CLF-C02 Study Notes in Questions: Cloud Technology and Services

How well do you know Cloud Technology and Services? This AWS Cloud Practitioner (CLF-C02) set has 5 questions to find out. About 34% of the exam comes from this domain. Answers and full explanations sit under each question.

AWS Cloud Practitioner (CLF-C02) · Cloud Technology and Services · 5 questions with answers and explanations

🧭 Before you start

This is the widest domain, covering global infrastructure, compute, storage, databases, networking, analytics and backup. Most questions describe a need in a sentence or two and ask for the matching service, and close pairs are the challenge: a cache and a durable in-memory database, querying files and running a warehouse, a queue and a topic. Details in the requirement separate them.

Watch for these while you work

• Regional resources that seem to vanish in the CLI are usually being looked for in another Region. Check the configured Region before suspecting a fault.
• Customer data stays in the Region chosen for it unless the customer copies or replicates it, so picking the Region is how data residency is met.
• When one central place must manage a task across many services and accounts, look for the AWS service built for that task rather than per-service settings.

📊 This set at a glance

Exam: CLF-C02 · 65 questions · 90 minutes · passing score 700 · the largest of 4 domains
This set: 4 applied, 1 advanced · 1 comparison, 1 concept check, 1 scenario, 1 trade-off, 1 troubleshooting
Topics: AWS CLI, Amazon EC2, AWS Backup, Amazon MemoryDB, Amazon ElastiCache, Amazon S3, AWS global infrastructure, Amazon Redshift

Question 1 of 5

An administrator sees five EC2 instances in the Europe (Ireland) Region in the Management Console. Running aws ec2 describe-instances in the AWS CLI on a laptop with valid credentials for the same account returns an empty list. What is the most likely cause?

AThe CLI default Region on the laptop is different from Europe (Ireland), so the command lists instances in another Region.

BThe AWS CLI can list only instances that were launched with the CLI, so instances created in the console never appear in its output.

CThe instances are in the stopped state, and the CLI returns only running instances unless a special license is enabled.

DThe IAM user needs a separate CLI access policy, because console permissions do not include the right to call EC2 APIs.

Show answer

✅ Answer: A

Difficulty: applied · Topic: AWS CLI, Amazon EC2

Most AWS resources live in one Region
EC2 instances, VPCs, RDS databases and most other resources belong to one Region. The console shows the Region in the top bar; the CLI and SDKs use whichever Region they are configured for.

How the CLI picks a Region
• The --region option on the command, for example aws ec2 describe-instances --region eu-west-1.
• Otherwise the AWS_REGION or AWS_DEFAULT_REGION environment variable.
• Otherwise the region setting in the CLI profile, written by aws configure.
If the laptop's profile says us-east-1, the command correctly reports that there are no instances in us-east-1.

How to fix
Add --region eu-west-1, or run aws configure to change the default Region.

Why each option works or fails
• ✓ A. Different default Region (correct): EC2 is a Regional service, and the CLI queries only the Region it is configured for, so an empty list from a different Region is the expected result.
• ✗ B. Only CLI-launched instances: the CLI calls the same EC2 API as the console and lists every instance in the Region, however it was created.
• ✗ C. Stopped instances hidden: describe-instances returns instances in every state, including stopped ones, and no license is involved.
• ✗ D. Separate CLI policy: IAM permissions apply to API actions, not to tools. If the user can view instances in the console, the same permissions let the CLI call the same action.

Question 2 of 5

A company runs workloads that use Amazon EBS, Amazon RDS, Amazon DynamoDB and Amazon EFS across 20 accounts in AWS Organizations. Auditors want one place to define backup schedules and retention and to report on backup compliance. Which service fits best?

AAWS Config, which records the configuration of resources over time and evaluates them against compliance rules.

BAmazon Data Lifecycle Manager, which automates the creation, retention and deletion of EBS snapshots and EBS-backed AMIs.

CAmazon S3 Cross-Region Replication, which copies new objects from a source bucket into a bucket in a second AWS Region.

DAWS Backup, which applies central backup plans to many AWS services and accounts and reports on backup activity.

