PracticeVideosBlogFlashcards

5.5 Practice Exam — Mixed Domain Questions

Key Takeaways

  • Practice questions covering all four domains help identify knowledge gaps before taking the actual exam.

  • Focus on understanding WHY each answer is correct — not just memorizing answers.

  • The CLF-C02 tests breadth of knowledge across 200+ AWS services, not deep technical expertise.

  • Scenario-based questions require matching the described need to the correct AWS service or concept.

  • Questions about the Shared Responsibility Model, Well-Architected Framework, and pricing models appear most frequently.

Last updated: October 2026

The following practice questions simulate the format and difficulty of the actual CLF-C02 exam. They span all four domains with scenario-based items that test your ability to apply knowledge rather than simply recall facts. Treat them as a graded checkpoint, not a reading assignment.

Tips for this practice section:

  • Answer each question before revealing the explanation
  • Note which domains you miss and reread those chapters
  • On the real exam, process of elimination is your strongest tool

How to Use This Practice Set

Work the full set under light time pressure before looking at any explanation, then mark every miss by domain, rule, and service name. For each wrong answer, write one sentence on why the correct option wins and why the most tempting distractor fails — because real exam items frequently retest the same concept with different wording. If several misses cluster in one domain, pause and reread that chapter before continuing rather than pushing ahead.

A strong review loop is: a timed first attempt, an explanation review, a targeted reread of weak areas, then a second attempt after a short break so you are recalling concepts rather than memorizing answer positions.

Domain Coverage and Weighting

Because the exam weights domains unevenly, weight your review the same way. Cloud Technology and Services (34%) and Security and Compliance (30%) together make up nearly two-thirds of scored questions, so service-selection and security scenarios deserve the most practice. Cloud Concepts (24%) rewards knowing the six advantages of cloud, the Well-Architected pillars, and the global-infrastructure hierarchy. Billing, Pricing, and Support (12%) is small but high-yield: the pricing models, the Free Tier plans and always-free offers, the cost tools, and the support-plan differentiators recur predictably.

Review Routine

After finishing, build a three-column log: topic, the rule you missed, and the clue you should have noticed. Retake only the missed questions the next day, then mix them with fresh items so you do not memorize order. For scenario questions, name the deciding factor aloud — "predictable workload, so Savings Plans" or "needs to survive an AZ outage, so Multi-AZ" — before selecting, which prevents rushing toward a familiar but wrong option. The most common traps are confusing similar services (Security Groups vs. NACLs, CloudWatch vs. CloudTrail, Multi-AZ vs. Read Replicas, Cognito vs.

IAM), so build flashcards for those pairs and drill them until the distinction is automatic.

Exam-Day Execution

With 65 questions in 90 minutes you have roughly 83 seconds per question, which is comfortable if you do not stall. Use a three-pass approach: a first pass to answer everything you know quickly while flagging anything that needs more than 90 seconds, a second pass to work the flagged items with fresh eyes, and a short final pass to confirm you answered all 65 (there is no penalty for guessing, so never leave a blank). On multiple-response items, read how many answers to select and remember that partial credit is not given — you must pick every correct option and no incorrect ones.

Watch the qualifier in each stem. "MOST cost-effective," "MOST secure," "MOST highly available," and "LEAST operational overhead" each steer you toward a different family of services even when the scenario is otherwise identical. A question that adds "without managing servers" rules out raw EC2; one that says "must survive a Region outage" rules out single-Region designs; one that says "tolerates interruptions" invites Spot. The wrong answers are usually real AWS services that simply do not fit the stated constraint, so the discipline is matching the constraint, not recognizing the service name.

A Compact Domain Cheat Sheet

As a final review, anchor each domain to its highest-frequency facts. Cloud Concepts: the six advantages of cloud, the six Well-Architected pillars (Sustainability is newest), and Regions > Availability Zones > edge locations. Security and Compliance: the Shared Responsibility Model, root-user MFA and least privilege, and the detective services (GuardDuty for threats, Inspector for vulnerabilities, Macie for PII, CloudTrail for API logs).

Cloud Technology and Services: match each workload to the right compute (EC2/Lambda/Fargate), storage (S3/EBS/EFS), and database (RDS/DynamoDB/Redshift), and know networking basics (VPC, CloudFront, Route 53, ELB). Billing, Pricing, and Support: the pricing models, the Free Tier plans and always-free offers, Cost Explorer vs. Budgets vs. Pricing Calculator, and the support-plan differentiators (designated TAM, billing concierge, full Trusted Advisor).

