About the Exam and This Book

In this introduction you will learn who the AWS Certified Cloud Practitioner certification is for, how the CLF-C02 exam is built and scored, what each of the four content domains tests, how to read and reason through exam questions, how to register and choose between a test center and an online exam, and how to plan your study time. You will finish by setting up a safe AWS account to practice in. This introduction is not tied to a single exam domain; it prepares you for all of them.

Who this certification is for

The AWS Certified Cloud Practitioner is the entry point to the AWS certification path. It proves that you understand what the AWS Cloud is, what the main services do, how security responsibilities are shared, and how AWS pricing and support work. It does not prove that you can build complex systems, write infrastructure code, or tune a database. Those skills belong to the Associate and Professional exams.

That makes the certification useful for a much wider group than engineers. People who typically take it include: Career changers and students who want a recognized first credential before moving on to an Associate-level exam such as Solutions Architect Associate.

Sales, marketing, and account staff at companies that sell to or partner with AWS customers, who need to talk about the cloud with confidence.

Managers, project leads, and finance staff who approve cloud budgets, sign off on migrations, or read cost reports.

Developers and administrators who already work with on-premises systems and want a structured overview before going deeper.

AWS recommends about six months of exposure to the AWS Cloud, but this is guidance, not a requirement. There are no prerequisites. If you have never logged in to the AWS Management Console, this book and the short labs inside it are designed to fill that gap.

Good to know

The Cloud Practitioner certification is valid for three years. You can renew it by passing the current version of the same exam or by passing any higher-level AWS certification, which automatically renews the foundational one.

The exam at a glance

The current version of the exam has the code CLF-C02. Whenever you see practice material, check that it targets CLF-C02 and not the retired CLF-C01. The table below summarizes the format.

• Item Detail
• Exam code CLF-C02
• Questions 65 (50 scored, 15 unscored)
• Time 90 minutes
• Question types Multiple choice, multiple response
• Passing score 700 on ascale of 100 to 1,000
• Cost 100 USD (plus local taxes)
• Delivery Pearson VUE test center or online proctored
• Validity 3 years

Fifteen of the 65 questions are unscored. AWS uses them to test new questions for future versions of the exam. You will not know which ones they are, so treat every question as if it counts.

Ninety minutes for 65 questions works out to about 83 seconds per question. Most candidates finish with time to spare, because foundational questions are short. The time pressure is low; the bigger risk is overthinking a simple question.

Exam tip

If English is not your first language, you can request the ESL +30 accommodation when you schedule, which adds 30 minutes to the exam. You must request it before booking the exam it applies to.

The four exam domains

AWS publishes an exam guide that divides the content into four domains. Each domain has a weight, which tells you roughly what share of the scored questions comes from it.

Of 50 scored questions: about 12 + 15 + 17 + 6. Domains 2 and 3 together = 64%.

Figure 0.1: The four CLF-C02 domains and their share of scored questions. Security and Technology together make up almost two-thirds of the exam.

Domain 1: Cloud Concepts (24%)

This domain checks that you understand why organizations move to the cloud and how they think about it. Expect questions on:

The benefits of the AWS Cloud: economies of scale, global reach, speed and agility, high availability, elasticity. The design principles of the AWS Well-Architected Framework and its six pillars.

Migration strategies and the AWS Cloud Adoption Framework (AWS CAF).

Cloud economics: fixed versus variable cost, the effect of rightsizing, licensing options, and what costs go away when you leave a data center.

Chapters 1, 2, and the migration and economics chapters cover this domain.

Domain 2: Security and Compliance (30%)

This is the second-largest domain. It tests:

The AWS shared responsibility model, which is probably the single most-tested idea on the exam.

Security, governance, and compliance concepts: where to find compliance reports (AWS Artifact), encryption at rest and in transit, logging and auditing.

Access management: IAM users, groups, roles, and policies; the root user and how to protect it; multi-factor authentication (MFA); IAM Identity Center.

Security services and resources: AWS Shield, AWS WAF, Amazon GuardDuty, Amazon Inspector, AWS Security Hub, Amazon Detective, AWS Key Management Service (KMS), AWS Secrets Manager, and where to get security help.

