Master the AWS Certified Cloud Practitioner exam with this comprehensive study guide. Learn key concepts, best practices, and expert tips to pass your certification.

What the AWS Certified Cloud Practitioner Exam Actually Tests

In 2023, AWS reported over one million active certifications worldwide, with Cloud Practitioner (CLF-C02) remaining the single most-attempted entry point. That volume matters: hiring managers see dozens of resumes listing it, which means earning the credential is table stakes, but understanding the material deeply enough to apply it on the job is what separates candidates. This guide covers the exam structure, the domains that trip people up, a realistic study plan, and how to validate your hands-on readiness before exam day.

Certification Overview: CLF-C02 at a Glance

The current exam version (CLF-C02, released September 2023) replaced CLF-C01 and shifted weight toward cloud value concepts and the AWS shared responsibility model. Key logistics:

Format: 65 questions (multiple choice and multiple response), 90 minutes
Passing score: 700 out of 1000
Cost: $100 USD (50% discount vouchers are available through AWS Training and some employer programs)
Validity: 3 years, renewable by recertification or earning a higher-level credential
Recommended experience: 6 months of exposure to AWS, even at a non-technical level

There is no prerequisite certification. A project manager, a support technician, or a developer pivoting into cloud can all sit for it without prior AWS credentials.

The Four Exam Domains (and Where the Points Are)

AWS publishes an official exam guide that lists four scored domains. Knowing the weight of each domain lets you allocate study time proportionally rather than treating every topic equally.

Domain 1: Cloud Concepts (24%)

This domain covers why cloud exists and what it offers. Expect questions on the six advantages of cloud computing (trade capital expense for variable expense, benefit from massive economies of scale, stop guessing capacity, increase speed and agility, stop spending money running data centers, go global in minutes). You also need to understand the three cloud deployment models: public, private, and hybrid, and the three service models: IaaS, PaaS, and SaaS. A common question type asks you to match a customer scenario to the correct model.

Domain 2: Security and Compliance (30%)

This is the heaviest domain and the one most candidates underestimate. The shared responsibility model is the centerpiece. AWS is responsible for security of the cloud (physical infrastructure, hypervisor, managed service internals). The customer is responsible for security in the cloud (OS patching on EC2, IAM policies, data encryption choices, security group rules). Exam questions often present a misconfiguration scenario and ask who is responsible for the gap.

Domain 3: Cloud Technology and Services (34%)

The largest domain by weight. You are not expected to configure these services, but you must know what each one does and when to choose it. Focus your energy on the following service categories:

Compute: EC2 (instance types, pricing models), Lambda (serverless, event-driven), Elastic Beanstalk (managed deployment), ECS and EKS (containers)
Storage: S3 (object storage, storage classes including S3 Standard, S3-IA, S3 Glacier), EBS (block storage attached to EC2), EFS (shared file storage), S3 Glacier for archival
Databases: RDS (managed relational, multi-AZ vs. read replicas), DynamoDB (NoSQL, serverless), ElastiCache (in-memory caching), Redshift (data warehousing)
Networking: VPC, subnets, internet gateways, NAT gateways, Route 53 (DNS), CloudFront (CDN), Direct Connect vs. VPN
Management and monitoring: CloudWatch (metrics and alarms), CloudTrail (API activity logging), AWS Config (resource configuration history), Systems Manager

A practical tip: for each service, memorize one sentence describing its primary use case and one sentence describing what it is not for. For example, CloudTrail records API calls for auditing; it does not monitor application performance metrics (that is CloudWatch).

Domain 4: Billing, Pricing, and Support (12%)

Smaller weight but highly learnable, meaning you should aim for near-perfect scores here. Topics include:

Pricing models: On-Demand, Reserved Instances (Standard vs. Convertible, 1-year vs. 3-year), Savings Plans, Spot Instances, Dedicated Hosts
Cost management tools: AWS Cost Explorer, AWS Budgets, Cost and Usage Reports, Pricing Calculator
Support plans: Basic (free), Developer ($29/mo minimum), Business ($100/mo minimum), Enterprise On-Ramp, Enterprise. Know which plans include 24/7 phone support and which include a Technical Account Manager (TAM).
AWS Free Tier: three types exist: always free (Lambda 1M requests/month), 12 months free (EC2 t2.micro 750 hours/month), and short-term trials (specific services for 30 or 60 days)

A Realistic 6-Week Study Plan

Six weeks at roughly 60 to 90 minutes per day is enough for most candidates with some IT background. Adjust based on your starting point.