Service Pairs the Exam Loves to Confuse

Many missed questions come down to a handful of look-alike pairs. Drill these until the distinction is reflexive:

PairThe Deciding Difference
CloudWatch vs. CloudTrailCloudWatch = performance metrics/alarms/logs; CloudTrail = audit log of API calls
Security Groups vs. NACLsSecurity Groups = instance-level, stateful, allow-only; NACLs = subnet-level, stateless, allow+deny
Multi-AZ vs. Read ReplicaMulti-AZ = high availability/failover; Read Replica = read scaling
Cognito vs. IAMCognito = your app's users; IAM = your AWS account's users
CloudFront vs. Global AcceleratorCloudFront = cache content at edge; Global Accelerator = route live traffic over the AWS backbone
Marketplace vs. Service CatalogMarketplace = buy third-party software; Service Catalog = publish approved internal products
Cost Explorer vs. Pricing CalculatorCost Explorer = analyze past spend; Pricing Calculator = estimate before deploying
Inspector vs. GuardDuty vs. MacieInspector = vulnerability scan; GuardDuty = threat detection; Macie = sensitive data (PII) discovery

If you can explain the right-hand column for every row from memory, you have neutralized a large fraction of the trickiest exam items. The mixed-domain questions that follow reward exactly this discipline: read for the one deciding constraint in each scenario, eliminate the two clearly wrong options, and match the remaining choice to the specific need described.

Test Your Knowledge

A company stores sensitive customer data in Amazon S3. Under the AWS Shared Responsibility Model, who is responsible for encrypting this data?

A

AWS is responsible for all encryption

B

The customer is responsible for configuring encryption

C

S3 automatically encrypts all data without customer action

D

Encryption is not available for S3

Test Your Knowledge

A startup wants to deploy a web application quickly without managing servers, load balancers, or databases manually. Which AWS service is BEST suited?

A

Amazon EC2 with manual configuration

B

AWS Elastic Beanstalk

C

Amazon Lightsail

D

AWS CloudFormation

Test Your Knowledge

Which AWS service should a company use to create a centralized, automated data backup solution across multiple AWS services including EBS, RDS, and DynamoDB?

A

Amazon S3

B

AWS Backup

C

AWS Storage Gateway

D

Amazon EFS

Test Your Knowledge

A global company wants to reduce latency for users in Asia, Europe, and North America. They host a static website on S3 in us-east-1. Which service should they add?

A

AWS Direct Connect

B

Amazon CloudFront

C

Amazon Route 53

D

AWS Global Accelerator

Test Your Knowledge

Which pricing model should a company choose for workloads that must run continuously for 3 years with a known, steady-state pattern?

A

On-Demand Instances

B

Spot Instances

C

Reserved Instances or Savings Plans (3-year term)

D

Dedicated Hosts

Test Your Knowledge

Which AWS service provides intelligent threat detection by analyzing CloudTrail logs, VPC Flow Logs, and DNS logs using machine learning?

A

AWS WAF

B

Amazon Inspector

C

Amazon GuardDuty

D

AWS Shield

Test Your Knowledge

A company has 10 AWS accounts and wants a single bill with volume discounts applied across all accounts. Which feature provides this?

A

AWS Budgets

B

Consolidated Billing with AWS Organizations

C

AWS Cost Explorer

D

AWS Pricing Calculator

Test Your Knowledge

A company needs to connect their on-premises data center to AWS with a consistent, low-latency private connection. They have compliance requirements that prohibit using the public internet. Which service should they use?

A

AWS VPN

B

AWS Direct Connect

C

Amazon CloudFront

D

VPC Peering

Test Your Knowledge

According to the AWS Well-Architected Framework, which pillar focuses on minimizing environmental impact?

A

Cost Optimization

B

Operational Excellence

C

Sustainability

D

Reliability

Test Your Knowledge

A company wants to run a relational database on AWS but does NOT want to manage the underlying OS, patching, or backups. Which service should they use?

A

Install MySQL on an EC2 instance

B

Amazon RDS

C

Amazon DynamoDB

D

Amazon Redshift

Test Your Knowledge

Which service allows you to run containerized applications without managing the underlying server infrastructure?

