The current exam is AWS Certified Cloud Practitioner (CLF-C02), a foundational credential testing four domains: Cloud Concepts (24%), Security and Compliance (30%), Cloud Technology and Services (34%), and Billing, Pricing, and Support (12%). You answer 65 questions in 90 minutes and need a scaled score of 700 on a 100–1,000 scale to pass. Prepare by classifying each practice stem (service, pricing model, security control, or governance mechanism), mapping its stated requirement to the matching concept, and confirming distinctions in the official exam guide and service documentation.
What the CLF-C02 exam covers and which version applies
The current version is CLF-C02. It validates foundational, high-level understanding of the AWS Cloud, its services, and terminology, independent of a specific job role.
The exam guide organizes the content into four weighted domains, shown below. Cloud Technology and Services (34%) and Security and Compliance (30%) together make up nearly two-thirds of the scored content, so those two areas deserve the largest share of your study time.
Both the domain weightings and the in-scope service list in the exam guide are described as non-exhaustive and subject to change. Treat the official CLF-C02 exam guide as the authoritative source for scope; a training site's topic list is not a syllabus.
| Content domain | Weight |
|---|---|
| 1. Cloud Concepts | 24% |
| 2. Security and Compliance | 30% |
| 3. Cloud Technology and Services | 34% |
| 4. Billing, Pricing, and Support | 12% |
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; AWS Certified Cloud Practitioner — Exam overview and FAQs
Who the exam is designed for
The exam guide describes the target candidate as someone with up to six months of exposure to AWS Cloud design, implementation, or operations, early in a cloud career or working alongside people in cloud roles. No formal prerequisites appear in the retrieved sources.
The certification page adds that the six months of exposure is not required, and positions the credential as a starting point for people switching from non-IT backgrounds or for line-of-business employees who need cloud literacy. Treat this as a description of the intended audience, not an entry rule you must satisfy.
The exam guide also lists job tasks that are out of scope: coding, designing cloud architecture, troubleshooting, implementation, and load and performance testing. If you can explain what services do and which option fits a described requirement, you are operating at the right level; you are not expected to build or debug the systems.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; AWS Certified Cloud Practitioner — Exam overview and FAQs
Exam format, scoring, and scheduling
You get 90 minutes for 65 questions, either multiple choice (one correct response out of four) or multiple response (two or more correct out of five or more). The cost is 100 USD, and you can test at a Pearson VUE center or through an online proctored session.
Of the 65 questions, 50 affect your score and 15 are unscored experimental questions that are not identified on the exam. Unanswered questions are scored as incorrect, and there is no penalty for guessing, so always submit an answer.
Results are reported as a scaled score from 100 to 1,000, with 700 as the minimum passing score. The exam uses a compensatory model: you pass the overall exam, not each section, though your score report may include section-level classifications. Interpret that feedback with caution, as the guide notes it is general.
The exam is offered in many languages, but the Italian and German versions retire after December 31, 2026. Check the certification page for current language availability before you schedule.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; AWS Certified Cloud Practitioner — Exam overview and FAQs
Domain 1: Cloud Concepts (24%)
This domain asks you to define the benefits of the AWS Cloud, identify design principles from the AWS Well-Architected Framework, understand migration benefits and strategies, and explain cloud economics.
The task statements use recognition-level verbs such as define, identify, and understand. You need to name the Well-Architected pillars and tell them apart, describe the AWS Cloud Adoption Framework and migration strategies such as database replication, and explain the value of global infrastructure, high availability, elasticity, and agility.
Cloud economics covers fixed versus variable costs, the costs of on-premises environments, licensing strategies such as Bring Your Own License, rightsizing, automation, and economies of scale. Worked example: a reporting workload that runs daily and is committed for three years points toward fixed, commitment-based pricing, while a seasonal workload whose demand spikes a few months a year points toward variable costs and rightsizing so you pay for capacity only when you use it. Being able to state which signal in the scenario selects which principle is the whole skill here.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections
Domain 2: Security and Compliance (30%)
This domain covers the AWS shared responsibility model, security and governance concepts, access management capabilities, and security components and resources.
Shared responsibility questions describe how the split between AWS and the customer shifts by service type, with Amazon RDS, AWS Lambda, and Amazon EC2 as named examples. You should also know where compliance information lives (AWS Artifact), which services support governance and auditing (Amazon CloudWatch for monitoring, AWS CloudTrail and AWS Config for auditing), and encryption in transit versus at rest.
For access management, the exam guide names IAM, root user protection, least privilege, and IAM Identity Center. The IAM best-practices documentation behind those headings recommends requiring MFA, protecting root user credentials, applying least-privilege permissions, having human users and workloads use temporary credentials through federation and IAM roles, and using IAM Identity Center for centralized access management. Practice the following drill so you can place each control, not just recite the model.
Practice exercise
Match each requirement to the relevant IAM best practice: (1) a workload needs AWS credentials without distributing long-lived keys; (2) a user should receive only the permissions needed for a task; (3) sign-in needs an additional authentication factor.
