AWS Cloud Practitioner Prep
The AWS Cloud Practitioner is the most popular cloud certification in the world. Here's what the exam covers, how to study, and a mini practice test to see where you stand.
Your colleague just got a 15% raise — because of three letters
Priya works in IT support. Same company as you, same experience level, same job title. Last month she passed the AWS Cloud Practitioner exam. This month she got promoted to "Cloud Operations Analyst" and a 15% salary bump. The exam cost $100. She studied for three weeks using free resources. The ROI is absurd.
The AWS Certified Cloud Practitioner (CLF-C02) is the most popular cloud certification on the planet. Over a million people have taken it. It doesn't require coding skills, hands-on AWS experience, or an engineering background. It's designed to prove you understand what AWS is, what its core services do, and how cloud pricing works — the exact knowledge every company now expects from anyone touching technology decisions.
This module breaks down every exam domain, gives you a study plan, and ends with a mini practice test so you can gauge where you stand right now.
The exam at a glance
Before we dive into the content, here's exactly what you're signing up for:
| Detail | What to know |
|---|---|
| Exam code | CLF-C02 (replaced CLF-C01 in September 2023) |
| Questions | 65 multiple-choice or multiple-response |
| Time | 90 minutes |
| Passing score | 700 out of 1000 (scaled scoring) |
| Cost | $100 USD |
| Format | Pearson VUE testing centre or online proctored |
| Prerequisites | None — this is entry-level |
| Validity | 3 years |
The 65 questions are split across four domains, each weighted differently:
| Domain | Weight |
|---|---|
| Domain 1: Cloud Concepts | 24% (~16 questions) |
| Domain 2: Security & Compliance | 30% (~19 questions) |
| Domain 3: Cloud Technology & Services | 34% (~22 questions) |
| Domain 4: Billing, Pricing & Support | 12% (~8 questions) |
Notice that Security and Technology together make up 64% of the exam. That's where you win or lose.
There Are No Dumb Questions
"Is 700/1000 the same as getting 70% of questions right?"
No. AWS uses scaled scoring, which means some questions are weighted more heavily than others. In practice, you probably need to answer about 70-75% of questions correctly to pass, but the exact threshold depends on question difficulty. Aim for 80%+ in your practice tests to give yourself a comfortable margin.
"Can I use notes or reference materials during the exam?"
No. The exam is closed-book. No notes, no second monitor, no phone. If you take it online, the proctor watches you through your webcam and will flag you for looking away from the screen too often.
Domain 1: Cloud Concepts (24%)
This domain tests whether you understand why cloud computing exists and what makes it different from traditional infrastructure.
What is cloud computing? At its simplest: using someone else's computers over the internet instead of buying your own. AWS runs massive data centres around the world, and you rent tiny slices of their infrastructure on demand.
The six advantages of cloud (memorise these — AWS loves testing them):
- Trade capital expense for variable expense — Instead of buying servers upfront, pay only for what you consume.
- Benefit from massive economies of scale — AWS buys hardware for millions of customers, so per-unit costs are lower than anything you could achieve alone.
- Stop guessing capacity — Scale up when you need more, scale down when you don't. No more buying servers "just in case."
- Increase speed and agility — Launch new servers in minutes, not months. Experiment cheaply.
- Stop spending money running data centres — Let AWS handle physical hardware, cooling, security guards, and power.
- Go global in minutes — Deploy your application to multiple continents with a few clicks.
Cloud deployment models — know the differences:
| Model | Definition | Example |
|---|---|---|
| Public cloud | Everything runs on AWS (or another provider's) shared infrastructure | A startup running its entire app on AWS |
| Private cloud | Cloud-like infrastructure you control, in your own data centre | A bank running VMware on its own servers |
| Hybrid cloud | Combination — some workloads on AWS, some on-premises | A hospital storing patient data on-premises but running its website on AWS |
Cloud service models (IaaS, PaaS, SaaS): The exam tests whether you can identify which model gives you which level of control. IaaS = you manage almost everything (EC2). PaaS = you manage just the code (Elastic Beanstalk). SaaS = you just log in and use it (Amazon WorkSpaces).
Domain 2: Security & Compliance (30%)
This is the heaviest domain. AWS takes security seriously, and so does the exam.
The Shared Responsibility Model — this WILL be on the exam:
Think of it like renting an apartment. The landlord (AWS) is responsible for the building's foundation, walls, plumbing, and locks on the front door. You (the tenant) are responsible for locking your own door, not leaving the stove on, and choosing a good password for your WiFi.
| AWS is responsible for... | You are responsible for... |
|---|---|
| Physical data centre security | Your data and how it's encrypted |
| Hardware maintenance | IAM users, roles, and permissions |
| Network infrastructure | Security group and firewall rules |
| Hypervisor and host OS | Operating system patches on EC2 instances |
| Global infrastructure | Application-level security |
The golden rule: AWS secures the cloud itself. You secure what you put in the cloud.
