5.5 Practice Exam — Mixed Domain Questions

AWS Certified Cloud Practitioner CLF-C02

Track your progress as you read

Finished sections get a check mark.

1 Introduction

About the AWS Cloud Practitioner (CLF-C02) Exam Study Strategies and Exam Tips

2 Domain 1: Cloud Concepts (24%)

1.1 What Is Cloud Computing? 1.2 Cloud Deployment Models 1.3 AWS Well-Architected Framework 1.4 Cloud Migration Strategies 1.5 Cloud Economics

3 Domain 2: Security and Compliance (30%)

2.1 The AWS Shared Responsibility Model 2.2 AWS Identity and Access Management (IAM) 2.3 AWS Security Services 2.4 Compliance and Governance 2.5 Network Security

4 Domain 3: Cloud Technology and Services (34%)

3.1 AWS Compute Services 3.2 AWS Storage Services 3.3 AWS Database Services 3.4 AWS Networking and Content Delivery 3.5 Management and Governance Services 3.6 AI/ML and Analytics Services 3.7 Application Integration and Other Services

5 Domain 4: Billing, Pricing, and Support (12%)

4.1 AWS Pricing Models 4.2 Billing and Cost Management Tools 4.3 AWS Support Plans 4.4 Additional Billing Concepts and Services

6 AWS Services Deep Dive

5.1 Compute Services Deep Dive 5.2 Storage and Database Deep Dive 5.3 Security Services Deep Dive 5.4 Architecture Best Practices and Design Principles 5.5 Practice Exam — Mixed Domain Questions

5.5 Practice Exam — Mixed Domain Questions

Key Takeaways Explain This Topic AI

Practice questions covering all four domains help identify knowledge gaps before taking the actual exam.

Focus on understanding WHY each answer is correct — not just memorizing answers.

The CLF-C02 tests breadth of knowledge across 200+ AWS services, not deep technical expertise.

Scenario-based questions require matching the described need to the correct AWS service or concept.

Questions about the Shared Responsibility Model, Well-Architected Framework, and pricing models appear most frequently.

Last updated: October 2026

The following practice questions simulate the format and difficulty of the actual CLF-C02 exam. They span all four domains with scenario-based items that test your ability to apply knowledge rather than simply recall facts. Treat them as a graded checkpoint, not a reading assignment.

Tips for this practice section:

• Answer each question before revealing the explanation
• Note which domains you miss and reread those chapters
• On the real exam, process of elimination is your strongest tool
• How to Use This Practice Set

Work the full set under light time pressure before looking at any explanation, then mark every miss by domain, rule, and service name . For each wrong answer, write one sentence on why the correct option wins and why the most tempting distractor fails — because real exam items frequently retest the same concept with different wording. If several misses cluster in one domain, pause and reread that chapter before continuing rather than pushing ahead.

A strong review loop is: a timed first attempt, an explanation review, a targeted reread of weak areas, then a second attempt after a short break so you are recalling concepts rather than memorizing answer positions.

Domain Coverage and Weighting

Because the exam weights domains unevenly, weight your review the same way. Cloud Technology and Services (34%) and Security and Compliance (30%) together make up nearly two-thirds of scored questions, so service-selection and security scenarios deserve the most practice. Cloud Concepts (24%) rewards knowing the six advantages of cloud, the Well-Architected pillars, and the global-infrastructure hierarchy. Billing, Pricing, and Support (12%) is small but high-yield: the pricing models, the Free Tier plans and always-free offers, the cost tools, and the support-plan differentiators recur predictably.

Review Routine

After finishing, build a three-column log: topic, the rule you missed, and the clue you should have noticed . Retake only the missed questions the next day, then mix them with fresh items so you do not memorize order. For scenario questions, name the deciding factor aloud — "predictable workload, so Savings Plans" or "needs to survive an AZ outage, so Multi-AZ" — before selecting, which prevents rushing toward a familiar but wrong option. The most common traps are confusing similar services (Security Groups vs. NACLs, CloudWatch vs. CloudTrail, Multi-AZ vs. Read Replicas, Cognito vs.

IAM), so build flashcards for those pairs and drill them until the distinction is automatic.

Exam-Day Execution

With 65 questions in 90 minutes you have roughly 83 seconds per question , which is comfortable if you do not stall. Use a three-pass approach: a first pass to answer everything you know quickly while flagging anything that needs more than 90 seconds, a second pass to work the flagged items with fresh eyes, and a short final pass to confirm you answered all 65 (there is no penalty for guessing , so never leave a blank). On multiple-response items, read how many answers to select and remember that partial credit is not given — you must pick every correct option and no incorrect ones.

Watch the qualifier in each stem. "MOST cost-effective," "MOST secure," "MOST highly available," and "LEAST operational overhead" each steer you toward a different family of services even when the scenario is otherwise identical. A question that adds "without managing servers" rules out raw EC2; one that says "must survive a Region outage" rules out single-Region designs; one that says "tolerates interruptions" invites Spot. The wrong answers are usually real AWS services that simply do not fit the stated constraint, so the discipline is matching the constraint, not recognizing the service name.

A Compact Domain Cheat Sheet

As a final review, anchor each domain to its highest-frequency facts. Cloud Concepts: the six advantages of cloud, the six Well-Architected pillars (Sustainability is newest), and Regions > Availability Zones > edge locations. Security and Compliance: the Shared Responsibility Model, root-user MFA and least privilege, and the detective services (GuardDuty for threats, Inspector for vulnerabilities, Macie for PII, CloudTrail for API logs).

Cloud Technology and Services: match each workload to the right compute (EC2/Lambda/Fargate), storage (S3/EBS/EFS), and database (RDS/DynamoDB/Redshift), and know networking basics (VPC, CloudFront, Route 53, ELB). Billing, Pricing, and Support: the pricing models, the Free Tier plans and always-free offers, Cost Explorer vs. Budgets vs. Pricing Calculator, and the support-plan differentiators (designated TAM, billing concierge, full Trusted Advisor).

Service Pairs the Exam Loves to Confuse

Many missed questions come down to a handful of look-alike pairs. Drill these until the distinction is reflexive:

• Pair The Deciding Difference
• CloudWatch vs. CloudTrail CloudWatch = performance metrics/alarms/logs; CloudTrail = audit log of API calls

Security Groups vs. NACLs Security Groups = instance-level, stateful, allow-only; NACLs = subnet-level, stateless, allow+deny

• Multi-AZ vs. Read Replica Multi-AZ = high availability/failover; Read Replica = read scaling
• Cognito vs. IAM Cognito = your app's users; IAM = your AWS account's users

CloudFront vs. Global Accelerator CloudFront = cache content at edge; Global Accelerator = route live traffic over the AWS backbone

Marketplace vs. Service Catalog Marketplace = buy third-party software; Service Catalog = publish approved internal products

Cost Explorer vs. Pricing Calculator Cost Explorer = analyze past spend; Pricing Calculator = estimate before deploying

Inspector vs. GuardDuty vs. Macie Inspector = vulnerability scan; GuardDuty = threat detection; Macie = sensitive data (PII) discovery

If you can explain the right-hand column for every row from memory, you have neutralized a large fraction of the trickiest exam items. The mixed-domain questions that follow reward exactly this discipline: read for the one deciding constraint in each scenario, eliminate the two clearly wrong options, and match the remaining choice to the specific need described.