AWS Cloud Practitioner Exam Guide 2025: Everything You Need to Pass CLF-C02

What Is the AWS Cloud Practitioner Certification?

The AWS Certified Cloud Practitioner (CCP) is Amazon Web Services' entry-level certification. It validates broad, foundational knowledge of AWS cloud concepts, services, security, and pricing — without requiring hands-on technical skills.

It is the recommended starting point before pursuing the AWS Solutions Architect Associate, Developer Associate, or SysOps Administrator Associate certifications. Passing the CCP earns a 50% discount voucher for your next AWS exam.

CLF-C02 vs. CLF-C01: What Changed

AWS retired the CLF-C01 and replaced it with the CLF-C02 in 2023. Key differences:

• CLF-C02 tests more specific knowledge of individual AWS services (not just conceptual understanding)
• More questions on cloud migration strategies and the AWS Well-Architected Framework
• Increased emphasis on cloud security services (Shield, WAF, GuardDuty, Security Hub)
• Questions on newer services like Amazon Bedrock and AWS generative AI capabilities

Study materials written for CLF-C01 will leave you underprepared for CLF-C02. Make sure your guide is specifically updated for the current exam.

The 4 Exam Domains Explained

Domain 1: Cloud Concepts (26%) — The six advantages of cloud computing, three deployment models (public, private, hybrid), AWS global infrastructure (Regions, Availability Zones, Edge Locations), and the AWS Well-Architected Framework's six pillars.

Domain 2: Security and Compliance (25%) — The AWS Shared Responsibility Model is tested heavily here. Know what AWS manages vs. what the customer manages. IAM (users, groups, roles, policies), MFA, AWS Shield, WAF, GuardDuty, CloudTrail, and compliance programs (HIPAA, SOC, PCI DSS).

Domain 3: Cloud Technology and Services (33%) — The largest domain. You need to know the purpose and basic function of: EC2, Lambda, S3, EBS, EFS, RDS, DynamoDB, VPC, CloudFront, Route 53, Elastic Load Balancing, Auto Scaling, SQS, SNS, CloudWatch, CloudFormation, and at least 10 more services.

Domain 4: Billing, Pricing, and Support (16%) — AWS pricing models (on-demand, reserved, spot, savings plans), Total Cost of Ownership calculator, AWS Organizations, Consolidated Billing, Cost Explorer, AWS Budgets, and the four support tiers (Basic, Developer, Business, Enterprise).

Scoring, Pass Rates, and What to Expect

The CLF-C02 exam contains 65 questions (multiple choice and multiple response). You have 90 minutes and need a scaled score of 700 out of 1000 to pass. AWS uses scaled scoring — not a simple percentage. Most candidates need roughly 72-75% correct answers to achieve a 700 scaled score.

First-time pass rates are approximately 70-75% for prepared candidates. The most common failure cause on CLF-C02 is underestimating how many specific services are tested.

The 20 AWS Services You Absolutely Must Know

Based on reported exam content from CLF-C02 test-takers, these are the services you need to know specifically:

1. EC2 (virtual servers)
2. S3 (object storage)
3. Lambda (serverless functions)
4. RDS (managed relational databases)
5. DynamoDB (NoSQL database)
6. VPC (virtual private network)
7. CloudFront (CDN)
8. Route 53 (DNS)
9. IAM (identity and access management)
10. CloudTrail (API logging)
11. CloudWatch (monitoring)
12. CloudFormation (infrastructure as code)
13. Elastic Load Balancing
14. Auto Scaling
15. SQS (message queue)
16. SNS (notifications)
17. AWS Shield (DDoS protection)
18. AWS WAF (web application firewall)
19. AWS Trusted Advisor
20. AWS Support Plans (Basic/Developer/Business/Enterprise)

A 4-Week Study Plan

Week 1: Cloud Concepts and Security domains. Focus on the Shared Responsibility Model, IAM, and AWS global infrastructure. These form the conceptual foundation everything else builds on.

Week 2: Core compute and storage services: EC2, Lambda, S3, EBS, EFS. Understand what each does and when you would use it.

Week 3: Networking and databases (VPC, Route 53, CloudFront, RDS, DynamoDB) plus monitoring and management tools (CloudWatch, CloudTrail, CloudFormation).

Week 4: Billing, pricing, and support tier knowledge. Then full practice exams — take at least 2 complete 65-question tests under timed conditions before exam day.

Tips From Candidates Who Passed on the First Try

• Know the Shared Responsibility Model cold — it shows up in multiple forms across all four domains
• Learn to distinguish similar services: SQS vs. SNS, RDS vs. DynamoDB, Shield vs. WAF
• For multi-select questions, all parts of the answer must be correct to earn the point
• The support plan tier questions are easy points — memorize Business vs. Enterprise differences
• Do not spend more than 90 seconds on any question — flag and return

---

Maxwell Pepper is a licensed Professional Engineer (PE), Project Management Professional (PMP), and MBA with 15+ years of experience in the energy industry. He lives in Houston, Texas.
Browse all Maxwell Pepper books →