title: "AWS Cloud Practitioner Study Guide 2026: Pass CLF-C02 on Your First Try (Free)"
meta_description: "Free AWS Cloud Practitioner CLF-C02 study guide with a 4-week plan, exam breakdown, free resources, and practice question strategy to pass on your first attempt."
tags: [aws-cloud-practitioner, clf-c02, study-guide, free-resources, exam-prep, aws-certification, 4-week-plan]
author: Kenny Ogunlowo
date: 2026-05-11
read_time: 24 min
target_keyword: aws cloud practitioner study guide free
search_volume: 2400
keyword_difficulty: 18
product_links:
text: "Start Learning for Free (Primary)"
- collection: architecture-blueprints
text: "Browse Architecture Blueprints"
schema_type: HowTo
AWS Cloud Practitioner Study Guide 2026: Pass CLF-C02 on Your First Try (Free)
The AWS Cloud Practitioner (CLF-C02) is the single most popular cloud certification in the world. AWS reported that over 1.4 million people hold active Cloud Practitioner certifications as of Q1 2026. The exam costs $100, takes 90 minutes, and can be taken from home via Pearson VUE's online proctoring system.
More importantly, it works. A 2025 Global Knowledge survey found that 78% of hiring managers consider Cloud Practitioner a valid entry-level credential that clears resume filters. Candidates with CCP on their resume receive 23% more interview callbacks for cloud support and junior cloud engineering roles compared to candidates without any cloud certification.
You do not need to spend money on courses to pass this exam. Everything you need is available for free. This guide gives you the complete exam breakdown, a week-by-week study plan, every free resource worth using, and a practice question strategy that maximizes your first-attempt pass rate.
Exam Breakdown: CLF-C02 Structure
Understanding the exam structure is the first step to passing efficiently. Do not skip this section — the domain weights tell you exactly where to focus your study time.
| Domain |
Weight |
Questions (approx.) |
| Domain 1: Cloud Concepts |
24% |
16 questions |
| Domain 2: Security and Compliance |
30% |
20 questions |
| Domain 3: Cloud Technology and Services |
34% |
22 questions |
| Domain 4: Billing, Pricing, and Support |
12% |
8 questions |
Total questions: 65 (50 scored + 15 unscored pilot questions — you do not know which are which)
Time: 90 minutes
Passing score: 700 out of 1000 (scaled scoring — not a simple percentage)
Question format: Multiple choice (1 correct answer out of 4) and multiple response (2-3 correct answers out of 5-6)
Cost: $100 USD
Validity: 3 years
Language: English, Japanese, Korean, Simplified Chinese, and several others
What the Domain Weights Mean for Your Study Plan
Domain 3 (Cloud Technology and Services) is worth 34% of your score — more than any other domain. It covers the actual AWS services: compute, storage, database, networking, analytics, machine learning, developer tools, and management. This is where you will spend the most study time.
Domain 2 (Security and Compliance) is 30% — nearly a third of the exam. AWS takes security seriously, and they want every certified person to understand the shared responsibility model, IAM, encryption, and compliance programs.
Domain 4 (Billing, Pricing, and Support) is only 12% but these are the easiest points on the exam. AWS pricing models, support plans, and cost management tools have definitive correct answers. Do not leave these points on the table.
The 4-Week Study Plan (15-20 Hours Per Week)
This plan assumes you are starting from zero cloud knowledge. If you have IT experience, you can compress weeks 1-2 into a single week.
Week 1: Cloud Concepts + Security Foundations (15 hours)
Day 1-2: What Is Cloud Computing?
- Study: AWS Cloud Practitioner Essentials (free on AWS Skill Builder — the official course, 6 hours total). Complete Modules 1-3.
- Key concepts to master: IaaS vs. PaaS vs. SaaS, public vs. private vs. hybrid cloud, cloud deployment models, benefits of cloud computing (trade capital expense for variable expense, economies of scale, stop guessing capacity, increase speed and agility, go global in minutes).
- Test yourself: can you explain each of the 6 advantages of cloud computing without looking them up?