Domain 3: Cloud Technology and Services (34%)

The largest domain is also the broadest. It asks you to recognize the right service for a described need. Topics include: Ways to deploy and operate in AWS: the console, the CLI, SDKs, and infrastructure as code with AWS CloudFormation.

The AWS global infrastructure: Regions, Availability Zones, edge locations.

Compute, containers, and serverless: Amazon EC2, AWS Lambda, Amazon ECS, Amazon EKS, AWS Fargate. Databases, networking, and storage: Amazon RDS, Amazon Aurora, Amazon DynamoDB, Amazon VPC, Amazon Route 53, Amazon CloudFront, Amazon S3, Amazon EBS, Amazon EFS.

Analytics, AI and machine learning, and other service categories such as messaging, monitoring, and developer tools. You do not need to configure these services in depth. You do need to know what each one is for and how to tell similar services apart.

Domain 4: Billing, Pricing, and Support (12%)

The smallest domain is also the most predictable. It covers:

Pricing models for compute: On-Demand, Reserved Instances, Savings Plans, Spot Instances, Dedicated Hosts. Billing and cost management tools: AWS Budgets, AWS Cost Explorer, AWS Pricing Calculator, AWS Cost and Usage Report, AWS Organizations consolidated billing, cost allocation tags.

Support resources: the AWS Support plans, AWS Trusted Advisor, AWS Health Dashboard, AWS re:Post, the AWS Marketplace, and AWS Partners.

Exam tip

Domain 4 is only 12%, but its questions are among the easiest to answer correctly with memorization. A few hours on pricing models and support plans is the best return on study time in the whole book.

Question styles and how to reason through them

Every question on the exam is one of two types:

Multiple choice: one correct answer and three incorrect answers (called distractors).

Multiple response: two or more correct answers out of five or more options. The question says how many to choose, for example “(Choose two.)”. There is no partial credit: you must select all the correct options to earn the point.

Most questions are short scenarios. A company wants something, and you pick the service, feature, or concept that meets the need. Unanswered questions are scored as wrong, and there is no penalty for guessing, so never leave a question blank. A dependable method for any question:

• 1. Read the last sentence first. It tells you what is being asked: a service, a benefit, a pillar, a responsibility.
• 2. Underline the qualifiers. Words such as most cost-effective, least operational overhead, highly available, serverless, and managed decide between two otherwise valid answers.
• 3. Eliminate what is clearly wrong. Usually one or two options belong to an entirely different category (a storage service offered as an answer to a networking question).
• 4. Choose the AWS-native, managed answer when in doubt. Foundational questions reward the answer that removes work from the customer.

Worked example 1: a multiple choice question

A company runs a reporting application on a single server in its own data center. Each month-end, demand triples for two days, and the server becomes slow. For the rest of the month the server is mostly idle. Which benefit of the AWS Cloud addresses this problem MOST directly?

• A. Global reach
• B. Elasticity
• C. Economies of scale
• D. Trade fixed expense for variable expense

Reasoning. The last sentence asks for a benefit, and the qualifier is most directly. The problem is a demand pattern: short spikes and long idle periods. Global reach (A) is about serving users in many geographic locations, which is not mentioned. Economies of scale (C) explains why AWS can charge lower prices, but it does not fix a slow server. Option D is attractive, because paying only for what you use would save money during idle periods. However, the problem described is that capacity does not match demand. Elasticity, the ability to add resources automatically when demand rises and remove them when it falls, solves both the slowness and the waste. The answer is B.

Notice how D was a true statement about the cloud but not the best answer. Many distractors work this way. Your job is to match the answer to the specific problem.

Worked example 2: a multiple response question

Which of the following are the customer’s responsibility under the AWS shared responsibility model when using Amazon EC2? (Choose two.)

• A. Patching the guest operating system
• B. Maintaining the physical hosts
• C. Configuring security group rules
• D. Replacing failed disk drives in the data center
• E. Securing the hypervisor

Reasoning. The question asks you to pick exactly two. Start by sorting each option into “AWS” or “customer”. AWS is responsible for the security of the cloud: physical facilities, hardware, and the virtualization layer. That puts B, D, and E on the AWS side. The customer is responsible for security in the cloud: for EC2, that includes the guest operating system and its patches, and the firewall rules (security groups) they define. The answer is A and C. If you only chose A, you would get no credit, so always count your selections against the number requested.

