Am I ready for the CLF-C02? A free self-check

Eight questions on the things people revise last, plus the one honest test of readiness. Decide before you book — CLF-C02, 2026 edition.

Try 8 free self-check questions in the exam's own style — every answer explained, no sign-up — and use the readiness signal to decide if it is time.

Straight to the 8 free questions ↓

“Am I ready?” is the question that decides whether the fee you are about to pay buys a pass or a 14-day wait and a second fee. It deserves an honest answer, and the honest answer is not a feeling — it is a signal you can check.

The readiness signal

Readiness is not “I have seen a lot of questions.” It is repeatable performance under real conditions:

Score comfortably above 700, on full-length exams — 65 questions, 90 minutes — taken under real conditions: no notes, no pausing.
More than once. One run that scrapes the line is luck, not readiness. The real exam mixes in questions you have never seen.
No domain in the danger zone. There is no per-domain pass, but a domain you keep failing is where the real exam will catch you.
The wrong-answer test. For each question you got right, can you say why the other three were wrong? If not, you recognised an answer instead of understanding one — and the exam will show you the same idea wearing different clothes.

That last point is the one that separates people who pass from people who are surprised. It is entirely possible to score well by memory and learn nothing that transfers.

What these eight are for

The questions below lean into the services people revise last — identity for app users versus workforce, event and workflow services, backup and licensing options. They are a fair test of whether your coverage is exam-wide or just centred on the popular services. If several were unfamiliar, that is not a failure; it is exactly the kind of gap this self-check exists to surface while it is still cheap to close.

Deciding

Be calm about it. If you are clearing the pass mark on timed full-length exams, your domains are balanced, and you can explain your wrong answers — book it. If not, you now know precisely what to fix, which is worth more than another anxious week of re-reading things you already know.

How to use the questions below

Answer each one before you reveal the explanation, and when you miss, read past the correct letter to why the other three fail. Then apply the signal above honestly. The course’s timed 65-question exams and per-domain analytics are built to turn “I think I’m ready” into “I know I am” — but these eight, and the diagnostic, are the free way to find out whether you are there yet.

The CLF-C02 readiness signal: score comfortably above 700 out of 1000 on full-length timed practice exams, keep every domain out of the danger zone, be able to say why each wrong option is wrong, and sit under real conditions — not one lucky run near the line.

8 free CLF-C02 practice questions

Answers and explanations — no email wall

CLF-C02 Question 1 of 8

Which service provides sign-up, sign-in and access control for the end users of your web or mobile application?

Answer: A — Amazon Cognito

Amazon Cognito handles user sign-up, sign-in and access for your application's end users. Why not the others: IAM controls who can access your AWS resources — your team and services, not your app's customers. Secrets Manager stores credentials. Route 53 is DNS. App end-user identity is Cognito; AWS account access is IAM — a distinction the exam likes.

CLF-C02 Question 2 of 8

What is an Elastic IP address in AWS?

Answer: A — A static public IPv4 address you allocate and can associate with an instance, that stays the same

An Elastic IP is a static, public IPv4 address you control and can attach to an instance, keeping the same address even across stops and restarts. Why not the others: a private subnet range is not a public reachable address. A temporary changing address is the opposite of 'elastic' here. A domain name is DNS (Route 53). Static and public is the Elastic IP.

CLF-C02 Question 3 of 8

Which service centrally automates and manages backups across multiple AWS services?

Answer: A — AWS Backup

AWS Backup centralises and automates backups across services like EBS, RDS and DynamoDB from one place. Why not the others: CloudFormation provisions infrastructure, not backups. S3 Glacier is an archival storage class, not a backup orchestrator. Config records configuration. Central, cross-service backup is AWS Backup.

CLF-C02 Question 4 of 8

Which serverless service coordinates multiple AWS services into a workflow using visual steps?

Answer: A — AWS Step Functions

AWS Step Functions orchestrates multiple services into a workflow of defined steps, handling the sequencing and error handling. Why not the others: SQS is a message queue and SNS is publish/subscribe — building blocks, not workflow orchestrators. EC2 is a server. Coordinating steps into a workflow is Step Functions.

