How to Pass the AWS Cloud Practitioner Exam

Published 8 July 2026 · 8 min read

The AWS Certified Cloud Practitioner (CLF-C02) is the entry point into AWS certifications, but "entry-level" doesn't mean effortless. Plenty of people sit the exam underprepared and walk away disappointed. This guide gives you a clear, honest roadmap for passing on your first attempt—covering how the exam works, where to focus your study time, and what to do in the exam room.

Disclaimer: This site is an independent exam-prep resource and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. or its affiliates.


Understand the Exam Before You Open a Textbook

Before studying a single service, get the mechanics straight. Surprises on exam day cost points.

  • Exam code: CLF-C02
  • Total questions: 65 (50 scored + 15 unscored; you cannot tell which is which)
  • Time limit: 90 minutes
  • Passing score: 700 out of 1000 (scaled score — not 70%)
  • Registration fee: $100 USD (subject to change)
  • Question types: Multiple-choice (one correct answer) and multiple-response (exactly two correct answers — no partial credit)

The scaled scoring model is important: 700/1000 does not mean you need to answer exactly 70% of questions correctly. AWS uses psychometric scaling, so the raw cut can shift slightly. Aim well above 700 to give yourself a cushion.

Download the official CLF-C02 exam guide early. It lists every domain and objective in precise language — that language is what the questions are built from.


Know the Domain Weightings — and Study Accordingly

The exam is divided into four domains. Ignoring the weights is one of the most common study mistakes:

DomainTopicWeight
1Cloud Concepts24%
2Security and Compliance30%
3Cloud Technology and Services34%
4Billing, Pricing, and Support12%

Domain 3 (34%) and Domain 2 (30%) together account for nearly two-thirds of your score. That doesn't mean ignoring Cloud Concepts or Billing — it means ruthlessly prioritising when time is short.


Not sure where you stand?

Take the free 10-question CLF-C02 diagnostic and get an instant score, your weakest domain, and a study plan.

Take the free diagnostic

Domain-by-Domain Study Guide

Domain 1: Cloud Concepts (24%)

Start here because everything else builds on it. You need to genuinely understand why cloud computing exists, not just recite bullet points.

  • Six advantages of cloud computing: trading capital expense for variable expense, benefiting from economies of scale, eliminating capacity guessing, increasing speed and agility, stopping spending on data centre operations, and going global in minutes.
  • AWS Well-Architected Framework: exactly six pillars — Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. A common trick is questions that list five or seven; know the correct count.
  • AWS Cloud Adoption Framework (CAF): six perspectives — Business, People, Governance, Platform, Security, and Operations.
  • Migration strategies (the 6 Rs): Rehost, Replatform, Repurchase, Refactor/Re-architect, Retire, and Retain. Some AWS documentation mentions a 7th (Relocate), but the exam focus is the core six.

Domain 2: Security and Compliance (30%)

This is the highest-weighted domain after Cloud Technology and the one most candidates underestimate. Memorising service names is not enough — you need to understand what each service does and why.

The Shared Responsibility Model is non-negotiable. AWS is responsible for security of the cloud (physical hardware, Availability Zones, the hypervisor, the global network). You are responsible for security in the cloud (OS patches, application configuration, IAM permissions, data encryption, security group rules).

Key services to understand deeply:

  • IAM: Users, groups, roles, and policies. Always apply the principle of least privilege. Enable MFA — especially on the root account.
  • CloudTrail: Records API calls for auditing (who did what, when, and from where). It is not a performance or metrics tool.
  • GuardDuty: Intelligent threat detection using machine learning, anomaly detection, and threat intelligence feeds.
  • Inspector: Automated vulnerability scanning for EC2 instances, container images, and Lambda functions.
  • AWS Shield: Standard (free and automatic for all customers) guards against common DDoS attacks. Advanced (paid) adds enhanced detection and access to the DDoS Response Team.

Domain 3: Cloud Technology and Services (34%)

This is the largest domain, and it tests breadth. You don't need deep expertise in any service, but you do need to know what each service is for and, critically, what it is not for.

Global infrastructure: - Regions are geographically isolated and each contains two or more Availability Zones. - Availability Zones (AZs) are one or more discrete data centres within a Region, with redundant power, networking, and connectivity. - Edge Locations serve CloudFront (CDN) and Route 53 — they are not the same as AZs or Regions.

Databases — know the distinctions: - RDS supports relational engines (MySQL, PostgreSQL, MariaDB, Oracle, SQL Server) — it does not natively support NoSQL. - Aurora is MySQL- and PostgreSQL-compatible, cloud-native, and designed for high throughput. - DynamoDB is fully managed, serverless NoSQL (key-value and document) — not a relational database. - Redshift is a managed data warehouse for SQL analytics at petabyte scale — not a transactional database.

