O
Octo
O
Octo
CoursesPricingDashboardPrivacyTerms

© 2026 Octo

Cloud Certifications
1Cloud Computing Deep Dive2AWS vs Azure vs GCP3Cloud Architecture Fundamentals4Cloud Security Essentials5AWS Cloud Practitioner Prep6Azure Fundamentals (AZ-900) Prep7Cloud Networking & Storage8Your Cloud Career
Module 5

AWS Cloud Practitioner Prep

The AWS Cloud Practitioner is the most popular cloud certification in the world. Here's what the exam covers, how to study, and a mini practice test to see where you stand.

Your colleague just got a 15% raise — because of three letters

Priya works in IT support. Same company as you, same experience level, same job title. Last month she passed the AWS Cloud Practitioner exam. This month she got promoted to "Cloud Operations Analyst" and a 15% salary bump. The exam cost $100. She studied for three weeks using free resources. The ROI is absurd.

The AWS Certified Cloud Practitioner (CLF-C02) is the most popular cloud certification on the planet. Over a million people have taken it. It doesn't require coding skills, hands-on AWS experience, or an engineering background. It's designed to prove you understand what AWS is, what its core services do, and how cloud pricing works — the exact knowledge every company now expects from anyone touching technology decisions.

This module breaks down every exam domain, gives you a study plan, and ends with a mini practice test so you can gauge where you stand right now.

The exam at a glance

Before we dive into the content, here's exactly what you're signing up for:

DetailWhat to know
Exam codeCLF-C02 (replaced CLF-C01 in September 2023)
Questions65 multiple-choice or multiple-response
Time90 minutes
Passing score700 out of 1000 (scaled scoring)
Cost$100 USD
FormatPearson VUE testing centre or online proctored
PrerequisitesNone — this is entry-level
Validity3 years

The 65 questions are split across four domains, each weighted differently:

DomainWeight
Domain 1: Cloud Concepts24% (~16 questions)
Domain 2: Security & Compliance30% (~19 questions)
Domain 3: Cloud Technology & Services34% (~22 questions)
Domain 4: Billing, Pricing & Support12% (~8 questions)

Notice that Security and Technology together make up 64% of the exam. That's where you win or lose.

There Are No Dumb Questions

"Is 700/1000 the same as getting 70% of questions right?"

No. AWS uses scaled scoring, which means some questions are weighted more heavily than others. In practice, you probably need to answer about 70-75% of questions correctly to pass, but the exact threshold depends on question difficulty. Aim for 80%+ in your practice tests to give yourself a comfortable margin.

"Can I use notes or reference materials during the exam?"

No. The exam is closed-book. No notes, no second monitor, no phone. If you take it online, the proctor watches you through your webcam and will flag you for looking away from the screen too often.

Domain 1: Cloud Concepts (24%)

This domain tests whether you understand why cloud computing exists and what makes it different from traditional infrastructure.

What is cloud computing? At its simplest: using someone else's computers over the internet instead of buying your own. AWS runs massive data centres around the world, and you rent tiny slices of their infrastructure on demand.

The six advantages of cloud (memorise these — AWS loves testing them):

  1. Trade capital expense for variable expense — Instead of buying servers upfront, pay only for what you consume.
  2. Benefit from massive economies of scale — AWS buys hardware for millions of customers, so per-unit costs are lower than anything you could achieve alone.
  3. Stop guessing capacity — Scale up when you need more, scale down when you don't. No more buying servers "just in case."
  4. Increase speed and agility — Launch new servers in minutes, not months. Experiment cheaply.
  5. Stop spending money running data centres — Let AWS handle physical hardware, cooling, security guards, and power.
  6. Go global in minutes — Deploy your application to multiple continents with a few clicks.

Cloud deployment models — know the differences:

ModelDefinitionExample
Public cloudEverything runs on AWS (or another provider's) shared infrastructureA startup running its entire app on AWS
Private cloudCloud-like infrastructure you control, in your own data centreA bank running VMware on its own servers
Hybrid cloudCombination — some workloads on AWS, some on-premisesA hospital storing patient data on-premises but running its website on AWS

Cloud service models (IaaS, PaaS, SaaS): The exam tests whether you can identify which model gives you which level of control. IaaS = you manage almost everything (EC2). PaaS = you manage just the code (Elastic Beanstalk). SaaS = you just log in and use it (Amazon WorkSpaces).