Day 3-4: AWS Global Infrastructure
- Study: AWS Skill Builder Module 4 + AWS Global Infrastructure page (infrastructure.aws)
- Key concepts: Regions (34 as of 2026), Availability Zones (108+), Edge Locations (600+), Local Zones, Wavelength Zones. Why you choose one Region over another (compliance, proximity, service availability, pricing).
- Test yourself: What is the difference between a Region and an Availability Zone? Why would you deploy in multiple AZs?
Day 5-7: Security and the Shared Responsibility Model
- Study: AWS Skill Builder Modules 5-6 + the AWS Shared Responsibility Model whitepaper (free PDF)
- Key concepts: Customer responsibility ("security IN the cloud" — data, applications, OS patching, network config, encryption) vs. AWS responsibility ("security OF the cloud" — physical infrastructure, hypervisor, network infrastructure, regions/AZs). IAM basics: users, groups, roles, policies. MFA. Root account best practices. AWS Organizations and SCPs.
- This is 30% of your exam. Do not rush.
Free resources for Week 1:
-
Citadel Cloud Management Free Courses — structured AWS fundamentals path
- AWS Skill Builder — Cloud Practitioner Essentials (free enrollment)
- AWS Shared Responsibility Model whitepaper (docs.aws.amazon.com)
- FreeCodeCamp AWS Cloud Practitioner video on YouTube (13 hours, covers all domains)
Week 2: Core AWS Services (20 hours)
This is the highest-weight domain. Learn what each service does, when to use it, and how it compares to alternatives. You do not need to know how to configure them — just understand their purpose.
Day 1-2: Compute Services
| Service |
What It Does |
When to Use It |
| EC2 |
Virtual servers in the cloud |
Full control over OS, long-running workloads |
| Lambda |
Serverless compute — run code without managing servers |
Event-driven, short-duration tasks (<15 min) |
| ECS/EKS |
Container orchestration (Docker/Kubernetes) |
Microservices, containerized applications |
| Elastic Beanstalk |
PaaS — deploy web apps without managing infrastructure |
Quick deployment for web applications |
| Lightsail |
Simplified virtual servers |
Simple websites, dev environments |
| Fargate |
Serverless containers |
Containers without managing EC2 instances |
Day 3: Storage Services
| Service |
What It Does |
When to Use It |
| S3 |
Object storage (files, images, backups) |
Static content, data lakes, backups |
| EBS |
Block storage attached to EC2 |
Database storage, OS volumes |
| EFS |
Managed file system (NFS) |
Shared file storage across EC2 instances |
| S3 Glacier / Glacier Deep Archive |
Long-term archival storage |
Compliance archives, rarely accessed data |
| Storage Gateway |
Hybrid cloud storage |
On-premises to AWS storage bridge |
Know the S3 storage classes: S3 Standard, S3-IA, S3 One Zone-IA, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, S3 Glacier Deep Archive, S3 Intelligent-Tiering. The exam loves questions about choosing the right storage class based on access patterns and cost.
Day 4: Database Services
| Service |
What It Does |
When to Use It |
| RDS |
Managed relational databases (MySQL, PostgreSQL, etc.) |
Traditional SQL workloads |
| Aurora |
AWS-optimized MySQL/PostgreSQL |
High-performance relational workloads |
| DynamoDB |
Managed NoSQL (key-value + document) |
High-scale, low-latency NoSQL |
| ElastiCache |
In-memory caching (Redis, Memcached) |
Session stores, caching layers |
| Redshift |
Data warehouse |
Analytics, large-scale queries |
| DocumentDB |
MongoDB-compatible document database |
Document-oriented workloads |
Day 5: Networking Services
| Service |
What It Does |
When to Use It |
| VPC |
Virtual private network in the cloud |
Isolating and securing your resources |
| CloudFront |
Content Delivery Network (CDN) |
Serving static content globally with low latency |
| Route 53 |
DNS service |
Domain name management, routing |
| API Gateway |
Managed REST/WebSocket APIs |
Frontend for Lambda and backend services |
| Direct Connect |
Dedicated network connection to AWS |
High-bandwidth, consistent latency |
| Elastic Load Balancing |
Distributes traffic across targets |
High availability for applications |
Day 6-7: Application Integration, Analytics, ML, and Management
- SQS, SNS, EventBridge (messaging and events)
- CloudWatch (monitoring), CloudTrail (API audit logging), AWS Config (resource configuration tracking)
- Kinesis (real-time data streaming), Athena (query S3 with SQL)
- SageMaker (machine learning), Rekognition (image/video analysis), Comprehend (NLP), Lex (chatbots)
- CloudFormation (infrastructure as code), Systems Manager, Trusted Advisor
You do not need deep knowledge of ML or analytics services — just know what they do and when you would choose one over another.
