Plenty of people pass CLF-C02 without ever opening the AWS console, and plenty of people fail it for the same reason. The AWS Certified Cloud Practitioner exam tests whether you can place a service, a pricing model, or a security responsibility correctly, which is a different skill from memorising a definitions list. The CLF-C02 exam questions below come from the practice bank our candidates use before test day, written against the exam guide AWS is running now. If your booking is imminent, work the questions first and let the domain weightings below tell you where you stand. If you are earlier in preparation, the topic map is the faster orientation.
| Exam name | AWS Certified Cloud Practitioner Exam |
| Exam code | CLF-C02 |
| Certification | Amazon Foundational |
| Practice questions in our bank | 924 |
| Questions on the real exam | 65 |
| Time allowed | 90 minutes |
| Passing score | 700 of 1000 |
| Exam fee | USD 100 |
| Level | Foundational |
| Recommended experience | Up to 6 months of exposure to the AWS Cloud |
The questions below are free samples from the same CLF-C02 bank our candidates prepare with, arranged in the order AWS weights the domains.
A company wants its Amazon EC2 instances to share the same geographic area but use multiple independent underlying power sources.
Which solution achieves this goal?
Correct Answer: C
The solution that achieves the goal of having Amazon EC2 instances share the same geographic area but use multiple independent underlying power sources is to use EC2 instances inmultiple Availability Zones in the same AWS Region. An Availability Zone is a physically isolated location within an AWS Region that has its own power, cooling, and network connectivity. An AWS Region is a geographical area that consists of two or more Availability Zones.By using multiple Availability Zones, users can increase the fault tolerance and resilience of their applications, as well as reduce latency for end users3. Using EC2 instances in a single Availability Zone, multiple AWS Regions, or the same edge location and the same AWS Region would not meet the requirement of having multiple independent power sources.
Which benefit does Amazon Rekognition provide?
Correct Answer: B
Amazon Rekognition is a service that provides deep learning-based image and video analysis. One of the benefits of Amazon Rekognition is the ability to detect objects that appear in pictures, such as faces, landmarks, animals, text, and scenes. This can enable applications to perform tasks such as face recognition, face verification, face comparison, face search, celebrity recognition, emotion detection, age range estimation, gender identification, facial analysis, facial expression recognition, and more.Amazon Rekognition OverviewAWS Certified Cloud Practitioner - aws.amazon.com
Which AWS service or feature captures information about the network traffic to and from an Amazon EC2 instance?
Correct Answer: C
The correct answer is C because VPC Flow Logs is an AWS service or feature that captures information about the network traffic to and from an Amazon EC2 instance. VPC Flow Logs is a feature that enables customers to capture information about the IP traffic going to and from network interfaces in their VPC. VPC Flow Logs can help customers to monitor and troubleshoot connectivity issues, such as traffic not reaching an instance or traffic being rejected by a security group. The other options are incorrect because they are not AWS services or features that capture information about the network traffic to and from an Amazon EC2 instance. VPC Reachability Analyzer is an AWS service or feature that enables customers to perform connectivity testing between resources in their VPC and identify configuration issues that prevent connectivity. Amazon Athena is an AWS service that enables customers to query data stored in Amazon S3 using standard SQL. AWS X-Ray is an AWS service that enables customers to analyze and debug distributed applications, such as those built using a microservices architecture. Reference:VPC Flow Logs
A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.
Which AWS service will meet this requirement?
Correct Answer: B
Amazon Timestream is a fast, scalable, and serverless time-series database service for IoT and other operational applications that makes it easy to store and analyze trillions of events per day up to 1,000 times faster and at as little as 1/10th thecost of relational databases1.Amazon Timestream saves you time and cost in managing the lifecycle of time series data, and its purpose-built query engine lets you access and analyze recent and historical data together with a single query1.Amazon Timestream has built-in time series analytics functions, helping you identify trends and patterns in near real time1.
The other options are not suitable for storing and analyzing trillions of events per day. Amazon Neptune is a graph database service that supports highly connected data sets. Amazon Forecast is a machine learning service that generates accurate forecasts based on historical data. Amazon DocumentDB (with MongoDB compatibility) is a document database service that supports MongoDB workloads.
