Welcome to Part 6 of our dedicated preparation series for the AWS Certified Cloud Practitioner (CLF-C02) certification. Provisioning scalable computing power, choosing optimal pricing models, and deploying event-driven serverless architectures are core competencies tested heavily under Domain 3 (Cloud Technology and Services). While reading theoretical documentation builds your baseline, solving realistic, scenario-based questions is the fastest way to truly master AWS Compute Services, virtual server configuration, container orchestration, and serverless compute before test day.
 |
| AWS Cloud Practitioner Free Practice Test - Compute Services (EC2, Lambda & Containers) |
In this aws cloud practitioner practice test free study guide (Part 6), we break down 20 high-yield questions (Questions 1 through 20) focused specifically on AWS Compute Services. You will validate your practical knowledge on Amazon EC2 (instance families, purchasing options: On-Demand, Spot, Reserved Instances, and Savings Plans), AWS Lambda serverless execution, container engines (Amazon ECS, Amazon EKS, and AWS Fargate), and turnkey hosting with AWS Elastic Beanstalk and Amazon Lightsail. Unlike static, low-quality exam dumps or unverified PDF question banks, every scenario here features a complete technical breakdown explaining why the correct answer is right and why the distractor options fail AWS architectural best practices.
AWS Cloud Practitioner (CLF-C02) Practice Questions
Q1: Amazon EC2 Operational Features & Performance (Yes/No)
A cloud developer is configuring Amazon EC2 virtual machines and reviewing core instance operational features, bootstrapping, and performance architectures.
Review the three statements below regarding Amazon EC2 Features and Performance Options. Determine whether each statement is Yes (True) or No (False):
1. By default, Amazon EC2 User Data scripts execute automatically every time an instance reboots or restarts.
2. Amazon EC2 burstable performance instances (such as the T-family) accumulate CPU credits during periods of low activity and consume those credits to burst above baseline CPU performance when needed.
3. The Amazon EC2 Instance Metadata Service (IMDS) allows applications running inside an instance to locally query its identity details, such as its private IP address, instance ID, and temporary IAM credentials.
• Statement 1 is NO (False): By default, EC2 User Data (used for bootstrapping tasks like installing updates, software, and packages) executes only once during the initial launch boot cycle. Standard OS reboots or instance stop/start cycles will not rerun user data scripts unless specialized per-boot directives are configured.
• Statement 2 is YES (True): Amazon EC2 burstable performance instances (such as t3, t3a, and t4g) accumulate CPU credits when running below their baseline CPU utilization. When demand spikes, the instance consumes these accrued credits to burst up to 100% of a core without throttling.
• Statement 3 is YES (True): The Instance Metadata Service (IMDS), accessible from inside the OS at
http://169.254.169.254/latest/meta-data/, allows applications to locally query internal attributes including private/public IPs, instance ID, AMI ID, security groups, and temporary IAM role credentials.
Q2: Turnkey Virtual Private Server (VPS) Deployment
A small business wants to quickly deploy a simple web application using a preconfigured application stack. The business needs a straightforward virtual private server (VPS) solution that bundles compute, storage, and networking together with a predictable monthly cost and minimal management complexity.
Which AWS service should the business choose to meet these requirements?
• Amazon Lightsail: Amazon Lightsail provides the easiest way to launch and manage a virtual private server (VPS) on AWS. It bundles compute capacity, SSD-based storage, static IPs, and data transfer into simple, predictable monthly pricing tiers. It also offers one-click preconfigured stacks (such as WordPress, LAMP, Node.js, and Django), ideal for workloads that don't need complex VPC setups.
Why are the other options incorrect?
• Amazon SageMaker: Amazon SageMaker is a fully managed machine learning service to build, train, tune, and deploy ML models, not a VPS web hosting solution.
• Amazon Elastic Kubernetes Service (Amazon EKS): Amazon EKS is a managed container orchestrator for running enterprise Kubernetes clusters, requiring significant architectural and management overhead.
• AWS Outposts: AWS Outposts extends physical AWS infrastructure and services directly into a customer's on-premises data center for hybrid architectures.
Q3: Cost-Optimized EC2 Purchasing Models
A media company runs large-scale batch processing and video rendering jobs. The workloads are stateless, highly fault-tolerant, and can handle unexpected interruptions without losing progress. The company wants to achieve the maximum possible discount on its compute costs.