Week 3: Billing, Pricing, Support + Security Deep Dive (15 hours)
Day 1-2: AWS Pricing and Billing
- Free Tier: what is included (750 hours EC2 t2.micro/month, 5GB S3, 25GB DynamoDB, Lambda 1M requests/month for 12 months, plus always-free services)
- Pricing models: On-Demand (pay per hour/second), Reserved Instances (1-year or 3-year commitment, up to 72% savings), Savings Plans (similar savings, more flexible), Spot Instances (up to 90% savings, can be interrupted)
- Cost management tools: AWS Cost Explorer, AWS Budgets, Cost and Usage Report, Pricing Calculator
- AWS Organizations: consolidated billing, volume discounts across accounts
- Support plans: Basic (free), Developer ($29/month), Business ($100/month minimum), Enterprise On-Ramp ($5,500/month), Enterprise ($15,000/month). Know the key differences: response times, TAM access, Trusted Advisor checks.
Day 3-4: Security Deep Dive
- IAM in detail: users, groups, roles, policies (JSON-based). Principle of least privilege. When to use roles vs. users. Cross-account access.
- AWS Shield (DDoS protection — Standard is free, Advanced is paid), AWS WAF (web application firewall), AWS GuardDuty (threat detection), AWS Inspector (vulnerability scanning), AWS Macie (sensitive data discovery in S3).
- Encryption: KMS (Key Management Service), CloudHSM (hardware security modules), SSL/TLS certificate management with ACM (AWS Certificate Manager).
- Compliance programs: HIPAA, PCI-DSS, SOC 1/2/3, FedRAMP, GDPR. Know that AWS provides compliance documentation via AWS Artifact.
- AWS Security Hub: centralized security findings view.
Day 5-7: Review and Gap-Filling
- Revisit any service you cannot explain in one sentence.
- Create flashcards for service names and their one-line descriptions.
- Review the AWS Well-Architected Framework's six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability. Know each pillar's definition.
Week 4: Practice Exams and Test Strategy (15-20 hours)
This week is about practice tests. Your goal: score 85% or higher on practice exams consistently before booking the real exam.
Day 1-2: First Practice Exam
Take one full 65-question practice exam under timed conditions (90 minutes, no breaks, no notes). Use one of these free options:
- AWS Skill Builder Official Practice Exam (20 questions, free)
- Tutorials Dojo's free CLF-C02 sample exam (free set of 10-15 questions)
- ExamTopics CLF-C02 discussion forum (community-sourced questions — use for exposure, not as sole study material)
Score yourself. For every wrong answer, write down:
- What the question asked
- Why the correct answer is correct
- Why each wrong answer is wrong
This error analysis is the highest-value study activity in your entire preparation.
Day 3-4: Targeted Review
Based on your practice exam results, review the domains where you scored below 80%. Reread the relevant sections of the AWS Skill Builder course. Rewatch the FreeCodeCamp video sections. Create additional flashcards.
Day 5-6: Second and Third Practice Exams
Take two more full practice exams on different days. Repeat the error analysis process. If you are scoring 85%+ consistently, you are ready.
