CLF-C02 Cloud Technology and Services Practice Question
A company is deploying a multi-tier web application that includes a VPC, subnets, security groups, EC2 instances, and an Application Load Balancer. The team needs to define the entire infrastructure in a version-controlled template so that it can be consistently deployed across development, test, and production environments with minimal manual effort. Which AWS service should the team use to meet this requirement?
⚠ Common exam trap
Test-takers frequently confuse AWS Elastic Beanstalk (a PaaS that simplifies deployment) with CloudFormation (an IaC service), but Elastic Beanstalk does not provide the granular, version-controlled control over network components like VPCs and subnets required by the question.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS CloudFormation
AWS CloudFormation is the correct choice because it is an Infrastructure as Code (IaC) service that allows you to define your entire multi-tier web application infrastructure—including VPC, subnets, security groups, EC2 instances, and an Application Load Balancer—in a version-controlled template (JSON or YAML). This enables consistent, repeatable deployments across development, test, and production environments with minimal manual effort, as CloudFormation handles the provisioning and updates in an orderly, predictable manner.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS CloudFormation
Why this is correct
AWS CloudFormation is the correct choice because it enables Infrastructure as Code (IaC) by provisioning AWS resources—including VPCs, subnets, internet gateways, and security groups—from a declarative JSON or YAML template. The template is version-controllable and reusable, so the same multi-tier architecture can be deployed consistently across dev, test, and production environments. CloudFormation stacks also support update, rollback, and drift detection, giving the team precise control over the entire resource lifecycle.
- ✗
AWS Elastic Beanstalk
Why it's wrong here
Incorrect. AWS Elastic Beanstalk is a PaaS service that automatically handles deployment, capacity provisioning, and load balancing for applications. While it simplifies deployment, it does not provide the granular, version-controlled infrastructure template the team needs for multi-tier networking and security groups.
When this WOULD be correct
A team needs to quickly deploy a web application without managing the underlying infrastructure, and they want automatic scaling, load balancing, and health monitoring. They are not concerned with defining VPCs or subnets manually. In that scenario, Elastic Beanstalk would be the correct choice.
- ✗
AWS OpsWorks
Why it's wrong here
Incorrect. AWS OpsWorks is a configuration management service that uses Chef or Puppet to manage server configurations and automate operational tasks. It is not designed for defining and provisioning core AWS infrastructure resources like VPCs and subnets via templates.
When this WOULD be correct
A company uses Chef recipes to manage application configuration and needs a service to automate server configuration and deployment across EC2 instances. AWS OpsWorks would be the correct choice for managing lifecycle and configuration with Chef or Puppet.
- ✗
AWS Systems Manager
Why it's wrong here
AWS Systems Manager is incorrect because it is an operations and management service, not an infrastructure provisioning service. While it does offer capabilities like Parameter Store, Run Command, Patch Manager, and Automation documents, these are designed for operational tasks such as patching, executing scripts, and collecting inventory. Systems Manager Automation can run custom actions, but it cannot define and create a VPC, subnets, or security groups from a declarative template; that is CloudFormation's role.
When this WOULD be correct
A question asking which service to use for automating patching, running commands, or managing configuration across a fleet of EC2 instances without SSH access would make Systems Manager correct.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓AWS CloudFormationCorrect answer▾
Why this is correct
AWS CloudFormation is the correct choice because it enables Infrastructure as Code (IaC) by provisioning AWS resources—including VPCs, subnets, internet gateways, and security groups—from a declarative JSON or YAML template. The template is version-controllable and reusable, so the same multi-tier architecture can be deployed consistently across dev, test, and production environments. CloudFormation stacks also support update, rollback, and drift detection, giving the team precise control over the entire resource lifecycle.
✗AWS Elastic BeanstalkWrong answer — click to see why▾
Why this is wrong here
AWS Elastic Beanstalk is a PaaS service that abstracts infrastructure management, but it does not provide version-controlled infrastructure-as-code templates for defining VPCs, subnets, security groups, and other low-level resources. The requirement is for a template-based, version-controlled deployment of the entire infrastructure, which is exactly what CloudFormation offers.
★ When this WOULD be the correct answer
A team needs to quickly deploy a web application without managing the underlying infrastructure, and they want automatic scaling, load balancing, and health monitoring. They are not concerned with defining VPCs or subnets manually. In that scenario, Elastic Beanstalk would be the correct choice.
Why candidates choose this
Candidates may confuse Elastic Beanstalk's ability to deploy and manage applications with the need for infrastructure-as-code templates. They might think Elastic Beanstalk can also produce version-controlled templates, but it focuses on application deployment, not low-level infrastructure definition.
✗AWS OpsWorksWrong answer — click to see why▾
Why this is wrong here
AWS OpsWorks is a configuration management service that uses Chef or Puppet, not a declarative infrastructure-as-code template service. The requirement is for a version-controlled template to define the entire infrastructure, which is the purpose of AWS CloudFormation.
★ When this WOULD be the correct answer
A company uses Chef recipes to manage application configuration and needs a service to automate server configuration and deployment across EC2 instances. AWS OpsWorks would be the correct choice for managing lifecycle and configuration with Chef or Puppet.
Why candidates choose this
Candidates may confuse OpsWorks as an infrastructure-as-code tool because it can automate deployments and manage stacks, but it focuses on configuration management rather than declarative infrastructure definition.
✗AWS Systems ManagerWrong answer — click to see why▾
Why this is wrong here
AWS Systems Manager is a management service for operational tasks like patching and automation, not for defining and deploying entire infrastructure templates in a version-controlled manner.
★ When this WOULD be the correct answer
A question asking which service to use for automating patching, running commands, or managing configuration across a fleet of EC2 instances without SSH access would make Systems Manager correct.
Why candidates choose this
Candidates may confuse Systems Manager's automation capabilities with infrastructure provisioning, or think its 'Automation' feature can replace CloudFormation for template-based deployments.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CLF-C02
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company is deploying a new web application on AWS. The operations team needs to provision and manage AWS resources such as Amazon EC2 instances, Amazon RDS databases, and Amazon S3 buckets in a repeatable, consistent manner across development, test, and production environments. The team wants to define the entire infrastructure as code using declarative templates that can be version-controlled and reviewed. Which AWS service should the team use to meet this requirement?
medium- A.AWS Elastic Beanstalk
- ✓ B.AWS CloudFormation
- C.AWS OpsWorks
- D.AWS CodeDeploy
Why B: AWS CloudFormation is the correct service because it allows you to define your entire infrastructure as code using declarative templates (JSON or YAML). These templates can be version-controlled and reviewed, enabling repeatable and consistent provisioning of resources like EC2 instances, RDS databases, and S3 buckets across multiple environments. CloudFormation manages the lifecycle of these resources as stacks, ensuring idempotent deployments.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.