Weeks 1 and 2: Concepts and Security

Complete the AWS Cloud Practitioner Essentials digital course (available free on AWS Skill Builder). This is a 6-hour course broken into modules that map directly to the exam domains. Take notes on the shared responsibility model and IAM. Do not skip the module assessments.

Weeks 3 and 4: Services and Hands-On Practice

Open an AWS Free Tier account if you do not already have one. Spend 30 minutes per session actually using the console:

Create an S3 bucket, upload a file, set a bucket policy, and observe what happens when you make an object public versus private.
Launch a t2.micro EC2 instance, connect via SSH, and terminate it. Note the difference between stopping and terminating.
Create an IAM user with limited permissions, attempt an action that is denied, then adjust the policy. This exercise makes the shared responsibility model concrete.
Set a billing alarm in CloudWatch so you understand how Budgets and CloudWatch interact.

Read the AWS Well-Architected Framework whitepaper (focus on the five pillars: Operational Excellence, Security, Reliability, Performance Efficiency, and Cost Optimization). The exam references these pillars directly.

Weeks 5 and 6: Practice Exams and Gap Closing

Take at least two full-length practice exams under timed conditions. AWS Skill Builder offers official practice question sets. Third-party options include Tutorials Dojo (Jon Bonso's question sets are widely recommended by the r/AWSCertifications community). Review every wrong answer, not just the ones you flagged. A wrong answer you were confident about is more dangerous than one you knew you were guessing on.

Common Pitfalls That Sink Prepared Candidates

Confusing availability and durability: S3 offers 99.999999999% (11 nines) durability (data is not lost) and 99.99% availability (data is accessible). These are different properties. Exam questions exploit this distinction.
Misreading multi-select questions: Questions that say "select TWO" require exactly two correct answers. Selecting one correct answer and one wrong answer scores zero for that question.
Ignoring the billing domain: Candidates focused on services often skip pricing models and score poorly on an easy 12% of the exam.
Treating the exam as purely theoretical: Scenario-based questions describe a customer situation and ask which service or configuration best fits. Without any hands-on context, these questions are harder to reason through quickly.

Proving What You Know Beyond the Certificate

A certificate confirms you passed a multiple-choice exam on a given day. Hiring managers, especially those who have been burned by resume inflation, increasingly want evidence of applied skill. Platforms like IT Custom Solution build tools specifically to address this gap. OpsTicket (tryopsticket.com), their terminal-based skills assessment platform, puts candidates through real cloud and Linux scenarios scored against a deterministic rubric, not an AI judgment. The resulting certificate is verifiable by recruiters and tied to specific task performance. For anyone preparing for the Cloud Practitioner exam, working through OpsTicket's cloud/DevOps track is a practical way to stress-test your hands-on knowledge before exam day and to have something concrete to show employers after you pass.

After You Pass: What Comes Next

Cloud Practitioner is a starting point, not a destination. The natural progression depends on your role:

Developers: AWS Certified Developer, Associate (DVA-C02)
Operations and infrastructure: AWS Certified SysOps Administrator, Associate (SOA-C02)
Architecture and design: AWS Certified Solutions Architect, Associate (SAA-C03)
Security focus: AWS Certified Security, Specialty (after Associate level)

Each associate-level exam assumes you can do things in the console, not just identify services by description. The hands-on practice you build during Cloud Practitioner prep compounds directly into associate-level readiness.

The Short Version

Pass CLF-C02 by knowing the shared responsibility model cold, understanding what each major service does and does not do, and practicing with real AWS resources rather than reading about them. Allocate study time proportional to domain weight. Take timed practice exams and review every wrong answer. Then, when you hand a recruiter your certificate, be ready to back it up with demonstrated terminal-level skill, because that is what separates a credential from a qualification.

AWS Cloud Practitioner Study Guide: Complete Preparation for Certification