Day 7: Final Review and Exam Booking
- Review your error analysis notes one final time
- Book the exam through aws.training → Certification → Schedule/Manage Exams
- Choose either a testing center or online proctored (at home). Online proctored requires: webcam, microphone, stable internet, clear desk, government ID.
Free Resources: The Complete List
You can pass CLF-C02 spending $0 on study materials. Here is everything you need:
Video Courses (Free)
| Resource |
Length |
Quality |
Notes |
| AWS Cloud Practitioner Essentials (AWS Skill Builder) |
6 hours |
Official, excellent |
The primary course. Created by AWS. Start here. |
| FreeCodeCamp AWS CCP Course (YouTube) |
13 hours |
Very thorough |
Covers every domain in detail. Good supplement. |
| ExamPro AWS CCP Course (YouTube) |
14 hours |
Comprehensive |
Andrew Brown's course. Well-structured, updated for CLF-C02. |
Reading Materials (Free)
| Resource |
Format |
Notes |
| AWS Whitepapers: Overview of Amazon Web Services |
PDF |
Official AWS document. Covers all major services. |
| AWS Well-Architected Framework |
PDF/Web |
Six pillars explained. 3-5 questions on the exam from this document. |
| AWS Shared Responsibility Model |
Web page |
Critical for the 30% security domain. |
| AWS Pricing documentation |
Web |
Read the pricing pages for EC2, S3, Lambda, and RDS at minimum. |
| CLF-C02 Exam Guide |
PDF |
Official exam guide from AWS. Lists every topic that can appear. Download from aws.amazon.com/certification. |
Practice Questions (Free and Low-Cost)
| Resource |
Questions |
Cost |
Notes |
| AWS Official Practice Exam |
20 |
Free |
On AWS Skill Builder. Good baseline. |
| Tutorials Dojo Free Sampler |
10-15 |
Free |
High quality. Jon Bonso's questions are closest to real exam difficulty. |
| Tutorials Dojo Full Set |
390 |
$15 |
Not free, but cheapest high-quality practice exam set. Worth every cent. |
| ExamTopics CLF-C02 |
400+ |
Free |
Community-sourced. Quality varies. Read the discussion threads — they often correct wrong answers. |
| Digital Cloud Training Free Sampler |
10-15 |
Free |
Neal Davis's questions. Good difficulty calibration. |
Hands-On Labs (Free)
| Resource |
Notes |
| AWS Free Tier Account |
Sign up at aws.amazon.com. 12 months of free-tier services. Do not skip this — hands-on experience helps you remember services. |
| AWS Skill Builder Labs |
Some labs are free with a Skill Builder account. Look for "Cloud Practitioner" tagged labs. |
| [Citadel Cloud Management Free Courses](/pages/free-courses) |
Structured learning paths that align with CCP exam objectives |
The Practice Question Strategy
This strategy maximizes your learning from practice questions. Follow it exactly.
Step 1: Untimed Review Mode First
Before taking a timed practice exam, go through 20-30 questions in untimed review mode. Read each question. Attempt an answer. Then read the explanation for every option — correct and incorrect. This builds understanding before you test speed.
Step 2: Timed Full Exam
Take a 65-question practice exam under realistic conditions: 90-minute timer, no notes, no pauses. This simulates the real exam.
Step 3: Error Analysis (The Most Important Step)
For each wrong answer, create an entry in a notebook or spreadsheet:
- Question topic (e.g., "S3 storage class selection")
- Why you got it wrong (e.g., "confused S3-IA with S3 One Zone-IA")
- The correct reasoning (e.g., "S3-IA replicates across multiple AZs, One Zone-IA does not — use One Zone-IA only when data can be recreated")
- Domain (e.g., "Domain 3 — Cloud Technology")
Step 4: Pattern Recognition
After 2-3 practice exams, review your error analysis. You will see patterns — topics you consistently get wrong. These are your highest-leverage study areas. Go back to the AWS Skill Builder course and rewatch the sections covering those topics.
Step 5: Target Score
Take the real exam when you score 85% or higher on at least two different practice exam sets. The real exam pass mark is approximately 70% (700/1000 scaled), so 85% on practice exams gives you a comfortable margin for exam-day nerves and the 15 unscored pilot questions.
