CLF-C02 Cloud Concepts Practice Question
A company architect is reviewing their architecture for the Operational Excellence pillar of the Well-Architected Framework. Which practice is a core recommendation of this pillar?
⚠ Common exam trap
Watch out — candidates often confuse the pillars—associating automation with Reliability or Security—when the Well-Architected Framework explicitly places 'operations as code' under Operational Excellence.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Perform operations as code using infrastructure-as-code and automated runbooks
The Operational Excellence pillar focuses on running and monitoring systems to deliver business value and continually improve supporting processes and procedures. Performing operations as code—using infrastructure-as-code (e.g., AWS CloudFormation, AWS CDK) and automated runbooks (e.g., AWS Systems Manager Automation)—is a core recommendation because it enables consistent, repeatable, and auditable operations, reducing human error and enabling rapid recovery.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Encrypt all data at rest using AWS KMS
Why it's wrong here
Encrypting data at rest with AWS KMS is fundamentally a Security pillar action because it focuses on protecting data confidentiality and managing cryptographic keys through envelope encryption. While KMS integration can be automated with CloudFormation or Lambda, the reason this practice exists is to satisfy security and compliance requirements, not to improve how operational workloads are designed, run, or continuously improved. Therefore, it is a Security pillar recommendation, not an Operational Excellence pillar recommendation.
- ✓
Perform operations as code using infrastructure-as-code and automated runbooks
Why this is correct
Performing operations as code is the core of the Operational Excellence pillar. This means defining entire workloads as infrastructure-as-code using services like AWS CloudFormation or AWS CDK, and encoding operational procedures as automated runbooks (for example, using AWS Systems Manager Automation) that are version-controlled, tested, and executed consistently. This approach reduces human error, enables repeatable deployments, creates a culture of continuous improvement, and allows teams to respond predictably to events — all hallmarks of Operational Excellence.
- ✗
Use Reserved Instances to minimize cost
Why it's wrong here
Using Reserved Instances to minimize cost is a Cost Optimization pillar practice, as it lowers the effective hourly price of Amazon EC2 or RDS in exchange for a one-year or three-year commitment. While this can substantially reduce spend, it does not by itself improve operational procedures, streamline deployment pipelines, or reduce operational risk. The goal of this recommendation is financial efficiency, not operational superiority, so it does not align with the Operational Excellence pillar.
- ✗
Deploy across multiple Availability Zones
Why it's wrong here
Deploying across multiple Availability Zones is a Reliability pillar recommendation because the primary intent is to achieve fault tolerance and high availability by spreading workloads across independent infrastructure within an AWS Region. This architecture helps protect against single-AZ failures, but it does not directly address how operations are planned, performed, or improved upon over time. Since the question centers on Operational Excellence — not on ensuring the workload remains available during an infrastructure failure — this option is incorrect.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 993 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.