:
1: Time Series Database -- Amazon Timestream -- Amazon Web Services
A company wants to control the protection of its AWS resources. The company wants to block SQL injection attacks and cross-site scripting.
Which AWS service or feature meets these requirements?
Correct Answer: B
Domains and weightings follow the official AWS Certified Cloud Practitioner exam guide.
Cloud Concepts
24%The value proposition of cloud, the AWS Well-Architected Framework, migration strategies, and cloud economics. Questions read like a manager asking why a change is worth making, and the correct answer is usually the one tied to a stated business benefit rather than a technical feature.
Security and Compliance
30%The shared responsibility model, IAM, compliance programmes, and the security services AWS provides. Nearly a third of the exam sits here, and the shared responsibility split is the single most reliable source of marks: know which side of the line patching, encryption, and physical security fall on for each service type.
Cloud Technology and Services
34%The largest domain. Core compute, storage, database, and networking services, plus how you access them through the console, CLI, SDKs, and infrastructure as code. Expect questions that describe a workload in one sentence and ask which service fits, where two options are plausible and one is cheaper or simpler.
Billing, Pricing, and Support
12%Pricing models, cost management tooling, the support plan tiers, and where to find billing information. The smallest domain, but the most self-contained: Savings Plans against Reserved Instances, Cost Explorer against Budgets, and which support plan includes a Technical Account Manager are all learnable in an evening.
No revision log published — : AWS has published no change log entries for the CLF-C02 exam guide. AWS commits to publishing guide revisions at least one month before they reach the live exam, so a change will surface here ahead of test day.
Revision Update — : Check the exam guide's Revisions section on each review cycle and record dated entries here when AWS publishes them.
Source: the AWS Certified Cloud Practitioner exam guide. Our question bank follows its own update cycle and is re-checked when AWS revises the guide.
Only two question formats appear on this exam, which puts all the variation into how the stems are written. Read the exam guide's task statements closely and a pattern emerges: AWS is checking whether you can position a service, not whether you can configure one.
Positioning a service against a need
Tested via: scenario-based multiple-choice questionsOne or two sentences describe a workload, then four options each name a plausible AWS service. Distractors are usually services from the right family but the wrong tier: EBS where S3 belongs, RDS where DynamoDB fits better. The deciding word is often a single requirement such as 'object', 'relational', or 'serverless'.
Splitting responsibility correctly
Tested via: multiple-choice and multiple-response questionsThe shared responsibility model runs through the whole Security and Compliance domain. Items hand you a task, patching a guest operating system, encrypting data at rest, securing a data centre, and ask whose job it is. The answer changes with the service model, which is why the same concept can appear several times without repeating itself.
Selecting more than one correct statement
Tested via: multiple-response questionsYou choose two or more answers from five or more options, and credit requires all of them. These cluster around pricing models, support plan features, and the pillars of the Well-Architected Framework. Because there is no partial credit, one confident wrong pick costs the entire item.
Reading cost and support questions literally
Tested via: multiple-choice questionsBilling items tend to hinge on exact wording: whether the scenario says 'lowest cost', 'no upfront payment', or 'flexible across instance families' decides between Savings Plans, Reserved Instances, and Spot. The concepts are simple, so the marks are lost to skim-reading rather than to difficulty.
CLF-C02 does not need a month of evenings. It needs a fortnight spent on the right two domains and enough timed practice to stop second-guessing yourself in the last twenty questions.
Take a full set cold to find your floor. Sixty-five questions before any revision produces a domain breakdown that is worth more than a week of reading. People with technical backgrounds usually discover their gap sits in billing, not in services.
Chase every wrong answer back to AWS documentation. Open the service page for the option you chose and the one that was correct, then read what separates them. CLF-C02 reuses the same handful of service boundaries throughout, so a single boundary understood properly fixes a cluster of future questions.
Spend your remaining hours where the marks live. Cloud Technology and Services plus Security and Compliance make up 64% of scored content. Billing is 12%. An hour repairing a security gap is worth roughly three spent polishing pricing trivia you already half know.