Common trap

For a service like Amazon RDS or AWS Lambda, AWS patches the operating system for you. The same “patch the OS” option that is correct for EC2 is wrong for a managed service. Always notice which service the question names.

How the exam is scored

Your result is reported as a scaled score between 100 and 1,000. You need 700 to pass. A scaled score is not a simple percentage. Different versions of the exam contain different questions, and some sets are slightly harder than others. Scaling adjusts for this, so that a 700 means the same level of knowledge on every version. Because of this, you should not try to convert 700 into an exact number of correct answers. As a working target, aim to score 80% or higher on quality practice tests before booking.

The exam uses a compensatory scoring model. You do not need to pass each domain separately. Only your total score matters. A weak result in Billing can be offset by a strong result in Technology. Your score report shows how you did in each domain (as “meets competencies” or “needs improvement”), which is useful feedback if you need to retake. Your score report normally appears in your AWS Certification account within five business days of the exam. If you do not pass, you must wait 14 days before retaking the exam, and you pay the exam fee again.

Registering for the exam

You register through the AWS Certification website, which requires you to sign in with an AWS Builder ID or an account linked to it. From there you choose the exam, the language, and the delivery method. Exams are delivered by Pearson

Vue.

• You have two delivery options:
• Test center Online proctored
• Where A Pearson VUE testing center Your home or office
• Equipment Provided Your own computer, webcam, microphone
• Environment Controlled by the center Private, quiet room, clear desk
• Check-in ID check at desk Photos of ID and room via phone or
• webcam
• Main risk Travel and scheduling Technical or environment problems

Test center delivery is the more predictable choice. You arrive, show identification, store your belongings in a locker, and sit at a prepared workstation. If something goes wrong with the computer, staff are there to fix it. Online proctored delivery is convenient but strict. Before the exam you must run the system test on the exact computer and network you will use. On exam day, you photograph your identification and your workspace, and a proctor watches you through your webcam for the entire session. Your desk must be clear, nobody else may enter the room, and you may not read questions aloud, look away from the screen for long periods, or wear headphones. Corporate laptops often fail the system test because of security software, so test early.

Exam tip

Whichever option you choose, check in early. For online exams you can typically begin check-in 30 minutes before your appointment. Have a government-issued photo ID ready, and make sure the name on it exactly matches the name in your certification account.

Study plans

How much time you need depends on where you start. Use the plans below as a starting point and adjust to your schedule. Both assume about one to one and a half hours of study on study days.

shared resp.

Rule of thumb: book the exam when practice scores are steadily 80% or higher.

Figure 0.2: Two study plans side by side. The 4-week plan suits newcomers to the cloud; the 2-week plan suits people with some IT or AWS exposure.

• The 4-week plan (new to the cloud)
• Week Focus Chapters and activities
• 1 Cloud concepts Introduction, Chapters 1 and 2; set up
• youraccount; first lab
• 2 Security and compliance Security chapters; IAM labs; review missed
• practice questions
• 3 Technology and services Infrastructure, compute, storage, database,
• networking chapters
• 4 Billing, support, review Billing chapter; full practice exams;
• targeted review; book exam

In week 4, take at least two full-length timed practice exams. After each one, review every question, including the ones you got right by guessing. Re-read the sections that cover your weakest domain.

• The 2-week plan (some IT or AWS experience)
• Days Focus
• 1 to 3 Chapters 1 and 2, plusall chapter summaries skimmed
• 4 to 6 Security chapters in full; IAM and shared responsibility
• 7 to 10 Technology chapters; focus on telling similar servicesapart
• 11 to 12 Billing and support; memorize support plansand pricing models
• 13 to 14 Two timed practice exams; review; final summary pass

The 2-week plan works only if you are honest with yourself about what you already know. If your first practice score is below 65%, switch to the 4-week plan.

How to use this book

Each chapter follows the same structure so you always know where you are:

Chapter opener in italics, listing what you will learn and which exam domain the chapter maps to. Numbered sections that explain each topic in plain language, with diagrams.

Callout boxes that you can scan quickly on review:

Exam tip boxes point out how a topic is tested.

Good to know boxes add useful context that is unlikely to be tested directly.

Common trap boxes flag distractors and misunderstandings that cost people points.

Real-world scenario boxes show a concept applied in an actual business situation.