🔑The pizza analogy AWS uses
AWS's own training materials compare cloud models to pizza. **On-premises** = you make pizza from scratch at home. **IaaS** = you rent an oven (you still make the pizza). **PaaS** = you order a take-and-bake pizza (just put it in the oven). **SaaS** = you order delivery (just eat it). If you see a question about "who manages what," think about who's making the pizza.

Domain 2: Security & Compliance (30%)

This is the heaviest domain. AWS takes security seriously, and so does the exam.

The Shared Responsibility Model — this WILL be on the exam:

Think of it like renting an apartment. The landlord (AWS) is responsible for the building's foundation, walls, plumbing, and locks on the front door. You (the tenant) are responsible for locking your own door, not leaving the stove on, and choosing a good password for your WiFi.

AWS is responsible for...You are responsible for...
Physical data centre securityYour data and how it's encrypted
Hardware maintenanceIAM users, roles, and permissions
Network infrastructureSecurity group and firewall rules
Hypervisor and host OSOperating system patches on EC2 instances
Global infrastructureApplication-level security

The golden rule: AWS secures the cloud itself. You secure what you put in the cloud.

Key security services to know:

  • IAM (Identity and Access Management) — Controls who can access what. Users, groups, roles, and policies. IAM is free and global (not region-specific). The root user should have MFA enabled and should rarely be used directly.
  • MFA (Multi-Factor Authentication) — A second factor (like a phone app) beyond your password. AWS strongly recommends MFA on the root account.
  • AWS Organizations — Manage multiple AWS accounts centrally. Apply Service Control Policies (SCPs) to restrict what accounts can do.
  • AWS Shield — DDoS protection. Standard tier is free and automatic. Advanced tier costs money and gives you a dedicated response team.
  • AWS WAF (Web Application Firewall) — Filters malicious web traffic (SQL injection, cross-site scripting).
  • AWS CloudTrail — Logs every API call made in your account. Think of it as a security camera that records who did what, and when.
  • AWS Config — Tracks configuration changes over time. "Who changed this security group last Tuesday?" AWS Config knows.

Compliance programs: AWS holds certifications like SOC 1/2/3, ISO 27001, HIPAA, PCI DSS, and FedRAMP. The exam won't ask you to explain these in detail, but you need to know that AWS Artifact is where you download compliance reports and agreements.

There Are No Dumb Questions

"If AWS handles the security of the cloud, why do breaches still happen?"

Almost every major AWS-related breach happened because the customer misconfigured something — left an S3 bucket public, used weak passwords, didn't enable MFA, or gave too many permissions. AWS's infrastructure itself is extraordinarily secure. The weak link is almost always the human setting it up.

⚡

Shared Responsibility Sorting

25 XP
AWS's responsibilityyour (the customer's) responsibility
Patching the physical servers in a data centre.
Creating IAM users with least-privilege permissions.
Encrypting your application's database.
Ensuring the data centre has backup power generators.
Configuring security groups to restrict network traffic.
Replacing a failed hard drive in the storage infrastructure.

2. Creating IAM users with least-privilege permissions. →

0/6 answered

Domain 3: Cloud Technology & Services (34%)

This is the broadest domain. You need to recognise what each core AWS service does — not how to configure it, just what it's for.

Compute services — running your code:

ServiceWhat it doesAnalogy
EC2 (Elastic Compute Cloud)Virtual servers you configure and manageRenting a fully customisable computer
LambdaRun code without managing servers; pay per executionHiring someone to do one task — you pay only when they're working
Elastic BeanstalkDeploy apps without worrying about infrastructure (PaaS)Handing your code to someone and saying "just run it"
ECS / EKSRun containerised applications (Docker/Kubernetes)Shipping your app in a standardised container that runs anywhere
LightsailSimple virtual servers for small projectsThe "easy mode" version of EC2

Storage services — keeping your data:

ServiceWhat it doesAnalogy
S3 (Simple Storage Service)Object storage for files, images, backups — virtually unlimitedAn infinite filing cabinet in the sky
EBS (Elastic Block Store)Hard drives attached to EC2 instancesThe hard drive inside your rented computer
EFS (Elastic File System)Shared file storage across multiple EC2 instancesA shared network drive
S3 GlacierCheap archival storage for data you rarely accessA storage unit you visit once a year

Database services — structured data:

ServiceWhat it doesWhen to use it
RDS (Relational Database Service)Managed SQL databases (MySQL, PostgreSQL, etc.)Traditional structured data with relationships
DynamoDBManaged NoSQL database, extremely fast at scaleHigh-speed lookups, gaming leaderboards, IoT
AuroraAWS's own database engine, MySQL/PostgreSQL compatible, faster and more availableWhen you need RDS but with better performance
RedshiftData warehouse for analytics on massive datasetsBusiness intelligence, running complex queries on petabytes of data