Show answer
(1) Use an IAM role that provides temporary credentials. (2) Apply least-privilege permissions. (3) Use multi-factor authentication (MFA).
The requirement identifies the control: credential lifetime, permission scope or sign-in authentication. These controls complement one another; they are not competing categories or a complete security configuration.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; Security best practices in IAM - AWS Identity and Access Management — Best-practices list
Domain 3: Cloud Technology and Services (34%)
This is the largest domain. Its task statements cover deployment and access methods, the global infrastructure, and identification of compute, database, network, storage, AI/ML, analytics, and other in-scope service categories.
Deployment questions ask you to choose between programmatic access (APIs, SDKs, CLI), the AWS Management Console, and infrastructure as code, and between cloud, hybrid, and on-premises models. Infrastructure questions cover Regions, Availability Zones, and edge locations, including how multiple Availability Zones achieve high availability and when multiple Regions make sense, such as disaster recovery, latency, or data sovereignty.
Service identification spans compute (EC2 instance types, ECS and EKS, Fargate and Lambda, auto scaling, load balancers), databases (RDS and Aurora, DynamoDB, ElastiCache, DMS and SCT), networking (VPC components, Route 53, VPN, Direct Connect), storage, AI/ML and analytics, and categories such as SNS/SQS/EventBridge, Connect and SES, developer tools, end-user computing, Amplify, and IoT Core. You are identifying purposes and appropriate uses, not configuring services.
Storage is where similar names collide hardest, because S3, EBS, and EFS all store data. The distinction is the access pattern and scope: object storage for self-contained data, block storage attached to instances, and a shared elastic file system. Work through the exercise below and check the reasoning against the AWS documentation for each service.
Practice exercise
Match each requirement to Amazon S3, Amazon EBS, or Amazon EFS, with a one-line justification: (a) product photos stored once and fetched by many application servers; (b) a durable volume for a database running on a single EC2 instance; (c) a shared POSIX file system for a fleet of Linux instances.
Show answer
(a) S3: object storage built for self-contained data with broad access. (b) EBS: a durable, block-level storage device you attach to an instance and use like a physical hard drive. (c) EFS: serverless, elastic file storage that supports NFSv4 and POSIX permissions and is accessible across compute services including EC2.
EBS is block storage for EC2, with attachment constraints such as Availability Zone and supported volume/instance types. Multi-Attach is a conditional capability, not a reason to treat every EBS volume as a shared file system. EFS provides NFS/POSIX file access for the Linux use case in this question. These distinctions explain the choices without requiring detailed storage administration.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; Amazon EBS volumes - Amazon EBS — Volume overview; What is Amazon Elastic File System? - Amazon Elastic File System — Service overview; What is Amazon S3? - Amazon Simple Storage Service — Service overview
Domain 4: Billing, Pricing, and Support (12%)
This domain compares compute purchasing options, storage tiers, and data transfer costs, and covers billing, budget, and cost-management resources plus AWS Support options.
The EC2 purchasing options page defines each model: On-Demand Instances have no long-term commitment; Savings Plans commit you to a consistent usage amount in USD per hour for one or three years; Reserved Instances commit you to a consistent instance configuration, including instance type and Region; Spot Instances request unused capacity for workloads that can be interrupted; and Dedicated Hosts, Dedicated Instances, and Capacity Reservations cover licensing and capacity needs. Match the commitment described in the stem to the model keyed to the same thing.
Cost-management resources include AWS Budgets, Cost Explorer, the Pricing Calculator, AWS Organizations with consolidated billing, cost allocation tags, and the Cost and Usage Report. Also understand incoming versus outgoing data transfer costs, including between Regions and within a Region.
One transition note: the exam outline's task statements still name Developer, Business, and Enterprise On-Ramp support, but AWS has announced these plans will be discontinued on January 1, 2027, with Business Support+ (from 29 USD per month) and revised Enterprise Support terms replacing them. Learn the outline's wording for the exam, but check the AWS Support end-of-support notice for what you will actually encounter.
Practice exercise
Match each usage pattern to On-Demand Instances, Compute Savings Plans, Reserved Instances, or Spot Instances: (1) a short, unpredictable workload with no commitment; (2) a commitment measured in USD per hour rather than a specific instance configuration; (3) a long-running workload on a known instance type in a known Region; (4) a flexible batch job that tolerates interruptions.
Show answer
(1) On-Demand Instances: use capacity without a long-term commitment. (2) Compute Savings Plans: a commitment to a consistent usage amount in USD per hour for one or three years. (3) Reserved Instances: a commitment to a consistent instance configuration, including instance type and Region. (4) Spot Instances: unused EC2 capacity, a cost-effective choice when your application can run flexibly and be interrupted.
