- A
AWS CloudFormation
Correct. AWS CloudFormation is a service that allows you to model and provision AWS resources using templates. This enables Infrastructure as Code (IaC), ensuring consistent and repeatable deployments across environments.
- B
AWS Elastic Beanstalk
Why wrong: Incorrect. AWS Elastic Beanstalk is a PaaS service that automatically handles deployment, capacity provisioning, and load balancing for applications. While it simplifies deployment, it does not provide the granular, version-controlled infrastructure template the team needs for multi-tier networking and security groups.
- C
AWS OpsWorks
Why wrong: Incorrect. AWS OpsWorks is a configuration management service that uses Chef or Puppet to manage server configurations and automate operational tasks. It is not designed for defining and provisioning core AWS infrastructure resources like VPCs and subnets via templates.
- D
AWS Systems Manager
Why wrong: Incorrect. AWS Systems Manager provides a unified interface for operational tasks such as patch management, automation, and inventory collection. It does not offer a template-based approach for provisioning infrastructure resources.
CLF-C02 Cloud Technology and Services Practice Question
This CLF-C02 practice question tests your understanding of cloud technology and services. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company is deploying a multi-tier web application that includes a VPC, subnets, security groups, EC2 instances, and an Application Load Balancer. The team needs to define the entire infrastructure in a version-controlled template so that it can be consistently deployed across development, test, and production environments with minimal manual effort. Which AWS service should the team use to meet this requirement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
AWS CloudFormation
AWS CloudFormation is the correct choice because it is an Infrastructure as Code (IaC) service that allows you to define your entire multi-tier web application infrastructure—including VPC, subnets, security groups, EC2 instances, and an Application Load Balancer—in a version-controlled template (JSON or YAML). This enables consistent, repeatable deployments across development, test, and production environments with minimal manual effort, as CloudFormation handles the provisioning and updates in an orderly, predictable manner.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS CloudFormation
Why this is correct
Correct. AWS CloudFormation is a service that allows you to model and provision AWS resources using templates. This enables Infrastructure as Code (IaC), ensuring consistent and repeatable deployments across environments.
Related concept
Read the scenario before looking for a memorised answer.
- ✗
AWS Elastic Beanstalk
Why it's wrong here
Incorrect. AWS Elastic Beanstalk is a PaaS service that automatically handles deployment, capacity provisioning, and load balancing for applications. While it simplifies deployment, it does not provide the granular, version-controlled infrastructure template the team needs for multi-tier networking and security groups.
When this WOULD be correct
A team needs to quickly deploy a web application without managing the underlying infrastructure, and they want automatic scaling, load balancing, and health monitoring. They are not concerned with defining VPCs or subnets manually. In that scenario, Elastic Beanstalk would be the correct choice.
- ✗
AWS OpsWorks
Why it's wrong here
Incorrect. AWS OpsWorks is a configuration management service that uses Chef or Puppet to manage server configurations and automate operational tasks. It is not designed for defining and provisioning core AWS infrastructure resources like VPCs and subnets via templates.
When this WOULD be correct
A company uses Chef recipes to manage application configuration and needs a service to automate server configuration and deployment across EC2 instances. AWS OpsWorks would be the correct choice for managing lifecycle and configuration with Chef or Puppet.
- ✗
AWS Systems Manager
Why it's wrong here
Incorrect. AWS Systems Manager provides a unified interface for operational tasks such as patch management, automation, and inventory collection. It does not offer a template-based approach for provisioning infrastructure resources.
When this WOULD be correct
A question asking which service to use for automating patching, running commands, or managing configuration across a fleet of EC2 instances without SSH access would make Systems Manager correct.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓AWS CloudFormationCorrect answer▾
Why this is correct
Correct. AWS CloudFormation is a service that allows you to model and provision AWS resources using templates. This enables Infrastructure as Code (IaC), ensuring consistent and repeatable deployments across environments.
✗AWS Elastic BeanstalkWrong answer — click to see why▾
Why this is wrong here
AWS Elastic Beanstalk is a PaaS service that abstracts infrastructure management, but it does not provide version-controlled infrastructure-as-code templates for defining VPCs, subnets, security groups, and other low-level resources. The requirement is for a template-based, version-controlled deployment of the entire infrastructure, which is exactly what CloudFormation offers.
★ When this WOULD be the correct answer
A team needs to quickly deploy a web application without managing the underlying infrastructure, and they want automatic scaling, load balancing, and health monitoring. They are not concerned with defining VPCs or subnets manually. In that scenario, Elastic Beanstalk would be the correct choice.
Why candidates choose this
Candidates may confuse Elastic Beanstalk's ability to deploy and manage applications with the need for infrastructure-as-code templates. They might think Elastic Beanstalk can also produce version-controlled templates, but it focuses on application deployment, not low-level infrastructure definition.
