CLF-C02 practice questions
AWS · CLF-C02 · 300 questions
Original practice questions for the AWS Certified Cloud Practitioner (CLF-C02) exam, covering cloud concepts, security and compliance, cloud technology and services, and billing, pricing, and support. Tests foundational AWS Cloud knowledge independent of a specific job role.
This course contains the use of artificial intelligence.
About the CLF-C02 exam
- Exam fee
- $100 USD
- Time allowed
- 1 hour 30 minutes
- Questions
- 65
- Passing score
- 700 (scale 100-1000)
- Format
- Multiple choice or multiple response
Exam details published by the vendor, checked 28 August 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Cloud Concepts · 72 questions
- A county parks department still runs every citizen portal from one basement server room and asks what the AWS Cloud value proposition means beyond someone else's computers. Which statement best captures that value?
- A city clerk wonders why cloud vendors talk about economies of scale when a small municipality cannot buy hardware in bulk. What does economies of scale mean in the AWS Cloud context?
- Public works needs a temporary flood-alert website online in days, not months of hardware procurement. Which AWS Cloud benefit most directly addresses that timeline pressure?
- A tourism board wants the same event microsite reachable with low latency for visitors across multiple states. Which AWS Cloud benefit best matches that goal?
- Permit volume spikes every April then drops for the rest of the year. Which AWS Cloud advantage lets capacity grow and shrink with that demand pattern?
- A library consortium wants citizen catalog systems to stay reachable when one facility fails. Which AWS Cloud advantage best names that goal?
- A mayor’s innovation office wants staff to experiment with new citizen apps without waiting on capital budgets for servers. Which AWS Cloud benefit best describes that freedom?
- A township compares buying five years of servers versus paying only for what it uses after moving a GIS viewer to AWS. Which cloud value idea best matches the second approach?
- Emergency management asks how the AWS Cloud helps serve residents during a regional outage of their single on-premises site. Which benefit best answers that concern?
- A school district IT lead summarizes why AWS for the board in one phrase about matching capacity to unpredictable enrollment portals. Which benefit should that phrase name?
- A water utility wants to launch a leak-reporting app simultaneously for three counties without opening three datacenters. Which AWS Cloud benefit most directly enables that plan?
- City council asks whether high availability means the citizen portal will never experience any outage forever. How should IT frame high availability at Cloud Practitioner depth?
- A parks mobile app team ships weekly feature updates. Leadership asks which cloud benefit best describes rapid change without hardware refresh cycles. What should the team answer?
- A finance director hears economies of scale and thinks it only means bulk discount coupon codes. What is the accurate AWS Cloud explanation?
- A rural county wants citizen services online but cannot staff a 24/7 datacenter. Which AWS Cloud value idea best addresses that constraint?
- A transit authority compares standing up staging and production environments in hours versus weeks of racking servers. Which AWS Cloud benefit is illustrated?
- A health department clinic portal must handle a sudden vaccination-registration surge. Which AWS Cloud advantage best matches that need?
- Museum IT wants visitors worldwide to browse a digital archive with acceptable latency. Which AWS Cloud benefit should guide that design conversation?
- A city manager lists CapEx server purchases as the main blocker to trying a new 311 chatbot. Which AWS Cloud benefits most directly lower that barrier?
- Fire department CAD backup planning cites the need to stay up if one site dies. Which named AWS Cloud advantage best matches that requirement?
- A county architecture board asks what the AWS Well-Architected Framework is for. Which statement best describes its purpose?
- Public safety wants a Well-Architected workload review focused on protecting data and access. Which pillar should that review emphasize?
- A municipal finance app must recover quickly after an Availability Zone issue. Which Well-Architected pillar most directly covers that need?
- Parks analytics jobs finish slowly and staff ask which Well-Architected pillar addresses efficient use of compute resources to meet requirements. Which pillar is that?
- A city CFO wants architecture choices that avoid wasteful always-on oversized servers. Which Well-Architected pillar most directly guides that goal?
- Facilities asks which AWS Well-Architected Framework pillar focuses on reducing the environmental impact of cloud workloads. Which pillar should the team cite?
- Operations wants documented runbooks, continuous monitoring, and ongoing process improvement for a city permitting system on AWS. Which Well-Architected pillar most directly covers that focus?
- A city council slide lists "encrypt everything" under the Cost Optimization pillar of the AWS Well-Architected Framework. Which pillar should that concern be moved to?
- An auditor asks how the Reliability pillar differs from the Security pillar in the AWS Well-Architected Framework. Which contrast is accurate?
- A green-city initiative asks whether Sustainability is a formal AWS Well-Architected Framework pillar or only an informal slogan. What is accurate?
- DevOps for a municipal API wants the Well-Architected pillar that emphasizes automating changes and learning from day-to-day operations. Which pillar matches that emphasis?
- A workload review checklist for GIS rendering on AWS lists selecting the right resource types and applying appropriate scaling patterns. Which Well-Architected pillar does that checklist item map to?
- The budget office asks which AWS Well-Architected pillar specifically drives rightsizing workloads and eliminating unused resources. Which pillar should finance cite?
- A board packet claims the AWS Well-Architected Framework has only three pillars. Which statement correctly corrects that claim?
