Free CLF-C02 diagnostic quiz: find your weak spots

Ten questions across all four domains — a sample of the full 50-question diagnostic in the course. See where the gaps are, CLF-C02, 2026 edition.

Take these 10 free diagnostic questions in the exam's own style — every answer explained, no sign-up — and find the domain to study first.

Straight to the 10 free questions ↓

The fastest way to waste a study week is to revise what you already know. A short diagnostic across all four domains fixes that: it shows you where the gaps actually are, so your time goes where it counts. These ten questions are a free sample of that diagnostic, drawn from every part of the exam.

How to read your result

Do not just count how many you got right — notice where you got them wrong. The CLF-C02 has no per-domain pass mark, so a total above 700 is all you need; but the cheapest way to reach it is to lift your weakest domain, not to perfect a strong one. If your misses cluster in Security & Compliance or Cloud Technology & Services — the two biggest domains, nearly two thirds of the exam — that is where to start.

The four domains, and where they bite

Cloud Concepts (24%) — definitions and benefits like agility and elasticity. Punishing when your definitions are approximate.
Security & Compliance (30%) — built on the shared responsibility model and a handful of security services that are easy to confuse.
Cloud Technology & Services (34%) — the longest list of service names to keep apart: compute, storage, networking, databases, and the glue services this quiz samples.
Billing, Pricing & Support (12%) — small and factual, the cheapest marks on the exam.

The signal that matters more than the score

It is possible to score well by recognising questions you have seen before and learn nothing you can carry into the real exam — which will show you questions built the same way, about things you have not seen. The skill that transfers is being able to rule the wrong options out for a reason. That is why every explanation here spends more words on the three wrong answers than on the right one.

How to use the questions below

Answer each one before you reveal the explanation, and when you miss, read past the correct letter to why the other three fail. Then look at your pattern of misses and pick the domain to study first. The full diagnostic and the timed full-length exams — with the analytics that name your weakest domain for you — are in the course; these ten are the free way to find out whether you need them yet.

A CLF-C02 diagnostic across the four exam domains — Cloud Concepts, Security and Compliance, Cloud Technology and Services, and Billing, Pricing and Support — used to find the weakest domain and drill it first. Ten free sample questions preview the full diagnostic.

10 free CLF-C02 practice questions

Answers and explanations — no email wall

CLF-C02 Question 1 of 10

Which AWS service lets you define and provision your infrastructure from templates, as code?

Answer: A — AWS CloudFormation

AWS CloudFormation is infrastructure as code: you describe resources in a template and it provisions them consistently. Why not the others: EC2 is a compute service you provision, not the tool that defines infrastructure from a template. Config records how resources are configured over time. S3 is object storage. 'Infrastructure from templates, as code' is the CloudFormation signal.

CLF-C02 Question 2 of 10

A web application must automatically add EC2 instances when traffic rises and remove them when it falls. Which service does this?

Answer: A — Amazon EC2 Auto Scaling

EC2 Auto Scaling adjusts the number of instances up and down to match demand. Why not the others: Elastic Load Balancing distributes traffic across instances but does not change how many there are. CloudFront is a content delivery network. Lambda runs code without servers. Adding and removing instances with demand is Auto Scaling — often paired with a load balancer.

CLF-C02 Question 3 of 10

Which service distributes incoming application traffic across multiple targets, such as several EC2 instances?

Answer: A — Elastic Load Balancing

Elastic Load Balancing spreads incoming requests across multiple targets so no single instance is overwhelmed. Why not the others: Auto Scaling changes the number of instances, it does not balance traffic across them. Route 53 is DNS. VPC is the network they run in. Distributing traffic across targets is the load balancer's job.

CLF-C02 Question 4 of 10

Which AWS service is a managed Domain Name System (DNS) web service?

Answer: A — Amazon Route 53

Amazon Route 53 is AWS's managed DNS service, resolving domain names to resources. Why not the others: CloudFront is a content delivery network. Direct Connect is a private network link to AWS. API Gateway manages APIs. DNS resolution is Route 53.

CLF-C02 Question 5 of 10

Which service gives a central view of security alerts and compliance status aggregated from other services across your accounts?

