Cheat SheetCLF-C02AWS · Foundational

AWS CLF-C02 Cheat Sheet 2026

Everything you need on one page before exam day: domain weights, core service categories, the Shared Responsibility Model, pricing models, billing tools, support plans, and the traps that catch first-timers.

65Questions
90 minDuration
700/1000Pass score
$100Exam fee (USD)
3 yrsValidity
MCQ + MRQFormat
AWS CLF-C02 Certified Cloud Practitioner cheat sheet

01 Domain weights

CLF-C02 has four domains. Technology and security together make up nearly two-thirds of the exam, so that is where most of your study time should land.

Cloud Technology & Services34%
Security & Compliance30%
Cloud Concepts24%
Billing, Pricing & Support12%
Read this first: CLF-C02 is foundational and non-technical. It tests breadth and vocabulary — what each service is for and which concept fits a description — not hands-on skills. You will never be asked to write a policy or launch an instance.

02 Core service categories

You do not need deep knowledge of any one service — you need to recognise what each one does and the category it belongs to. These are the names that appear again and again.

Compute

EC2 · Lambda · Elastic Beanstalk · ECS

EC2 for virtual servers, Lambda for serverless functions, Beanstalk to deploy apps without managing infrastructure, ECS for containers.

Storage

S3 · EBS · EFS · Glacier

S3 object storage, EBS block volumes for EC2, EFS shared file storage, Glacier for low-cost archival.

Database

RDS · Aurora · DynamoDB · Redshift

RDS and Aurora for relational data, DynamoDB for NoSQL key-value, Redshift for data-warehouse analytics.

Networking

VPC · Route 53 · CloudFront · ELB

VPC for isolated networks, Route 53 for DNS, CloudFront as the CDN/edge cache, ELB to distribute traffic.

Security

IAM · KMS · Shield · WAF · Inspector · GuardDuty

IAM for access, KMS for encryption keys, Shield for DDoS, WAF for web filtering, Inspector and GuardDuty for threat detection.

Management

CloudWatch · CloudTrail · Config · Trusted Advisor · Systems Manager

CloudWatch monitors, CloudTrail audits API calls, Config tracks resource state, Trusted Advisor advises, Systems Manager operates fleets.

03 Shared Responsibility Model

AWS secures the cloud; you secure what you put in it. Almost every security question on CLF-C02 turns on which side of this line the task falls.

AWS responsible for (security OF the cloud)Customer responsible for (security IN the cloud)
Physical hardware, data centres, power and networkingCustomer data, classification and encryption choices
The hypervisor and host operating systemGuest OS patching and configuration (on EC2)
Managed-service infrastructure and global networkIAM users, roles, passwords and access policies
Availability of Regions and Availability ZonesFirewall rules, security groups and network traffic
The line shifts with the service type: with EC2 you patch the OS yourself; with a managed service like Lambda AWS handles the OS and runtime; with S3 AWS runs everything and you only manage your data, access and encryption settings. More managed → less on you.

04 Pricing models

ModelWhen to use
On-DemandShort-term, unpredictable or spiky workloads — pay per second/hour with no commitment.
Reserved InstancesSteady, predictable usage for 1 or 3 years — large discount for a capacity commitment.
Savings PlansCommit to a spend amount per hour for 1 or 3 years — flexible across instance families and services.
Spot InstancesFault-tolerant, interruptible batch/CI work — up to ~90% off, but AWS can reclaim capacity.
Dedicated HostsCompliance or licensing rules that require physical isolation or bring-your-own-license.
Three pricing fundamentals: pay-as-you-go (only for what you use), pay less when you reserve (commit for a discount), and pay less as AWS grows (economies of scale lower prices over time).

05 Billing & cost-management tools

Know the one-line purpose of each tool — questions usually describe a need and ask which tool meets it.

Cost Explorer

Visualise and analyse spend and usage over time, with forecasts and filtering by service or tag.

AWS Budgets

Set custom cost or usage thresholds and get alerts when spend is forecast to exceed them.

Cost & Usage Report

The most detailed line-item billing data, delivered to S3 for deep analysis.

Billing Conductor

Create custom pricing and billing views for internal chargeback across teams or business units.

Cost Allocation Tags

Tag resources so costs can be grouped and reported by project, team, or environment.

Pricing Calculator

Estimate the cost of a proposed architecture before you build it.

06 Support plans & Well-Architected

PlanKey difference
BasicFree for all accounts; docs, forums, and core Trusted Advisor checks only — no technical case support.
DeveloperBusiness-hours email access to Cloud Support Associates; best for experimentation and testing.
Business24/7 phone, email and chat; full Trusted Advisor checks; production workload support.
EnterpriseAll of Business plus a Technical Account Manager (TAM), Concierge, and the fastest response SLAs.

The 6 Well-Architected pillars

  • Operational Excellence — run and monitor systems, improve processes.
  • Security — protect data, systems and assets.
  • Reliability — recover from failure and meet demand.
  • Performance Efficiency — use resources efficiently as needs change.
  • Cost Optimization — avoid unnecessary spend.
  • Sustainability — minimise the environmental impact of workloads.

07 Global infrastructure & must-know facts

  • Region: a physical geographic area (e.g. us-east-1) containing multiple isolated data-centre groups.
  • Availability Zone (AZ): one or more discrete data centres within a Region — deploy across AZs for high availability.
  • Edge Location: CloudFront cache points close to users for low-latency content delivery; far more numerous than Regions.
  • Local Zones: extend a Region closer to large population centres for single-digit-millisecond latency.
  • AWS Organizations: centrally manage multiple accounts and get consolidated billing with combined volume discounts.
  • AWS Artifact: on-demand access to AWS compliance reports (SOC, ISO, PCI) and agreements.
  • AWS Health Dashboard: shows the status of AWS services and personalised events affecting your account.

08 Common traps

Region vs AZ vs Edge: a Region is a geographic area, an AZ is isolated data centres inside it, and an Edge Location is a CloudFront cache point — do not deploy "across Regions" when the answer is "across AZs" for high availability.
Root account: enable MFA on it, lock away the credentials, and never use it for daily work — create IAM users/roles with least privilege instead.
Shield Standard vs Advanced: Shield Standard is free and automatic for all customers; Shield Advanced is a paid tier adding higher-tier DDoS protection, cost protection, and 24/7 response.
CapEx vs OpEx: the cloud shifts large up-front capital expenditure (CapEx on hardware) to variable operating expenditure (OpEx you pay as you use) — a favourite cloud-value question.

09 FAQ

Is CLF-C02 worth it for beginners?

Yes. The Cloud Practitioner is the ideal entry point if you are new to AWS or work in a non-technical role such as sales, project management, or finance. It builds the vocabulary and mental model you need before tackling Associate-level certifications, and it is one of the most recognised foundational cloud credentials.

How long to study for AWS Cloud Practitioner?

Most people need two to six weeks. With prior IT experience you can be ready in one to two weeks of focused study; complete beginners should plan four to six weeks of an hour or two a day. Mixing a structured course with regular practice questions is the fastest reliable path.

What is the CLF-C02 passing score?

700 out of 1000 on a scaled scale. The score is normalised across question difficulty, so you do not need exactly 70% of questions correct. Aim for a steady 80%+ on full-length practice exams before you book the real test.

Is CLF-C02 hard?

No, it is the easiest AWS certification. CLF-C02 is foundational and non-technical: it tests breadth of cloud vocabulary, core service purposes, billing, and security concepts rather than hands-on configuration. Knowing what each service is for matters far more than knowing how to build it.

ExamCert
ExamCert TeamCertified cloud & security pros helping you pass faster.