Four weeks is enough time to pass the AWS Certified Cloud Practitioner exam — if you study strategically. This guide gives you a concrete, day-by-day framework built around the official domain weightings, so you spend the most time where the most points live.
Disclaimer: This site is an independent exam-prep resource and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. or any of its affiliates.
Understanding What You're Up Against
Before you open a single study resource, know the shape of the exam:
- 65 questions (50 scored, 15 unscored — you can't tell which is which)
- 90 minutes to complete it
- Passing score: 700 out of 1000 (this is a scaled score, not a raw percentage)
- Question types: multiple-choice (one correct answer) and multiple-response (exactly two correct answers — no partial credit)
- Registration fee: $100 USD at the time of writing (subject to change)
Not sure where you stand right now? Take our free diagnostic quiz before you build your study schedule — it shows you which domains need the most work.
The Domain Weightings: Study Where the Points Are
The CLF-C02 exam is divided into four domains. Weight them accordingly in your study time:
| Domain | Topic | Weight |
|---|---|---|
| 1 | Cloud Concepts | 24% |
| 2 | Security and Compliance | 30% |
| 3 | Cloud Technology and Services | 34% |
| 4 | Billing, Pricing, and Support | 12% |
Domain 3 (Cloud Technology and Services) and Domain 2 (Security and Compliance) together account for 64% of your score. If your study time is limited, prioritise these two domains above all else.
For a full breakdown of every objective tested in each domain, read through the CLF-C02 exam guide — it's an essential reference, not optional reading.
Not sure where you stand?
Take the free 10-question CLF-C02 diagnostic and get an instant score, your weakest domain, and a study plan.
Take the free diagnosticThe 4-Week Study Plan
Week 1 — Cloud Foundations (Domain 1)
Goal: Build a solid mental model of what cloud computing is and why it exists.
Spend the first week on Cloud Concepts. This domain carries only 24% of the exam weight, but it provides the vocabulary and mental framework you'll rely on for every other domain. Don't skip it.
Key topics to master:
- Six advantages of cloud computing: trading capital expense for variable expense, benefiting from massive economies of scale, stopping the guessing of capacity, increasing speed and agility, eliminating data-centre running costs, and going global in minutes. Learn all six — exam questions often test whether you can identify which advantage applies to a given scenario.
- AWS Well-Architected Framework: There are exactly six pillars — Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. Many candidates remember five; don't be one of them.
- AWS Cloud Adoption Framework (CAF): Six perspectives — Business, People, Governance, Platform, Security, and Operations.
- Migration strategies (the 6 Rs): Rehost (lift-and-shift), Replatform, Repurchase, Refactor/Re-architect, Retire, and Retain. A seventh strategy (Relocate) appears in some AWS documentation, but the core exam focus is these six.
Study rhythm: Aim for 60–90 minutes per day. Read, then immediately write a brief summary in your own words without looking at your notes. This retrieval practice is more effective than re-reading.
Week 2 — Security and Compliance (Domain 2)
Goal: Understand who is responsible for what, and which AWS service does which security job.
Domain 2 is the second-heaviest domain at 30% — and it's highly scenario-based. You won't be asked to define "shared responsibility"; you'll be given a situation and asked to identify whose job it is.
Key topics to master:
- Shared Responsibility Model: AWS is responsible for security of the cloud — the physical hardware, Availability Zones, hypervisor, and global network infrastructure. You are responsible for security in the cloud — OS patches, application configuration, IAM policies, data encryption, security groups, and firewall rules.
- IAM: Understand users, groups, roles, and policies. The principle of least privilege is central. MFA is a best practice — especially (and the exam will test this) for the root account.
- Key security services and their distinct roles:
- - AWS CloudTrail — records API calls for auditing (who did what, when, and from where). It is not a performance or metrics tool.
- - Amazon GuardDuty — threat detection using machine learning, anomaly detection, and threat intelligence feeds.
- - Amazon Inspector — vulnerability scanning for EC2 instances, container images, and Lambda functions.
- - AWS Shield — Standard (free, automatic, protects against common DDoS attacks) and Advanced (paid, with enhanced detection and access to a DDoS Response Team).
A common exam trap is mixing up CloudTrail, GuardDuty, and Inspector. Create a simple comparison table: one row per service, columns for "what it monitors," "what it outputs," and "who/what it protects."
Week 3 — Cloud Technology and Services (Domain 3)
Goal: Know the core AWS services well enough to match them to business requirements.
This is the largest domain at 34% and covers the broadest range of services. You don't need to know CLI commands or architecture diagrams — you need to know what each service does and when to use it over alternatives.
Infrastructure basics:
- Regions are geographically isolated; each contains two or more Availability Zones.
- Availability Zones (AZs) are one or more discrete data centres with redundant power and networking.
- Edge Locations serve CloudFront (CDN) and Route 53. They are not AZs or Regions.
Compute:
- AWS Lambda — serverless, event-driven. No servers to manage. You pay for execution time, not idle time.