Which Amazon EC2 purchasing option meets these requirements?
• Spot Instances: Amazon EC2 Spot Instances let you tap into unused EC2 compute capacity at discounts of up to 90% compared to On-Demand rates. AWS can reclaim Spot Instances at any time with a 2-minute interruption notice whenever it needs the capacity back. For stateless, fault-tolerant workloads that can easily withstand interruptions, Spot Instances provide the highest cost savings available.
Why are the other options incorrect?
• On-Demand Instances: On-Demand requires no upfront commitment and runs uninterrupted until terminated, but it is billed at the standard rate with no deep discounts.
• Dedicated Hosts: Dedicated Hosts are entire physical servers dedicated to a single customer, mainly utilized for strict regulatory compliance or Bring Your Own License (BYOL) needs. They carry the highest cost profile.
• Standard Reserved Instances: Reserved Instances offer up to a 72% discount in exchange for a steady-state 1- or 3-year commitment. While cost-effective for 24/7 steady workloads, they require long-term financial commitments and offer lower peak discounts than Spot Instances.
Q4: High Availability & Fault-Tolerant Compute (Select 2)
An architect is designing an enterprise web application hosted on Amazon EC2. The business requires the architecture to be highly available, fault-tolerant, and resilient against data center outages without suffering application downtime.
Which TWO architectural design practices should the architect implement to meet these requirements? (Select TWO)
• Multi-AZ Deployment: Spreading EC2 instances across multiple Availability Zones is the bedrock of cloud resilience. Because AZs are physically distinct, isolated data centers, an outage affecting one zone does not bring down workloads in another.
• Elastic Load Balancer (ELB): An ELB provides a single entry point for traffic, balancing requests across healthy EC2 targets in multiple AZs. If an instance or zone fails health checks, the ELB automatically reroutes traffic away from the failure.
Why are the other options incorrect?
• Consolidation into a single subnet: A subnet resides within a single Availability Zone. Stacking all instances into one subnet creates a Single Point of Failure (SPOF).
• Manual vertical scaling: Vertical scaling (upgrading instance size) usually requires stopping the VM, causing downtime. Best practices favor automated horizontal scaling across zones.
• Static Elastic IPs per backend instance: Assigning public IPs directly to backends exposes instances to internet threats and lacks automated failover or load balancing.
Q5: Event-Driven Serverless Compute
A developer wants to run backend application code and microservices in response to events without provisioning, scaling, patching, or managing any underlying servers.
Which AWS service should the developer choose to meet these requirements?
• AWS Lambda: AWS Lambda is an event-driven, serverless compute service that runs code without provisioning or managing infrastructure. AWS automatically manages operating system patching, high availability, and scaling (from few calls to hundreds of thousands per second). You are billed only for compute time consumed in milliseconds, incurring zero costs when idle.
Why are the other options incorrect?
• AWS CodeDeploy: AWS CodeDeploy is an automated deployment service that deploys code to EC2, Fargate, Lambda, or on-premises servers. It orchestrates releases rather than executing application business logic.
• Amazon CodeGuru: Amazon CodeGuru is an ML-powered developer tool that analyzes code quality, detects security flaws, and profiles application performance, but does not run backend services.
• AWS Glue: AWS Glue is a serverless data integration and ETL (Extract, Transform, Load) service designed to discover, clean, and catalog big data, not to host general-purpose transactional microservices.
Q6: Dynamic Compute Scalability & Elasticity
An e-commerce company experiences unpredictable traffic spikes during flash sales. The company needs a solution that automatically adds Amazon EC2 instances to maintain application responsiveness during peak demand, and automatically removes unnecessary instances when traffic drops to reduce infrastructure costs.
Which AWS service should the company use to meet these requirements?
• Amazon EC2 Auto Scaling: Amazon EC2 Auto Scaling monitors workloads and automatically adjusts compute capacity to ensure consistent performance at minimal cost. Using dynamic target tracking or scheduled policies, it scales out by launching new EC2 instances during peak demand and scales in by terminating unneeded instances when traffic drops.
Why are the other options incorrect?