Compute: - Lambda is serverless and event-driven — you don't manage servers or operating systems. - EC2 instance families cover General Purpose, Compute Optimized, Memory Optimized, Storage Optimized, and Accelerated Computing — understand the use cases, not the individual instance types.

Storage: Know the S3 storage classes in order of decreasing access frequency and cost: Standard → Intelligent-Tiering → Standard-IA → One Zone-IA → Glacier Instant Retrieval → Glacier Flexible Retrieval → Glacier Deep Archive.

Domain 4: Billing, Pricing, and Support (12%)

Smaller weight, but the questions are very gettable if you know the material — don't leave easy points on the table.

EC2 pricing models: - On-Demand: pay per second or hour, no commitment - Spot Instances: unused capacity, up to ~90% discount, but AWS can reclaim them with a 2-minute notice - Reserved Instances: Standard (highest discount, least flexible) or Convertible (moderate discount, can change attributes) - Savings Plans: Compute (most flexible — covers EC2, Lambda, and Fargate) or EC2 Instance (specific family) - Dedicated Hosts: physical servers for compliance or licensing requirements

Support plans (in order): Basic (free) → Developer → Business → Enterprise On-Ramp → Enterprise. Enterprise includes a dedicated Technical Account Manager (TAM). Business and Enterprise On-Ramp and Enterprise provide 24/7 phone and chat support.

Trusted Advisor checks five categories: Cost Optimization, Security, Fault Tolerance, Performance, and Service Limits. Core checks are available on all plans; full checks require Business support or higher.


Build a Study Plan That Actually Works

Step 1 — Baseline yourself. Take a short diagnostic quiz before you study. Knowing where you're weakest lets you allocate time where it counts most, not where you're already comfortable.

Step 2 — Study domain by domain, in weight order. Start with Domain 3, then 2, then 1, then 4 — allocate proportionally.

Step 3 — Practice questions daily, not just at the end. Retrieval practice beats passive re-reading by a significant margin. Work through practice questions as you finish each domain, not just once you've covered everything.

Step 4 — Review your wrong answers, not just your right ones. Every incorrect answer is a window into a misconception. Read the explanation, trace it back to the source concept, and make sure you understand why the right answer is right and why the distractors are wrong.

Step 5 — Simulate exam conditions. In the final week, do at least one full 65-question timed session. Ninety minutes sounds generous until you're mentally fatigued at question 50.


Exam-Day Strategy

  • Flag and move on. If a question stumps you, flag it, answer your best guess, and keep going. Time management is everything.
  • Read every answer choice. CLF-C02 questions often hinge on one word — "always," "never," "automatically," or a service name that's close but wrong.
  • Multiple-response questions: the prompt will explicitly tell you to choose two answers. Don't second-guess this — select exactly two.
  • Eliminate first. For most questions, two options are clearly wrong. Getting to a 50/50 choice dramatically improves your odds.
  • Don't change answers without reason. Your first instinct is usually correct. Only revise if you read something that genuinely changes your understanding.

FAQ

How long should I study for the CLF-C02 exam?

Most candidates with little or no prior cloud experience need four to eight weeks of consistent study (roughly one to two hours per day). If you already work in IT or have hands-on AWS experience, two to four weeks may be sufficient. The most important factor isn't total hours — it's whether you can answer practice questions consistently and correctly before you sit.

What is the passing score for the AWS Cloud Practitioner exam?

The passing score is 700 on a scaled score range of 100 to 1000. This is not a raw percentage, so you don't need to answer exactly 70% of questions correctly. AWS uses psychometric scaling across versions of the exam.

Can I take the CLF-C02 exam from home?

Yes. The exam is available as an online proctored test through Pearson VUE, allowing you to test from home or a quiet private space, subject to technical and environmental requirements. It is also available at authorised testing centres.

What's the difference between multiple-choice and multiple-response questions?

Multiple-choice questions have one correct answer out of four options. Multiple-response questions instruct you to select exactly two correct answers from five options — there is no partial credit, so you must get both right.

Are there prerequisites for the CLF-C02 exam?

There are no formal prerequisites. AWS recommends a basic familiarity with IT concepts and at least six months of exposure to the AWS Cloud in any capacity, but this is guidance, not a requirement. Anyone can register and sit the exam.

How much does the AWS Cloud Practitioner exam cost?

The standard registration fee is $100 USD at the time of writing, though this is subject to change. AWS periodically offers exam vouchers through training programs, events, and partner promotions, which can reduce or eliminate this cost.

Written for CloudPractitionerPrep. Independent resource, not affiliated with or endorsed by Amazon Web Services. Verify exam details against official AWS documentation before relying on them.