CLF-C02 Cloud Technology and Services Practice Question
A company manages a web application that consists of Amazon EC2 instances, an Amazon RDS database, and an Amazon S3 bucket. The team deploys the application to separate development, test, and production environments. Currently, the team manually configures each environment, which has led to configuration drift and deployment errors. The company wants to define the entire infrastructure as code, store the definition in a version control system, and deploy it consistently across all environments with a single template. Which AWS service should the company use to meet these requirements?
⚠ Common exam trap
Many exam-takers confuse AWS Elastic Beanstalk's automated deployment and scaling capabilities with infrastructure-as-code provisioning, overlooking that CloudFormation provides the explicit, version-controlled template required for consistent multi-environment infrastructure management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS CloudFormation
AWS CloudFormation is the correct choice because it enables you to define your entire infrastructure—including EC2 instances, RDS databases, and S3 buckets—as code in a JSON or YAML template. This template can be stored in a version control system and deployed consistently across development, test, and production environments using a single template, eliminating configuration drift and manual errors.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS CloudFormation
Why this is correct
AWS CloudFormation is the correct answer because it is the native Infrastructure as Code (IaC) service on AWS. It lets you define your entire stack — EC2 instances, VPCs, RDS databases, S3 buckets, IAM roles, and anything else — in a declarative JSON or YAML template. CloudFormation then provisions and updates these resources in a controlled, repeatable manner, tracking them as a single stack and rolling back changes on failure. This makes it the dedicated tool for treating infrastructure as code, ensuring consistent environments across dev, test, and production, and enabling version control of your infrastructure definitions.
- ✗
AWS Elastic Beanstalk
Why it's wrong here
Incorrect. AWS Elastic Beanstalk is a Platform as a Service (PaaS) that automates application deployment and scaling, but it manages the underlying infrastructure for you. It does not provide the granular infrastructure-as-code template approach that allows defining arbitrary AWS resources like S3 buckets or RDS databases in a single template.
When this WOULD be correct
A company wants to quickly deploy a web application without managing underlying infrastructure, and needs automatic scaling, load balancing, and health monitoring. They are not concerned with defining every resource in a template but want a managed platform that handles deployment and operations.
- ✗
AWS OpsWorks
Why it's wrong here
Incorrect. AWS OpsWorks is a configuration management service that uses Chef and Puppet to automate server configuration. While it can be used for some infrastructure automation, it is not a general-purpose infrastructure-as-code template service. CloudFormation is the more native and comprehensive choice for defining the entire stack as code.
When this WOULD be correct
A company uses Chef recipes or Puppet manifests to manage server configurations and wants a managed service to automate configuration management across multiple EC2 instances. OpsWorks would be correct if the requirement is to manage application configuration and server updates, not infrastructure provisioning.
- ✗
AWS CodeDeploy
Why it's wrong here
Incorrect. AWS CodeDeploy is a deployment service that automates code deployments to running instances. It does not define or provision the underlying AWS resources like EC2 instances or databases. CloudFormation is needed to create and manage the infrastructure itself.
When this WOULD be correct
A company wants to automate the deployment of application code to a fleet of EC2 instances while minimizing downtime, using a blue/green deployment strategy. The infrastructure is already provisioned, and the focus is on rolling out new application versions reliably.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓AWS CloudFormationCorrect answer▾
Why this is correct
AWS CloudFormation is the correct answer because it is the native Infrastructure as Code (IaC) service on AWS. It lets you define your entire stack — EC2 instances, VPCs, RDS databases, S3 buckets, IAM roles, and anything else — in a declarative JSON or YAML template. CloudFormation then provisions and updates these resources in a controlled, repeatable manner, tracking them as a single stack and rolling back changes on failure. This makes it the dedicated tool for treating infrastructure as code, ensuring consistent environments across dev, test, and production, and enabling version control of your infrastructure definitions.
✗AWS Elastic BeanstalkWrong answer — click to see why▾
Why this is wrong here
AWS Elastic Beanstalk is a PaaS service that automates application deployment and scaling but does not provide a single template to define all infrastructure as code for multiple environments; it abstracts infrastructure details rather than allowing full control via a template.
★ When this WOULD be the correct answer
A company wants to quickly deploy a web application without managing underlying infrastructure, and needs automatic scaling, load balancing, and health monitoring. They are not concerned with defining every resource in a template but want a managed platform that handles deployment and operations.
Why candidates choose this
Candidates may confuse Elastic Beanstalk's environment management and version control integration with the ability to define infrastructure as code, but Elastic Beanstalk does not offer a single template for all resources like CloudFormation does.
✗AWS OpsWorksWrong answer — click to see why▾
Why this is wrong here
AWS OpsWorks is a configuration management service that uses Chef or Puppet, not a tool for defining entire infrastructure as code with a single template for consistent deployment across environments. It focuses on managing server configurations rather than provisioning all resources.
★ When this WOULD be the correct answer
A company uses Chef recipes or Puppet manifests to manage server configurations and wants a managed service to automate configuration management across multiple EC2 instances. OpsWorks would be correct if the requirement is to manage application configuration and server updates, not infrastructure provisioning.
Why candidates choose this
Candidates may confuse OpsWorks with CloudFormation because both can automate deployments, but OpsWorks is specialized for configuration management using Chef/Puppet, not for defining all infrastructure resources as code.
✗AWS CodeDeployWrong answer — click to see why▾
Why this is wrong here
AWS CodeDeploy automates code deployments to existing compute instances, but does not define or provision infrastructure resources like EC2, RDS, or S3. The question requires infrastructure as code and consistent environment provisioning, which CodeDeploy alone cannot achieve.
★ When this WOULD be the correct answer
A company wants to automate the deployment of application code to a fleet of EC2 instances while minimizing downtime, using a blue/green deployment strategy. The infrastructure is already provisioned, and the focus is on rolling out new application versions reliably.
Why candidates choose this
Candidates may confuse deployment of application code with deployment of infrastructure, assuming CodeDeploy can handle both, or they may think 'deploy' in the question refers only to code deployment.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.