- Transit wants AWS designs that keep working when a single component fails. Which Well-Architected pillar most directly covers that requirement?
- A privacy officer asks which AWS Well-Architected pillar most directly covers identity controls and encryption choices. Which pillar should be cited?
- The facilities energy team asks how AWS architecture guidance addresses carbon impact of workloads. Which Well-Architected pillar should they review first?
- A city compares two AWS designs: one cheaper but fragile, and one more resilient but more expensive. What does that comparison illustrate about Well-Architected pillars?
- A mayor’s office asks what the AWS Cloud Adoption Framework (CAF) is meant to help organizations do. Which statement is accurate?
- County leadership wants cloud migration benefits framed as lower business risk from aging on-premises failure modes. Which CAF-aligned benefit theme does that framing match?
- A sustainability office asks how cloud migration can support environmental, social, and governance goals under AWS Cloud Adoption Framework thinking. Which benefit theme is the best match?
- Economic development claims that cloud platforms can unlock new digital citizen-revenue services for the city. Which CAF-aligned benefit theme does that claim match?
- Public works wants fewer hours spent racking servers and more time on service delivery after moving workloads to AWS. Which CAF-aligned benefit theme best matches that goal?
- A records bureau must copy a large on-premises database to AWS and keep it in sync until cutover. Which migration approach pattern best fits that need?
- A rural courthouse has petabytes of case scans and poor WAN bandwidth for uploading to AWS. Which migration approach is most appropriate?
- IT asks whether the AWS Cloud Adoption Framework replaces the AWS Well-Architected Framework. Which statement is accurate?
- A city lists "buy more on-premises racks" as its AWS Cloud migration strategy. What is the correct evaluation of that plan?
- Libraries plan a phased move of catalog databases to AWS with continuous sync until go-live. Which statement best describes that approach?
- The board asks for one accurate sentence on why the AWS Cloud Adoption Framework matters for a municipal cloud journey. Which sentence should staff use?
- A township ships encrypted drives of GIS archives to AWS because uploading over the available network would take months. Which AWS migration approach does that describe?
- A county health department wants its AWS migration story framed around faster clinic-service delivery and less wait for new digital tools, not only cheaper virtual machines. Which Cloud Adoption Framework benefit theme best matches that framing?
- City auditors ask whether every AWS migration must be a blind lift-and-shift of every server. How should the Cloud Practitioner respond about migration strategies?
- A port authority ties cloud adoption to new online fee portals expected to grow non-tax revenue. Which CAF-aligned benefit theme does that goal illustrate?
- A municipal risk committee wants fewer single-datacenter outage scenarios after the city migrates workloads to AWS. Which CAF benefit theme best describes that outcome?
- A city’s climate action plan asks whether migrating workloads to AWS can support environmental goals highlighted in Cloud Adoption Framework materials. Which benefit theme should the Cloud Practitioner cite?
- A city finance director contrasts buying servers owned for five years with paying monthly for variable AWS usage. What cost distinction is being described?
- City council asks which costs typically shrink or disappear when leaving an on-premises datacenter for AWS. Which answer best lists common on-premises cost drivers?
- A municipality can either bring existing database licenses to AWS or purchase a license-included option. What licensing contrast should the Cloud Practitioner explain?
- Operations discovers EC2 instances sized for a peak load that never arrives. Which cloud economics practice should the city apply?
- An automation-minded city uses templates to provision identical environments repeatedly instead of manual click-ops. Which economics and operations benefit does that primarily illustrate?
- A municipal DBA team debates self-managing MySQL on Amazon EC2 versus using Amazon RDS. From a cloud economics and operations view, what is the key distinction?
- A city evaluating containers hears Amazon ECS or Amazon EKS mentioned as options instead of building orchestration entirely on raw virtual machines. What should the Cloud Practitioner emphasize?
- A civic event feed uses Amazon DynamoDB so the city avoids running its own NoSQL cluster. What managed-service point does this illustrate?
- The budget office asks why variable cloud spend can fit seasonal workloads better than fixed owned servers. What is the best foundational answer?
- A rightsizing workshop finds idle extra-large EC2 instances that monitoring shows should be medium. What action matches rightsizing best?
- Municipal procurement prefers license-included Amazon RDS so the city does not have to track its own database license inventory. What trade-off does that preference reflect?
- An on-premises TCO workshop lists rack space and generator maintenance among current costs. How should those items be categorized for cloud economics?
- Leaders pitch infrastructure as code as a way to cut hours of click-ops and reduce configuration drift. Which benefit statement is most accurate for cloud economics?
- Finance staff assume rightsizing means always choosing the smallest possible EC2 instance regardless of workload need. How should the Cloud Practitioner correct that misunderstanding?
- A managed-services briefing lists Amazon RDS, Amazon ECS, Amazon EKS, and Amazon DynamoDB as examples where AWS operates more of the stack. What is the Cloud Practitioner takeaway?
- During a CapEx versus OpEx discussion, leaders contrast buying a storage area network with paying monthly for Amazon S3. What distinction should the Cloud Practitioner highlight?
- City leaders ask how automation relates to cloud economics beyond calling it “cool DevOps.” What economic value should the Cloud Practitioner emphasize?
