Exam CLF-C02
CLF-C02 MOCK EXAMS

AWS Cloud Practitioner
Full Practice Tests

6 full blueprint-weighted mocks + 2 special modes.
Scaled scoring 100–1000. Passing: 700. Same format as the real CLF-C02 exam.

Full Mock Exams 65 questions · 90 min · Scaled 100–1000

Mock 1 Full Exam
65 Questions 90 min 700/1000
Blueprint-weighted across all 4 domains. Includes multiple choice + multiple response questions.
Start Mock 1
Mock 2 Full Exam
65 Questions 90 min 700/1000
Blueprint-weighted across all 4 domains. Includes multiple choice + multiple response questions.
Start Mock 2
Mock 3 Full Exam
65 Questions 90 min 700/1000
Blueprint-weighted across all 4 domains. Includes multiple choice + multiple response questions.
Start Mock 3
Mock 4 Full Exam
65 Questions 90 min 700/1000
Blueprint-weighted across all 4 domains. Includes multiple choice + multiple response questions.
Start Mock 4
Mock 5 Full Exam
65 Questions 90 min 700/1000
Blueprint-weighted across all 4 domains. Includes multiple choice + multiple response questions.
Start Mock 5
Mock 6 Full Exam
65 Questions 90 min 700/1000
Blueprint-weighted across all 4 domains. Includes multiple choice + multiple response questions.
Start Mock 6

Special Practice Modes

Quick Drill 30 Questions
30 Questions 30 min All domains
Rapid-fire across all domains. Great for a quick review session or when you have limited time.
Quick Drill (30Q)
Speed Challenge Timed
65 Questions 45 min High Pressure
Full 65-question exam with only 45 minutes. Forces faster decision-making under pressure.
Speed Challenge
Domain-Wise Practice Domain-Wise
Per Domain 25 min Focused
Practice one domain at a time. Ideal for targeted study on weak areas identified from mock exams.
Choose Domain

CLF-C02 Exam Strategy

Know AWS Core Services
EC2, S3, RDS, Lambda, VPC, CloudFront. Understand what each service does at a conceptual level.
Master the Shared Responsibility Model
A common exam topic. Know what AWS manages vs. what the customer manages.
Understand Pricing Models
On-Demand, Reserved, Spot, Savings Plans. Know when to use each and how the pricing calculator works.
Flag and Skip Tricky Questions
Don't spend too much time. Flag uncertain questions and review at the end.

More Free Practice Resources

Prepping for Security+ too? Try the free Security+ PBQ practice library or the full CompTIA Security+ practice test (540 questions). Working toward GCP? The GCP PCA cheat sheet and free GCP PCA practice exams use the same exam-style format.

Sample CLF-C02 questions with explanations

Use these examples to check how the topics are tested. Read the explanation for every option you were unsure about, then start a scored practice set above.

Question 1 Domain 1: Cloud Concepts Choose 2

According to AWS design principles, which of the following are recommended practices for achieving cost optimization? (Select TWO.)

  • ○ Provision maximum capacity for all workloads to ensure performance.
  • ✓ Analyze and attribute expenditure to understand cost drivers.
  • ○ Use only the most expensive instance types for better reliability.
  • ✓ Adopt a consumption model, increasing or decreasing usage as needed.
  • ○ Never use managed services, as they are more expensive than self-managed.
Answer: B. Analyze and attribute expenditure to understand cost drivers. | D. Adopt a consumption model, increasing or decreasing usage as needed.
Key cost optimization practices include analyzing and attributing costs (using tools like AWS Cost Explorer) to identify spending patterns, and adopting a consumption model where you only pay for what you use, leveraging elasticity to scale down when not needed. Over-provisioning (A) and using only expensive instances (C) are anti-patterns that increase cost. Managed services can reduce TCO by offloading operational tasks, even if their hourly rate is higher.
Question 2 Domain 2: Security and Compliance Choose 2

A financial services company needs to grant temporary, limited access to an AWS account for an external auditor. The access must be granted for only 8 hours and must not use long-term credentials. Which TWO methods can meet these requirements? (Select TWO.)

  • ○ Create an IAM user for the auditor and provide the access key and secret key.
  • ○ Use AWS IAM Identity Center to create a temporary portal access link for the auditor.
  • ✓ Create an IAM role with the necessary permissions and allow the auditor to assume it.
  • ○ Share the root user credentials of the AWS account with the auditor.
  • ○ Use AWS IAM Identity Center to create a federation with the auditor's corporate identity provider.
  • ✓ Use IAM to generate temporary security credentials via the AWS Security Token Service (AWS STS).
Answer: C. Create an IAM role with the necessary permissions and allow the auditor to assume it. | F. Use IAM to generate temporary security credentials via the AWS Security Token Service (AWS STS).
IAM roles and AWS STS are designed for issuing temporary, limited-privilege credentials. An auditor can assume a role (C), and STS (F) is the service that generates the temporary credentials for roles and federated users. IAM user long-term credentials (A) and root user credentials (D) are permanent and violate the requirement. IAM Identity Center portal access (B) can be temporary but is more about centralized access management; federation (E) is for long-term identity management, not specifically for a one-time 8-hour audit.
Question 3 Domain 3: Cloud Technology and Services Choose 2

Which of the following are use cases for Amazon S3? (Select TWO)

  • ○ Boot volumes for EC2 instances
  • ✓ Storing static website assets
  • ○ Shared file storage for EC2 instances
  • ✓ Backup and archival storage
  • ○ Database storage for transactional data
  • ○ Block storage for databases
Answer: B. Storing static website assets | D. Backup and archival storage
Amazon S3 is object storage ideal for storing static website assets like images and HTML files, and for backup and archival due to its durability and scalability. Boot volumes use EBS or instance store. Shared file storage uses EFS. Database storage typically uses EBS or managed databases, not S3 for transactional data.
Question 4 Domain 4: Billing, Pricing, and Support

A company wants to ensure their AWS environment follows best practices for security and cost optimization. Which AWS tool provides automated checks and recommendations?

  • ○ AWS Config
  • ✓ AWS Trusted Advisor
  • ○ AWS Health Dashboard
  • ○ AWS Inspector
Answer: B. AWS Trusted Advisor
AWS Trusted Advisor inspects AWS environment and provides recommendations in categories like cost optimization, security, performance, and fault tolerance. Config tracks configuration changes, Health Dashboard shows service health, and Inspector assesses security vulnerabilities.
Question 5 Security and Compliance

Which AWS service provides infrastructure protection by automatically assessing Amazon EC2 instances for vulnerabilities or deviations from best practices?

  • ✓ Amazon Inspector
  • ○ AWS Config
  • ○ Amazon GuardDuty
  • ○ AWS Systems Manager Patch Manager
Answer: A. Amazon Inspector
Amazon Inspector is an automated vulnerability management service that continuously assesses Amazon EC2 instances (and container images) for software vulnerabilities and unintended network exposure. It helps identify security issues based on CIS benchmarks and known CVEs. AWS Config assesses configuration compliance. GuardDuty detects threats. Patch Manager applies patches, but does not perform vulnerability assessments.

Open the full CLF-C02 question-and-answer guide