Show answer

✅ Answer: D

Difficulty: applied · Topic: AWS Backup

Centralized backup with AWS Backup
Before AWS Backup, each service had its own backup method: EBS snapshots, RDS automated backups, DynamoDB backups, EFS backups. Managing them separately in many accounts is hard to audit.
AWS Backup is a fully managed service that:
• uses backup plans (schedule, retention, copy to another Region or account) applied to resources by tag or by ID;
• supports many services, including EC2, EBS, RDS and Aurora, DynamoDB, EFS, FSx, S3 and Storage Gateway volumes;
• works with AWS Organizations to apply backup policies across accounts;
• reports on backup jobs and checks backup compliance with its built-in AWS Backup Audit Manager feature (part of AWS Backup, not the separate AWS Audit Manager service), and can protect backups from deletion with AWS Backup Vault Lock.

Example
One plan "daily-35d" tagged onto every production resource in 20 accounts: daily backups, kept 35 days, with a copy in a second Region.

Why each option works or fails
• ✗ A. AWS Config: it tracks resource configuration and rule compliance, but it does not create or retain backups.
• ✗ B. Data Lifecycle Manager: it automates snapshots for EBS volumes and AMIs only, so it cannot cover RDS, DynamoDB or EFS in one place.
• ✗ C. Cross-Region Replication: it copies S3 objects to another bucket. It does not schedule backups of databases or file systems.
• ✓ D. AWS Backup (correct): it defines backup schedules and retention once and applies them across EBS, RDS, DynamoDB, EFS and other services in all accounts, with reports for auditors.

Question 3 of 5

A fintech startup needs a Redis-compatible database to be its primary data store for account balances. It needs microsecond read latency, but it cannot accept losing recent writes if a node fails. Which AWS service is the best fit?

AAmazon MemoryDB, a durable in-memory database that stores every write in a Multi-AZ transaction log before acknowledging it.

BAmazon DynamoDB Accelerator, an in-memory cache that sits in front of DynamoDB tables to speed up repeated item reads.

CAmazon RDS for MySQL with read replicas, which serves read traffic from asynchronous copies kept in other Availability Zones.

DAmazon ElastiCache, a managed in-memory cache that is usually placed in front of another database that holds the source data.

Show answer

✅ Answer: A

Difficulty: advanced · Topic: Amazon MemoryDB, Amazon ElastiCache

In-memory speed, two different jobs
• Amazon ElastiCache is a cache. It speeds up reads in front of a primary database. It can replicate, but it is designed so that the system of record lives elsewhere.
• Amazon MemoryDB is a durable, in-memory primary database compatible with Valkey and Redis OSS. Each write is stored in a distributed transaction log across multiple Availability Zones before it is acknowledged, so data survives node failures. Reads come from memory in microseconds; writes take single-digit milliseconds because of the durable log.

How to choose
• Need a faster layer in front of an existing database: ElastiCache.
• Need Redis-style data structures and microsecond reads as the main, durable store of data: MemoryDB.

Why each option works or fails
• ✓ A. Amazon MemoryDB (correct): it gives Redis-compatible microsecond reads and is built as a primary database, writing each change to a Multi-AZ transaction log so acknowledged writes are not lost when a node fails.
• ✗ B. DynamoDB Accelerator: DAX only caches DynamoDB reads. It is not Redis-compatible and is not a database on its own.
• ✗ C. RDS for MySQL: it is durable, but it is a disk-based relational engine with millisecond reads, and it is not Redis-compatible.
• ✗ D. ElastiCache: it is designed as a cache for data that is also kept in another database, so using it as the only store of balances risks losing recent writes.

Question 4 of 5

A legal firm stores client contracts in an Amazon S3 bucket in the Europe (Paris) Region. A partner asks whether AWS might move or copy those files to another Region for its own operational reasons. Which statement is correct?

AS3 data is stored at edge locations worldwide by default, so copies of the contracts exist wherever CloudFront has an edge location.

BAWS automatically copies all S3 data to at least one other Region on the same continent to protect it against Region-wide outages.

CData stays in the Region where the customer stores it, and it moves to another Region only if the customer copies or replicates it.

DAWS moves data between Regions when one Region is busy, so the customer cannot guarantee where the contracts are stored at a given time.

Show answer

✅ Answer: C

Difficulty: applied · Topic: Amazon S3, AWS global infrastructure

Regions and data residency
AWS Regions are designed to be isolated from each other. Content you store in a Region stays in that Region unless you take an action to move it, for example:
• turning on S3 Cross-Region Replication,
• copying snapshots or backups to another Region,
• serving the objects through a service such as CloudFront, which caches copies at edge locations because you set it up.