Key security services to know:
- IAM (Identity and Access Management) — Controls who can access what. Users, groups, roles, and policies. IAM is free and global (not region-specific). The root user should have MFA enabled and should rarely be used directly.
- MFA (Multi-Factor Authentication) — A second factor (like a phone app) beyond your password. AWS strongly recommends MFA on the root account.
- AWS Organizations — Manage multiple AWS accounts centrally. Apply Service Control Policies (SCPs) to restrict what accounts can do.
- AWS Shield — DDoS protection. Standard tier is free and automatic. Advanced tier costs money and gives you a dedicated response team.
- AWS WAF (Web Application Firewall) — Filters malicious web traffic (SQL injection, cross-site scripting).
- AWS CloudTrail — Logs every API call made in your account. Think of it as a security camera that records who did what, and when.
- AWS Config — Tracks configuration changes over time. "Who changed this security group last Tuesday?" AWS Config knows.
Compliance programs: AWS holds certifications like SOC 1/2/3, ISO 27001, HIPAA, PCI DSS, and FedRAMP. The exam won't ask you to explain these in detail, but you need to know that AWS Artifact is where you download compliance reports and agreements.
There Are No Dumb Questions
"If AWS handles the security of the cloud, why do breaches still happen?"
Almost every major AWS-related breach happened because the customer misconfigured something — left an S3 bucket public, used weak passwords, didn't enable MFA, or gave too many permissions. AWS's infrastructure itself is extraordinarily secure. The weak link is almost always the human setting it up.
Shared Responsibility Sorting
25 XP2. Creating IAM users with least-privilege permissions. →
Domain 3: Cloud Technology & Services (34%)
This is the broadest domain. You need to recognise what each core AWS service does — not how to configure it, just what it's for.
Compute services — running your code:
| Service | What it does | Analogy |
|---|---|---|
| EC2 (Elastic Compute Cloud) | Virtual servers you configure and manage | Renting a fully customisable computer |
| Lambda | Run code without managing servers; pay per execution | Hiring someone to do one task — you pay only when they're working |
| Elastic Beanstalk | Deploy apps without worrying about infrastructure (PaaS) | Handing your code to someone and saying "just run it" |
| ECS / EKS | Run containerised applications (Docker/Kubernetes) | Shipping your app in a standardised container that runs anywhere |
| Lightsail | Simple virtual servers for small projects | The "easy mode" version of EC2 |
Storage services — keeping your data:
| Service | What it does | Analogy |
|---|---|---|
| S3 (Simple Storage Service) | Object storage for files, images, backups — virtually unlimited | An infinite filing cabinet in the sky |
| EBS (Elastic Block Store) | Hard drives attached to EC2 instances | The hard drive inside your rented computer |
| EFS (Elastic File System) | Shared file storage across multiple EC2 instances | A shared network drive |
| S3 Glacier | Cheap archival storage for data you rarely access | A storage unit you visit once a year |
Database services — structured data:
| Service | What it does | When to use it |
|---|---|---|
| RDS (Relational Database Service) | Managed SQL databases (MySQL, PostgreSQL, etc.) | Traditional structured data with relationships |
| DynamoDB | Managed NoSQL database, extremely fast at scale | High-speed lookups, gaming leaderboards, IoT |
| Aurora | AWS's own database engine, MySQL/PostgreSQL compatible, faster and more available | When you need RDS but with better performance |
| Redshift | Data warehouse for analytics on massive datasets | Business intelligence, running complex queries on petabytes of data |
Networking services — connecting everything:
| Service | What it does |
|---|---|
| VPC (Virtual Private Cloud) | Your own isolated network within AWS — like having your own private data centre floor |
| Route 53 | DNS service (translates domain names to IP addresses) |
| CloudFront | Content Delivery Network — caches content at edge locations worldwide for faster delivery |
| Direct Connect | A dedicated physical connection from your office to AWS (not over the internet) |
| Elastic Load Balancing | Distributes incoming traffic across multiple EC2 instances |
Other services the exam covers:
- SNS (Simple Notification Service) — push notifications, emails, SMS
- SQS (Simple Queue Service) — message queue between services
- CloudWatch — monitoring and alarms (CPU usage, billing alerts)
- CloudFormation — infrastructure as code (define your entire setup in a template)
- AWS Trusted Advisor — automated best-practice checks across cost, performance, security, fault tolerance, and service limits
Match the AWS Service
25 XPDomain 4: Billing, Pricing & Support (12%)
Only 12% of the exam, but these are easy points if you know the basics.