Run one timed sitting before the real one. Ninety minutes for 65 questions is generous, which is precisely why candidates over-deliberate and then rush. One full-length timed run calibrates the pace, and whatever it exposes becomes your final revision list.
and Why Prefer Pass4Success Practice Material
Failing CLF-C02 costs another USD 100 plus the wait before you can rebook. Set against that, the price of practice material matters much less than whether it reflects the exam guide AWS uses today. These are the things worth checking.
Aligned to the current exam guide
AWS updates its guides on its own schedule and gives a month of notice. Material written for the previous version still looks convincing, which is what makes it a problem rather than an inconvenience.
✓ Ours: the bank is updated on a regular cycle to match how AWS actually tests, with an extra pass whenever the exam guide changes. The update date is shown in the exam details above.
Distractors that behave like the real ones
On this exam the wrong answers are plausible services from adjacent families. Practice questions with obviously silly options train the wrong instinct entirely.
✓ Ours: questions are written to mirror the real distractor pattern, so ruling options out is practised rather than assumed.
A demo before any payment
Given how much recycled material circulates for foundational exams, a provider should be willing to show you its questions before asking for money.
✓ Ours: a free demo covering both formats, the PDF and the practice test, with no payment step in front of it.
Volume spread across all four domains
A short sample cannot tell you whether your weakness is in security or in billing. You need enough questions per domain for the pattern to appear.
✓ Ours: 924 CLF-C02 questions across all four domains..
Cheaper than sitting the exam twice
The real comparison is not between prep providers. It is between preparing once properly and paying AWS a second time.
✓ Ours: the question bank costs $69, a fraction of the $100 exam fee. Failing means more than a retake charge it means writing that $100 check all over again, plus the weeks you'll spend re-preparing. Solid practice material upfront works out far cheaper than gambling on a second try.
Below, candidates who recently sat CLF-C02 describe what the exam guide understated, which domains ran deeper than expected, and how they would spend their preparation time again. If you have taken it, your notes are worth more to the next reader than any study plan.
Four domains: Cloud Concepts (24%), Security and Compliance (30%), Cloud Technology and Services (34%), and Billing, Pricing, and Support (12%). The exam is deliberately role-independent, covering the value of AWS, its core services, and how it is secured and paid for.
There are none. CLF-C02 is a foundational exam with no required certification beforehand, and it is the usual entry point to the AWS programme. AWS suggests up to six months of exposure to AWS design, implementation or operations, though many candidates pass with classroom study alone.
It is the most approachable AWS exam, but not a formality. The difficulty comes from breadth: the exam guide touches dozens of services at a shallow depth, so gaps are easy to leave and easy to get caught by. Steady preparation over two to three weeks is usually enough.
Two only: multiple choice with one correct answer among four, and multiple response where two or more of five or more options are correct. There are no case studies, labs or drag-and-drop items. Unanswered questions score as incorrect, so there is no reason to leave any blank.
Getting the shared responsibility split backwards for managed services, mixing up Savings Plans with Reserved Instances, choosing a storage service without noticing whether the scenario said object or block, and losing multiple-response items to one wrong tick. Most are misreadings: the qualifying phrase usually appears once, near the end of the stem.
They follow the order a real migration takes. You justify the move on cloud economics, choose the services to run the workload, secure them under the shared responsibility model, then track what it costs and pick a support plan. Exam questions frequently span two of those stages at once.
Concentrate on services and security, which together carry nearly two-thirds of the scored content. Sit one timed full-length test around midweek, work through every question you missed, and stop introducing new material after that. Reserve the final day for pricing models and support tiers, which are quick to refresh.
As a first cloud credential, yes. It is widely recognised, costs USD 100, and gives non-engineering staff a shared vocabulary with technical teams. Engineers usually treat it as a stepping stone to the associate exams rather than an end in itself.
At the foundational tier, with no prerequisite and nothing formally required after it. Most candidates move next to an associate-level exam such as Solutions Architect Associate or Data Engineer Associate. AIF-C01, the AI Practitioner exam, sits at the same foundational tier and is often taken alongside it.
Rather than waiting on AWS to amend the exam guide, the CLF-C02 bank is reviewed on a fixed internal schedule, because the way a topic is tested drifts between formal revisions. AWS gives at least one month of notice before guide changes reach the live exam; when that notice appears, the affected questions and answers get an additional check against current AWS documentation. Whichever date that work last landed on is shown in the exam details table at the top of this page.