CLF-C02 Question 5 of 8

Which service routes events between AWS services and SaaS applications using rules, acting as an event bus?

Answer: A — Amazon EventBridge

Amazon EventBridge is a serverless event bus that routes events between AWS services, your apps and SaaS providers based on rules. Why not the others: Kinesis handles high-volume streaming data, SQS is a queue, and Lambda runs code (often triggered by EventBridge). Rule-based event routing is EventBridge.

CLF-C02 Question 6 of 8

A company must run its EC2 workload on dedicated physical servers to meet a bring-your-own-license requirement. Which EC2 option fits?

Answer: A — EC2 Dedicated Hosts

EC2 Dedicated Hosts give you a physical server dedicated to you, which is what per-socket or per-core software licensing often requires. Why not the others: Spot and shared On-Demand run on shared hardware, and standard Reserved Instances are a pricing commitment on shared hardware. Dedicated physical hardware for licensing is Dedicated Hosts.

CLF-C02 Question 7 of 8

Which service centrally manages workforce single sign-on access to multiple AWS accounts and applications?

Answer: A — AWS IAM Identity Center (successor to AWS Single Sign-On)

AWS IAM Identity Center provides single sign-on for your workforce across multiple AWS accounts and business applications. Why not the others: Cognito is for your application's end users, not your workforce. Secrets Manager stores secrets. Organizations groups accounts but is not the sign-on service. Workforce SSO across accounts is IAM Identity Center.

CLF-C02 Question 8 of 8

Which is the most honest sign that you are ready to book the CLF-C02?

Answer: A — Scoring comfortably above 700 on full-length timed practice exams, more than once, and being able to say why the wrong options were wrong

Readiness is repeatable performance under real conditions plus understanding, not exposure. Why not the others: watching videos is input, not evidence of recall. Recognising familiar questions measures memory of specific items, not the skill of ruling out distractors on questions you have not seen. And one open-book, untimed perfect score removes exactly the pressures the real exam applies. Consistent timed scores, plus explaining your wrong answers, is the signal.

That is exactly how every question in the course works — answer, explanation, why-not. The real set continues in the practice player: 10 free questions, no sign-up.

Continue with the 10 free questions →

Those 8 questions were the start.

The exam does not test whether you recognise a term — it tests whether you can rule out three plausible answers under time pressure. That is what the explanations above are for, and there are 390 more questions built exactly like them.

Collecting questions yourself

Scattered across forums, of unknown age
Answer keys without reasoning
No idea which domain you are weak in

Practising with a system

390 questions in 6 full tests, CLF-C02 (2026)
Every option explained — including the wrong ones
Readiness per exam domain, and drills for your weakest

Start free — 10 questions

Straight into the player. No account, no email.

Frequently asked questions

Is this the current CLF-C02 format?

Yes — these questions follow the CLF-C02 exam guide (2026 edition), pitched at the level of the things people revise last. The exam is 65 questions in 90 minutes, passing at 700 out of 1000.

Are these real exam questions?

No. They are our own questions, written in the style and difficulty of the exam. Reproducing real exam items violates the AWS certification agreement and can get your certification revoked, and a memorised item teaches you nothing about the one you have not seen.

What score means I am ready?

Aim to score comfortably above the 700 pass mark on full-length practice exams taken under real conditions — 65 questions, 90 minutes, no notes — more than once. A single run that scrapes the line is not enough, because the real exam mixes in questions you have not seen.

What if I fail?

You can retake after a 14-day wait, and the full fee applies again — which is exactly why it is worth being sure beforehand. If these self-check questions or the full-length samples exposed gaps, close those first; the course's timed exams and per-domain analytics are built to tell you when the gaps are gone.

Updated for CLF-C02 (July 2026). The sample questions above are our own work in the style of the exam — not real exam items. The exam itself is set and marked by the certification body.