Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/roxsross/aws-cloud-practitioner-complete-guide/llms.txt

Use this file to discover all available pages before exploring further.

Knowing the content is only half the battle — exam strategy is just as important as content knowledge. Candidates who understand the structure of the CLF-C02, manage their time intentionally, and recognize common question patterns consistently outperform those who rely on content knowledge alone. This page gives you the tactical edge you need for exam day.

​
Exam Format at a Glance

Before diving into strategy, make sure these numbers are locked in memory:

65 Questions

The exam contains 65 total questions. Some are unscored pilot questions that AWS uses to evaluate future exams — you won’t know which ones they are, so treat every question as scored.

90 Minutes

You have 90 minutes — roughly 83 seconds per question on average. Pacing is critical; don’t let a single difficult question consume your time budget.

700 / 1000 to Pass

The passing score is 700 out of 1000. You do not need a perfect score — strategic guessing on uncertain questions is far better than leaving blanks.

Two Question Types

Multiple choice (one correct answer from four options) and multiple response (two or more correct answers from five or more options). Read each question carefully to know which type you’re answering.
The exam may include unscored pilot questions that AWS is evaluating for future use. Don’t panic if a question seems completely unfamiliar — it may be a pilot. Answer your best guess and move on without dwelling on it.

​
Time Management Strategy

Effective pacing separates prepared candidates from panicked ones. Follow this structured approach on exam day:
1

First Pass: Answer What You Know

Move through all 65 questions at a steady pace. Answer confidently when you know the answer. For uncertain questions, make your best guess, flag them for review, and keep moving. Your target is no more than 60 seconds per question on this pass.
2

Second Pass: Review Flagged Questions

Return to every flagged question using your remaining time. With the pressure of time slightly reduced, you’ll often recall context or eliminate options more effectively on a second read.
3

Never Leave a Question Blank

There is no penalty for wrong answers on the CLF-C02. A blank answer is always worse than an educated guess. Even if you’re completely uncertain, eliminate what you can and commit to an answer before time runs out.
4

Final Check

If you have time remaining after reviewing flagged questions, scan through all questions one more time. Watch for any you may have accidentally mis-clicked or questions where a re-read changes your confidence.

​
Question-Answering Techniques

These techniques apply directly to how AWS frames CLF-C02 questions. Master these patterns and you’ll recognize the “shape” of correct answers even when specific service knowledge is uncertain.
The fastest path to the correct answer is eliminating wrong ones. On most questions, two of the four options are clearly incorrect — they describe the wrong service, the wrong responsibility boundary, or the wrong pricing model. Cross those out mentally first, then choose between the remaining two. This reduces guessing from 25% to 50% odds at minimum.
AWS exam questions consistently favor managed and serverless services over self-managed alternatives. When a question asks for the “best” or “most efficient” solution, the answer almost never involves managing your own servers, patching your own OS, or operating your own database software. Look for the option that reduces undifferentiated heavy lifting.
A significant portion of exam questions can be answered using one mental shortcut: hardware, physical infrastructure, and the global network = AWS responsibility. Data, configurations, IAM policies, and application code = customer responsibility. When a question asks “who is responsible for X,” map X to one side of this line.
When asked which pricing option is most cost-effective for stable, predictable workloads, follow this order: Reserved Instances / Savings Plans > On-Demand > Spot. Reserved and Savings Plans offer up to 72% savings over On-Demand for committed usage. Spot offers up to 90% savings but can be interrupted — never recommend Spot for workloads that must run continuously.
When questions ask what provides “the MOST” security, reliability, or availability, think in terms of layers: multiple Availability Zones + encryption (at rest and in transit) + strict IAM policies. Single-AZ or unencrypted answers are rarely the “most” anything. Multi-AZ + encryption is almost always a strong signal of the correct answer.
AWS consistently promotes serverless and fully managed patterns for modern application design. When a question describes a new application, event-driven processing, or variable/unpredictable traffic, the correct answer typically involves Lambda, Fargate, DynamoDB, or API Gateway rather than EC2 with Auto Scaling. Serverless options signal lower operational overhead.

​
High-Value Topics to Master

Not all topics carry equal weight. These areas have the highest probability of appearing on your exam based on the official CLF-C02 domain weighting and publicly known question patterns.

Shared Responsibility Model

Expect 3–5 questions directly or indirectly testing this model. Know exactly which layer belongs to AWS (hardware, AZs, managed service patching) versus the customer (data encryption, IAM, OS patches on EC2).

IAM Deep Dive

Know the difference between users, groups, roles, and policies. Understand that IAM is global (not region-specific), that MFA adds a second authentication factor, and that the principle of least privilege is the guiding policy design philosophy.

