AWS CCP Study Guide: CLF-C02 Exam Prep, Domains, and Practice Tests

What Is the AWS CCP Exam?

The AWS certified cloud Practitioner (CCP) is the entry-level certification in Amazon Web Services' certification path. It validates that you understand the AWS cloud from a conceptual, billing, and services perspective — not that you can configure or architect AWS infrastructure. This distinction matters for your study approach: CCP prep is about breadth of cloud knowledge, not depth of hands-on technical skill. You don't need to have built anything on AWS to pass the CCP, though familiarity with the console and basic service concepts helps.

The exam was updated to version CLF-C02 in September 2023. The current version places greater emphasis on cloud economics, billing and pricing tools, and AWS security services compared to its predecessor. If you're using older study materials, check that they reference CLF-C02 — some older flashcard decks and courses still cover the retired CLF-C01 objectives. AWS provides an official exam guide on its certification page that lists the domains, subdomains, and specific skills tested on CLF-C02.

CCP is the right starting point if you're new to AWS and cloud computing in general — whether you're a business analyst, project manager, sales professional, or a technical person who hasn't worked with AWS before. It's often a prerequisite for more advanced AWS certifications, and some organizations require all cloud-adjacent staff to hold it regardless of role. The ccp certification gives you a formal credential that signals cloud literacy to employers and opens the door to the AWS Associate-level certifications, which require a deeper technical skillset.

The CLF-C02 has four domains: Cloud Concepts (24%), Security and Compliance (30%), Cloud Technology and Services (34%), and Billing, Pricing, and Support (12%). Security is the largest domain by weight, which surprises many candidates who study AWS services heavily but underprepare on IAM, compliance frameworks, and the AWS Shared Responsibility Model. Understanding the domain weights helps you allocate your study time more effectively — a candidate who spends 50% of their time on services and 10% on security will likely underperform on the Security and Compliance section, which contains nearly a third of the scored questions.

Registering for the exam is straightforward. Create an account on the AWS Training and Certification portal, schedule through Pearson VUE or PSI, and pay the $100 exam fee. AWS offers a 50% discount voucher for a retake if you fail — this comes automatically with a failed first attempt. Many employers will reimburse the exam fee, so check with your HR department before paying out of pocket. ESB (Exam Scheduling Benefits) vouchers are sometimes available through AWS partners and training programs, reducing the cost further for candidates affiliated with AWS Partners or participating in specific training initiatives.

CLF-C02 Exam Domains Explained

The CLF-C02 exam tests four domains, each covering a distinct aspect of AWS cloud knowledge. The domain weights are approximate percentages of the scored questions — understanding each domain's scope tells you what kind of questions to expect and where to focus your study time.

Domain 1 — Cloud Concepts (24%): This domain covers the fundamental principles of cloud computing and the AWS value proposition. You'll need to understand the six advantages of cloud computing (trade fixed for variable expense, benefit from massive economies of scale, stop guessing capacity, increase speed and agility, stop spending money running data centers, and go global in minutes). Questions in this domain test understanding of cloud deployment models (public, private, hybrid), cloud service models (IaaS, PaaS, SaaS), and why businesses migrate to cloud.

This is the most conceptual domain — it tests whether you understand what cloud computing is and why AWS provides value, rather than how to use specific services.

Domain 2 — Security and Compliance (30%): The largest domain covers the AWS Shared Responsibility Model (understanding what AWS manages vs. what customers manage), IAM (Identity and Access Management) fundamentals, AWS compliance programs (SOC 2, PCI DSS, HIPAA, ISO certifications), and AWS security services. Key services in this domain include IAM (users, groups, roles, policies), AWS Organizations, AWS CloudTrail, AWS GuardDuty, AWS Shield, and AWS WAF. The Shared Responsibility Model is tested repeatedly — knowing that AWS manages hardware security and you manage data classification and IAM configuration is foundational to this domain.

Domain 3 — Cloud Technology and Services (34%): The largest domain by weight tests your knowledge of core AWS services across compute, storage, networking, databases, and other categories. You don't need configuration-level knowledge, but you should know what each major service does and when it's the right choice. Compute includes EC2, Lambda, ECS, and Fargate.