• AWS Compute Optimizer: AWS Compute Optimizer uses machine learning to analyze historical CloudWatch metrics and recommend instance rightsizing. It advises on configurations rather than actively launching or terminating instances.
• AWS Cost Explorer: AWS Cost Explorer is an analytics tool to visualize, understand, and forecast cloud spending, with no capability to scale operational infrastructure dynamically.
• AWS Well-Architected Framework: The AWS Well-Architected Framework provides architectural guidelines across six pillars (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability), serving as an evaluation method rather than an active compute management service.
Q7: Ultra-Low Latency & Edge Compute Solutions (Select 2)
A mobile gaming and digital media company is developing real-time, interactive applications. The engineering team needs to run compute workloads closer to end users to deliver ultra-low, single-digit millisecond latency:
1. For mobile device users connected to 5G cellular carrier networks.
2. For end users located in major metropolitan areas that do not have a local AWS Region.
Which TWO AWS compute and infrastructure solutions should the company deploy to meet these edge compute requirements? (Select TWO)
• AWS Local Zones: AWS Local Zones place compute, storage, and database services close to large population centers and metropolitan areas where no native AWS Region exists, enabling single-digit millisecond latency for real-time applications.
• AWS Wavelength: AWS Wavelength embeds AWS compute and storage directly inside telecommunications providers' 5G edge networks. Traffic from 5G devices reaches application servers without traversing the open internet, providing ultra-low latency.
Why are the other options incorrect?
• AWS Transit Gateway: A centralized cloud routing hub used to interconnect thousands of VPCs and on-premises networks; it is a networking service, not an edge compute platform.
• AWS Snowball Edge Storage Optimized: A ruggedized physical hardware device used for petabyte-scale offline data migrations and disconnected edge computing (e.g., ships or mining sites), not for low-latency public mobile apps.
• AWS Elastic Beanstalk: A Platform-as-a-Service (PaaS) deployment tool that provisions applications in standard AWS Regions rather than specialized 5G/metropolitan edge infrastructure.
Q8: Amazon EC2 Instance Families for HPC Workloads
A research organization plans to run scientific modeling, high-performance computing (HPC) simulations, and compute-intensive batch processing workloads on Amazon EC2. These applications demand high-performance processors and maximum CPU compute power.
Which Amazon EC2 instance family should the organization select to optimize performance?
• Compute optimized: Compute optimized instances (C-family: C6i, C7g, C7i) feature high ratios of vCPUs relative to memory and are powered by the latest high-frequency processors. They are ideal for compute-bound workloads like high-performance computing (HPC), scientific simulations, batch algorithms, video encoding, and gaming servers.
Why are the other options incorrect?
• Storage optimized: Storage optimized instances (I, D, and H families) provide high sequential read/write access to local NVMe SSDs, built for high-throughput NoSQL databases and data warehousing.
• General purpose: General purpose instances (M and T families) offer a balance of compute, memory, and networking for diverse baseline workloads like web servers and test environments.
• Memory optimized: Memory optimized instances (R, X, and z families) provide high RAM per vCPU for processing large datasets in memory (e.g., Redis caches and in-memory analytics).
Q9: Amazon EC2 vs. On-Premises Advantages (Select 2)
Which of the following are primary advantages of running compute workloads on Amazon EC2 compared to hosting them on physical servers in an on-premises data center? (Select TWO)
• Native AWS Integration: Amazon EC2 integrates directly with native cloud services. Instances run inside isolated virtual networks (Amazon VPC), use temporary credentials via AWS IAM roles without hardcoded keys, and record audit activities automatically through AWS CloudTrail.
• Pay-as-you-go & OpEx: EC2 shifts procurement from massive upfront capital expenditures (CapEx) on physical data center hardware to variable operational expenditures (OpEx), paying only for compute capacity provisioned by the second or hour.
Why are the other options incorrect?
• Guest OS patching: Under the AWS Shared Responsibility Model for IaaS, customers are fully responsible for maintaining, securing, and patching the guest operating system.
• 100% uptime SLA: AWS does not guarantee 100% uptime for any service; high availability targets (like 99.99% Multi-AZ) exist, but 100% SLA is not offered.
• Automatic storage tiering: Amazon EBS volumes do not automatically tier data by default; automatic tiering is a feature of Amazon S3 object storage (S3 Intelligent-Tiering).
