AWS Certified Cloud Practitioner: study guide and free practice questions The ideas the Cloud Practitioner (CLF-C02) exam tests, one page each, written for someone new to AWS: what the AWS docs say, the traps the questions set, and real practice questions to try. Every page links to the AWS pages it was written from.
Topics Cloud technology and services Billing, pricing and support 10 free practice questions Drawn from every domain. Pick an answer to see why each option is right or wrong.
Which of the following AWS CAF Governance perspective capabilities pairs provisioning agility with team accountability for spend? Right. In the game that’s Renown for your Cloud Concepts building.
Not that one: B is right. In the game your Cloud Concepts building would lose a little Renown, and this question would come back later.
Your answer A. Risk managementRisk management identifies and quantifies operational and business risks to lower the risk profile. The answer B. Cloud financial managementCloud financial management plans, measures and optimizes cloud spend. Your answer C. Benefits managementBenefits management tracks whether business benefits are realized, not team accountability for spend. Your answer D. Application portfolio managementApplication portfolio management manages and optimizes the application portfolio through an accurate inventory.
Which of the following reliability design principles calls for infrastructure modifications that can be tracked and reviewed? Right. In the game that’s Renown for your Cloud Concepts building.
Not that one: C is right. In the game your Cloud Concepts building would lose a little Renown, and this question would come back later.
Your answer A. Automatically recover from failure'Automatically recover from failure' tracks failures and starts automated recovery when a threshold is breached. It does not cover reviewing infrastructure changes. Your answer B. Stop guessing capacity'Stop guessing capacity' monitors demand and automates adding or removing resources. It does not call for changes to be tracked and reviewed. The answer C. Manage change through automationThe reliability principle 'manage change through automation' says changes to infrastructure should be made using automation. The changes that must be managed include changes to the automation itself, which can then be tracked and reviewed. Your answer D. Test recovery procedures'Test recovery procedures' tests how the workload fails and validates recovery procedures. It does not govern how infrastructure changes are made.
Which AWS service would let customers sign in to a company's mobile app with Google accounts? Right. In the game that’s Renown for your Security and Compliance building.
Not that one: A is right. In the game your Security and Compliance building would lose a little Renown, and this question would come back later.
The answer A. Amazon CognitoAmazon Cognito is an identity platform for web and mobile apps. Its user pools handle sign-up and sign-in, including through social providers such as Google, and issue tokens to the app. Your answer B. AWS Directory ServiceAWS Directory Service provides Microsoft Active Directory in the cloud. Consumer sign-up with Google accounts is handled by Amazon Cognito. Your answer C. AWS Identity and Access Management (IAM)IAM manages identities and permissions for AWS resources. A consumer app's sign-up and social sign-in come from Amazon Cognito. Your answer D. AWS IAM Identity CenterAWS IAM Identity Center is for workforce users reaching AWS accounts and AWS managed applications. Sign-up and sign-in for a company's own mobile app customers is Amazon Cognito.
Which of the following shows the services an IAM role has used, to help remove unneeded permissions? Right. In the game that’s Renown for your Security and Compliance building.
Not that one: D is right. In the game your Security and Compliance building would lose a little Renown, and this question would come back later.
Your answer A. AWS Trusted AdvisorAWS Trusted Advisor gives best-practice recommendations. IAM last accessed information is the IAM feature for finding which services a role used. Your answer B. AWS ConfigAWS Config shows how resources are configured and how that changed over time. Which services a role actually used is shown by IAM last accessed information. Your answer C. IAM credential reportThe IAM credential report lists users and the status of their passwords, access keys and MFA devices. The services a role has used appear in IAM last accessed information. The answer D. IAM last accessed informationIAM last accessed information shows the services and actions that IAM identities and policies have used, with the date and time of the attempt. AWS provides it to help identify unused permissions so they can be removed, toward least privilege.
Which AWS service would let teams provision new compliant AWS accounts quickly from configurable account templates? Right. In the game that’s Renown for your Security and Compliance building.
Not that one: A is right. In the game your Security and Compliance building would lose a little Renown, and this question would come back later.
The answer A. AWS Control TowerAWS Control Tower lets end users on distributed teams provision new AWS accounts quickly through configurable account templates in Account Factory, while central administrators check that every account aligns with company-wide compliance policies. Your answer B. AWS IAM Identity CenterAWS Control Tower is built on AWS IAM Identity Center, but the configurable account templates come from Control Tower's Account Factory, not from IAM Identity Center. Your answer C. AWS ConfigAWS Config does not provision accounts. The configurable account template that standardizes new accounts with pre-approved configurations is AWS Control Tower's Account Factory. Your answer D. AWS OrganizationsAWS Organizations provides central management of accounts and account creation through its APIs, and AWS Control Tower is built on top of it. The configurable account templates are AWS Control Tower's Account Factory.