Security and Compliance · 90 questions
- A city team assumes AWS automatically patches the guest operating system on every Amazon EC2 instance. Under the shared responsibility model, what is correct?
- Parks and Recreation runs Amazon RDS and asks who manages database engine patching compared with a self-managed database on EC2. What is the accurate shared-responsibility shift?
- Staff running AWS Lambda notification functions believe they own no security duties because the service is serverless. What should the Cloud Practitioner clarify?
- A county auditor asks who is responsible for hiring and managing physical security guards at AWS Region datacenters that host the city's workloads. Which answer is correct?
- A city HR portal runs on AWS. Leadership asks who decides how employee records are classified and who may access them. Which statement is accurate?
- A city board asks whether the AWS shared responsibility model always splits security work exactly 50/50 between AWS and the city. Which response is accurate?
- A municipal IT lead compares Amazon EC2, Amazon RDS, and AWS Lambda for who manages the operating system or runtime layer. Which ordering correctly shows increasing AWS responsibility for that layer?
- A vendor tells the city council that moving workloads to AWS means the city will have zero remaining security work. Which statement correctly rejects that claim?
- Network firewall-style rules the city configures on Amazon EC2 security groups for a permitting system are under whose responsibility?
- Which statement correctly distinguishes AWS infrastructure duties from customer duties on Amazon EC2 for a city website?
- During shared-responsibility training, staff ask how the model is framed at Cloud Practitioner depth. Which description best matches the guide-style components?
- The city adopts a managed AWS database service and a manager asks whether IAM policies for that service can be ignored. Which statement is correct?
- The city uses AWS Key Management Service (AWS KMS) for encryption. Who is responsible for key policy and encryption configuration choices that protect municipal data?
- A council member asks whether city staff operate closed-circuit cameras inside AWS Region facilities that host the permitting system. Which answer is correct?
- Developers find a vulnerability in city-written API code running on Amazon EC2. Who is responsible for fixing that application security issue?
- The city uses Amazon RDS. Which statement best describes responsibility for automated backup features versus remaining customer duties?
- For an AWS Lambda function used by a city chatbot, which split correctly separates AWS and customer responsibilities?
- A council training slide states: "AWS is responsible for security OF the cloud; customers are responsible for security IN the cloud." How should staff apply that framing?
- The city wants staff to sign in to AWS with existing municipal SSO. Who is responsible for configuring identity federation into AWS?
- Which statement correctly assigns responsibility for a hypervisor flaw versus an unpatched WordPress site on Amazon EC2 used by a city department?
- A compliance questionnaire asks who maintains the AWS global infrastructure that hosts the city's cloud workloads. What is the correct answer?
- Architects debate placing a city API in a public subnet versus a private subnet in a VPC. Under shared responsibility, whose decision is that architecture choice?
- The city runs containers on managed Amazon ECS or Amazon EKS. Which customer security duties still apply?
- After migrating departmental file shares to Amazon S3, who must apply correct access policies on the buckets?
- An external auditor asks where the city can download AWS compliance reports and security/compliance agreements. Which AWS resource should staff use?
- A municipal health clinic workload may need industry-specific compliance evidence that a parks website does not. Which statement reflects how compliance needs relate to AWS?
- Security operations wants intelligent threat detection findings across AWS accounts used by the city. Which service is designed for that purpose at Cloud Practitioner depth?
- The city needs automated vulnerability assessment of Amazon EC2 instances. Which AWS service is intended for that purpose at Cloud Practitioner identify depth?
- A county security office is drowning in separate findings from GuardDuty, Inspector, and partner tools and wants one place to see prioritized security posture across the AWS accounts it manages. Which service provides that central view?
- A city clerk launches a public citizen portal that must stay available during traffic floods and volumetric attacks. At foundational identify depth, which AWS service is purpose-built for DDoS protection of such internet-facing workloads?
- A building department stores permit PDFs in Amazon S3 and uploads them from browsers over HTTPS. Staff ask how encryption at rest differs from encryption in transit for those permits. Which statement is accurate?
- Operations needs graphs, metrics, and alarms for a wastewater treatment API running on AWS so on-call staff get notified when error rates spike. Which service is the primary AWS monitoring destination for those metrics and alarms?
- After a suspicious IAM policy change in a municipal AWS account, auditors ask who called which AWS API and when. Which service provides that account API activity audit trail?
- A compliance officer wants to detect when AWS resources drift from approved settings — for example, when a security group or S3 bucket configuration no longer matches policy. Which service records and evaluates resource configurations for that purpose?
- A city risk office wants to continuously collect and organize evidence mapped to common audit frameworks instead of chasing screenshots before every annual review. Which AWS service is designed for that continuous audit-evidence workflow?
- City counsel asks whether every AWS service automatically carries the exact same compliance certifications and scope for municipal workloads. Which statement reflects how AWS compliance applicability works at a foundational level?
- A parks permit site terminates HTTPS at an Application Load Balancer so browsers talk to the ALB over TLS. What type of encryption control is that primarily illustrating?
- A public-works team enables encryption on an Amazon EBS volume attached to an EC2 instance that holds GIS files. Which encryption category does that control primarily represent?