Exam Day Strategy
Time Management
You have 90 minutes for 65 questions — approximately 83 seconds per question. That is generous. Most people finish in 50-60 minutes. Do not rush, but do not agonize over any single question.
The Two-Pass Method
-
First pass: Answer every question you are confident about. Flag questions you are unsure about. Do not spend more than 60 seconds on any question during the first pass.
-
Second pass: Return to flagged questions. Re-read carefully. Eliminate obviously wrong answers. Choose the best remaining option. If you are stuck between two answers, go with your first instinct — research on exam psychology consistently shows that first answers are correct more often than changed answers.
Elimination Strategy
Most CLF-C02 questions have one obviously wrong answer, one subtly wrong answer, and two plausible answers. Eliminate the obviously wrong option first. Then focus on distinguishing between the remaining plausible answers. Look for qualifying words: "most cost-effective," "highest availability," "least operational overhead" — these narrow the correct answer.
Read Every Word
AWS exam questions are precisely worded. The difference between "which service provides..." and "which service should you use to..." can change the correct answer. Read the full question stem and all answer options before selecting.
Service Cheat Sheet: 50 AWS Services in One Table
Print or bookmark this table for your final review. Every service listed here can appear on the CLF-C02 exam.
| Category |
Service |
One-Line Description |
| Compute |
EC2 |
Virtual servers |
| Compute |
Lambda |
Serverless functions |
| Compute |
ECS |
Container orchestration (Docker) |
| Compute |
EKS |
Managed Kubernetes |
| Compute |
Fargate |
Serverless containers |
| Compute |
Elastic Beanstalk |
PaaS for web apps |
| Compute |
Lightsail |
Simple virtual servers |
| Storage |
S3 |
Object storage |
| Storage |
EBS |
Block storage for EC2 |
| Storage |
EFS |
Shared file storage |
| Storage |
S3 Glacier |
Archival storage |
| Storage |
Storage Gateway |
Hybrid storage bridge |
| Database |
RDS |
Managed relational DB |
| Database |
Aurora |
High-performance MySQL/PostgreSQL |
| Database |
DynamoDB |
Managed NoSQL |
| Database |
ElastiCache |
In-memory cache |
| Database |
Redshift |
Data warehouse |
| Database |
DocumentDB |
MongoDB-compatible |
| Networking |
VPC |
Virtual private network |
| Networking |
CloudFront |
CDN |
| Networking |
Route 53 |
DNS |
| Networking |
API Gateway |
Managed APIs |
| Networking |
Direct Connect |
Dedicated network link |
| Networking |
ELB |
Load balancing |
| Security |
IAM |
Identity and access management |
| Security |
KMS |
Encryption key management |
| Security |
Shield |
DDoS protection |
| Security |
WAF |
Web application firewall |
| Security |
GuardDuty |
Threat detection |
| Security |
Inspector |
Vulnerability scanning |
| Security |
Macie |
Sensitive data discovery |
| Security |
ACM |
SSL/TLS certificates |
| Security |
Security Hub |
Centralized security view |
| Security |
Artifact |
Compliance documents |
| Management |
CloudWatch |
Monitoring and logging |
| Management |
CloudTrail |
API audit logging |
| Management |
Config |
Resource configuration tracking |
| Management |
Systems Manager |
Operations management |
| Management |
Trusted Advisor |
Best practice recommendations |
| Management |
CloudFormation |
Infrastructure as code |
| Management |
Organizations |
Multi-account management |
| Integration |
SQS |
Message queue |
| Integration |
SNS |
Notification service (pub/sub) |
| Integration |
EventBridge |
Event bus |
| Integration |
Step Functions |
Workflow orchestration |
| Analytics |
Kinesis |
Real-time data streaming |
| Analytics |
Athena |
Query S3 with SQL |
| ML |
SageMaker |
Machine learning platform |
| ML |
Rekognition |
Image and video analysis |
| ML |
Comprehend |
Natural language processing |
For Architecture Blueprints that show how these services connect in production systems, browse Citadel's reference designs.