Which of the following lets response traffic reach an Amazon EC2 instance with no matching inbound rule? Right. In the game that’s Renown for your Cloud Technology and Services building.
Not that one: A is right. In the game your Cloud Technology and Services building would lose a little Renown, and this question would come back later.
The answer A. A security groupSecurity groups are stateful. If an instance sends a request, the response traffic for that request is allowed to reach the instance regardless of the inbound security group rules. Your answer B. A route tableA route table directs traffic to its destination. It has no inbound rules and does not track requests and responses. Your answer C. An internet gatewayAn internet gateway connects a VPC to the internet. It does not filter traffic with rules or track which responses belong to which requests. Your answer D. A network ACLNetwork ACLs are stateless: information about traffic already sent is not saved, so a response is not automatically allowed and needs a rule of its own.
Which of the following describes reading an object stored in the S3 Glacier Flexible Retrieval storage class? Right. In the game that’s Renown for your Cloud Technology and Services building.
Not that one: D is right. In the game your Cloud Technology and Services building would lose a little Renown, and this question would come back later.
Your answer A. It can be read only after its minimum storage durationThe minimum storage duration is a charge rule for the S3 Glacier classes, not a wait before reading. Reading needs a restore, whatever the object's age. Your answer B. It moves to a frequent access tier when readFlexible Retrieval objects do not change tier when someone tries to read them. They stay archived until a temporary copy is restored to the bucket. Your answer C. It can be read in milliseconds, like S3 StandardMillisecond reads belong to S3 Glacier Instant Retrieval, whose data is available for real-time access. Flexible Retrieval data is archived and not available for real-time access. The answer D. It must be restored before it can be readObjects in S3 Glacier Flexible Retrieval are archived and are not accessible in real time. To access one, a company must restore a temporary copy of the object to its S3 bucket for a specified number of days.
Which of the following Amazon ECS capacity options uses chosen EC2 instance types that AWS patches and scales? Right. In the game that’s Renown for your Cloud Technology and Services building.
Not that one: A is right. In the game your Cloud Technology and Services building would lose a little Renown, and this question would come back later.
The answer A. Amazon ECS Managed InstancesAmazon ECS Managed Instances run containerized workloads on a range of Amazon EC2 instance types, including GPU and specialized types, while AWS handles provisioning, patching, scaling and maintenance of the underlying infrastructure. Your answer B. Amazon ECS AnywhereAmazon ECS Anywhere registers on-premises servers or virtual machines, which the company runs itself. Your answer C. Self-managed Amazon EC2 instancesWith self-managed EC2 capacity the customer chooses the instance type and number and manages the capacity itself. Your answer D. AWS FargateWith AWS Fargate there are no servers to manage and no server types to choose. The stem asks for chosen EC2 instance types.
Which of the following gives a company strategic business reviews with AWS experts? Right. In the game that’s Renown for your Billing, Pricing, and Support building.
Not that one: B is right. In the game your Billing, Pricing, and Support building would lose a little Renown, and this question would come back later.
Your answer A. Basic SupportBasic Support covers account and billing questions, support forums, service health checks and documentation. It includes no strategic business reviews. The answer B. AWS Enterprise SupportStrategic business reviews with AWS experts are among the benefits that AWS Enterprise Support adds on top of AWS Business Support+, along with a designated Technical Account Manager. Your answer C. AWS Well-Architected ToolThe AWS Well-Architected Tool is a service for reviewing workloads against best practices. It is not a support plan and does not provide reviews of the company's business with AWS experts. Your answer D. AWS Business Support+AWS Business Support+ includes 24x7 access to Cloud Support Engineers and third-party software support. Strategic business reviews are an Enterprise Support addition.
Which of the following case severities gets a faster response on AWS Unified Operations than AWS Enterprise Support? Right. In the game that’s Renown for your Billing, Pricing, and Support building.
Not that one: C is right. In the game your Billing, Pricing, and Support building would lose a little Renown, and this question would come back later.
Your answer A. Production system impairedProduction system impaired cases have the same response time on every paid plan, so Unified Operations is no faster than Enterprise Support here. Your answer B. Production system downProduction system down cases have the same response time on Business Support+, Enterprise Support and Unified Operations, so upgrading does not speed them up. The answer C. Business-critical system downIn AWS's Support plan comparison, business-critical system down cases get a faster response on Unified Operations, from an Incident Management Engineer, than on Enterprise Support. Your answer D. System impairedAssumes lower severities also gain; system impaired has the same response time on both plans.
Show the full explanation and doc quotes Production system down, production system impaired, system impaired and general guidance have the same response times on every paid plan.
Written from aws.amazon.com/premiumsupport/plans/
Certopolis is an independent study game. It is not affiliated with, endorsed by or sponsored by Amazon Web Services, and its questions are not the exams' questions. Exam names are trademarks of their owners.