Storage includes S3, EBS, EFS, and Glacier. Databases include RDS, DynamoDB, and Aurora. Networking includes VPC, CloudFront, Route 53, and Elastic Load Balancing. This domain rewards systematic study — flashcards with service names and one-sentence descriptions are highly effective for covering the breadth of services tested.

Domain 4 — Billing, Pricing, and Support (12%): This domain tests knowledge of the AWS pricing model, billing tools, and support plans.

Key concepts include the AWS Free Tier (what's free and for how long), pricing calculators (AWS Pricing Calculator), cost management tools (AWS Cost Explorer, AWS Budgets), and the four AWS support plans (Basic, Developer, Business, Enterprise). Questions often test which support plan includes specific features (e.g., 24/7 phone access starts at Business, concierge support is Enterprise only). The AWS Total Cost of Ownership (TCO) calculator and the differences between on-demand, reserved, and spot pricing for EC2 appear in this domain as well.

For a deep dive into the specific ccp exam objectives and sample questions for each domain, AWS provides an official exam guide PDF.

The AWS Migration strategies — sometimes called the '7 Rs' (Retire, Retain, Relocate, Rehost, Replatform, Repurchase, Refactor) — have increased in prominence with CLF-C02. Questions may describe a migration scenario and ask which strategy is most appropriate. For example, 'moving servers to EC2 without modification' describes Rehost (lift-and-shift), while 'moving from a self-managed database to RDS' describes Replatform. You don't need to memorize all seven in-depth, but knowing the commonly tested ones (Rehost, Replatform, Refactor, Retire, Retain) and their core definitions helps with scenario-based questions.

Cloud economics and Total Cost of Ownership (TCO) analysis appear consistently in Domain 1. The core argument for cloud adoption in TCO terms is that replacing capital expenditure (servers, data center facilities, hardware maintenance) with variable operational expenditure (pay-as-you-go cloud costs) reduces financial risk and increases agility.

AWS provides a TCO Calculator tool that estimates how much a company could save by migrating on-premises workloads to AWS. Exam questions on TCO test whether you understand the categories of costs being compared — not the ability to run a full TCO analysis. Understanding concepts like economies of scale, variable vs. fixed costs, and the difference between OpEx and CapEx is the core knowledge Domain 1 expects.

Frequently Tested Services and Concepts

Beyond the service categories, a handful of concepts appear disproportionately often on the CLF-C02 and are worth specific attention. The AWS Global Infrastructure (Regions, Availability Zones, Edge Locations) is tested in multiple domains — you need to understand what each is, how they differ, and which services use edge locations (CloudFront, Route 53) vs. Availability Zones (EC2, RDS). Questions like 'which component of AWS infrastructure provides geographic fault tolerance?' or 'which service delivers content from edge locations?' test these distinctions directly.

The AWS Shared Responsibility Model is the single most-tested conceptual framework in the Security domain. AWS is responsible for 'security of the cloud' — the physical infrastructure, hardware, and managed service software layers. Customers are responsible for 'security in the cloud' — operating system patches, data encryption, IAM configurations, and application security.

The model shifts depending on the service type: for managed services like Lambda or RDS, AWS manages more of the stack. Exam questions often present scenarios and ask you to identify whether the described task is AWS's responsibility or the customer's. Practice with real-world examples: 'Who is responsible for patching the EC2 instance operating system?' (customer) vs. 'Who is responsible for physical data center security?' (AWS).

Pricing models for EC2 are heavily tested in Domain 4 even though EC2 is a compute service. Know the four pricing models: On-Demand (pay per hour/second, no commitment), Reserved Instances (1 or 3 year commitment, up to 72% savings), Spot Instances (unused capacity at discount, can be interrupted), and Dedicated Hosts (physical server dedicated to your use, compliance or licensing requirements). Savings Plans are a newer flexible alternative to Reserved Instances — know that they offer similar discounts with more flexibility across instance families and regions.