Answer: A — AWS Security Hub

AWS Security Hub aggregates findings from services like GuardDuty and Inspector into one view of your security and compliance posture. Why not the others: GuardDuty detects threats but does not centralise other services' findings. Config records resource configuration. Trusted Advisor gives best-practice checks. Centralising security findings is Security Hub.

CLF-C02 Question 6 of 10

Which of the following best describes the cloud benefit of 'agility'?

Answer: A — You can provision resources in minutes and experiment quickly, instead of waiting weeks to buy hardware

Agility is the ability to get resources quickly and try things without long procurement — spin something up in minutes, and shut it down just as fast. Why not the others: fixed fees, owning hardware, and long-range capacity forecasting describe the on-premises model agility replaces. Speed to provision and experiment is the point.

CLF-C02 Question 7 of 10

Beyond a single consolidated bill, what does AWS Organizations let you do across multiple accounts?

Answer: A — Apply Service Control Policies to centrally govern what those accounts can do

AWS Organizations groups accounts and lets you apply Service Control Policies (SCPs) to set guardrails on what each account may do, alongside consolidated billing. Why not the others: automatic encryption, DNS, and serverless are unrelated services. Central governance across accounts, via SCPs, is what Organizations adds.

CLF-C02 Question 8 of 10

Which service is a fully managed publish/subscribe messaging service for sending notifications to many subscribers at once?

Answer: A — Amazon SNS

Amazon SNS (Simple Notification Service) is publish/subscribe messaging — one message fans out to many subscribers. Why not the others: SQS is a queue for decoupling components, a different pattern. Route 53 is DNS. CloudWatch is monitoring. 'Publish/subscribe, notify many' is SNS.

CLF-C02 Question 9 of 10

Which service is a fully managed message queue used to decouple the components of an application?

Answer: A — Amazon SQS

Amazon SQS (Simple Queue Service) is a managed message queue: one component puts messages in, another takes them out, so the two do not depend on each other directly. Why not the others: SNS is publish/subscribe, not a queue you pull from. Lambda runs code. EC2 is a server. Decoupling components with a queue is SQS.

CLF-C02 Question 10 of 10

A company wants a dedicated, private network connection from its own data center to AWS, not over the public internet. Which service provides this?

Answer: A — AWS Direct Connect

AWS Direct Connect provides a dedicated, private physical connection between your data center and AWS, bypassing the public internet. Why not the others: a VPN is private but runs over the public internet. CloudFront is content delivery. An internet gateway connects a VPC to the internet. A dedicated private link is Direct Connect.

That is exactly how every question in the course works — answer, explanation, why-not. The real set continues in the practice player: 10 free questions, no sign-up.

Continue with the 10 free questions →

Those 10 questions were the start.

The exam does not test whether you recognise a term — it tests whether you can rule out three plausible answers under time pressure. That is what the explanations above are for, and there are 390 more questions built exactly like them.

Collecting questions yourself

Scattered across forums, of unknown age
Answer keys without reasoning
No idea which domain you are weak in

Practising with a system

390 questions in 6 full tests, CLF-C02 (2026)
Every option explained — including the wrong ones
Readiness per exam domain, and drills for your weakest

Start free — 10 questions

Straight into the player. No account, no email.

Frequently asked questions

Is this the current CLF-C02 format?

Yes — these questions follow the CLF-C02 exam guide (2026 edition) and span all four domains, in the exam's own style. The passing score is 700 out of 1000, across 65 questions in 90 minutes.

Are these real exam questions?

No. They are our own questions, written in the style and difficulty of the exam. Reproducing real exam items violates the AWS certification agreement and can get your certification revoked, and a memorised item teaches you nothing about the one you have not seen.

Why only ten questions if the exam has sixty-five?

These ten are a free diagnostic sample across the domains — enough to show you where your gaps are. The full 50-question diagnostic and the timed full-length exams live in the course, along with the analytics that tell you which domain to fix first.

What should I do with my result?

Note which domain your misses cluster in, then study that one first — a per-domain weakness costs you far more than polishing a domain you already know. And for each answer, check that you can say why the other three options were wrong.

Updated for CLF-C02 (July 2026). The sample questions above are our own work in the style of the exam — not real exam items. The exam itself is set and marked by the certification body.