- External assessors ask a municipal cloud team for official AWS compliance documentation packages rather than unofficial blog summaries. Where should the team obtain those AWS compliance reports?
- A security analyst must explain how Amazon GuardDuty differs from AWS CloudTrail for a city AWS environment. Which contrast is accurate?
- A county IT lead confuses Amazon Inspector with AWS Shield while planning controls for web apps and compute. Which statement correctly separates their purposes?
- A new hire describes AWS Security Hub as a packet-filtering firewall that should replace security groups for a library website. What is the more accurate purpose of Security Hub?
- In a governance meeting, leaders ask which service answers operational health questions (metrics and alarms) versus who-did-what API history. Which pairing is correct?
- A governance team wants continuous evaluation that flags publicly accessible Amazon S3 buckets as noncompliant with city policy. Which AWS service is designed to evaluate resource configurations against such rules?
- International data-residency questions push a municipal legal team to review AWS compliance resources for programs that differ by geography. What foundational idea should staff keep in mind?
- A city’s IAM administrators want a governance report that helps review account credentials and access-related hygiene across IAM users. Which approach aligns with that AWS governance reporting need?
- Compared with designing a bespoke on-premises HSM project from scratch, what Cloud Practitioner-level benefit of AWS cloud security is most accurate regarding encryption?
- A municipal CISO wants one official place to download AWS compliance artifacts before the annual external audit. Which service should the CISO use?
- A new cloud admin proposes sharing the AWS account root user daily among the public-works team for routine changes. What is the correct foundational response?
- Which practice is a key foundational control for protecting the AWS account root user for a municipal account?
- Parks staff only need to read objects in one Amazon S3 bucket for seasonal reports. How should permissions be granted under the principle of least privilege?
- Outside contractors need temporary access to a city AWS account without long-lived shared IAM user passwords. Which IAM identity approach best fits that temporary access pattern?
- A workforce team wants single sign-on so municipal employees can reach multiple AWS accounts with centralized workforce identity instead of separate IAM users in every account. Which AWS capability is intended for that workforce SSO pattern?
- A parks department scripts that call AWS from a workstation accidentally committed IAM access keys into a public GitHub repository. What should the city treat as the core lesson about those keys?
- A municipal IT board wants IAM users who still sign in with passwords to meet stronger authentication rules for length, complexity, and change cadence. Which IAM feature addresses that requirement at Cloud Practitioner depth?
- A city's permit API should load the database password at runtime instead of hard-coding it in application source. Which AWS service is designed to store and retrieve that kind of secret?
- Operations staff need a place in AWS to keep operational parameters and credential-style values that automation and instances can look up, alongside related Systems Manager capabilities. Which service family fits that pattern at foundational depth?
- Human IAM users in the finance office sign into the AWS Management Console with passwords. Which additional authentication method best hardens those console sign-ins?
- A central security account must review CloudTrail logs stored in several department AWS accounts without sharing long-term access keys with those departments. What IAM pattern enables that cross-account access?
- Which statement correctly describes root-user responsibilities at Cloud Practitioner depth for a city AWS account?
- A library IT team wants permissions that start from AWS-authored baselines and then tailor narrower access when those baselines are too broad, while still aiming for least privilege. How should they think about managed versus custom policies?
- City employees already authenticate to on-premises Active Directory. Leadership wants them to access AWS without creating a unique long-term IAM password for every person. Which approach matches that goal?
- A department placed every employee into a single IAM group with AdministratorAccess. What redesign best aligns with least privilege?
- Automation that stops unused lab EC2 instances every night currently uses root user access keys. What is the recommended Cloud Practitioner guidance?
- A break-glass human administrator needs console access in an emergency, while an EC2 fleet needs permissions to read objects from a specific S3 bucket. How should those identities typically be modeled?
- A city of about 2,000 employees needs workforce access to AWS accounts. Which pattern is the better foundational choice compared with creating thousands of long-lived IAM users?
- A custom IAM policy for a reporting tool should follow least privilege for one S3 prefix. Which policy design best matches that goal?
- Which authentication hardening method should a Cloud Practitioner recommend first when asked how to strengthen IAM user console logins that already use passwords?
- A Lambda-backed civic chatbot needs a third-party API token. Which approach best matches foundational guidance on where to keep that secret?
- All library helpdesk staff need the same set of IAM permissions. What is the cleanest foundational way to grant that shared policy?
- How do federated identities differ from IAM users at Cloud Practitioner depth?
- Closing the AWS account or changing certain account settings is treated as root-level territory. What should the city do for ordinary daily cloud work?
- A public permits website is seeing SQL injection style attempts in HTTP requests. Which AWS service is designed to filter those Layer 7 web exploits?
- What is the primary purpose of a security group for EC2 instances in a VPC?
- How do network ACLs differ from security groups at Cloud Practitioner depth?
- A security team wants a third-party firewall or IDS appliance image they can run in AWS. Where can they commonly procure such products?
- Where should a practitioner look for official AWS security bulletins and guidance materials?
- Which AWS capability commonly flags security findings such as overly open security groups and other best-practice gaps?
