Cloud Concepts Fundamentals — CLF-C02 practice questions

Practice questions for this topic, with explained answers.

Domain: Cloud Concepts ·100 questions · 30 easy · 40 intermediate · 30 hard · page 4 of 7

Question 46 clf-cloud-concepts-fundamentals-046

Hard · Choose one

A workload must satisfy a strict recovery time objective, and the team is deciding whether to invest in automated failover or in reducing the monthly bill. Which statement best reflects how the Well-Architected Framework treats this situation?

  1. a The pillars sometimes present trade-offs, and the team should make a deliberate decision based on business requirements rather than assume one pillar always wins
  2. b Cost optimization always takes precedence, because the framework's purpose is to reduce spending
  3. c Reliability always takes precedence, because a workload that is down delivers no value
  4. d The framework requires every workload to score equally against all six pillars before it can go to production
Show answer & explanation

Answer: A

Why A is correct

The framework is a set of perspectives, not a ranking. Strengthening one pillar frequently costs something against another, and the framework exists to make those trade-offs explicit and deliberate rather than accidental. The right balance is driven by the workload's own business requirements, such as the stated recovery time objective and what an outage actually costs.

Why the others are wrong

  • B — Cost optimization means delivering business value at the lowest price point, not minimizing spend regardless of the consequences.
  • C — Reliability is critical for many workloads, but not all. A short-lived internal batch job does not warrant the same investment as a payment system.
  • D — There is no pass mark and no requirement for equal scores. A review identifies risks and produces an improvement plan the business can prioritize.

Last verified: 2026-08-26

Question 47 clf-cloud-concepts-fundamentals-047

Hard · Select 2 answers

A retailer's architecture stores every raw image upload indefinitely in the highest-performance storage tier, keeps three permanently running copies of a batch environment that is used for two hours per night, and applies no lifecycle rules. Which TWO Well-Architected pillars are most directly violated? (Choose TWO.)

  1. a Cost optimization
  2. b Operational excellence
  3. c Security
  4. d Sustainability
  5. e Reliability
Show answer & explanation

Answer: A and D

Why A and D are correct

Paying premium storage rates for data that is never accessed, and running batch capacity 24 hours a day for a two-hour job, directly contradicts cost optimization's consumption model and its call to measure overall efficiency. The same waste has an environmental dimension: sustainability's maximize utilization principle targets idle resources and unnecessary storage precisely because they consume energy for no productive output.

Why the others are wrong

  • B — Operational excellence concerns how the workload is run and improved. Poor storage tiering and idle capacity are cost and efficiency failures rather than procedural ones, although better operational practice would surface them.
  • C — Nothing in the description weakens identity, encryption, traceability, or network protection. The architecture is wasteful rather than insecure.
  • E — Over-provisioning does not reduce reliability. If anything the extra capacity is harmless to availability; the problem is that it is unnecessary.

Last verified: 2026-08-26

Question 48 clf-cloud-concepts-fundamentals-048

Hard · Choose one

Which statement most accurately distinguishes the reliability pillar from the operational excellence pillar?

  1. a Reliability is about redundancy and operational excellence is about encryption
  2. b Reliability applies only to production, while operational excellence applies only to development environments
  3. c Reliability is achieved by AWS and operational excellence is achieved by the customer
  4. d Reliability concerns the workload performing correctly and recovering from disruption, while operational excellence concerns how effectively the organization runs, observes, and improves that workload
Show answer & explanation

Answer: D

Why D is correct

Reliability is a property of the system: does it do the right thing consistently, and does it recover when something breaks. Operational excellence is a property of the organization around the system: can it deploy safely, observe what is happening, respond to events, and improve its own procedures. The two are closely linked, because good operations are how reliability is sustained over time, but they answer different questions.

Why the others are wrong

  • A — Encryption is a security pillar concern. Operational excellence covers operations as code, change practices, and learning from events.
  • B — Both pillars apply across environments. Non-production reliability matters for delivery flow, and operational practice governs production most of all.
  • C — Both pillars describe customer responsibilities within the shared responsibility model. AWS supplies reliable infrastructure, but the customer architects and operates the workload.

Last verified: 2026-08-26

Question 49 clf-cloud-concepts-fundamentals-049

Hard · Choose one

A team claims that migrating a workload to AWS Fargate improves both cost optimization and sustainability. Which reasoning best supports that claim?