Networking services — connecting everything:

ServiceWhat it does
VPC (Virtual Private Cloud)Your own isolated network within AWS — like having your own private data centre floor
Route 53DNS service (translates domain names to IP addresses)
CloudFrontContent Delivery Network — caches content at edge locations worldwide for faster delivery
Direct ConnectA dedicated physical connection from your office to AWS (not over the internet)
Elastic Load BalancingDistributes incoming traffic across multiple EC2 instances

Other services the exam covers:

  • SNS (Simple Notification Service) — push notifications, emails, SMS
  • SQS (Simple Queue Service) — message queue between services
  • CloudWatch — monitoring and alarms (CPU usage, billing alerts)
  • CloudFormation — infrastructure as code (define your entire setup in a template)
  • AWS Trusted Advisor — automated best-practice checks across cost, performance, security, fault tolerance, and service limits
⚠️Don't try to learn every AWS service
AWS has 200+ services. The Cloud Practitioner exam only tests about 30-40 of them, and only at a surface level. You need to know *what* each service does, not *how* to configure it. Don't fall into the trap of watching 40-hour courses that cover every service in detail. Focus on the services listed above.

⚡

Match the AWS Service

25 XP
For each scenario, pick the correct AWS service: 1. You need to store 10TB of image files cheaply, and you won't access most of them for months. → ___ 2. You want to run a Python function that processes an uploaded file, without managing any server. → ___ 3. Your website is loading slowly for users in Australia because your servers are in the US. → ___ 4. You need a relational database (PostgreSQL) but don't want to manage patches, backups, or scaling. → ___ 5. You want to receive an alert if your monthly AWS bill exceeds $500. → ___ *Services to choose from: S3 Glacier, Lambda, CloudFront, RDS, CloudWatch*

Domain 4: Billing, Pricing & Support (12%)

Only 12% of the exam, but these are easy points if you know the basics.

AWS Free Tier — three types:

TypeHow it worksExample
Always freeFree forever, within limitsLambda: 1 million requests/month; DynamoDB: 25GB storage
12-month freeFree for 12 months after you create your accountEC2: 750 hours/month of t2.micro; S3: 5GB; RDS: 750 hours
TrialsShort-term free access when you activate a serviceAmazon SageMaker: 2 months free

Pricing models for EC2 (expect 2-3 questions on this):

ModelHow it worksBest forSavings vs. On-Demand
On-DemandPay by the hour/second, no commitmentShort-term, unpredictable workloadsBaseline (no discount)
Reserved InstancesCommit to 1 or 3 years for a discountSteady, predictable workloadsUp to 72%
Spot InstancesBid on unused AWS capacity (can be interrupted)Fault-tolerant batch jobs, data processingUp to 90%
Savings PlansCommit to a consistent $/hour spend for 1-3 yearsFlexible workloads across servicesUp to 72%
Dedicated HostsA physical server reserved entirely for youCompliance, licensing requirementsVaries

Key billing and cost management tools:

  • AWS Cost Explorer — Visualise and analyse your spending over time. "Where is my money going?"
  • AWS Budgets — Set spending limits and get alerts when you're approaching them.
  • AWS Cost and Usage Report — The most detailed billing report, downloadable as CSV.
  • AWS Pricing Calculator — Estimate costs before you build anything.
  • Consolidated Billing — Combine billing across multiple accounts (via AWS Organizations) to get volume discounts.
  • AWS Trusted Advisor — Among other things, identifies cost optimisation opportunities (e.g., "you have 5 idle EC2 instances").

Support plans:

PlanCostResponse time for critical issuesKey features
BasicFreeNo access to support engineersDocumentation, forums, Trusted Advisor (limited checks)
Developer$29/month+12 hours (business hours)Email support from Cloud Support Associates
Business$100/month+1 hour for production downPhone/chat support, full Trusted Advisor, AWS Health API
Enterprise On-Ramp$5,500/month+30 minutes for business-criticalTechnical Account Manager (TAM) pool
Enterprise$15,000/month+15 minutes for business-criticalDedicated TAM, Concierge support team

There Are No Dumb Questions

"What's a Technical Account Manager (TAM)?"