- A city public-works portal is hit with malicious HTTP patterns such as injection-style requests. Shield is already discussed for DDoS, but which service should filter those web-layer attacks with customizable HTTP rules?
- A municipal security team must enforce the same firewall and WAF policy sets across dozens of AWS accounts from one control point. Which service provides that centralized firewall policy management?
- City cloud reviewers want an AWS security capability that continuously analyzes account activity and network findings to help identify threats. Which service fits that role?
- A city analyst needs official AWS answers to common security how-to questions instead of relying on random internet forums. Where should the analyst look first for that authoritative guidance?
- A parks department EC2 web server sits behind a security group. What is the foundational inbound behavior of that security group before any custom allow rules are added?
- A county network lead wants subnet-level allow and deny controls for traffic entering and leaving a VPC subnet, not only instance-level rules. Which construct provides that subnet firewall behavior?
- During a city security workshop, someone claims Trusted Advisor can fully replace GuardDuty for threat intelligence. How should the team separate the two purposes?
- A city security team wants official write-ups when AWS announces or explains new security features. Which resource is an official information source for that guidance?
- City policy mandates a specific third-party WAF or IDS brand that is not a native AWS service. Where does the team procure that third-party security software for use with AWS?
- A transit-agency diagram must place instance-level traffic filters in one layer and subnet-level filters in another. Which pairing is correct?
- A public citizen portal needs filtering for common web exploits in HTTP requests, while a separate concern is absorbing large volumetric DDoS floods. Which service pairing matches those attack types?
- In a weekly city cloud review, leaders want a service that surfaces security-related recommendations about common account misconfigurations. Which service provides those checks?
Cloud Technology and Services · 102 questions
- A librarian prefers clicking through a graphical interface to start a single test virtual machine in AWS. Which access method best fits that interactive one-off task?
- A city automation script on a laptop must create and stop AWS resources without using the browser GUI. Which tool provides that scripted programmatic access?
- A city permitting application must upload files to Amazon S3 directly from application code. Which approach provides that application-level programmatic access?
- A public-works team must rebuild the same multi-resource VPC, security groups, and load balancer stack the same way every quarter. Which approach best supports that repeatable provisioning?
- A planning department keeps CAD workstations in the city datacenter but bursts heavy overnight analytics jobs into AWS. Which deployment model describes that mix?
- All citizen-facing applications now run only in AWS, and the city has decommissioned its last application datacenter. Which deployment model is that?
- A records system must remain entirely inside a city-owned facility under city staff control and must not run in the AWS public cloud. Which deployment model applies?
- A city datacenter needs encrypted site-to-site connectivity into a VPC over the internet for daily operations. Which AWS connectivity option maps to that need?
- A courthouse imaging system needs a consistent private high-bandwidth link to AWS rather than relying only on the public internet. Which connectivity option best fits?
- Citizens reach a static website hosted on Amazon S3 through ordinary browsers on the public internet. What should the cloud team understand about that connectivity choice?
- A team copies an AMI once through the console for a lab, but every production release must update identical multi-resource stacks the same way. Which practice should they choose for those ongoing identical deploys?
- Developers debate how to apply the same baseline across 200 AWS accounts. The Management Console is slow for that volume. What approach should they favor?
- In a city architecture 101 class, staff ask how Regions, Availability Zones, and edge locations relate. Which statement is accurate?
- A county elections office is deploying a voter-results API and needs high availability within one AWS Region. What design choice best meets that goal?
- A city architect asks why putting a 311 portal in two Availability Zones improves resilience. What is the key engineering idea behind Availability Zones?
- A statewide benefits system must continue serving citizens after a rare Region-wide disruption. Which approach best supports that disaster-recovery goal?
- A national privacy law requires citizen PII for a licensing portal to remain stored in-country. How should the agency choose where to run the workload?
- Coastal residents report high latency to a single inland Region hosting a permit portal. What multi-Region reason best addresses that user experience?
- A parks department publishes static trail maps that visitors download worldwide. Which AWS capability best speeds delivery of that cached content?
- A tourism bureau wants global users steered over the AWS network to healthy Regional endpoints for a booking API. Which service awareness best matches that goal?
- A metro transit agency needs ultra-low latency compute for XR kiosks in the downtown core, closer than the parent Region. Which AWS construct is designed for that purpose?
- A public-safety pilot wants AWS compute placed at telecom edges for 5G-connected field apps. Which AWS offering matches that awareness-level description?
- An ancillary 911 support app currently runs entirely in one Availability Zone. What should a Cloud Practitioner recommend for high availability?
- During a business continuity tabletop, leaders ask how the city would operate if an entire AWS Region were impaired. What strategy should be discussed?
- A librarian proposes running the primary catalog database only at a CloudFront edge location to 'be closer to patrons.' What clarification is most accurate?
- In onboarding materials for new cloud staff, how should an AWS Region be described at a foundational level?
- A GIS team needs EC2 instances for CPU-heavy overnight batch crunching of parcel maps. Which instance family category best fits that workload?
- Analysts need EC2 with very high sequential disk throughput for large local-disk civic analytics. Which instance category should they prioritize?
- A city wants to run microservices in containers using an AWS-native orchestrator. Which service best matches that requirement?