Durability inside one Region
S3 Standard already stores objects redundantly across multiple Availability Zones within the Region, so durability does not depend on copying data to other Regions.

Why this helps with compliance
A firm with a rule that client data must remain in France can choose the Paris Region and know that AWS will not move it elsewhere by itself. The firm controls any cross-Region copies.

Why each option works or fails
• ✗ A. Stored at edge locations by default: edge locations hold cached copies only for content a customer chooses to serve through CloudFront. S3 data does not go there by default.
• ✗ B. Automatic copy to another Region: S3 gets its durability from multiple AZs inside the Region. Cross-Region copies happen only when the customer configures replication.
• ✓ C. Data stays in the chosen Region (correct): AWS does not move customer content out of a Region on its own, so only the firm's own replication or copy actions can place the contracts elsewhere.
• ✗ D. Moving data when busy: AWS does not shift customer data between Regions for load or operations, which is exactly why Region choice works for data residency.

Question 5 of 5

A retail chain wants a central store for ten years of sales, inventory and customer data from many systems. Hundreds of analysts and BI dashboards will run complex SQL queries with joins and aggregations against it throughout every business day. Which AWS service is designed for this workload?

AAmazon DynamoDB, which stores key-value items and returns single-item lookups in milliseconds at any scale.

BAmazon RDS for MySQL, which runs a managed relational database tuned for many small transactional reads and writes.

CAmazon Redshift, which is a managed data warehouse that uses columnar storage to run analytical SQL at scale.

DAmazon OpenSearch Service, which indexes documents for full-text search and log analytics with dashboards.

Show answer

✅ Answer: C

Difficulty: applied · Topic: Amazon Redshift

OLTP versus OLAP
• OLTP (online transaction processing): many small reads and writes, such as placing an order or updating a stock count. Relational databases like Amazon RDS and Aurora, or DynamoDB, serve this.
• OLAP (online analytical processing): fewer but very large queries that scan millions or billions of rows, such as "sales by region by month for ten years". This is the job of a data warehouse.

Amazon Redshift
• Stores data in columns, so a query that needs three columns reads only those three.
• Spreads each query across many nodes in parallel.
• Available as provisioned clusters or Redshift Serverless, which scales capacity automatically.
• Can also query data in S3 (Redshift Spectrum) and connect to BI tools such as Amazon Quick Sight.

When Athena is enough
For occasional queries on files in S3, Athena is simpler. For a central warehouse queried heavily all day by many users, Redshift is the usual choice.

Why each option works or fails
• ✗ A. Amazon DynamoDB: it excels at fast lookups by key, but it is not designed for ad hoc SQL joins and aggregations across large data sets.
• ✗ B. RDS for MySQL: it is optimized for transactional workloads. Large analytical scans and joins over ten years of data from many systems would be slow and would compete with transactions.
• ✓ C. Amazon Redshift (correct): it is AWS's data warehouse, built with columnar storage and parallel processing for frequent, complex analytical SQL across years of data from many sources.
• ✗ D. OpenSearch Service: it is strong at text search and log exploration, not at being the central relational warehouse for complex SQL joins over business data.

🎯 Key ideas from this set

• Regional resources "missing" in the CLI or SDK usually mean the tool is pointed at a different Region; check --region and the profile.
• One central place for backup policies across many AWS services and accounts = AWS Backup.
• In-memory cache in front of a database = ElastiCache; durable, Redis-compatible in-memory primary database = MemoryDB.
• Customer data stays in the Region where it is stored unless the customer moves or replicates it, which is why Region choice supports data residency.
• Central data warehouse for heavy analytical SQL and BI = Amazon Redshift.

🔗 Keep practicing on this blog

• AWS Cloud Practitioner (CLF-C02): 5 Practice Questions on Cloud Concepts
• Security and Compliance: 5 CLF-C02 Questions with Full Explanations
• All CLF-C02 practice sets
• Every exam on this blog

📚 More CLF-C02 practice

More CLF-C02 questions: https://hyunhp.github.io/cert-bank/#exam=CLF-C02
Study guide: https://hyunhp.github.io/cert-bank/study.html#exam=CLF-C02

These are original practice questions, not real exam questions, and cert-bank is not affiliated with any certification vendor.

Original practice questions written for this blog, not exam dumps.