Frequently Asked Questions
How hard is the AWS Cloud Practitioner exam?
The CLF-C02 is an entry-level exam. With 3-4 weeks of focused study (15-20 hours per week), most people pass on their first attempt. The questions test understanding of concepts, not hands-on implementation. If you can explain what each major AWS service does and when you would use it, you will pass. The estimated first-attempt pass rate is 70-75%.
Can I pass with just free resources?
Yes. The AWS Skill Builder official course, the FreeCodeCamp YouTube video, and the free practice question sets are sufficient for most people. The only thing worth paying for, besides the $100 exam fee, is a set of Tutorials Dojo practice exams ($15) — the question quality and explanations are significantly better than free alternatives.
Should I get Cloud Practitioner or skip straight to Solutions Architect Associate?
If you have zero cloud experience, start with Cloud Practitioner. It builds the conceptual foundation that Solutions Architect Associate builds on. If you have 6+ months of hands-on cloud experience or a strong IT background, you can skip directly to SAA-C03 — but study the billing and pricing domain separately, as it is covered less in SAA preparation.
How long is the CLF-C02 valid?
3 years from the date you pass. After 3 years, you can either retake the Cloud Practitioner exam or earn a higher-level certification (e.g., Solutions Architect Associate), which automatically renews your Cloud Practitioner status.
Can I take the exam from home?
Yes. AWS partners with Pearson VUE for online proctored exams. Requirements: webcam, microphone, stable internet connection (at least 1 Mbps), government-issued photo ID, clear desk and room (no papers, books, or second monitors visible), and a quiet environment. The proctor monitors you via webcam throughout the exam.
What happens if I fail?
You can retake the exam after a 14-day waiting period. You pay the full $100 fee again. Review your score report — it shows your performance by domain so you know exactly where to focus your restudy. Most people who fail on the first attempt pass on the second with targeted review.
Is CLF-C02 enough to get a job?
Cloud Practitioner alone is not typically sufficient for a cloud engineering role, but it is enough for cloud support roles, help desk positions at AWS partner companies, and entry-level IT positions at companies using AWS. For cloud engineering jobs, pair CCP with AWS Solutions Architect Associate (SAA-C03) and 2-3 portfolio projects. CCP gets your resume past the first filter; SAA-C03 gets you the interview.
How does CLF-C02 compare to Azure Fundamentals (AZ-900)?
Both are entry-level cloud certifications. CLF-C02 costs $100 vs. AZ-900 at $165. CLF-C02 appears in more job postings globally. AZ-900 study materials are completely free through Microsoft Learn. Choose AWS if your target market is startups, tech companies, or general cloud roles. Choose Azure if your target is enterprise, government, or Microsoft-heavy environments. Earning both is a strong signal.
Sources
- AWS. "CLF-C02 Exam Guide." AWS Training and Certification, 2024.
- AWS. "AWS Cloud Practitioner Essentials Course." AWS Skill Builder, 2026.
- Global Knowledge. "2025 IT Skills and Salary Report." Global Knowledge, 2025.
- AWS. "AWS Certification Global Trends." AWS Re:Invent 2025 Presentation.
- Synergy Research Group. "Cloud Infrastructure Market Share Q1 2026." March 2026.
- Tutorials Dojo. "CLF-C02 Practice Exam Statistics." TutorialsDojo.com, 2025.
- AWS. "AWS Global Infrastructure." infrastructure.aws, accessed May 2026.
- Robert Half. "2026 Technology Salary Guide." Robert Half International, 2026.
Citadel Cloud Management Team
Enterprise Cloud Architects
Enterprise experience across Fortune 500 organizations in healthcare, defense, energy, and technology. AWS, Azure, GCP, FedRAMP, CMMC, HIPAA certified.
Get free cloud career resources
Join 5,000+ cloud professionals. Weekly insights on AWS, Azure, GCP, and DevOps.
Explore Free Courses