AWS Free Tier — three types:
| Type | How it works | Example |
|---|---|---|
| Always free | Free forever, within limits | Lambda: 1 million requests/month; DynamoDB: 25GB storage |
| 12-month free | Free for 12 months after you create your account | EC2: 750 hours/month of t2.micro; S3: 5GB; RDS: 750 hours |
| Trials | Short-term free access when you activate a service | Amazon SageMaker: 2 months free |
Pricing models for EC2 (expect 2-3 questions on this):
| Model | How it works | Best for | Savings vs. On-Demand |
|---|---|---|---|
| On-Demand | Pay by the hour/second, no commitment | Short-term, unpredictable workloads | Baseline (no discount) |
| Reserved Instances | Commit to 1 or 3 years for a discount | Steady, predictable workloads | Up to 72% |
| Spot Instances | Bid on unused AWS capacity (can be interrupted) | Fault-tolerant batch jobs, data processing | Up to 90% |
| Savings Plans | Commit to a consistent $/hour spend for 1-3 years | Flexible workloads across services | Up to 72% |
| Dedicated Hosts | A physical server reserved entirely for you | Compliance, licensing requirements | Varies |
Key billing and cost management tools:
- AWS Cost Explorer — Visualise and analyse your spending over time. "Where is my money going?"
- AWS Budgets — Set spending limits and get alerts when you're approaching them.
- AWS Cost and Usage Report — The most detailed billing report, downloadable as CSV.
- AWS Pricing Calculator — Estimate costs before you build anything.
- Consolidated Billing — Combine billing across multiple accounts (via AWS Organizations) to get volume discounts.
- AWS Trusted Advisor — Among other things, identifies cost optimisation opportunities (e.g., "you have 5 idle EC2 instances").
Support plans:
| Plan | Cost | Response time for critical issues | Key features |
|---|---|---|---|
| Basic | Free | No access to support engineers | Documentation, forums, Trusted Advisor (limited checks) |
| Developer | $29/month+ | 12 hours (business hours) | Email support from Cloud Support Associates |
| Business | $100/month+ | 1 hour for production down | Phone/chat support, full Trusted Advisor, AWS Health API |
| Enterprise On-Ramp | $5,500/month+ | 30 minutes for business-critical | Technical Account Manager (TAM) pool |
| Enterprise | $15,000/month+ | 15 minutes for business-critical | Dedicated TAM, Concierge support team |
There Are No Dumb Questions
"What's a Technical Account Manager (TAM)?"
A TAM is a dedicated AWS employee assigned to your company. They proactively review your architecture, help you plan for events like product launches, and act as your single point of contact within AWS. TAMs only come with Enterprise-level support plans — they're one of the biggest perks of paying $15K+/month for support.
"Do I need to memorise exact prices?"
No. The exam tests concepts, not dollar amounts. You should know that Reserved Instances save money vs. On-Demand, and that Spot Instances are the cheapest but can be interrupted — but you won't be asked "how much does a t3.large cost per hour in us-east-1."
Mini practice test: 8 exam-style questions
These questions mirror the real exam's format and difficulty. Time yourself — you should spend about 90 seconds per question on the actual exam.
AWS Cloud Practitioner Mini Practice Test
50 XPYour 2-4 week study plan
Here's a realistic study plan assuming you can dedicate 1-2 hours per day:
Week 1: Foundations (Domains 1 & 4)
- Day 1-2: Cloud concepts, deployment models, the six advantages
- Day 3-4: Pricing models (On-Demand, Reserved, Spot), Free Tier
- Day 5-7: Billing tools (Cost Explorer, Budgets), support plans
Week 2: Security (Domain 2)
- Day 1-2: Shared Responsibility Model (drill this until it's automatic)
- Day 3-4: IAM deep dive (users, groups, roles, policies, MFA)
- Day 5-7: Security services (Shield, WAF, CloudTrail, Config, Artifact)
Week 3: Technology & Services (Domain 3)
- Day 1-2: Compute (EC2, Lambda, Elastic Beanstalk)
- Day 3-4: Storage and databases (S3, EBS, RDS, DynamoDB)
- Day 5-7: Networking (VPC, Route 53, CloudFront) and support services (CloudWatch, SNS, SQS)
Week 4: Practice and review
- Take 2-3 full-length practice exams (65 questions, 90 minutes)
- Review every wrong answer — understand why the correct answer is correct
- Re-read weak domains the day before the exam
Recommended resources (all free or low-cost):
| Resource | Cost | Why it's good |
|---|---|---|
| AWS Skill Builder (official) | Free tier available | AWS's own training platform; the Cloud Practitioner learning plan is free |
| Stephane Maarek's Udemy course | ~$15 on sale | The most popular CLF-C02 course; clear, efficient, no fluff |
| Tutorial Dojo practice exams | ~$15 | The closest thing to real exam questions; detailed explanations for every answer |
| AWS whitepapers (Well-Architected Framework, Pricing overview) | Free | The exam draws directly from these — skim them at minimum |
| AWS Free Tier account | Free | Click around the console; seeing the services makes them stick in your memory |
How to register and take the exam
Step 1: Create an account at aws.amazon.com/certification.