  1. a Serverless services are exempt from data transfer charges, which reduces cost and energy use
  2. b AWS applies a sustainability discount to serverless compute
  3. c Removing the servers means AWS no longer needs physical hardware to run the workload
  4. d Capacity is provisioned per task rather than as always-on instances, so idle capacity is eliminated and shared managed infrastructure runs at higher utilization
Show answer & explanation

Answer: D

Why D is correct

The same mechanism serves both pillars. Cost optimization's consumption model means paying only for the resources a task actually uses rather than for instances that idle between jobs. Sustainability's use managed services and maximize utilization principles note that sharing services across a broad customer base drives higher utilization of the underlying hardware, so less physical infrastructure is needed for the same work.

Why the others are wrong

  • A — Data transfer charges apply to serverless services in the same way as to other compute. No exemption exists.
  • B — There is no sustainability discount. The savings come from consuming fewer resource-hours, which shows up in the normal usage-based bill.
  • C — Serverless still runs on physical servers; the customer simply does not manage them. The gain is higher utilization of that shared hardware, not its disappearance.

Last verified: 2026-08-26

Question 50 clf-cloud-concepts-fundamentals-050

Hard · Select 2 answers

Which TWO statements correctly describe the AWS Well-Architected Framework? (Choose TWO.)

  1. a It is a certification that AWS grants to workloads that pass an audit
  2. b It provides a consistent set of questions and best practices for evaluating architectures against six pillars
  3. c It replaces the shared responsibility model for workloads that complete a review
  4. d It is intended to be applied throughout a workload's life, not only at initial design
  5. e It guarantees that a compliant workload will never experience an outage
Show answer & explanation

Answer: B and D

Why B and D are correct

The framework gives architects a consistent way to evaluate designs and identify improvements, structured as questions and best practices across the six pillars. AWS positions it as an ongoing practice: workloads and requirements change, new services appear, and reviews are meant to be repeated so the improvement plan stays current.

Why the others are wrong

  • A — There is no AWS certification for a workload. The Well-Architected Tool produces a self-assessment and an improvement plan rather than a pass or fail verdict.
  • C — The shared responsibility model always applies. A review helps a customer meet their side of it rather than transferring any part of it to AWS.
  • E — No architecture is immune to outages. The framework reduces risk and improves recovery; it does not promise perfection.

Last verified: 2026-08-26

Question 51 clf-cloud-concepts-fundamentals-051

Hard · Choose one

During a Well-Architected review, an architect proposes automating the security controls that were previously applied by hand at each release. Which statement best explains why this improves security rather than merely saving time?

  1. a Automation encrypts data at rest without any configuration
  2. b Automated controls are defined and managed as code in version-controlled templates, so they are applied consistently and can scale without adding reviewers
  3. c Automation transfers responsibility for security controls from the customer to AWS
  4. d Automated controls remove the need for identity and access management
Show answer & explanation

Answer: B

Why B is correct

The security pillar's "automate security best practices" principle makes exactly this argument: software-based security mechanisms let you scale more rapidly and cost-effectively, and defining controls as code in version-controlled templates means every environment gets the same control, changes are reviewable, and nothing depends on a person remembering a step.

Why the others are wrong

  • A — Encryption at rest is a configuration choice on the relevant service. Automation can enforce that choice, but it is not an automatic side effect.
  • C — Automating a control does not move it across the shared responsibility boundary. The customer still owns the control and the outcome.
  • D — Identity and access management is the strong identity foundation the pillar begins with. Automation applies and enforces it rather than replacing it.

Last verified: 2026-08-26

Question 52 clf-cloud-concepts-fundamentals-052

Hard · Choose one

A company runs a workload that meets its performance targets today. Which Well-Architected general design principle most directly justifies continuing to collect and review metrics after the workload is in production?

  1. a Stop guessing your capacity needs
  2. b Drive architectures using data
  3. c Consider evolutionary architectures
  4. d Automate with architectural experimentation in mind
Show answer & explanation

Answer: B

Why B is correct

Drive architectures using data means collecting information on how architectural choices affect workload behavior and making fact-based decisions from it. Meeting today's targets says nothing about tomorrow's, and only continuous measurement reveals whether a change improved or degraded the workload as demand and the design evolve.