Q10: AWS Compute Architectural & Management Models (Matching)
Match each architectural management description below to its corresponding AWS Compute Service:
1. An Infrastructure-as-a-Service (IaaS) solution providing full operating system control, root administrator access, and direct virtual hardware choices:
2. A serverless compute engine for containers that runs Docker containers without requiring you to provision, configure, or scale host virtual servers:
3. An event-driven serverless service executing individual code functions in response to triggers, billing strictly for milliseconds consumed:
4. A Platform-as-a-Service (PaaS) orchestration tool that automatically provisions and configures underlying EC2 instances, load balancers, and Auto Scaling:
• Amazon EC2 (IaaS): Provides raw virtual machines where users retain full operating system administrative access, choosing hardware specs while managing OS updates and security.
• AWS Fargate (Serverless Containers): Serverless container engine that runs containers directly without managing the underlying EC2 instances or cluster capacity.
• AWS Lambda (Serverless FaaS): Function-as-a-Service that executes code in response to events, scaling automatically from zero with millisecond-based billing.
• AWS Elastic Beanstalk (PaaS): Platform-as-a-Service that simplifies deployment by automatically orchestrating servers, load balancers, and scaling groups behind the scenes while maintaining customizability.
Q11: Turnkey Cloud Web Hosting (Amazon Lightsail)
A small business owner wants to quickly launch a WordPress blog and corporate website on AWS. The owner has limited cloud architecture experience and needs an all-in-one virtual private server (VPS) solution that bundles compute, SSD storage, networking, and a static IP address for a predictable, low monthly fee.
Which AWS service provides the SIMPLEST way to meet these requirements?
• Amazon Lightsail: Amazon Lightsail is the easiest way to launch and manage a virtual private server (VPS) on AWS. It bundles compute instances, SSD-based storage, data transfer quotas, DNS management, and static IP addresses into predictable monthly pricing tiers. It also provides one-click preconfigured application templates (such as WordPress, LAMP, and Magento) for fast and simple deployment.
Why are the other options incorrect?
• AWS Elastic Beanstalk: A Platform-as-a-Service (PaaS) that provisions underlying enterprise infrastructure (EC2, VPC, Auto Scaling, ELB) billed individually rather than as a single bundled VPS rate.
• AWS Lambda: An event-driven serverless compute service designed for discrete functions and microservices, not standard monolithic CMS applications like WordPress out of the box.
• Amazon Elastic File System (Amazon EFS): A fully managed serverless Network File System (NFS) for shared file storage, not a compute service capable of hosting websites.
Q12: Managed Container Orchestration (Amazon ECS)
A company is migrating a microservices-based application packaged in Docker containers to the cloud. The company needs a fully managed container orchestration service to run, scale, and manage these containers seamlessly across a cluster of compute resources.
Which AWS service meets these requirements?
• Amazon Elastic Container Service (Amazon ECS): Amazon ECS is a fully managed, highly scalable container orchestration service built to execute, stop, and manage Docker containers across clusters. ECS integrates natively with IAM task roles, Amazon VPC networking, and Elastic Load Balancing, supporting both EC2 instance clusters and serverless compute via AWS Fargate.
Why are the other options incorrect?
• Amazon Aurora: A high-performance, cloud-native relational database compatible with MySQL and PostgreSQL, not a container orchestrator.
• Amazon Polly: An AI service that turns written text into lifelike speech (Text-to-Speech), unrelated to container deployment.
• Amazon Athena: An interactive serverless analytics service that queries data directly in Amazon S3 using standard SQL, without container management capabilities.
Q13: Serverless & Container Architecture Evaluation (Yes/No)
A startup is evaluating different compute options to adopt a modern, serverless-first architecture on AWS.
Review the three statements below regarding AWS Compute Services. Determine whether each statement is Yes (True) or No (False):
1. AWS Fargate allows you to run containerized applications on Amazon ECS or Amazon EKS without having to manage or patch the underlying virtual machine instances.
2. With AWS Lambda, customers must pre-allocate dedicated virtual servers and keep them running continuously to listen for incoming event triggers.
3. Under the AWS Shared Responsibility Model, AWS is responsible for applying operating system updates and security patches to the underlying environment running AWS Lambda functions.