A TAM is a dedicated AWS employee assigned to your company. They proactively review your architecture, help you plan for events like product launches, and act as your single point of contact within AWS. TAMs only come with Enterprise-level support plans — they're one of the biggest perks of paying $15K+/month for support.

"Do I need to memorise exact prices?"

No. The exam tests concepts, not dollar amounts. You should know that Reserved Instances save money vs. On-Demand, and that Spot Instances are the cheapest but can be interrupted — but you won't be asked "how much does a t3.large cost per hour in us-east-1."

Mini practice test: 8 exam-style questions

These questions mirror the real exam's format and difficulty. Time yourself — you should spend about 90 seconds per question on the actual exam.

⚡

AWS Cloud Practitioner Mini Practice Test

50 XP
Answer each question, then check your answers against the key at the bottom. **Q1.** A company wants to run a workload for exactly 1 year with predictable, steady usage. Which EC2 pricing model offers the best savings? A) On-Demand B) Reserved Instance C) Spot Instance D) Dedicated Host **Q2.** Which AWS service provides DDoS protection at no additional cost? A) AWS WAF B) AWS Shield Standard C) Amazon GuardDuty D) AWS Shield Advanced **Q3.** Under the Shared Responsibility Model, who is responsible for patching the guest operating system on an EC2 instance? A) AWS B) The customer C) Both AWS and the customer jointly D) The third-party vendor who sold the AMI **Q4.** A developer wants to run code in response to an event (like a file upload to S3) without provisioning or managing servers. Which service should they use? A) Amazon EC2 B) AWS Lambda C) Amazon ECS D) AWS Elastic Beanstalk **Q5.** Which tool should a company use to estimate the cost of a new AWS architecture before building it? A) AWS Cost Explorer B) AWS Budgets C) AWS Pricing Calculator D) AWS Trusted Advisor **Q6.** Where can a customer download AWS compliance reports such as SOC and ISO certifications? A) AWS Config B) AWS Artifact C) AWS CloudTrail D) AWS Organizations **Q7.** A company needs to store infrequently accessed data for regulatory purposes at the lowest possible cost. Which storage class is the best fit? A) Amazon S3 Standard B) Amazon EBS C) Amazon S3 Glacier Deep Archive D) Amazon EFS **Q8.** Which AWS support plan provides access to a dedicated Technical Account Manager (TAM)? A) Developer B) Business C) Enterprise D) Basic **Answer key:** Q1: B, Q2: B, Q3: B, Q4: B, Q5: C, Q6: B, Q7: C, Q8: C Score yourself: 7-8 correct = You're ready to book the exam. 5-6 = Almost there, review weak domains. Below 5 = Spend another week studying before you test.

Your 2-4 week study plan

Here's a realistic study plan assuming you can dedicate 1-2 hours per day:

Week 1: Foundations (Domains 1 & 4)

  • Day 1-2: Cloud concepts, deployment models, the six advantages
  • Day 3-4: Pricing models (On-Demand, Reserved, Spot), Free Tier
  • Day 5-7: Billing tools (Cost Explorer, Budgets), support plans

Week 2: Security (Domain 2)

  • Day 1-2: Shared Responsibility Model (drill this until it's automatic)
  • Day 3-4: IAM deep dive (users, groups, roles, policies, MFA)
  • Day 5-7: Security services (Shield, WAF, CloudTrail, Config, Artifact)

Week 3: Technology & Services (Domain 3)

  • Day 1-2: Compute (EC2, Lambda, Elastic Beanstalk)
  • Day 3-4: Storage and databases (S3, EBS, RDS, DynamoDB)
  • Day 5-7: Networking (VPC, Route 53, CloudFront) and support services (CloudWatch, SNS, SQS)

Week 4: Practice and review

  • Take 2-3 full-length practice exams (65 questions, 90 minutes)
  • Review every wrong answer — understand why the correct answer is correct
  • Re-read weak domains the day before the exam

Recommended resources (all free or low-cost):

ResourceCostWhy it's good
AWS Skill Builder (official)Free tier availableAWS's own training platform; the Cloud Practitioner learning plan is free
Stephane Maarek's Udemy course~$15 on saleThe most popular CLF-C02 course; clear, efficient, no fluff
Tutorial Dojo practice exams~$15The closest thing to real exam questions; detailed explanations for every answer
AWS whitepapers (Well-Architected Framework, Pricing overview)FreeThe exam draws directly from these — skim them at minimum
AWS Free Tier accountFreeClick around the console; seeing the services makes them stick in your memory
🔑The hands-on trick that saves hours of reading
Create a free AWS account and spend 30 minutes clicking through the console. Launch a t2.micro EC2 instance (free tier). Create an S3 bucket. Look at IAM. Navigate to Cost Explorer. You'll learn more about how these services are organised in 30 minutes of clicking than in 3 hours of reading.