Hands-on lab boxes give short, numbered steps to try in the AWS Management Console.

Chapter summary and Key terms for fast review the week before your exam.

Practice questions in the style of the real exam, followed by Answers and explanations that tell you why the right answer is right and why the tempting wrong answers are wrong.

A good rhythm for each chapter is: read the chapter, do the lab, answer the practice questions without looking back, then read every explanation. Keep a list of the terms you missed. That list becomes your personal review sheet for the final days.

Console illustrations in this book are simplified drawings, not real screenshots. The AWS console changes often, so menu names and layouts may differ slightly from what you see. Look for the same labels rather than the same positions.

Good to know

Facts in this book are current as of mid-2026. AWS updates services, names, and prices frequently. When something on screen looks different from the book, the AWS documentation is the authority, and the exam guide published by AWS defines what is in scope.

Setting up a safe AWS account

Reading about the cloud is useful; clicking through it is better. The labs in this book are short and use low-cost or free features. Before you start, you need an AWS account that is protected from two risks: someone else taking it over, and an unexpected bill.

About the AWS Free Tier

AWS offers a Free Tier so new customers can experiment at no cost. For accounts created on or after July 15, 2025, AWS offers a free plan that provides up to 200 USD in credits: 100 USD at sign-up and up to 100 USD more for completing introductory activities, for up to six months. During the free plan, you are not charged beyond your credits. You can upgrade to a paid plan at any time. AWS also continues to offer Always Free usage that does not expire, such as a monthly allowance of AWS Lambda requests and Amazon DynamoDB storage.

Older practice material, and possibly some exam questions, describe three types of Free Tier offers: Always Free, 12 months free, and Trials (short free trials of specific services). Know those three names for the exam, even though the sign-up experience has changed.

Common trap

“Free” does not mean “nothing can ever cost money”. Once an account is on a paid plan, any usage beyond the free allowance is billed at normal rates. A forgotten resource left running for a month is the most common cause of surprise bills, which is why you set a budget alert below.

Protecting the root user

When you create an AWS account, you sign up with an email address and password. That identity is the root user. It has complete, unrestricted access to everything in the account, including closing the account and changing billing details. AWS recommends that you use the root user only for the few tasks that require it, and protect it with multi-factor authentication (MFA).

Hands-on lab

• 1. Go to the AWS website and choose Create an AWS account. Enter an email address you control and an account name such as “study-lab”. Use a strong, unique password.
• 2. Complete the contact and payment details and verify your phone number. Choose the free plan if you are offered a choice.
• 3. Sign in to the AWS Management Console as the root user.
• 4. Open the account menu at the top right and choose Security credentials.
• 5. In the Multi-factor authentication (MFA) section, choose Assign MFA device. Give it a name, select Authenticator app (or a passkey or security key if you have one), and follow the prompts. Scan the QR code with an authenticator app and enter two consecutive codes.
• 6. Confirm that the MFA device now appears in the list. Sign out and sign back in to check that you are asked for a code.
• 7. Do not create access keys for the root user. If any exist, delete them.
• 8. In the search bar, type Budgets and open AWS Budgets (part of Billing and Cost Management). Choose Create budget.
• 9. Select Use a template, then Zero spend budget (or a Monthly cost budget with a small amount such as 5 USD). Enter your email address as the recipient and choose Create budget.
• 10. Optional but recommended: open IAM Identity Center or IAM and create an everyday administrative identity for yourself, so you can stop using the root user for routine work. Later chapters walk through this in detail. A zero spend budget sends you an email as soon as your account incurs any charge at all. For a learning account, that early warning is exactly what you want. If you receive an alert, open the Billing and Cost Management home page, look at the charges by service, find the resource, and delete it.

Exam tip

“Enable MFA on the root user”, “do not create root access keys”, and “use the root user only for tasks that require it” are best practices that appear on the exam repeatedly. AWS Budgets is the tool that alerts you when cost or usage crosses a threshold; Cost Explorer is the tool for analyzing past spending.

Before you turn the page

You now know the shape of the exam: 65 questions, 90 minutes, a scaled passing score of 700, and four domains weighted toward security and technology. You have a plan, a method for reading questions, and a protected account to practice in. Chapter 1 starts at the beginning with the most fundamental question of all: what is cloud computing, and why do organizations use it?