- A transit digital team requires a managed platform that speaks standard Kubernetes APIs for their container workloads. Which AWS service should they choose?
- Developers want to run containers for a permitting workflow without managing the underlying servers. Which AWS capability fits?
- When citizens upload photos to a code-enforcement bucket, the city wants automatic thumbnail creation. Which service best fits that event-driven pattern?
- A public portal sees weekday peaks and overnight quiet periods. Which mechanism adjusts EC2 capacity as load changes?
- A city's public information portal runs on several EC2 instances. What is the primary purpose of placing a load balancer in front of them?
- A finance office validates uploaded budget files only once each night for a few minutes. Why prefer AWS Lambda over always-on EC2 for that job?
- Two teams propose Amazon ECS and Amazon EKS for the same containerized inspection app. When should the city prefer EKS?
- An ECS-based licensing API team wants to avoid patching and managing container host instances. Which launch approach should they prefer?
- A civic operations team needs an in-memory cache on EC2 with a very large RAM footprint. Which instance family awareness best applies?
- A city 311 portal runs on several EC2 web servers. Staff want traffic spread across healthy targets and unhealthy ones taken out of rotation. Which AWS service purpose fits that need at Cloud Practitioner depth?
- A parks department hears Auto Scaling and load balancing used interchangeably for a permit site. How should the IT lead distinguish them?
- A tiny township needs a simple brochure website with predictable VPS-style bundling and does not want to assemble EC2, networking, and storage piece by piece. Which AWS compute option best matches that simplicity need?
- A municipal development team wants to deploy a web application on AWS without managing all of the underlying servers, load balancers, and scaling plumbing themselves. Which service purpose fits?
- A city finance team currently runs PostgreSQL on EC2 and spends staff time on backups and database engine patching. They want AWS to handle those operational tasks. What should they choose?
- A municipal finance system needs a relational schema with SQL joins across budgets, vendors, and purchase orders. Which AWS database family fits that pattern?
- A county wants a managed relational database that is compatible with MySQL or PostgreSQL and is positioned as Amazon's cloud-native relational engine. Which service should they recognize?
- A high-scale 311 mobile app needs a key-value session store that can handle spiky request patterns without managing database servers. Which AWS database fits?
- A city portal team wants a memory-based cache or in-memory database family to speed repeated reads and short-lived session data. Which AWS service family should they identify?
- A city must migrate an on-premises Oracle database to Aurora PostgreSQL and keep data replicating until cutover. Which AWS service is designed for that database migration and replication work?
- Before moving a legacy SQL Server schema to a different engine on AWS, planners need help converting database schema objects between engines. Which AWS tool should they identify?
- A fraud team models citizens, vendors, and payment accounts as a network of relationships and needs a managed graph database on AWS. Which service should they identify?
- A permitting system needs complex multi-table joins and a normalized relational schema. A vendor proposes Amazon DynamoDB as the primary store. What is the sound Cloud Practitioner response?
- Compared with running MySQL yourself on EC2, what operational benefit should a city expect from a managed database service such as Amazon RDS?
- A budget office asks whether Amazon DynamoDB can replace their relational OLAP data warehouse for long-running analytics across citywide finance history. Which statement is accurate?
- Over a cutover weekend, a county will replicate Microsoft SQL Server on premises to Amazon RDS for SQL Server with minimal downtime. Which service supports that migration pattern?
- A city wants an isolated virtual network in AWS where it controls IP ranges, subnets, and routing for municipal workloads. Which service provides that foundation?
- Architects place a public web tier and a private application tier in separate address ranges inside one VPC. Which VPC component creates that segmentation?
- Resources in a public subnet need a path to the public internet for inbound and outbound internet routing. Which VPC component enables that connectivity?
- During a VPC security review, staff ask how security groups differ from network ACLs. Which comparison is accurate at Cloud Practitioner depth?
- A city needs DNS hosting for its domains and health-based routing to endpoints that serve resident services. Which AWS service provides that?
- A tourism bureau wants static images and scripts cached closer to visitors worldwide. Which edge service should they choose?
- A statewide portal needs improved global network performance using AWS’s anycast edge network to steer users to optimal endpoints. Which service awareness item fits?
- A public-works office needs encrypted connectivity between its on-premises network and an Amazon VPC over the public internet. Which option fits?
- A large municipality wants private, dedicated network connectivity from its data center to AWS with more consistent performance than a VPN over the public internet. Which service should they identify?
- A city's private-subnet application servers must download OS patches from the public internet, but the security office forbids assigning public IP addresses to those instances. Which AWS component best enables outbound internet access while keeping the instances private?
- A municipal architect marks one VPC subnet "public" and another "private" for a citizen portal. What primarily distinguishes the public subnet for inbound internet access patterns?
- A county wants global DNS routing for its website hostname and assumes Amazon Route 53 will also cache and serve the site's static HTML like a CDN. Which clarification is correct?
- A parks department will expose HTTPS endpoints so mobile apps can call backend microservices. Which AWS service is commonly used as the managed front door to create, publish, and manage HTTP APIs?
- While hardening a city VPC, a trainee lists every AWS security product they have heard of. At Cloud Practitioner depth, which pair remains the core network-level access controls inside a VPC?