A

Amazon EC2

B

AWS Fargate

C

Amazon EBS

D

AWS Elastic Beanstalk

Test Your Knowledge

Which of the following is a benefit of cloud computing that allows organizations to deploy applications in multiple AWS Regions around the world with just a few clicks?

A

Benefit from massive economies of scale

B

Trade fixed expense for variable expense

C

Go global in minutes

D

Stop guessing capacity

Test Your Knowledge

A security team needs to find personally identifiable information (PII) stored in their S3 buckets. Which AWS service should they use?

A

Amazon GuardDuty

B

Amazon Macie

C

Amazon Inspector

D

AWS Config

Test Your Knowledge

Which AWS service or feature lets you define and enforce standardized guardrails across multiple AWS accounts in an Organization?

A

IAM Policies

B

Security Groups

C

Service Control Policies (SCPs)

D

AWS Config Rules

Test Your Knowledge

A company wants to build a chatbot for their customer service website. Which AWS AI service should they use?

A

Amazon Polly

B

Amazon Lex

C

Amazon Comprehend

D

Amazon Transcribe

Test Your Knowledge

What is the MINIMUM AWS Support plan required to access the full set of AWS Trusted Advisor checks?

A

Basic Support

B

AWS Enterprise Support

C

AWS Business Support+

D

AWS Unified Operations

Test Your Knowledge

A company processes data once a quarter but needs immediate results when they do. Which S3 storage class is most cost-effective?

A

S3 Standard

B

S3 Standard-Infrequent Access

C

S3 Glacier Instant Retrieval

D

S3 Glacier Deep Archive

Test Your Knowledge

Which AWS service helps you visualize, understand, and manage your AWS costs and usage over time?

A

AWS Budgets

B

AWS Cost Explorer

C

AWS Pricing Calculator

D

AWS Trusted Advisor

Test Your Knowledge

Which AWS service creates an immutable log of all API calls made in an AWS account for auditing and compliance?

A

Amazon CloudWatch Logs

B

AWS Config

C

AWS CloudTrail

D

Amazon GuardDuty

Test Your Knowledge

A developer wants to deploy code to production automatically whenever changes are pushed to the Git repository. Which AWS service orchestrates this CI/CD pipeline?

A

AWS CodeBuild

B

AWS CodeDeploy

C

AWS CodePipeline

D

AWS CloudFormation

Test Your Knowledge

A company needs to store session data that is shared across multiple web servers with sub-millisecond response times. Which service is BEST suited?

A

Amazon S3

B

Amazon RDS

C

Amazon ElastiCache

D

Amazon DynamoDB

Test Your Knowledge

Under the Shared Responsibility Model, which task is AWS responsible for when using Amazon RDS?

A

Managing the data stored in the database

B

Configuring database security groups

C

Patching the operating system running the database

D

Setting up IAM users with database access

Test Your Knowledge

Which AWS service allows you to run SQL queries on data stored in Amazon S3 without needing to load it into a database?

A

Amazon RDS

B

Amazon Athena

C

Amazon DynamoDB

D

Amazon EMR

Test Your Knowledge

Which of the following is NOT one of the six advantages of cloud computing as defined by AWS?

A

Go global in minutes

B

Benefit from massive economies of scale

C

Guaranteed zero downtime

D

Increase speed and agility

Test Your Knowledge

A company wants real-time personalized product recommendations on their e-commerce website. Which AWS AI service should they use?

A

Amazon Kendra

B

Amazon Personalize

C

Amazon Comprehend

D

Amazon Forecast

Test Your Knowledge

What does Amazon Route 53 provide?

A

Content delivery network (CDN)

B

Load balancing across EC2 instances

C

Domain Name System (DNS) routing and domain registration

D

DDoS protection

Test Your Knowledge

Which AWS service is BEST for storing and automatically rotating database credentials, API keys, and other secrets?

A

AWS KMS

B

AWS Secrets Manager

C

AWS Systems Manager Parameter Store

D

AWS Certificate Manager

Test Your Knowledge

A company has a web application deployed in us-east-1. They want to ensure the application remains available even if the entire us-east-1 Region becomes unavailable. What should they do?

A

Deploy across multiple Availability Zones in us-east-1

B

Deploy a copy of the application in a second AWS Region with Route 53 failover routing

C

Add more EC2 instances in us-east-1

D

Use Amazon CloudFront to cache the application

Sections you finish are checked off in the contents.

Congratulations!

You've completed this section

Continue exploring other exams