• Statement 1 is YES (True): AWS Fargate is a serverless compute engine for Amazon ECS and Amazon EKS. When using Fargate, AWS automatically provisions, scales, and patches the underlying compute infrastructure without requiring customer-managed EC2 instances.
• Statement 2 is NO (False): AWS Lambda is fully serverless and event-driven. You do not pre-allocate or run virtual servers 24/7; AWS listens for invocation triggers and spins up micro-execution environments on demand, billing strictly for compute milliseconds during active execution.
• Statement 3 is YES (True): Under the AWS Shared Responsibility Model for Serverless Services, AWS manages the physical hardware, hypervisor, host OS, and runtime execution environment. The customer only manages the application code, configurations, and IAM permissions.
Q14: Amazon EC2 Launch Wizard Sequential Order (Sequence)
A system administrator is launching an Amazon EC2 instance using the AWS Management Console launch wizard.
Place the following configuration sections in the CORRECT sequential order as they appear from top to bottom in the AWS Management Console:
• Step A: Configure Network settings (VPC, Subnet, Security Group firewall rules)
• Step B: Select an Application and OS Image (Amazon Machine Image - AMI)
• Step C: Choose an Instance type (CPU, memory, and performance profile)
• Step D: Select or create a Key pair (login) for secure authentication
• Step 1 (B - AMI): Under Application and OS Images, you first pick the base Amazon Machine Image (AMI) (e.g., Amazon Linux 2023, Ubuntu, Windows Server) that provides the OS and initial software template.
• Step 2 (C - Instance Type): Under Instance type, you select the virtual hardware capacity and family (e.g., t3.micro, m6i.large, c7g.xlarge).
• Step 3 (D - Key Pair): Next, you select an existing cryptographic key pair or generate a new one (.pem / .ppk) for SSH or RDP credentials.
• Step 4 (A - Network Settings): Finally, you define the network topology: selecting the VPC, Subnet (AZ), public IP assignment, and Security Group firewall rules before proceeding to storage configuration and launching.
Q15: Virtual Desktops & Application Streaming (Select 2)
An enterprise with a remote workforce wants to provide its employees with secure, cloud-hosted virtual desktops. The company also needs the ability to stream specific corporate desktop applications directly to any web browser without maintaining physical desktop hardware.
Which TWO AWS services should the enterprise use to satisfy these requirements? (Select TWO)
• Amazon AppStream 2.0: A fully managed application streaming service that lets users access desktop applications through any HTML5 web browser without local installation. Sensitive data stays secure on AWS.
• Amazon WorkSpaces: A managed Desktop-as-a-Service (DaaS) solution that provisions persistent, secure virtual cloud desktops (Windows, Linux, Ubuntu) accessible from PCs, Macs, tablets, or web browsers with Active Directory integration.
Why are the other options incorrect?
• Amazon Connect: A cloud-based contact center service for customer service calling and IVR routing, not a virtual desktop platform.
• AWS Site-to-Site VPN: An encrypted network tunnel connecting on-premises offices to AWS VPCs, without desktop hosting features.
• Amazon ECS: A container orchestration service for backend Docker microservices, not an end-user desktop infrastructure (VDI).
Q16: Specialized Compute & Hardware Innovations (Matching)
Match each specialized AWS Compute Service or Hardware Feature to its corresponding Primary Architectural Use Case:
1. Amazon Elastic Kubernetes Service (Amazon EKS):
2. AWS Batch:
3. AWS Outposts:
4. AWS Graviton Processors:
• Amazon EKS: A managed Kubernetes service that runs upstream open-source Kubernetes without managing the control plane, fully compatible with tools like
kubectl and Helm.• AWS Batch: Automates batch computing workloads by dynamically provisioning and scaling compute resources (EC2 On-Demand, Spot, or Fargate) based on job queue volume.
• AWS Outposts: Delivers physical AWS server racks directly to on-premises data centers to run AWS compute and storage locally for low-latency and data residency requirements.
• AWS Graviton Processors: Custom 64-bit ARM-based silicon engineered by AWS to deliver up to 40% better price-performance and power efficiency for cloud compute compared to traditional x86 processors.