Step 2: Sign in to AWS Certification and select "Schedule an Exam."
Step 3: Choose "AWS Certified Cloud Practitioner (CLF-C02)."
Step 4: Pick your format:
- Testing centre — Go to a Pearson VUE location. Strict environment, no distractions. Good if you need structure.
- Online proctored — Take it from home. You'll need a quiet room, a webcam, and a clean desk. The proctor watches you the entire time.
Step 5: Pay $100 USD and pick your date. You can reschedule up to 24 hours before.
Exam day tips:
- Arrive 15 minutes early (testing centre) or log in 30 minutes early (online)
- Read each question twice before looking at the answers
- Eliminate obviously wrong answers first — you can usually narrow it down to two options
- Flag difficult questions and come back to them; don't spend 5 minutes on one question
- You have about 83 seconds per question — practice keeping that pace
- There's no penalty for guessing, so never leave a question blank
There Are No Dumb Questions
"What happens if I fail?"
You can retake the exam after 14 days. You pay the full $100 again. Most people who fail pass on their second attempt after focused review of their weak domains. AWS gives you a score report that shows your performance by domain, so you know exactly where to focus.
"Is this certification worth it if I'm not in IT?"
Yes. Product managers, marketers, finance analysts, consultants, and project managers all benefit from cloud literacy. It signals to employers that you understand the infrastructure their products run on. It's increasingly a baseline expectation, not a differentiator — which means not having it is becoming a disadvantage.
What the certification gets you
Passing the exam gets you more than a PDF to hang on your wall:
- Digital badge via Credly that you can share on LinkedIn
- Access to the AWS Certified community (private events, networking)
- 50% discount voucher for your next AWS certification exam
- Credibility in conversations about cloud architecture, cost, and vendor selection
- Career leverage — LinkedIn data shows AWS certifications are among the most-requested credentials across tech and non-tech roles
The Cloud Practitioner is a stepping stone. After passing, most people move to one of the Associate-level certifications: Solutions Architect Associate (the most popular), Developer Associate, or SysOps Administrator Associate.
Back to Priya's 15% raise
Priya studied for three weeks using free resources, passed the Cloud Practitioner exam for $100, and got promoted to Cloud Operations Analyst with a 15% salary bump. The ROI is absurd — and it is repeatable. The exam does not require coding skills or hands-on AWS experience. It proves you understand what AWS is, what its core services do, and how cloud pricing works. That is exactly the knowledge every company now expects from anyone touching technology decisions. Three weeks of focused study can change the trajectory of your career.
Key takeaways
- The AWS Cloud Practitioner (CLF-C02) is 65 questions in 90 minutes, pass mark 700/1000, cost $100. No prerequisites.
- Four domains: Cloud Concepts (24%), Security & Compliance (30%), Cloud Technology & Services (34%), Billing & Pricing (12%).
- Shared Responsibility Model is the single most-tested concept. AWS secures the cloud; you secure what's in the cloud.
- Core services to know: EC2, Lambda, S3, RDS, DynamoDB, VPC, IAM, CloudWatch, CloudFront, Route 53.
- Pricing models: On-Demand (flexible), Reserved (commitment = savings), Spot (cheapest, interruptible).
- Study plan: 2-4 weeks, 1-2 hours/day. Use AWS Skill Builder (free) + Stephane Maarek's course + Tutorial Dojo practice exams.
- Hands-on time in the AWS console is more effective than passive reading. Create a free account and click around.
Knowledge Check
1.A startup wants to host a web application that experiences unpredictable traffic spikes. They don't want to pay for idle capacity. Which combination of AWS features makes this possible?
2.Under the AWS Shared Responsibility Model, which of the following is the CUSTOMER's responsibility?
3.A company needs to store 50TB of archival data that they are required to keep for 7 years but will almost never access. Which AWS storage option minimises cost?
4.Which AWS service allows a customer to download compliance reports (such as SOC 2 and ISO 27001 audit documents) to satisfy their auditors?