For a complete set of practice questions organized by domain, the aws certified cloud practitioner exam guide pages on this site cover CLF-C02 question types in depth.

AWS database services generate significant question volume on the CLF-C02.

The key distinctions to know: RDS is for relational databases (SQL), DynamoDB is serverless NoSQL, Aurora is a higher-performance relational option that's MySQL/PostgreSQL compatible, Redshift is for data warehouse analytics (not transactional), and ElastiCache is for in-memory caching (Redis or Memcached). Questions often present scenarios like 'a company needs a managed relational database with automated backups' (RDS) or 'a gaming application needs single-digit millisecond response for key-value lookups at any scale' (DynamoDB). Recognizing the right service from a use-case description is the core skill tested in the database portion of Domain 3.

Exam Day Tips and Strategy

The 90-minute time limit for 65 questions gives you roughly 83 seconds per question — more than enough time if you don't get stuck. The effective strategy is to mark questions you're unsure about and return to them after completing the rest of the exam. Many candidates spend several minutes on a difficult question early in the exam and then rush through easier questions at the end. Front-load your confidence: work through the questions you know first, flag the rest, then return for a second pass.

The CLF-C02 uses a scaled scoring system from 100 to 1000. You don't need a perfect score — you need 700. This means you can miss approximately 25–30% of questions and still pass. Don't let uncertainty on individual questions throw off your confidence.

If you've prepared thoroughly, your overall score across 50 questions will reflect your preparation even if individual answers are uncertain. The 15 unscored questions in the exam are used by AWS for item validation — they don't affect your score but you can't identify which ones they are during the exam, so answer all questions as if they count.

Read each question carefully for scope-limiting language. Words like 'most cost-effective,' 'with the least operational overhead,' 'requires no upfront commitment,' or 'which is a customer responsibility under the Shared Responsibility Model' all change the answer. Many CCP questions test whether you can pick the most appropriate service or configuration for a described scenario — not just whether you know what a service does.

Practicing with full-length timed practice exams is the best way to build the pattern recognition these questions require. Aim to score consistently above 80% on practice exams before sitting for the real one, giving yourself a comfortable margin above the 70% passing threshold. The certified cloud practitioner pages on this site include free practice questions organized by domain.

On the topic of AWS Well-Architected Framework: this framework appears in Domain 1 (Cloud Concepts) and is worth specific attention. The five pillars are Operational Excellence, Security, Reliability, Performance Efficiency, and Cost Optimization. A sixth pillar, Sustainability, was added in 2021 and can appear on the CLF-C02.

Exam questions may ask you to identify which pillar a described design decision falls under — for example, 'using multiple Availability Zones for failover' aligns with Reliability, while 'right-sizing instances to reduce costs' aligns with Cost Optimization. Knowing the pillar names and their core definitions takes about 30 minutes to study and is reliably tested.

AWS Cloud Adoption Framework (CAF) is another concept that's increased in prominence with the CLF-C02 update. The CAF describes six perspectives for guiding cloud adoption within an organization: Business, People, Governance, Platform, Security, and Operations. Each perspective addresses different organizational stakeholders' concerns about moving to cloud.

Exam questions about CAF typically ask you to identify which perspective addresses a described organizational challenge — for example, human resources and workforce concerns fall under the People perspective, while IT governance and compliance fall under the Governance perspective. CAF is a higher-level framework, so you don't need deep knowledge — knowing the six perspectives and their broad focus areas is sufficient for the CLF-C02.

One more study resource worth mentioning: AWS publishes sample questions for each certification on the official exam page — typically 10 sample questions with explanations. These are written by the same team that writes the actual exam and reflect the format, difficulty, and phrasing you'll encounter on test day. They're a small sample but a high-fidelity one. Reviewing these sample questions early in your study process gives you a realistic benchmark for the actual exam difficulty.

If the sample questions feel very easy after your first two weeks of study, you're making good progress. If they still feel challenging after four weeks, extend your preparation and focus on weak areas before scheduling. The combination of AWS Skill Builder content, practice exams, and the official sample questions gives you a complete preparation ecosystem without requiring any paid third-party courses.