Q17: Amazon EC2 Pricing & Compute Models (Yes/No)
A cloud financial analyst is reviewing compute pricing options and deployment models for Amazon EC2 to optimize the company's monthly cloud expenditures.
For each of the following statements regarding Amazon EC2 Pricing and Compute Models, determine whether the statement is Yes (True) or No (False):
1. Compute Savings Plans provide lower prices across Amazon EC2, AWS Fargate, and AWS Lambda regardless of instance family, operating system, or AWS Region.
2. Amazon EC2 Spot Instances are recommended for mission-critical, stateful production databases that cannot tolerate sudden server interruptions.
3. Amazon EC2 On-Demand Instances require a minimum upfront payment and a mandatory 1-year financial contract upon launch.
• Statement 1 is Yes: Compute Savings Plans offer the highest degree of pricing flexibility among commitment models. In exchange for committing to a consistent dollar-per-hour compute spend (over a 1- or 3-year term), discounts (up to 66%) apply automatically across Amazon EC2, AWS Fargate, and AWS Lambda usage—regardless of instance family (e.g., switching from C6i to M7g), operating system (e.g., Windows to Linux), tenancy, or even moving workloads between different AWS Regions.
• Statement 2 is No: Amazon EC2 Spot Instances leverage spare AWS compute capacity at discounts of up to 90%. However, AWS can reclaim Spot Instances at any moment with only a 2-minute warning. Because of this, Spot Instances must never be used for mission-critical, stateful production databases (such as primary relational databases) where sudden server termination could lead to database corruption, failover downtime, or data inconsistency.
• Statement 3 is No: On-Demand Instances require no upfront fees, zero long-term commitments, and no contract terms. You pay only for the compute capacity you actively consume, billed by the second or hour. While On-Demand rates are higher than Savings Plans or Spot Instances, they provide total operational freedom to spin up or terminate instances whenever needed.
Q18: Physical Server Compliance & Dedicated Hosts
A company plans to migrate an on-premises enterprise application to Amazon EC2. The application requires third-party software licenses that are strictly bound to physical CPU sockets and physical cores (Bring Your Own License - BYOL). The company also requires visibility into the underlying physical server hardware to maintain license compliance.
Which Amazon EC2 deployment option should the company choose to meet these requirements?
• Dedicated Hosts: Amazon EC2 Dedicated Hosts provide a physical server with EC2 instance capacity entirely dedicated to a single customer’s use. Unlike standard instances, Dedicated Hosts give you direct visibility into physical socket counts, physical core counts, and host IDs. This enables organizations to bring their existing server-bound software licenses (such as Microsoft Windows Server, SQL Server, and Oracle) to the cloud under Bring Your Own License (BYOL) terms, maintain compliance audits, and control instance placement at the physical host level.
Why are the other options incorrect?
• Spot Instances: Spot Instances are a pricing mechanism to acquire unused EC2 capacity at steep discounts. Spot Instances run on shared multi-tenant infrastructure and can be interrupted whenever AWS needs capacity back. They do not provide physical server control or socket-level visibility required for BYOL compliance.
• On-Demand Instances with default tenancy: On-Demand Instances with default tenancy run on shared, multi-tenant hardware alongside workloads from other AWS customers. With default tenancy, the customer has no access to or control over the underlying physical host details, making socket- and core-based software licensing compliance impossible.
• Standard Reserved Instances: Standard Reserved Instances are a billing discount applied in exchange for a 1- or 3-year steady-state commitment. A Reserved Instance is purely a pricing construct, not a physical hardware deployment option, and does not grant physical server access or visibility into CPU sockets .
Q19: EC2 Auto Scaling Dynamic Scale-Out Sequence (Sequence)
A company uses an Application Load Balancer and an Amazon EC2 Auto Scaling group to handle dynamic web traffic. During a sudden spike in customer traffic, the system automatically expands its compute capacity.
Place the following operational events in the CORRECT sequential order during an automated dynamic scale-out event:
• Step A: The Amazon EC2 Auto Scaling group provisions and launches new EC2 instances using the configurations specified in the Launch Template.
• Step B: Amazon CloudWatch monitors instance performance metrics (such as average CPU utilization) and triggers an alarm when the predefined threshold is exceeded.
• Step C: The Elastic Load Balancer conducts health checks on the new instances and begins routing incoming traffic to them once healthy.
