Free CLF-C02 Practice Test – 20 Questions with Explanations

VantaBloom runs a stateless batch workload that processes a daily backlog and can retry failed tasks safely. The jobs are flexible on start time and can tolerate occasional interruption without impacting customers. The team wants the lowest compute cost for this workload.

Which compute purchasing option is the best fit?

An organization wants to standardize workforce access to AWS across many accounts. It needs users to sign in once, receive consistent permissions, and use an external identity provider for authentication. The security team also wants a simple way to assign access by group rather than creating credentials in every account.
Which capabilities are provided by AWS IAM Identity Center? (Select THREE.)

A company is launching a customer support workflow for a new product. They need a managed contact center for voice and chat, a way to send follow-up emails automatically, and a queue to decouple ticket updates so back-end services can process work reliably. The architecture must use managed AWS services that align clearly to each business need.
Which services should the team choose? (Select THREE.)

A data team keeps daily exports in an S3 bucket and wants them moved to cheaper storage after 30 days. They also want the objects deleted after 365 days to meet retention rules and reduce cost.
What should they configure on the bucket?

SableMarsh HR is building an internal portal that transmits employee documents over the internet and stores them long term for audit retention. The security team wants protection both while data is moving between users and AWS and while it is stored in AWS services. They are validating which controls represent encryption in transit and encryption at rest.

Which THREE options are encryption controls that match these needs? (Select THREE.)

A company is migrating a legacy payroll application that relies on SQL joins, schemas, and ACID transactions. They want a managed service for a relational database engine without managing database servers.
Which AWS service best fits this requirement?

A team is modernizing a workload packaged as a container image and wants to run it without managing servers or clusters. The workload runs continuously and needs predictable container networking and scaling options. The team also wants to avoid provisioning or patching Amazon EC2 instances for this service.
Which serverless compute option is the best fit?

OrchidPane operates multiple product teams under one AWS payer account and needs visibility by team and application. Finance wants monthly spend trends and the ability to forecast when a service is drifting above normal. They also want to apply custom rate rules for internal chargeback without changing the underlying AWS prices.

Which tools best fit these needs? (Select THREE.)

A company wants a layered approach to identify security issues: threat detection for suspicious activity, vulnerability identification for workloads, and best-practice recommendations for misconfigurations. The security lead wants AWS-native services that produce findings without building a full custom detection pipeline.
Which services best match these needs? (Select THREE.)

A media site has users worldwide and wants faster delivery of images and videos without rebuilding the application. The team plans to cache content close to viewers to reduce round-trip time to the origin.
Which AWS service best uses edge locations to deliver this benefit?

CobaltQuill hosts a public website on Amazon S3 and serves global users through Amazon CloudFront. The team also runs a scheduled job that copies backups from us-east-1 to eu-west-1 every night. After a traffic spike, finance asks what is most likely driving new variable network-related charges.

Which items are most likely to incur AWS data transfer charges in this scenario? (Select TWO.)

A company plans to migrate many applications over the next year. Leadership wants a repeatable approach with guardrails so teams can move faster without breaking governance. They also want a standardized multi-account setup to scale adoption across business units.
Which AWS service most directly helps establish this governed landing zone?

A company runs latency-sensitive workloads on premises and needs a consistent, private connection to AWS for data replication. The company wants to avoid relying on the public internet for the primary network path.
Which connectivity option is the best fit?

AuroraBend Foods runs a customer ordering API in one AWS Region and a recent outage in a single data center location caused failed checkouts. The team wants the application to continue serving requests if one location in the Region fails, without changing Regions. They also want traffic to be routed only to healthy targets automatically.

Which actions best achieve high availability by using multiple Availability Zones? (Select THREE.)

PineRidge Systems discovered its AWS root user was used for routine console work and the password is known by multiple administrators. The security manager wants a single immediate change that most reduces the likelihood of a catastrophic account takeover. The team will implement longer-term operational controls afterward.

What is the BEST immediate action?

A payments team is designing a workload that must continue operating during an Availability Zone outage. They are adding multi-AZ redundancy and automated failover to reduce downtime and meet an SLA.
Which Well-Architected pillar is most directly being addressed?

A platform team keeps rebuilding the same VPC, subnets, and IAM roles across multiple AWS accounts. Manual steps are causing configuration drift and inconsistent security settings. The team wants repeatable deployments that can be reviewed and version-controlled.
Which AWS service best supports this automation goal?

MosaicQuarry Publishing needs to migrate 420 TB of archived media from an on-premises NAS to AWS, but the site’s internet link is too slow to finish within the deadline. Their primary customer database must also move with near-zero downtime so production orders aren’t interrupted. They want a practical approach that combines bulk transfer with continuous data replication.

Which TWO options best fit? (Select TWO.)

StoneCairn Utilities is planning a multi-year migration and leadership is worried different teams will make inconsistent decisions that create security and compliance gaps. The program office wants a structured way to assess readiness, identify capability gaps, and align business and IT stakeholders before major migration waves begin. The board’s primary success measure is lowering the risk profile while moving faster than competitors.

Which benefit of using AWS CAF is the BEST match?

MapleQuill Services found application source code contains hardcoded database passwords and third-party API tokens. The team needs centralized secret storage with controlled access and a safer rotation path than editing code during releases. They want a native AWS service intended specifically for managing application secrets.

Which option BEST meets these requirements?