Think of CLF-C02 as your orientation to the cloud, not a technical deep dive. The official exam guide describes it as validating overall AWS Cloud knowledge independent of any specific technical role — cloud value, shared responsibility, the Well-Architected Framework, basic security, cloud economics, and core service categories. If you walk in expecting an architecture exam, you’ll overstudy the wrong things and underprepare for the actual questions.

What the current guide says

The AWS certification page currently lists a 90-minute exam with 65 questions, delivered as multiple choice or multiple response. Of those, 50 questions affect your score and 15 are unscored — and you won’t know which is which, so treat every question with the same care. The scaled score range is 100–1,000, and you need 700 to pass. AWS states the credential is valid for 3 years, so check current recertification options as that date approaches.

CLF-C02 Domains: What Each One Is Really Testing

Cloud Concepts

This domain is asking: do you understand why the cloud is different from a data center you own? Global infrastructure, elasticity, scalability, high availability, and basic disaster recovery all live here. Don’t just memorize the terms — be able to explain each one to a non-technical coworker.

Security & Compliance

This is the highest-weighted domain, and a lot of candidates underinvest here because it feels “less technical” than compute or storage. Know the shared responsibility line cold, along with IAM basics, encryption concepts, and how logging and compliance fit together.

Cloud Technology & Services

The largest domain by weight, and the one that rewards category thinking over memorization. You need to recognize compute, storage, database, networking, monitoring, migration, serverless, and analytics categories, and match each to a common use case.

Billing, Pricing & Support

Smallest domain, but don’t skip it — it’s a guaranteed handful of points if you understand pay-as-you-go pricing, budgets, cost visibility tools, and AWS Support tiers.

CLF-C02 Exam Topics & AWS Services

AWS publishes its in-scope service lists as non-exhaustive and subject to change. Use the following as a concept map to organize your studying — not as a promise that every service listed will appear, or that nothing else matters.

Cloud Concepts

Security & Compliance

Technology & Services

Billing, Pricing & Support

A Few CLF-C02 Services, Taught Properly

Amazon S3 — think “object storage”

S3 stores objects: files, backups, logs, datasets, static website assets. You don’t attach it to a server like a hard drive — you reach it through keys and API calls. If you see: files, backups, static assets, or a data lake, think S3. Don’t confuse with: EBS (block storage attached to compute) or EFS (a shared file system).

Amazon EC2 — think “your own virtual server”

EC2 gives you resizable compute where you control the operating system and runtime. If you see: a need for OS-level control or a long-running custom application, think EC2. Don’t confuse with: Lambda or Fargate, which trade that control for less server management.

AWS Lambda — think “run this code when something happens”

Lambda executes your code in response to an event, and you never manage a server. If you see: event-driven, short-lived, or “reduce operational overhead,” think Lambda. Don’t confuse with: EC2 or containers, which fit longer-running or more customizable workloads.

Amazon RDS — think “managed relational database”

RDS runs common relational engines for you, handling patching and backups. If you see: SQL, transactions, or relational structure, think RDS. Don’t confuse with: DynamoDB, which fits key-value or document access patterns with managed horizontal scale.

Amazon VPC — think “your private network inside AWS”

VPC gives you logically isolated networking — subnets, routing, and connectivity choices. If you see: network segmentation or connectivity design, think VPC. Don’t confuse with: security groups and network ACLs, which are separate control layers inside a VPC, not the VPC itself.

Amazon CloudWatch — think “what’s happening right now”

CloudWatch collects metrics, logs, and alarms so you have operational visibility. If you see: monitoring or alerting, think CloudWatch. Don’t confuse with: CloudTrail, which tracks who did what via API calls, or Config, which assesses resource configuration over time.

What CLF-C02 Questions Are Actually Testing

Can you tell, within a few seconds, whether a question is really about compute, storage, database, network, security, monitoring, migration, analytics, or cost?

Can you connect a technical capability — elasticity, managed operations, agility, global reach — back to an actual business outcome a stakeholder would care about?

Can you pick the AWS service that fits the stated need without importing architectural complexity the question never asked for?

Can you tell durability apart from availability, and scalability apart from elasticity, without hesitating?

CLF-C02 Common Question Signals

• Cloud value — Agility, variable expense, elasticity, global reach, managed operations, or reduced undifferentiated heavy lifting.
• Security — Least privilege, MFA, temporary credentials, encryption, audit history, compliance evidence, or shared responsibility.
• Cost — Cost visibility, budgets, usage measurement, storage lifecycle, data transfer, or deliberate capacity planning.
• Operations — Monitoring, alarms, configuration history, support guidance, service limits, or automated recovery.

CLF-C02 Study & Practice Resources

Use these in order: diagnose where you’re weak, learn the concept properly, practice again, and log which domain caused every miss. Skipping straight to volume practice without the middle step is the single most common mistake I see.

25 Free Practice Questions

Start here, before you study anything else. Take the free 25-question diagnostic and be honest with yourself about whether each miss came from terminology, service purpose, security, or cost.

CLF-C02 Premium Practice Package

Once you’ve learned the domains, use a larger, deeper practice set to rehearse decisions under exam-like conditions with full explanations. Not a substitute for learning the material first.

CLF-C02 Study Guide

Build the concept model first: foundational cloud ideas, the security boundary, core services, and cloud economics vocabulary, explained the way I’d explain it in a classroom.

CLF-C02 Cheat Sheet

Use this for final retrieval practice in the last week before your exam. A cheat sheet should jog a concept you already understand — it shouldn’t be where you learn it for the first time.

How I'd Have You Prepare for CLF-C02

Every certification isn’t the same exam wearing a different code. Here’s a plan built specifically around what CLF-C02 rewards.

Where candidates lose points

• Memorizing service definitions without ever asking what problem the service solves.
• Skimming security and billing because they feel “less technical” than compute.
• Grinding through practice sets without ever classifying why an answer was wrong.
• Treating a practice-exam percentage as if it equals the official passing score.

CLF-C02 readiness checklist

• I can explain all four official domains and their weights from memory.
• I can distinguish durability, availability, elasticity, and scalability without hesitating.
• I can describe shared responsibility using a concrete example.
• I can match common services to their category and typical use case.
• I can explain, out loud, why a specific distractor is wrong.
• I can complete a timed mixed set without leaning on memorized patterns.

Start with a diagnostic, then go study the domain behind every miss.