CLF-C02 study guide: domains, format and a 4-week plan

CLF-C02, the AWS Certified Cloud Practitioner exam, checks that you have an overall understanding of the AWS Cloud, independent of any specific job role. It asks you to explain the value of the cloud, the shared responsibility model and the Well-Architected Framework, to position the core compute, storage, database and network services, and to reason about cost, billing and support. You sit 65 questions in 90 minutes, at a Pearson VUE test centre or online.

CLF-C02 at a glance

Details as of September 2026 — confirm on the official exam page before booking.

AWS has announced that the Italian and German versions of the exam retire after 31 December 2026. If you plan to sit in either language, book before then or check the page for the current position.

Who this exam is for

The exam guide describes the target candidate as someone with up to six months of exposure to AWS Cloud design, implementation or operations, who might be early in an AWS career or might work with people in AWS roles. The official page also welcomes people with no prior IT or cloud experience and those switching careers. There is no prerequisite certification.

The guide is just as clear about what is out of scope: coding, designing cloud architecture, troubleshooting, implementation, and load and performance testing. You need to know what a service is for and when to choose it, not how to configure it. If you catch yourself learning CLI flags or VPC route-table syntax, you have gone further than this exam goes.

Once you pass, the [SAA-C03 study guide](/blog/saa-c03-study-guide) covers the natural next step on the architecture side.

What the exam covers

The guide has four domains. Domains 2 and 3 together make up almost two-thirds of the scored content.

Domain 1: Cloud Concepts (24%)

This domain is about why organisations move to AWS and how they think about it. Expect questions on the benefits of the cloud (economies of scale, global reach, speed of deployment, high availability, elasticity and agility), the six pillars of the Well-Architected Framework and how they differ, and the AWS Cloud Adoption Framework and the business outcomes it targets. It also covers migration strategies and tools such as AWS Snowball, and cloud economics: fixed versus variable costs, on-premises costs people forget, Bring Your Own License compared with included licences, rightsizing, and the value of automation and managed services. Learn each pillar by the kind of problem it addresses.

Domain 2: Security and Compliance (30%)

The shared responsibility model sits at the centre of this domain, and the guide specifically asks how the split shifts between services such as Amazon EC2, Amazon RDS and AWS Lambda. Beyond that, you need to know where to find compliance information (AWS Artifact), which services secure resources (Amazon Inspector, AWS Security Hub, Amazon GuardDuty, AWS Shield, AWS WAF), and which help with governance and audit (Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Audit Manager). Identity is a large part: IAM users, groups, roles and policies, least privilege, MFA, IAM Identity Center, federation, credential storage with AWS Secrets Manager and AWS Systems Manager, and the tasks only the root user can perform. Security groups versus network ACLs, and encryption at rest versus in transit, also appear.

Domain 3: Cloud Technology and Services (34%)

The heaviest and widest domain. It starts with how you access and operate AWS (console, APIs, SDKs, CLI, infrastructure as code), deployment models (cloud, hybrid, on-premises) and connectivity (public internet, AWS VPN, AWS Direct Connect). Then the global infrastructure: Regions, Availability Zones, edge locations, Local Zones and Wavelength Zones, and when to use multiple AZs or multiple Regions. After that come the service families: compute (EC2 instance types, Amazon ECS, Amazon EKS, AWS Fargate, Lambda, Auto Scaling, load balancers), databases (RDS, Aurora, DynamoDB, in-memory options, AWS DMS and AWS SCT), networking (VPC components, Route 53, CloudFront, Global Accelerator), storage (S3 storage classes, EBS, instance store, EFS, FSx, Storage Gateway, lifecycle policies, AWS Backup), AI/ML and analytics (SageMaker, Lex, Kendra, Athena, Kinesis, Glue, QuickSight), plus smaller categories such as messaging (SNS, SQS, EventBridge), end-user computing, developer tools and IoT. The skill tested is matching a described need to the right service.

Domain 4: Billing, Pricing, and Support (12%)

Compare the EC2 purchasing options (On-Demand, Reserved Instances, Savings Plans, Spot, Dedicated Hosts, Dedicated Instances, Capacity Reservations), understand data transfer charges in and out, and know what AWS Budgets, Cost Explorer, Billing Conductor, the Pricing Calculator, cost allocation tags and consolidated billing in AWS Organizations each do. You also need the support tiers named in the guide (Developer, Business, Enterprise On-Ramp and Enterprise), the role of Trusted Advisor and the AWS Health Dashboard, AWS Marketplace and the Partner Network, and where to find help such as AWS re:Post, the Knowledge Center and Prescriptive Guidance.