✗AWS OpsWorksWrong answer — click to see why▾
Why this is wrong here
AWS OpsWorks is a configuration management service that uses Chef or Puppet, not a declarative infrastructure-as-code template service. The requirement is for a version-controlled template to define the entire infrastructure, which is the purpose of AWS CloudFormation.
★ When this WOULD be the correct answer
A company uses Chef recipes to manage application configuration and needs a service to automate server configuration and deployment across EC2 instances. AWS OpsWorks would be the correct choice for managing lifecycle and configuration with Chef or Puppet.
Why candidates choose this
Candidates may confuse OpsWorks as an infrastructure-as-code tool because it can automate deployments and manage stacks, but it focuses on configuration management rather than declarative infrastructure definition.
✗AWS Systems ManagerWrong answer — click to see why▾
Why this is wrong here
AWS Systems Manager is a management service for operational tasks like patching and automation, not for defining and deploying entire infrastructure templates in a version-controlled manner.
★ When this WOULD be the correct answer
A question asking which service to use for automating patching, running commands, or managing configuration across a fleet of EC2 instances without SSH access would make Systems Manager correct.
Why candidates choose this
Candidates may confuse Systems Manager's automation capabilities with infrastructure provisioning, or think its 'Automation' feature can replace CloudFormation for template-based deployments.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates often confuse AWS Elastic Beanstalk (a PaaS that simplifies deployment) with CloudFormation (an IaC service), but Elastic Beanstalk does not provide the granular, version-controlled control over network components like VPCs and subnets required by the question.
Detailed technical explanation
How to think about this question
CloudFormation uses a declarative template where resources are defined as AWS::EC2::VPC, AWS::EC2::Subnet, AWS::EC2::SecurityGroup, AWS::EC2::Instance, and AWS::ElasticLoadBalancingV2::LoadBalancer, and it automatically determines the correct order of creation based on dependencies (e.g., a subnet depends on a VPC). A subtle behavior is that CloudFormation supports change sets, allowing you to preview how changes to the template will affect existing stacks before execution, which is critical for avoiding unintended downtime in production environments.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A media company stores terabytes of video archives that are accessed once a year for audit purposes. Moving these objects to a cold storage tier (Azure Archive, S3 Glacier, or Google Nearline) costs a fraction of hot storage. Questions like this test whether you understand storage tiers, access frequency tradeoffs, and retrieval latency requirements.
Visual reference
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
- →
Cloud Technology and Services — study guide chapter
Learn the concepts, then practise the questions
- →
Cloud Technology and Services practice questions
Targeted practice on this topic area only
- →
All CLF-C02 questions
1,024 questions across all exam domains
- →
AWS Certified Cloud Practitioner CLF-C02 study guide
Full concept coverage aligned to exam objectives
- →
CLF-C02 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related CLF-C02 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Cloud Concepts practice questions
Practise CLF-C02 questions linked to Cloud Concepts.
Security and Compliance practice questions
Practise CLF-C02 questions linked to Security and Compliance.
Cloud Technology and Services practice questions
Practise CLF-C02 questions linked to Cloud Technology and Services.
Billing, Pricing, and Support practice questions
Practise CLF-C02 questions linked to Billing, Pricing, and Support.
AWS shared responsibility model practice questions
Practise CLF-C02 questions linked to AWS shared responsibility model.
AWS IAM practice questions
Practise CLF-C02 questions linked to AWS IAM.
AWS pricing practice questions
Practise CLF-C02 questions linked to AWS pricing.
AWS support plans practice questions
Practise CLF-C02 questions linked to AWS support plans.
AWS S3 practice questions
Practise CLF-C02 questions linked to AWS S3.
AWS EC2 practice questions
Practise CLF-C02 questions linked to AWS EC2.
Practice this exam
Start a free CLF-C02 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this CLF-C02 question test?
Cloud Technology and Services — This question tests Cloud Technology and Services — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: AWS CloudFormation — AWS CloudFormation is the correct choice because it is an Infrastructure as Code (IaC) service that allows you to define your entire multi-tier web application infrastructure—including VPC, subnets, security groups, EC2 instances, and an Application Load Balancer—in a version-controlled template (JSON or YAML). This enables consistent, repeatable deployments across development, test, and production environments with minimal manual effort, as CloudFormation handles the provisioning and updates in an orderly, predictable manner.
What should I do if I get this CLF-C02 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
More CLF-C02 practice questions
- A company publishes a message each time a new product is added to its catalogue. Three services need to receive this mes…
- A media company stores frequently accessed video thumbnails in Amazon S3. The thumbnails are read multiple times every d…
- A company needs a service to translate domain names (like www.example.com) into IP addresses, check the health of their…
- A startup runs an application on AWS and receives a monthly bill that charges exactly for the number of compute hours us…
- A financial institution runs its core banking application on-premises due to regulatory requirements. It has connected i…
- A company wants to run a MySQL database in AWS without managing database software installation, applying patches, settin…
Last reviewed: Jun 11, 2026
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.