CLF-C02 Cloud Technology and Services Practice Question
A company wants to automate the deployment of its infrastructure across multiple AWS environments (development, staging, production). The operations team needs to define all AWS resources (such as Amazon EC2 instances, security groups, and load balancers) in a declarative JSON or YAML template. They want to version control these templates, quickly replicate the entire infrastructure in a new region, and ensure that each deployment is consistent and repeatable. Which AWS service should the company use to achieve this?
⚠ Common exam trap
Many candidates confuse AWS Elastic Beanstalk (which also uses templates but is application-focused) with CloudFormation, or they think AWS CodePipeline can define infrastructure directly, but CodePipeline only orchestrates pipelines and relies on other services like CloudFormation for provisioning.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS CloudFormation
AWS CloudFormation is the correct choice because it allows you to define all AWS resources (EC2 instances, security groups, load balancers) in a declarative JSON or YAML template. These templates can be version-controlled, enabling you to replicate the entire infrastructure in a new region by simply reusing the same template, ensuring consistent and repeatable deployments across environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS CloudFormation
Why this is correct
CloudFormation is the correct service because it provides Infrastructure as Code using declarative JSON or YAML templates to define and provision AWS resources consistently across environments. Templates can be version-controlled, and stacks can be replicated in different regions.
- ✗
AWS Elastic Beanstalk
Why it's wrong here
Elastic Beanstalk is a Platform as a Service (PaaS) that automatically handles infrastructure provisioning for common application stacks. However, it does not allow you to define resources in a raw declarative template; it abstracts the underlying infrastructure, which gives less control over resource definitions and does not support direct template versioning for the entire infrastructure.
When this WOULD be correct
A company wants to quickly deploy a web application without managing the underlying infrastructure, and needs automatic scaling, load balancing, and monitoring. They want to upload their code and have the service handle provisioning and configuration automatically.
- ✗
AWS OpsWorks
Why it's wrong here
OpsWorks is a configuration management service that uses Chef and Puppet to manage server configurations. While it can automate infrastructure, it is not focused on declarative templates for provisioning all AWS resources; it is more suited for managing application configurations and compliance.
When this WOULD be correct
A company wants to manage server configurations and automate application deployment using Chef or Puppet recipes, with a need for lifecycle management of EC2 instances and on-premises servers. AWS OpsWorks would be the correct choice for such configuration management scenarios.
- ✗
AWS CodePipeline
Why it's wrong here
CodePipeline is a continuous integration and continuous delivery (CI/CD) service that automates the build, test, and deployment phases of application releases. It does not provision infrastructure directly from declarative templates; it can be used in conjunction with CloudFormation but is not a substitute for infrastructure provisioning.
When this WOULD be correct
A company wants to automate the build, test, and deployment pipeline for its application code, integrating with source control and running automated tests before deploying to multiple environments. CodePipeline would be the correct service to orchestrate these steps.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓AWS CloudFormationCorrect answer▾
Why this is correct
CloudFormation is the correct service because it provides Infrastructure as Code using declarative JSON or YAML templates to define and provision AWS resources consistently across environments. Templates can be version-controlled, and stacks can be replicated in different regions.
✗AWS Elastic BeanstalkWrong answer — click to see why▾
Why this is wrong here
AWS Elastic Beanstalk is a PaaS service for deploying applications, not for declaratively defining infrastructure resources like EC2 instances, security groups, and load balancers in JSON/YAML templates. It abstracts infrastructure management, whereas the question requires explicit resource definition and version control.
★ When this WOULD be the correct answer
A company wants to quickly deploy a web application without managing the underlying infrastructure, and needs automatic scaling, load balancing, and monitoring. They want to upload their code and have the service handle provisioning and configuration automatically.
Why candidates choose this
Candidates may confuse Elastic Beanstalk's environment management with infrastructure-as-code, or think its configuration files (e.g., .ebextensions) are equivalent to declarative templates like CloudFormation.
✗AWS OpsWorksWrong answer — click to see why▾
Why this is wrong here
AWS OpsWorks is a configuration management service that uses Chef and Puppet, not declarative JSON/YAML templates for defining infrastructure. It focuses on managing server configurations and application stacks, not on provisioning all AWS resources in a declarative, version-controlled template.
★ When this WOULD be the correct answer
A company wants to manage server configurations and automate application deployment using Chef or Puppet recipes, with a need for lifecycle management of EC2 instances and on-premises servers. AWS OpsWorks would be the correct choice for such configuration management scenarios.
Why candidates choose this
Candidates may confuse OpsWorks with CloudFormation because both can automate infrastructure, but OpsWorks is more about configuration management and application stacks, not declarative infrastructure provisioning.
✗AWS CodePipelineWrong answer — click to see why▾
Why this is wrong here
AWS CodePipeline is a continuous delivery service for automating build, test, and deploy phases, not for defining infrastructure resources in declarative templates. It does not directly manage or provision AWS resources like EC2 instances or security groups.
★ When this WOULD be the correct answer
A company wants to automate the build, test, and deployment pipeline for its application code, integrating with source control and running automated tests before deploying to multiple environments. CodePipeline would be the correct service to orchestrate these steps.
Why candidates choose this
Candidates may confuse CodePipeline with infrastructure automation because it automates deployments, but it focuses on application code delivery, not infrastructure provisioning via declarative templates.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.