Why the others are wrong

  • A — Stop guessing your capacity needs concerns scaling to actual demand rather than forecasting. It is one application of data-driven decisions rather than the general principle.
  • C — Considering evolutionary architectures is about allowing the design to change over time so the business can adopt innovations as standard practice. Data informs those changes but the principle describes the willingness to change.
  • D — Automating with experimentation in mind is about creating and replicating workloads cheaply and being able to audit and revert automation changes.

Last verified: 2026-08-26

Question 53 clf-cloud-concepts-fundamentals-053

Hard · Choose one

An architect must explain why the sustainability pillar is not simply a restatement of the cost optimization pillar. Which statement provides the strongest justification?

  1. a Sustainability applies only to AWS infrastructure, whereas cost optimization applies only to customer workloads
  2. b The two pillars often agree, but they optimize against different measures, and a change can lower environmental impact while raising cost or vice versa
  3. c Sustainability is measured by AWS on the customer's behalf, so the customer takes no action
  4. d Cost optimization applies to compute while sustainability applies to storage
Show answer & explanation

Answer: B

Why B is correct

Eliminating idle resources helps both, which is why the two pillars are often aligned. But the measures differ: sustainability optimizes resources and energy per unit of work, while cost optimization optimizes currency per unit of business value. Moving to a Region with a lower carbon intensity, or adopting newer more efficient hardware, can improve impact while costing more.

Why the others are wrong

  • A — Sustainability is a shared responsibility. AWS handles sustainability of the cloud, and the customer handles sustainability in the cloud through workload efficiency.
  • C — Customers are expected to act. The pillar's principles ask them to measure impact, set goals, maximize utilization, and reduce downstream impact.
  • D — Both pillars apply to every resource type. Neither is limited to a category of service.

Last verified: 2026-08-26

Question 54 clf-cloud-concepts-fundamentals-054

Easy · Choose one

Which migration strategy involves moving an application from an on-premises environment to AWS without making changes to the application, and is commonly called "lift and shift"?

  1. a Rehost
  2. b Repurchase
  3. c Refactor
  4. d Retire
Show answer & explanation

Answer: A

Why A is correct

Rehost means moving the application from the source environment to the AWS Cloud without changing it. Because the application is untouched, rehosting is usually the fastest and lowest-risk strategy, which is why large migrations often rehost first and modernize afterwards once the workload is running on AWS.

Why the others are wrong

  • B — Repurchase, sometimes called "drop and shop," means replacing the application with a different product, typically moving from a traditional license to a software as a service offering.
  • C — Refactor, also called re-architect, means changing the application's architecture to take advantage of cloud-native features. It is the most complex and expensive strategy, not a lift and shift.
  • D — Retire means decommissioning or archiving an application that is no longer needed, so nothing is moved at all.

Last verified: 2026-08-26

Question 55 clf-cloud-concepts-fundamentals-055

Easy · Choose one

During portfolio discovery, a company finds that 14 percent of its servers support applications that no business unit uses any more. Which migration strategy applies to those applications?

  1. a Relocate
  2. b Retire
  3. c Retain
  4. d Replatform
Show answer & explanation

Answer: B

Why B is correct

Retire means decommissioning or archiving applications that are no longer needed, which includes shutting down the servers in that application stack. Discovery routinely finds a meaningful share of the estate in this state, and retiring it removes migration effort and ongoing cost at the same time.

Why the others are wrong

  • A — Relocate means transferring servers or applications to a cloud version of the existing platform, or moving instances to a different VPC, Region, or account. It still keeps the workload running.
  • C — Retain means deliberately keeping an application in the source environment or postponing its migration, which implies the application is still needed.
  • D — Replatform means moving the application to the cloud while making some optimizations, so the application continues to be used.

Last verified: 2026-08-26

Question 56 clf-cloud-concepts-fundamentals-056

Easy · Choose one

How many perspectives does the AWS Cloud Adoption Framework (AWS CAF) define, and what are they?

  1. a Five: strategy, cost, risk, delivery, and compliance
  2. b Four: technology, process, organization, and product
  3. c Six: business, people, governance, platform, security, and operations
  4. d Six: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability
Show answer & explanation

Answer: C

Why C is correct

AWS CAF groups its foundational capabilities into six perspectives: business, people, governance, platform, security, and operations. The first three are largely business perspectives concerned with strategy, culture, and control, while the last three are largely technical perspectives concerned with building, protecting, and running the environment.