• Step D: The triggered CloudWatch alarm notifies the Auto Scaling group to execute its dynamic scale-out policy.
• Step 1 (B - CloudWatch Alarm): Amazon CloudWatch constantly collects utilization metrics from the running compute fleet. When traffic increases and a monitored metric (e.g., average CPU utilization exceeding 75% for 2 consecutive periods) passes the configured threshold, CloudWatch changes state to ALARM.
• Step 2 (D - Invoke Policy): The CloudWatch alarm triggers an automated action on the associated Amazon EC2 Auto Scaling group, initiating the dynamic scaling policy (e.g., "Add 2 instances").
• Step 3 (A - Provision Instances): The Auto Scaling group reads its assigned Launch Template (which specifies the AMI ID, instance type, security groups, and user data) and launches the new EC2 instances into the configured VPC subnets.
• Step 4 (C - Health Checks & Traffic Routing): The newly launched instances are registered with the Application Load Balancer's target group. The load balancer runs health checks against the configured endpoints. Once the instances respond successfully and enter the healthy state, the load balancer immediately starts sending user traffic to them.
Q20: Automated Golden AMI Creation & Distribution
A company needs to automate the creation, testing, and distribution of secure, standardized server images (golden AMIs) across multiple AWS accounts to maintain consistent baseline configurations.
Which AWS service should the company use to meet these requirements?
• EC2 Image Builder: EC2 Image Builder is a fully managed AWS service designed specifically to simplify and automate the creation, management, testing, and distribution of customized, compliant, and up-to-date Amazon Machine Images (AMIs) and container images. It provides automated pipelines that apply security baselines, install updates, run validation tests, and automatically share the resulting golden images across multiple AWS accounts or Regions using AWS Organizations.
Why are the other options incorrect?
• AWS Launch Wizard: AWS Launch Wizard provides a guided, wizard-driven experience that helps you size, configure, and deploy AWS resources specifically for complex enterprise applications (such as Microsoft SQL Server or SAP solutions) based on AWS best practices. It does not provide an automated pipeline for building, maintaining, and testing custom OS images.
• AWS Elastic Beanstalk: AWS Elastic Beanstalk is an orchestration/Platform-as-a-Service (PaaS) offering used to rapidly deploy and scale web applications and services. Elastic Beanstalk provisions and manages underlying resources (like EC2 instances, load balancers, and Auto Scaling groups) for your application code, but it is not designed to create, test, and distribute baseline golden AMIs.
• AWS Systems Manager Run Command: AWS Systems Manager Run Command allows administrators to remotely and securely execute scripts and commands across a fleet of running EC2 instances or on-premises servers without needing bastion hosts, SSH keys, or RDP access. While it helps with configuration tasks on active instances, it does not function as an automated image-building and validation pipeline.
AWS Compute Services Cheat Sheet: Quick Comparison
Use this quick-reference comparison table to review how core AWS compute models differ in management responsibility, pricing, and primary use cases before exam day:
| Service | Cloud Model | Billing Basis | Ideal Exam Scenario |
|---|---|---|---|
| Amazon EC2 | IaaS (Virtual Machines) | Per second / hour | Full OS control, custom network configuration, steady-state servers, legacy software. |
| AWS Lambda | Serverless (FaaS) | Per millisecond of execution | Event-driven code, background processing, API backends, zero idle costs. |
| AWS Fargate | Serverless Containers | vCPU & RAM per second | Running Docker containers on ECS/EKS without managing host EC2 instances. |
| Amazon Lightsail | Turnkey VPS | Predictable flat monthly fee | Simple WordPress websites, blogs, small web apps needing low, fixed pricing. |
| AWS Elastic Beanstalk | Platform as a Service (PaaS) | Underlying provisioned resources | Deploying application code while AWS handles provisioning, load balancing, and scaling. |
Key Takeaways for AWS Compute Services (Part 6 Summary)
• EC2 Purchasing Models & Cost Trade-offs: On-Demand provides total flexibility with zero commitment for unpredictable workloads. Spot Instances offer up to a 90% discount for stateless, fault-tolerant batch jobs, but AWS can terminate them with a 2-minute notice. Reserved Instances and Savings Plans trade a 1- or 3-year usage commitment for predictable discounts up to 66-72%. Dedicated Hosts give physical server socket visibility for strict BYOL compliance.