A 4-week study plan

The plan follows the weights, with extra time for the breadth of Domain 3.

Week 1: Domain 1 and the global infrastructure. Build a glossary of the cloud benefits, the six Well-Architected pillars and the CAF outcomes, each in one line in your own words. Learn how Regions, AZs and edge locations relate. If you have access to an AWS account, click around the console so the names become real. End the week with a mixed Domain 1 paper and read every explanation, including those for questions you got right.

Week 2: Domain 2. Draw the shared responsibility model for EC2, RDS and Lambda side by side. Work through IAM until you can explain users, groups, roles and policies without notes, and list the root-user-only tasks. Make a table of security and governance services with one purpose each. Finish with a Domain 2 paper.

Week 3: Domain 3. Give this week the most time. Go family by family: compute, storage, databases, networking, then the smaller categories. For each service, write what it does and one situation where you would pick it over its nearest neighbour. Take topic papers per family, then a mixed Domain 3 paper.

Week 4: Domain 4, then full mocks. Spend two or three days on pricing models, cost tools and support plans. Then sit a full-length mock under exam conditions, review every question, revisit the weakest topics, and sit a second mock a few days later. [How to use practice exams effectively](/blog/how-to-use-practice-exams-effectively) covers how to review a mock so it actually moves your score.

Common traps

• Getting the shared responsibility line wrong. Patching the guest operating system on EC2 is the customer's job; patching the database engine on RDS is AWS's. Customer data, IAM configuration and encryption choices are always the customer's. Many questions hinge on which service is involved.
• Mixing up the monitoring and audit services. CloudWatch collects metrics and logs, CloudTrail records API activity, Config records and evaluates resource configuration, Artifact provides AWS compliance reports, and Trusted Advisor gives best-practice checks. Distractors are often real services doing the wrong job.
• Confusing similar storage and database options. S3 is object storage, EBS is block storage attached to one instance, EFS is shared file storage. DynamoDB is NoSQL; RDS and Aurora are relational. Learn each by the shape of data it holds.
• Picking the wrong purchasing option. Steady, predictable workloads suit Reserved Instances or Savings Plans; interruptible batch work suits Spot; short, unpredictable work suits On-Demand; licence or compliance needs tied to physical servers point to Dedicated Hosts.
• Mixing up the cost tools. Pricing Calculator estimates before you build, Cost Explorer analyses what you have spent, Budgets alerts you against a threshold. Read which moment the question describes.
• Partial answers on multiple response. Read how many options are required and check each one. Unanswered questions are scored as incorrect and there is no penalty for guessing, so never leave one blank.

How to practise

CertifyCloudx has original CLF-C02 practice questions written against the current exam guide and explained option by option. You can read [how our questions are written](/blog/how-certifycloudx-practice-questions-are-written) for the details of our method.

• Full-length timed mock exams, 65 questions in 90 minutes, the same as the real exam
• Domain papers of up to 25 questions each (60 minutes per 25)
• Explanations for every option, with links to the relevant AWS documentation
• Progress tracked by domain and topic

The free plan includes practice sets for every certification, up to 10 questions a day, with no card required. Start with the [CLF-C02 practice questions](/certifications/aws-cloud-practitioner-clf-c02).

Frequently asked questions

How difficult is CLF-C02?

It is AWS's entry-level exam and assumes up to six months of exposure to AWS, with no coding or architecture design. The challenge is breadth: a long list of services and concepts, each tested at the level of what it does and when to use it.

How long should I prepare for CLF-C02?

With some IT background, three to four weeks of regular study is a realistic range. If cloud computing is completely new to you, allow six weeks, because Domain 3 introduces a lot of service names at once.

Do I need any experience or another certification first?

No. There is no prerequisite certification, and the official page says the exam suits people with no prior IT or cloud experience as well as those switching careers. Time spent in the AWS console still helps the service names stick.

How long is the certification valid?

AWS states that the AWS Certified Cloud Practitioner certification is valid for three years.

Are CertifyCloudx questions real CLF-C02 exam questions?

No. Every CertifyCloudx question is original and written against the public exam guide. Using real exam content breaks the AWS candidate agreement and can cost you the certification.

Is there a penalty for guessing?

No. AWS scores unanswered questions as incorrect and applies no penalty for guessing, so answer every question. Fifteen of the 65 questions are unscored and are not identified, and the scoring is compensatory, so you need to pass the exam overall rather than each domain.

CertifyCloudx is independent and not affiliated with Amazon Web Services. AWS Certified Cloud Practitioner is a trademark of its owner. All CertifyCloudx practice questions are original.