EC2 Pricing Options

Master all four: On-Demand (flexible, full price), Reserved (1 or 3 year commitment, up to 72% savings), Spot (up to 90% savings, interruptible), and Savings Plans (flexible commitment discount). Match each to the correct scenario type.

S3 Storage Classes

Know the tradeoff between cost and retrieval time across S3 Standard, S3 Intelligent-Tiering, S3 Standard-IA, S3 One Zone-IA, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, and S3 Glacier Deep Archive.

Support Plans

Be able to distinguish Basic, Developer, Business, and Enterprise plans by their key differentiators: access to a TAM (Enterprise only), response times, and Trusted Advisor check availability.

Cloud Benefits & Deployment Models

Know the six advantages of cloud computing and the difference between public, private, and hybrid cloud deployments. These appear in Domain 1 (Cloud Concepts, 24% weight).

Region vs AZ vs Edge Location

A Region contains multiple Availability Zones (isolated data centers). Edge Locations are used by CloudFront and Route 53 for low-latency content delivery. These are distinct and non-interchangeable concepts.

CloudWatch vs CloudTrail

CloudWatch = monitoring, metrics, alarms, and logs for performance. CloudTrail = auditing, API call history, and who-did-what records. This distinction is tested directly and frequently.

​
Common Traps to Avoid

This is the single most common source of wrong answers. CloudWatch monitors performance and resource metrics (CPU usage, request counts, error rates). CloudTrail records API calls and account activity for audit and compliance purposes. If the question mentions “who deleted this resource” or “track API activity,” the answer is CloudTrail. If it mentions “CPU is spiking” or “set an alarm,” the answer is CloudWatch.
Security Groups are stateful — return traffic is automatically allowed. Network ACLs (NACLs) are stateless — you must explicitly allow both inbound and outbound rules. Security Groups operate at the instance level; NACLs operate at the subnet level. Questions about blocking a specific IP address typically point toward NACLs.
If a question describes an event-driven workload, spiky/unpredictable traffic, or explicitly mentions “no server management,” the answer is almost never plain EC2. Look for Lambda, Fargate, or a fully managed service. Choosing EC2 when a managed option exists is a trap designed to test whether you understand the value of serverless.
Dedicated Hosts are for specific compliance or licensing requirements (BYOL — Bring Your Own License). They are not primarily a cost-saving tool. When a question asks how to reduce EC2 costs for steady workloads, the correct answer is Reserved Instances or Savings Plans, not Dedicated Hosts.
Unlike most AWS services, IAM is a global service. IAM users, groups, roles, and policies exist across all regions in your account. If a question implies you need separate IAM configurations per region, that’s incorrect — IAM is account-wide and global.
Watch for questions that include “which is NOT,” “which does NOT,” or “EXCEPT.” These are easy to miss when reading quickly. Underline or mentally flag the negative word before evaluating answer choices — your instinct to find the “right” answer will work against you if you miss the negative framing.

​
Day-Before and Day-Of Tips

The night before your exam, review the Service Cheat Sheet and Glossary for a light refresher. Avoid cramming new material — your goal is consolidation, not acquisition.
  • Do a light review of the service cheat sheet and key acronyms — no more than 60–90 minutes of study
  • Prepare your testing environment if taking online: verify your ID, webcam, and quiet space
  • Get a full night of sleep — sleep deprivation measurably impairs memory recall and decision-making under time pressure
  • Lay out what you need so morning logistics are stress-free
  • Eat a proper meal before the exam — your brain needs fuel for sustained concentration over 90 minutes
  • Arrive at the testing center (or log in for online proctoring) at least 15 minutes early
  • For online exams: close all unnecessary applications, disable notifications, and clear your desk
  • Bring valid government-issued photo ID; testing centers require it
  • Read each question carefully and completely before looking at the answers — the question often contains the key to ruling out wrong options
  • Watch for negative phrasing (“which is NOT…” or “EXCEPT”)
  • For multiple-response questions, note how many answers are required and select exactly that many
  • Flag uncertain questions, commit to your best guess, and keep moving — never stall
  • Trust your preparation; second-guessing your first instinct frequently leads to changing correct answers to incorrect ones
  • Your pass/fail result is displayed immediately after submission
  • Your official score report becomes available in AWS Certification Account within a few days
  • If you pass: your certification is valid for three years; schedule your next certification while the knowledge is fresh
  • If you don’t pass: review the domain score breakdown to identify weak areas, then reschedule — there is no limit on retakes (with a 14-day waiting period between attempts)

Build docs developers (and LLMs) love

Get started for freeTalk to us