- EC2 — virtual machines in the cloud. Know the five instance family categories conceptually: General Purpose, Compute Optimized, Memory Optimized, Storage Optimized, and Accelerated Computing.
Databases — know the differences:
- Amazon RDS — managed relational database supporting MySQL, PostgreSQL, MariaDB, Oracle, and SQL Server. It does not natively support NoSQL workloads.
- Amazon Aurora — MySQL- and PostgreSQL-compatible, cloud-optimized, and designed for higher throughput than standard MySQL.
- Amazon DynamoDB — fully managed, serverless NoSQL (key-value and document). Not relational.
- Amazon Redshift — managed data warehouse for SQL analytics at petabyte scale. Not a transactional database.
Storage:
Know the S3 storage classes in rough order of cost and access frequency: Standard, Intelligent-Tiering, Standard-IA, One Zone-IA, Glacier Instant Retrieval, Glacier Flexible Retrieval, and Glacier Deep Archive. The exam tests which class fits a given access pattern and cost requirement.
At the midpoint of Week 3, start mixing in practice questions alongside your reading. Passive study alone won't prepare you for the scenario-based format.
Week 4 — Billing, Pricing, Support, and Full Review (Domain 4 + Consolidation)
Goal: Lock in Domain 4, identify weak spots, and simulate exam conditions.
Domain 4 is the smallest at 12%, but it's very learnable — most of the content is structured and predictable.
EC2 pricing models:
- On-Demand — pay per second or per hour, no commitment
- Spot Instances — unused EC2 capacity, up to ~90% discount, but AWS can reclaim them with a two-minute warning
- Reserved Instances — Standard (highest discount, least flexible) or Convertible (moderate discount, can change instance attributes)
- Savings Plans — Compute Savings Plans (most flexible; applies to EC2, Lambda, and Fargate) or EC2 Instance Savings Plans (specific instance family)
- Dedicated Hosts — physical servers for compliance or bring-your-own-license scenarios
Support plans (in order): Basic (free), Developer, Business, Enterprise On-Ramp, Enterprise. Business and Enterprise include 24/7 phone and chat support. Enterprise includes a dedicated Technical Account Manager (TAM).
AWS Trusted Advisor checks five categories: Cost Optimization, Security, Fault Tolerance, Performance, and Service Limits. Core checks are available on all plans; full checks require Business support or higher.
Days 25–28 — Full mock exams:
Take at least two full 65-question timed practice exams under real conditions: 90 minutes, no notes, no pausing. Review every wrong answer — not just to find the right answer, but to understand why the other options were wrong.
Study Tips That Actually Move the Needle
- Use the shared responsibility model as a filter. When in doubt about a security question, ask: "Is this the physical infrastructure, or is this configuration a customer controls?" That single question eliminates wrong answers quickly.
- Don't memorise, contextualise. Instead of flashcarding service names, learn them in the context of a business problem. "A company needs a NoSQL database" → DynamoDB. "A company needs to analyse petabytes of historical sales data" → Redshift.
- Flag, don't freeze. During the real exam, flag questions you're unsure of and move on. You have roughly 83 seconds per question on average, but easy questions take less time, leaving a buffer for harder ones.
- Beware of "all of the above" traps. Multiple-response questions require exactly two answers. Selecting three or more scores zero — even if all three are technically correct.
FAQ
How long does it realistically take to prepare for CLF-C02?
Most candidates with little to no cloud experience report needing four to eight weeks of consistent study. Those with some IT background often need less. The four-week plan above assumes roughly 60–90 minutes of focused study per day.
Is the 700/1000 passing score the same as 70%?
No. The 700 is a scaled score, not a raw percentage. AWS uses a scaling methodology to account for variation in question difficulty across exam versions. You cannot calculate a raw percentage and assume it maps directly to the scaled score.
Do unscored questions affect my result?
No. The 15 unscored (pretest) questions do not count toward your score. Since you cannot identify which questions are unscored, treat every question as if it counts.
Which domain should I study most?
By weight, Domain 3 (Cloud Technology and Services, 34%) followed by Domain 2 (Security and Compliance, 30%) are the highest-priority domains. Together they make up nearly two-thirds of your exam score.
How many practice questions should I do before the exam?
There's no magic number, but quality beats quantity. Focus on understanding why each answer is right or wrong, rather than grinding through hundreds of questions without review. Aim to consistently score well above passing on full-length timed mocks before booking your exam date.
Can I use notes or resources during the exam?
No. The CLF-C02 is a closed-book exam. No notes, no internet access, no reference materials are permitted during testing.
Final Thoughts
Four weeks is a realistic and achievable timeline for the AWS Certified Cloud Practitioner exam — but only if you study with intention. Use the domain weights to guide how you allocate your time, lean on scenario-based practice rather than rote memorisation, and simulate real exam conditions before you sit the actual test.
Start by understanding where your gaps are today, build on the weakest areas first, and leave the final week for consolidation and timed practice. You've got this.