How to register and take the exam

Step 1: Create an account at aws.amazon.com/certification.

Step 2: Sign in to AWS Certification and select "Schedule an Exam."

Step 3: Choose "AWS Certified Cloud Practitioner (CLF-C02)."

Step 4: Pick your format:

  • Testing centre — Go to a Pearson VUE location. Strict environment, no distractions. Good if you need structure.
  • Online proctored — Take it from home. You'll need a quiet room, a webcam, and a clean desk. The proctor watches you the entire time.

Step 5: Pay $100 USD and pick your date. You can reschedule up to 24 hours before.

Exam day tips:

  • Arrive 15 minutes early (testing centre) or log in 30 minutes early (online)
  • Read each question twice before looking at the answers
  • Eliminate obviously wrong answers first — you can usually narrow it down to two options
  • Flag difficult questions and come back to them; don't spend 5 minutes on one question
  • You have about 83 seconds per question — practice keeping that pace
  • There's no penalty for guessing, so never leave a question blank

There Are No Dumb Questions

"What happens if I fail?"

You can retake the exam after 14 days. You pay the full $100 again. Most people who fail pass on their second attempt after focused review of their weak domains. AWS gives you a score report that shows your performance by domain, so you know exactly where to focus.

"Is this certification worth it if I'm not in IT?"

Yes. Product managers, marketers, finance analysts, consultants, and project managers all benefit from cloud literacy. It signals to employers that you understand the infrastructure their products run on. It's increasingly a baseline expectation, not a differentiator — which means not having it is becoming a disadvantage.

What the certification gets you

Passing the exam gets you more than a PDF to hang on your wall:

  • Digital badge via Credly that you can share on LinkedIn
  • Access to the AWS Certified community (private events, networking)
  • 50% discount voucher for your next AWS certification exam
  • Credibility in conversations about cloud architecture, cost, and vendor selection
  • Career leverage — LinkedIn data shows AWS certifications are among the most-requested credentials across tech and non-tech roles

The Cloud Practitioner is a stepping stone. After passing, most people move to one of the Associate-level certifications: Solutions Architect Associate (the most popular), Developer Associate, or SysOps Administrator Associate.

Back to Priya's 15% raise

Priya studied for three weeks using free resources, passed the Cloud Practitioner exam for $100, and got promoted to Cloud Operations Analyst with a 15% salary bump. The ROI is absurd — and it is repeatable. The exam does not require coding skills or hands-on AWS experience. It proves you understand what AWS is, what its core services do, and how cloud pricing works. That is exactly the knowledge every company now expects from anyone touching technology decisions. Three weeks of focused study can change the trajectory of your career.

Key takeaways

  • The AWS Cloud Practitioner (CLF-C02) is 65 questions in 90 minutes, pass mark 700/1000, cost $100. No prerequisites.
  • Four domains: Cloud Concepts (24%), Security & Compliance (30%), Cloud Technology & Services (34%), Billing & Pricing (12%).
  • Shared Responsibility Model is the single most-tested concept. AWS secures the cloud; you secure what's in the cloud.
  • Core services to know: EC2, Lambda, S3, RDS, DynamoDB, VPC, IAM, CloudWatch, CloudFront, Route 53.
  • Pricing models: On-Demand (flexible), Reserved (commitment = savings), Spot (cheapest, interruptible).
  • Study plan: 2-4 weeks, 1-2 hours/day. Use AWS Skill Builder (free) + Stephane Maarek's course + Tutorial Dojo practice exams.
  • Hands-on time in the AWS console is more effective than passive reading. Create a free account and click around.

?

Knowledge Check

1.A startup wants to host a web application that experiences unpredictable traffic spikes. They don't want to pay for idle capacity. Which combination of AWS features makes this possible?

2.Under the AWS Shared Responsibility Model, which of the following is the CUSTOMER's responsibility?

3.A company needs to store 50TB of archival data that they are required to keep for 7 years but will almost never access. Which AWS storage option minimises cost?

4.Which AWS service allows a customer to download compliance reports (such as SOC 2 and ISO 27001 audit documents) to satisfy their auditors?

Previous

Cloud Security Essentials

Next

Azure Fundamentals (AZ-900) Prep