- Residents upload permit-application PDFs that the city must store as durable files accessed by key, not as a mounted OS disk. Which AWS storage service fits this object-storage use case?
- A records office must keep infrequently accessed historical archives for years at the lowest practical storage cost and can tolerate delayed retrieval. Which Amazon S3 approach best matches that need at Cloud Practitioner depth?
- A library keeps frequently downloaded digital assets on Amazon S3 Standard today and wants older objects moved automatically to colder classes later. Which capability best describes that pattern?
- A public-works EC2 instance needs a persistent block-storage volume for its operating system and application data disks. Which AWS service provides that attachable block storage?
- A developer proposes putting the only copy of a permit database on EC2 instance store because it is local and fast. What awareness should the team have about instance store compared with typical Amazon EBS volumes?
- Several Linux EC2 instances in a city analytics VPC must concurrently read and write the same shared file system using NFS-style access. Which AWS service best fits?
- A finance office needs a managed Windows file share that Windows EC2 servers can use with familiar SMB protocols. Which AWS service family is designed for managed file systems tailored to specific OS and protocol needs such as Windows?
- A hybrid city datacenter wants on-premises applications to keep using file-style access while caching and integrating with AWS cloud storage. Which service provides gateway patterns for that hybrid file, volume, or tape access?
- IT leadership wants one place to define backup plans and retention across supported AWS resources instead of configuring each service separately. Which service centralizes that backup management?
- Operators notice incomplete multipart uploads filling an S3 bucket and also want year-old log objects moved to Glacier automatically. Which S3 feature automates those transitions and expirations?
- A trainee asks whether an Amazon S3 bucket can be attached as the EC2 instance's boot volume for a new virtual server. Which guidance is correct?
- A GIS team debates Amazon EFS versus Amazon S3 for shared working files. Which contrast best captures the difference at Cloud Practitioner depth?
- A municipality wants a lift-and-shift style disaster recovery approach that continuously replicates servers at block level into AWS for failover. Which AWS service is aimed at that DR pattern?
- Records staff can choose a colder Amazon S3 archival class that costs less but retrieves more slowly, versus a warmer archival class with faster access at higher storage cost. Which statement reflects that Cloud Practitioner-level trade-off?
- A data team wants a managed AWS platform to build, train, and deploy custom machine learning models for forecasting permit demand—without needing an AI Practitioner-level foundation-model deep dive. Which service should they identify?
- The 311 office wants a conversational chatbot that answers common city FAQ intents through voice and text. Which AWS service is commonly identified for building those conversational interfaces?
- Staff need intelligent enterprise search across large municipal PDF knowledge bases so employees can ask natural-language questions and find relevant passages. Which AWS service fits that identify-level use case?
- Analysts want to run SQL queries directly against log and CSV files sitting in an Amazon S3 data lake without standing up a traditional database server. Which serverless service matches that pattern?
- IoT water meters stream telemetry that must be ingested and processed in near real time as a continuous data stream. Which AWS service family is commonly chosen for that real-time streaming pattern?
- A city analytics pipeline needs a managed ETL service to discover schemas, catalog datasets, and transform data for downstream analytics. Which AWS service is identified for that data integration role?
- A city finance office must publish interactive dashboards so council members can explore budget spending by department without exporting spreadsheets. Which AWS service should the office use?
- A clerk’s office records city council meetings and needs searchable text captions generated from the audio files. Which AWS service converts speech to text for that use case?
- A parks department wants English trail brochures converted into Spanish and Vietnamese for kiosk handouts without hiring a full-time translator staff. Which AWS service performs machine translation of text?
- A public photo-upload portal for a community art contest must flag inappropriate images before they appear on the city website. Which AWS service analyzes images for that moderation purpose?
- Sanitation wants residents’ phones to receive a push or SMS alert whenever a trash route changes for the week. Which AWS service is designed to publish notifications to many subscribers?
- A 311 intake API receives ticket spikes during storms and must buffer work so backend workers process requests at their own pace without losing messages. Which AWS service provides that managed queue?
- When a citizen uploads a permit PDF to an S3 bucket, several systems must react: virus scan, metadata tagging, and a Slack-style staff alert. Which AWS service routes those events to multiple targets with rules?
- The city wants a cloud-based contact center so 311 callers can reach agents without buying on-premises phone switches. Which AWS service provides that capability?
- After a resident pays an online building permit fee, the city must send a reliable transactional receipt email from its verified domain. Which AWS service should handle that outbound email?
- A municipal IT team wants an automated pipeline that builds application packages and deploys them through stages after each approved commit. Which AWS family of services supports that CI/CD pattern?
- During tax season the assessor’s office hires temporary staff who need full Windows desktops with installed apps without shipping laptops to every hire. Which AWS service provides managed virtual desktops?
- A planning department wants legacy GIS software streamed to thin-client kiosks so users run the app in a browser without installing the suite locally. Which AWS service streams applications that way?
- A small civic innovation team wants a hosted path to build and publish a citizen mobile/web app with backend scaffolding rather than wiring every AWS service by hand. Which AWS service fits that frontend development platform role?