Compare the stated commitment and interruption requirements. Compute Savings Plans use a spending commitment; Reserved Instances apply to specified instance attributes. On-Demand avoids a long-term commitment, while Spot suits interruption-tolerant work. This is a simplified identification exercise, not a price quote or proof that one option is always cheapest.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; Amazon EC2 billing and purchasing options - Amazon Elastic Compute Cloud — Purchasing options list; Developer, Business, and Enterprise On-Ramp end of support - AWS Support — End-of-support notices
Reviewing wrong answers without memorizing letters
When a practice answer is wrong, review the reasoning, not the letter. This optional five-step routine turns each miss into a reusable discrimination.
Restate the requirement sentence from the stem in your own words, then name the concept class you expected: service, feature inside a service, pricing model, security control, or governance mechanism. Compare your choice with the correct one and identify the signal word you missed, such as a commitment, an access pattern, or a residency constraint.
Next, read the relevant official service page for that specific distinction, and finish by writing one sentence stating the difference so you can reuse it. This routine is study advice, not an official requirement; the goal is justified answers rather than pattern matching.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections
Common mistakes to avoid
Check these study habits: linking service names to use cases, comparing pricing commitments, understanding individual security controls and following the depth of the official objectives.
Service names learned as isolated labels fail when two services share a keyword; anchor each name to its access pattern and scope instead, as the storage exercise demonstrates. Pricing errors usually come from treating one model as universally cheapest, when the guide asks you to identify when to use each option.
On security, a recited slogan does not place a specific control on the correct side, which is what scenario items test. Finally, remember that the exam guide explicitly lists coding and architecture design as out of scope, so do not spend preparation time on skills the exam does not test.
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; Amazon EBS volumes - Amazon EBS — Volume overview; Amazon EC2 billing and purchasing options - Amazon Elastic Compute Cloud — Purchasing options list
After the exam: validity, renewal, and next credentials
The certification is valid for three years. Before it expires, you can recertify by passing the latest version of the exam, passing an Associate- or Professional-level exam, or, where offered, completing the game-based recertification option.
Earning any AWS Certification also gives you a 50% discount on other AWS Certification exams, accessible through your AWS Certification account. For progression, current next-step credentials include AWS Certified Solutions Architect - Associate, AWS Certified Developer - Associate, and AWS Certified CloudOps Engineer - Associate.
The CloudOps credential is the current name for what was formerly AWS Certified SysOps Administrator - Associate, exam SOA-C03; existing SysOps holders keep their credential and are not required to retake. The CloudOps page notes that candidates without IT work experience would benefit from earning Cloud Practitioner first, which matches the credential's positioning as an entry point. AWS also reports, citing Lightcast data from October 2022, that job listings requiring this certification grew 84% between October 2021 and September 2022; treat that as issuer-reported market context, not a personal outcome guarantee.
Official sources: AWS Certified Cloud Practitioner — Exam overview and FAQs; AWS Certified CloudOps Engineer - Associate — Exam overview and FAQs
Final checklist and official documents
Before scheduling, confirm the current CLF-C02 guide, review all four domain weightings, know the format and scoring rules, complete storage and pricing mapping drills, and review the IAM controls from official documentation.
The CLF-C02 exam guide is the authoritative source for scope, weightings, and task statements; the EC2, EBS, EFS, S3, and IAM documentation used in this guide supply the technical distinctions, and the certification page covers logistics and pricing. Work through the checklist below, then schedule through Pearson VUE or the online proctored option.
- Confirm the CLF-C02 exam guide is the current version and note that weightings and service lists are subject to change
- Review all four domain weightings and their task statements once, in order
- Know the format: 65 questions, 90 minutes, 50 scored, scaled pass mark of 700, no guessing penalty
- Complete the storage mapping and pricing mapping exercises in this guide
- Review the IAM best-practices controls: MFA, root user protection, least privilege, temporary credentials, IAM Identity Center
- Take an official practice question set or practice exam through AWS Skill Builder
- Check current language availability and schedule at Pearson VUE or online proctored
Official sources: AWS Certified Cloud Practitioner CLF-C02 exam guide — Content outline, domains, format, and scoring sections; AWS Certified Cloud Practitioner — Exam overview and FAQs; Amazon EBS volumes - Amazon EBS — Volume overview; Amazon EC2 billing and purchasing options - Amazon Elastic Compute Cloud — Purchasing options list; What is Amazon Elastic File System? - Amazon Elastic File System — Service overview; What is Amazon S3? - Amazon Simple Storage Service — Service overview; Security best practices in IAM - AWS Identity and Access Management — Best-practices list
Official sources
Facts checked against official sources:
- AWS Certified Cloud Practitioner CLF-C02 exam guide
- Amazon EBS volumes - Amazon EBS
- Security best practices in IAM - AWS Identity and Access Management
- Developer, Business, and Enterprise On-Ramp end of support - AWS Support
- AWS Certified CloudOps Engineer - Associate
- AWS Certified Cloud Practitioner
- Amazon EC2 billing and purchasing options - Amazon Elastic Compute Cloud
- What is Amazon Elastic File System? - Amazon Elastic File System
- What is Amazon S3? - Amazon Simple Storage Service