Match each AWS Well-Architected Framework pillar to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Run and monitor systems to deliver business value
Protect data, systems, and assets
Recover from failures and meet demand
Use computing resources efficiently
Avoid unnecessary costs
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Security: Protect information, systems, and assets.
The AWS Well-Architected Framework pillars are Operational Excellence, Security, Reliability, Performance Efficiency, and Cost Optimization. Correct matches align each pillar with its core focus area.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Security: Protect information, systems, and assets.
Why this is correct
The Security pillar centers on safeguarding information, systems, and assets through layered controls. This means enforcing identity and access management with least-privilege IAM policies, encrypting data in transit and at rest, and implementing detective controls such as AWS Config, GuardDuty, and CloudTrail. In the AWS shared responsibility model, the customer must protect workloads while AWS secures the underlying infrastructure, so a secure architecture also integrates automated logging and alerting for threats.
Reliability: Recover from failures, meet demand.
Why this is correct
The Reliability pillar addresses a workload's ability to perform consistently and recover from infrastructure or service failures. It requires designing for fault tolerance, such as deploying across multiple Availability Zones, using Elastic Load Balancing, and mapping out recovery time and recovery point objectives with backups and disaster-recovery plans. Auto Scaling groups and other elasticity mechanisms allow the workload to meet varying demand without manual intervention, which is why recovery orientation lies at the heart of this pillar.
Cost Optimization: Avoid unnecessary costs.
Why this is correct
The Cost Optimization pillar focuses on continuously managing and reducing spend without sacrificing business outcomes. It involves rightsizing compute resources with tools like AWS Compute Optimizer, purchasing Savings Plans or Reserved Instances for predictable workloads, transitioning data to lower-cost storage tiers via S3 lifecycle policies, and removing idle or underused resources. The emphasis is on delivering maximum business value at the minimal feasible cost, not merely cutting features or performance.
Security: Ability to run and monitor systems.
Why it's wrong here
The ability to run and monitor systems actually describes the Operational Excellence pillar, which emphasizes automation, observability, continuous improvement, and incident response. Security, by contrast, is about protecting information and assets through access controls, encryption, and threat detection, although monitoring does support security. Running and monitoring systems addresses operational health, not the confidentiality, integrity, and availability of protected data, so this option misattaches the wrong pillar.
Reliability: Ability to optimize costs.
Why it's wrong here
Cost optimization falls under the Cost Optimization pillar, not Reliability, which is concerned with ensuring workloads operate correctly and recover promptly from failures. Reliability involves mechanisms such as retries with exponential backoff, orchestrated failover, and replicated data stores to meet availability targets. While cost awareness can complement reliability by avoiding waste, the two pillars have distinct purposes, and confusing them would mislead architectural priorities.
Go deeper
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.