted reread of weak areas, then a second attempt after a short break so you are recalling concepts rather than memorizing answer positions.
Domain Coverage and Weighting
Because the exam weights domains unevenly, weight your review the same way. Cloud Technology and Services (34%) and Security and Compliance (30%) together make up nearly two-thirds of scored questions, so service-selection and security scenarios deserve the most practice. Cloud Concepts (24%) rewards knowing the six advantages of cloud, the Well-Architected pillars, and the global-infrastructure hierarchy. Billing, Pricing, and Support (12%) is small but high-yield: the pricing models, the three Free Tier types, the cost tools, and the support-plan differentiators recur predictably.
Review Routine
After finishing, build a three-column log: topic, the rule you missed, and the clue you should have noticed. Retake only the missed questions the next day, then mix them with fresh items so you do not memorize order. For scenario questions, name the deciding factor aloud — "predictable workload, so Savings Plans" or "needs to survive an AZ outage, so Multi-AZ" — before selecting, which prevents rushing toward a familiar but wrong option. The most common traps are confusing similar services (Security Groups vs. NACLs, CloudWatch vs. CloudTrail, Multi-AZ vs. Read Replicas, Cognito vs.
IAM), so build flashcards for those pairs and drill them until the distinction is automatic.
Exam-Day Execution
With 65 questions in 90 minutes you have roughly 83 seconds per question, which is comfortable if you do not stall. Use a three-pass approach: a first pass to answer everything you know quickly while flagging anything that needs more than 90 seconds, a second pass to work the flagged items with fresh eyes, and a short final pass to confirm you answered all 65 (there is no penalty for guessing, so never leave a blank). On multiple-response items, read how many answers to select and remember that partial credit is not given — you must pick every correct option and no incorrect ones.
Watch the qualifier in each stem. "MOST cost-effective," "MOST secure," "MOST highly available," and "LEAST operational overhead" each steer you toward a different family of services even when the scenario is otherwise identical. A question that adds "without managing servers" rules out raw EC2; one that says "must survive a Region outage" rules out single-Region designs; one that says "tolerates interruptions" invites Spot. The wrong answers are usually real AWS services that simply do not fit the stated constraint, so the discipline is matching the constraint, not recognizing the service name.
A Compact Domain Cheat Sheet
As a final review, anchor each domain to its highest-frequency facts. Cloud Concepts: the six advantages of cloud, the six Well-Architected pillars (Sustainability is newest), and Regions > Availability Zones > edge locations. Security and Compliance: the Shared Responsibility Model, root-user MFA and least privilege, and the detective services (GuardDuty for threats, Inspector for vulnerabilities, Macie for PII, CloudTrail for API logs).
Cloud Technology and Services: match each workload to the right compute (EC2/Lambda/Fargate), storage (S3/EBS/EFS), and database (RDS/DynamoDB/Redshift), and know networking basics (VPC, CloudFront, Route 53, ELB). Billing, Pricing, and Support: the pricing models, the three Free Tier types, Cost Explorer vs. Budgets vs. Pricing Calculator, and the support-plan differentiators (TAM, Concierge, full Trusted Advisor).
Service Pairs the Exam Loves to Confuse
Many missed questions come down to a handful of look-alike pairs. Drill these until the distinction is reflexive:
| Pair | The Deciding Difference |
|---|---|
| CloudWatch vs. CloudTrail | CloudWatch = performance metrics/alarms/logs; CloudTrail = audit log of API calls |
| Security Groups vs. NACLs | Security Groups = instance-level, stateful, allow-only; NACLs = subnet-level, stateless, allow+deny |
| Multi-AZ vs. Read Replica | Multi-AZ = high availability/failover; Read Replica = read scaling |
| Cognito vs. IAM | Cognito = your app's users; IAM = your AWS account's users |
| CloudFront vs. Global Accelerator | CloudFront = cache content at edge; Global Accelerator = route live traffic over the AWS backbone |
| Marketplace vs. Service Catalog | Marketplace = buy third-party software; Service Catalog = publish approved internal products |
| Cost Explorer vs. Pricing Calculator | Cost Explorer = analyze past spend; Pricing Calculator = estimate before deploying |
| Inspector vs. GuardDuty vs. Macie | Inspector = vulnerability scan; GuardDuty = threat detection; Macie = sensitive data (PII) discovery |
If you can explain the right-hand column for every row from memory, you have neutralized a large fraction of the trickiest exam items. The mixed-domain questions that follow reward exactly this discipline: read for the one deciding constraint in each scenario, eliminate the two clearly wrong options, and match the remaining choice to the specific need described.
A company stores sensitive customer data in Amazon S3. Under the AWS Shared Responsibility Model, who is responsible for encrypting this data?
A startup wants to deploy a web application quickly without managing servers, load balancers, or databases manually. Which AWS service is BEST suited?
Which AWS service should a company use to create a centralized, automated data backup solution across multiple AWS services including EBS, RDS, and DynamoDB?
A global company wants to reduce latency for users in Asia, Europe, and North America. They host a static website on S3 in us-east-1. Which service should they add?
Which pricing model should a company choose for workloads that must run continuously for 3 years with a known, steady-state pattern?
Which AWS service provides intelligent threat detection by analyzing CloudTrail logs, VPC Flow Logs, and DNS logs using machine learning?
A company has 10 AWS accounts and wants a single bill with volume discounts applied across all accounts. Which feature provides this?
A company needs to connect their on-premises data center to AWS with a consistent, low-latency private connection. They have compliance requirements that prohibit using the public internet. Which service should they use?
According to the AWS Well-Architected Framework, which pillar focuses on minimizing environmental impact?
A company wants to run a relational database on AWS but does NOT want to manage the underlying OS, patching, or backups. Which service should they use?
Which service allows you to run containerized applications without managing the underlying server infrastructure?
Which of the following is a benefit of cloud computing that allows organizations to deploy applications in multiple AWS Regions around the world with just a few clicks?
A security team needs to find personally identifiable information (PII) stored in their S3 buckets. Which AWS service should they use?
Which AWS service or feature lets you define and enforce standardized guardrails across multiple AWS accounts in an Organization?
A company wants to build a chatbot for their customer service website. Which AWS AI service should they use?
What is the MINIMUM AWS Support plan required to access the full set of AWS Trusted Advisor checks?
A company processes data once a quarter but needs immediate results when they do. Which S3 storage class is most cost-effective?
Which AWS service helps you visualize, understand, and manage your AWS costs and usage over time?
Which AWS service creates an immutable log of all API calls made in an AWS account for auditing and compliance?
A developer wants to deploy code to production automatically whenever changes are pushed to the Git repository. Which AWS service orchestrates this CI/CD pipeline?
A company needs to store session data that is shared across multiple web servers with sub-millisecond response times. Which service is BEST suited?
Under the Shared Responsibility Model, which task is AWS responsible for when using Amazon RDS?
Which AWS service allows you to run SQL queries on data stored in Amazon S3 without needing to load it into a database?
Which of the following is NOT one of the six advantages of cloud computing as defined by AWS?
A company wants real-time personalized product recommendations on their e-commerce website. Which AWS AI service should they use?
What does Amazon Route 53 provide?
Which AWS service is BEST for storing and automatically rotating database credentials, API keys, and other secrets?
A company has a web application deployed in us-east-1. They want to ensure the application remains available even if the entire us-east-1 Region becomes unavailable. What should they do?
You've completed this section
Continue exploring other exams