• Serverless vs. Virtual Machines: Amazon EC2 gives you full root control over the operating system, but you must patch and maintain it yourself. AWS Lambda is fully serverless and event-driven: you pay strictly for execution time in milliseconds, and AWS manages high availability, runtime patches, and scaling from zero.
• Containers (ECS vs. EKS vs. Fargate): Amazon ECS is AWS's native, simple container orchestrator. Amazon EKS runs upstream, open-source Kubernetes for teams needing portable container tooling. AWS Fargate removes host administration entirely by acting as a serverless container engine for both ECS and EKS.
• Simplified Web Hosting: Amazon Lightsail is the easiest entry point to AWS, bundling compute, SSD storage, networking, and DNS into a flat monthly bill with one-click app templates. AWS Elastic Beanstalk is a PaaS that lets developers upload code while AWS automatically configures underlying EC2 instances, load balancers, and Auto Scaling.
• Edge & Remote Compute: AWS Local Zones place compute close to major metropolitan areas without an AWS Region. AWS Wavelength embeds compute directly inside 5G telecommunication networks for mobile apps. For end-user computing, Amazon WorkSpaces delivers managed cloud virtual desktops (DaaS), while Amazon AppStream 2.0 streams individual desktop apps to any web browser.
Frequently Asked Questions (AWS CLF-C02 FAQ)
1. What is the difference between AWS Lambda and Amazon EC2?
Amazon EC2 provides virtual servers (IaaS) where you choose the operating system, storage, and networking. You have full root access, but you are responsible for OS updates, security patching, and paying for the server whenever it runs—even if idle. In contrast, AWS Lambda is an event-driven serverless service (FaaS). You simply upload your code, and AWS runs it in response to triggers (like file uploads or API requests). Lambda scales automatically, patches the runtime environment, and bills only for active execution time in milliseconds, with zero charge when idle.
2. When should an organization choose Amazon ECS instead of Amazon EKS?
Choose Amazon ECS if your organization wants a straightforward, AWS-native container orchestrator with seamless IAM integration and minimal operational overhead. Choose Amazon EKS if your team already has Kubernetes expertise, relies on open-source Kubernetes tools (such as Helm and kubectl), or requires architectural consistency across multiple cloud environments or on-premises clusters.
3. What is AWS Fargate and how does it differ from the EC2 launch type?
AWS Fargate is a serverless compute engine for containers that works with both Amazon ECS and Amazon EKS. Under the standard EC2 launch type, you must manually size, manage, configure, and patch the virtual machine instances hosting your containers. With AWS Fargate, you only define the required CPU and memory for your container tasks, and AWS automatically handles server provisioning, scaling, and infrastructure security behind the scenes.
4. Why choose Amazon Lightsail over standard Amazon EC2 for a new website?
Amazon Lightsail is designed specifically for developers, small businesses, and beginners who need a straightforward virtual private server (VPS). Lightsail bundles compute, SSD storage, monthly data transfer, and a static IP address into a single, predictable monthly price. It also includes one-click installers for popular platforms like WordPress and LAMP. Amazon EC2 offers far more advanced networking, storage, and instance sizing options, but requires manual configuration of VPCs, subnets, and security groups with variable pricing.
5. What is the maximum discount available with EC2 Spot Instances and when should you avoid them?
Amazon EC2 Spot Instances offer up to a 90% discount compared to On-Demand pricing by allowing you to bid on spare AWS compute capacity. However, AWS can reclaim this capacity at any time with only a 2-minute warning. For this reason, you should never use Spot Instances for critical, stateful production databases or workloads that cannot tolerate sudden interruptions. They are best suited for stateless, fault-tolerant batch processing, big data analysis, and video rendering jobs.
Ready to See Your Results?
Congratulations on completing all 20 questions of this aws cloud practitioner practice test free module! Mastering compute architectures, selecting the right instance pricing models, and understanding serverless options represent more than 30% of Domain 3 on the official AWS Certified Cloud Practitioner (CLF-C02) exam.
Review any questions you answered incorrectly, make sure you understand the differences in the cheat sheet table above, and continue your preparation with our next practice modules.