Why the others are wrong

  • A — This list is invented. None of these are AWS CAF perspectives.
  • B — Technology, process, organization, and product are the four AWS CAF transformation domains, not the perspectives. They describe what is being transformed rather than which stakeholder capability supports it.
  • D — These are the six pillars of the AWS Well-Architected Framework, which evaluates workload architecture rather than organizational readiness for cloud adoption.

Last verified: 2026-08-26

Question 57 clf-cloud-concepts-fundamentals-057

Easy · Choose one

Which AWS service is designed to migrate data between databases and can keep the source database fully operational during the migration by continuously replicating changes?

  1. a Migration Evaluator
  2. b AWS Migration Hub
  3. c AWS Application Discovery Service
  4. d AWS Database Migration Service (AWS DMS)
Show answer & explanation

Answer: D

Why D is correct

AWS DMS migrates data into, out of, and between databases. It supports both a one-time full load and ongoing change data capture replication, so the source keeps serving users while the target is brought up to date. That is what allows cutover downtime to be reduced to a minimum.

Why the others are wrong

  • A — Migration Evaluator builds a data-driven business case for migration, including projected AWS costs. It is a planning and financial tool, not a data replication engine.
  • B — AWS Migration Hub gives a single place to track the progress of migrations across AWS and partner tools. It reports on migrations rather than performing them.
  • C — AWS Application Discovery Service collects configuration, usage, and dependency data from on-premises servers to support migration planning. It does not move data.

Last verified: 2026-08-26

Question 58 clf-cloud-concepts-fundamentals-058

Easy · Choose one

Which AWS service provides a single location from which to track the progress of application migrations across multiple AWS and partner migration tools?

  1. a AWS Migration Hub
  2. b AWS Control Tower
  3. c AWS Config
  4. d AWS Systems Manager
Show answer & explanation

Answer: A

Why A is correct

AWS Migration Hub gives a single place to discover the existing estate, group servers into applications, and track migration status across tools such as AWS Application Migration Service and AWS DMS, as well as supported partner tools. It answers the portfolio-level question of how far the overall migration has progressed.

Why the others are wrong

  • B — AWS Control Tower sets up and governs a secure multi-account environment. It is about landing zone governance rather than migration tracking.
  • C — AWS Config records resource configurations and evaluates compliance. It reports on what exists in AWS, not on migration progress.
  • D — AWS Systems Manager operates and manages nodes, handling patching, automation, and remote command execution. It does not track migration waves.

Last verified: 2026-08-26

Question 59 clf-cloud-concepts-fundamentals-059

Easy · Choose one

Which statement describes the "repurchase" migration strategy?

  1. a Rewriting the application to use cloud-native services
  2. b Moving the application to AWS unchanged and optimizing it later
  3. c Replacing the application with a different product, typically moving from a traditional license to a software as a service offering
  4. d Keeping the application in the source environment for the time being
Show answer & explanation

Answer: C

Why C is correct

Repurchase, sometimes called "drop and shop," means abandoning the current product in favor of a different one, most often a commercial software as a service subscription. A company replacing a self-hosted customer relationship management system with a SaaS equivalent is repurchasing.

Why the others are wrong

  • A — Rewriting the application to exploit cloud-native features is refactoring or re-architecting.
  • B — Moving the application unchanged is rehosting. Optimizing during the move is replatforming.
  • D — Deliberately leaving the application where it is describes retain.

Last verified: 2026-08-26

Question 60 clf-cloud-concepts-fundamentals-060

Intermediate · Choose one

A company moves its self-managed MySQL database onto a managed AWS database service during migration, keeping the application code unchanged but no longer administering the database servers. Which migration strategy is this?

  1. a Rehost
  2. b Replatform
  3. c Refactor
  4. d Repurchase
Show answer & explanation

Answer: B

Why B is correct

Replatform, also described as "lift, tinker, and shift," means moving the workload to the cloud while introducing some optimization to operate more efficiently, reduce cost, or take advantage of cloud capabilities. Swapping a self-managed database for a managed one is the classic example: the application is untouched, but the operating model changes.

Why the others are wrong

  • A — Rehost would mean running the same MySQL server software on a virtual machine in AWS with no change to how it is operated.
  • C — Refactor means changing the application's architecture, for example decomposing it into microservices or moving to a different data model. The application here is unchanged.
  • D — Repurchase means replacing the product with a different one, which is not what happens when the same database engine continues to run as a managed service.

Last verified: 2026-08-26