- Public works installs network-connected sensors on streetlights and needs a managed service to securely connect and manage those devices in AWS. Which service should the city use?
Billing, Pricing, and Support · 36 questions
- A developer lab spins up EC2 instances for a few days of prototype work with no multi-year commitment and unpredictable hours. Which pricing model fits best?
- A public-safety CAD reporting fleet runs 24/7 on the same instance family for the next one to three years with predictable utilization. Which approach typically lowers cost versus pure On-Demand?
- A GIS batch job can checkpoint progress and restart if a server stops, and the city wants the lowest price for that flexible compute. Which EC2 purchasing option fits?
- Finance wants a discount commitment that still allows changing EC2 instance families more flexibly than a classic specific Reserved Instance shape. Which option should they evaluate?
- A vendor license for case-management software is tied to physical server sockets, and the city must bring that license to AWS. Which EC2 option best addresses server-bound BYOL needs?
- Emergency operations must guarantee that a specific number of EC2 instances can launch in one Availability Zone during a declared emergency, separate from buying a billing discount. Which capability reserves that capacity?
- A finance analyst asks which data movement typically does not incur the same internet data-transfer charges as sending traffic out of AWS. Which statement is accurate at a Cloud Practitioner level?
- IT plans to replicate an S3 bucket of property records to a second AWS Region for disaster recovery. Which cost factor should the architect expect to evaluate?
- Records management is choosing an S3 storage class for rarely accessed closed case files and hears colder classes cost less to store. What trade-off should they also expect?
- After buying EC2 Reserved Instances for a web tier, operations asks whether some RI attributes can apply across sizes in the same instance family. What awareness is correct at Cloud Practitioner depth?
- Several department AWS accounts sit under one AWS Organizations payer, and leadership bought Reserved Instances in one account. What benefit awareness applies?
- A county license desk wants EC2 capacity that stays on single-tenant hardware but does not need to pick and control a specific physical server for bring-your-own licensing. Which tenancy option matches that need?
- A city 911 voice path must stay up without interruption during an outage drill. Why is Amazon EC2 Spot the wrong purchase option for that path?
- A parks department pilot cannot yet predict steady monthly EC2 hours and refuses a one- or three-year commitment. Which pricing model should they start with?
- A finance officer wants an alert when a public-works AWS account is forecast to exceed its monthly dollar limit. Which AWS cost tool should they configure?
- A city controller needs to chart last quarter’s AWS charges broken down by service to explain the bill to council. Which tool is designed for that historical analysis?
- Before migrating a permitting system, a municipal architect must estimate next year’s EC2, RDS, and data-transfer costs for a budget request. Which AWS tool fits?
- A city wants separate AWS accounts for police, parks, and finance, yet one payer invoice that rolls all charges together. Which feature provides that?
- A county IT office must charge departments for the AWS resources each team owns. What should they apply so Cost Explorer can group spend by department?
- A finance analyst needs the most detailed line-item export of AWS usage and charges delivered to Amazon S3 for custom reporting. Which artifact should they enable?
- A large city holding company wants customized showback rates and billing groups for agencies that differ from the raw AWS invoice. Which service is built for that?
- A project manager treats an AWS Pricing Calculator worksheet as the official city invoice for last month. What correction should finance give?
- A cloud office wants notifications if Reserved Instance utilization drops below a target coverage percentage. Which cost-management capability supports that awareness-level goal?
- Without consistent resource tags, a city’s parks and police AWS spend is mixed on one bill and hard to split. What practice restores departmental visibility?
- A municipal holding structure needs agency accounts grouped into Organizational Units plus one rolled-up payer invoice. Which AWS capability set addresses both needs?
- After a festival mobile app launch, a tourism board sees an unexpected AWS charge spike and needs to filter by service, Region, and cost allocation tag. Which tool should analysts open first?
- A production city website fails at 2 a.m. and leaders need 24/7 phone access plus a designated Technical Account Manager-style relationship. Which Support direction matches that criticality?
- A university intern’s personal AWS sandbox for learning has different Support needs than a city’s production permitting portal. How should leaders match Support plans?
- A cloud governance board wants automated best-practice checks that flag idle resources, open security groups, and service-limit risks across the city account. Which AWS capability provides those recommendations?
- Operators need to know whether an AWS service event in their Region is affecting the city’s accounts right now. Which dashboard communicates those service health events?
- A solutions intern must study official AWS architectural guidance and service documentation before a Cloud Practitioner review. Where should they look first?
- A municipal engineer has a how-to question about an AWS error message and wants Q&A-style answers from AWS knowledge resources and the community. Which resources fit that need?
- A city needs a vetted systems integrator and third-party security appliances that run on AWS. Which AWS programs or channels should procurement explore?
- Leadership wants guided help designing a multi-year cloud transformation for permitting, GIS, and public records—not only a one-off Support ticket. Which AWS assistance paths specialize in that guided expertise?
- A compromised city account begins unauthorized cryptocurrency mining on EC2. Besides securing the account, where should the abuse of AWS resources be reported?
- A cloud team wants curated, battle-tested how-to strategies for common AWS migration and operations problems rather than inventing every pattern from scratch. Which AWS resource family provides that?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by the exam vendor.