Know who is responsible
Separate AWS responsibilities from customer responsibilities across different service models.
CLF-C02 · Foundational
AWS Certified Cloud Practitioner
Build a clear working understanding of AWS, from cloud concepts to everyday service choices.
Your free account includes a full CLF-C02 practice exam.
ExamNova practice
Your first session
- Questions
- 65
- Time limit
- 90 min
- Coverage
- 4 domains
Practise, review your answers and see where to focus next.
Preview a questionIs CLF-C02 your next step?
For learners starting with AWS and people who work alongside cloud teams. Cloud Practitioner tests broad understanding across roles, without expecting you to implement or troubleshoot a complete architecture.
Connect services to use cases
Recognise which compute, database, networking and storage services meet a basic business need.
Understand cloud economics
Compare purchasing models, support options and tools for understanding usage and spending.
What you’ll study
Explore the domains and topics in your ExamNova study path.
Cloud Concepts24% practice balance
Define the Benefits of the AWS Cloud
- Cost Optimization and Economies of Scale
- Measured Service and Cost Visibility
- CapEx, OpEx, and Marketplace Purchasing
- Elasticity and Capacity Planning
- Global Reach, Network Access, and Data Residency
- Disaster Recovery and Business Continuity
- Innovation, Prototyping, and Operational Efficiency
Identify Design Principles of the AWS Cloud
- Cloud Service Models and Their Characteristics
- Deployment Strategies and Use Cases
- Integration and Edge Computing Concepts
- Vendor Lock-in and Service Models
Understand the Benefits of and Strategies for Migration to the AWS Cloud
- Migration Strategies and Frameworks
- Migration Benefits and Value Proposition
- Rehosting and Offline Transfer Techniques
- Repurchase and Retain Strategies
- AWS Snow Family and Data Transfer
Understand Concepts of Cloud Economics
- Understanding BYOL and Cost Implications
- Cost-Optimization Strategies in Cloud Economics
- Economies of Scale in Cloud Services
- Licensing Models and Managed Services
- Total Cost of Ownership Analysis
- Automation's Role in Cost Management
Security and Compliance30% practice balance
Explore Security and Compliance
Understand the AWS Shared Responsibility Model
- AWS Responsibilities in the Shared Model
- Customer Data and Compliance Responsibilities
- Customer Workload and Patching Responsibilities
- Responsibilities Across Service Models
- Physical Security and Compliance Implications
- Networking Responsibilities and Education
Understand AWS Cloud Security, Governance, and Compliance Concepts
- AWS CloudTrail and Logging Strategies
- Threat Detection and Incident Response
- Compliance Monitoring and Governance Frameworks
- Policy Enforcement and Governance Automation
- DDoS Protection and Network Security
- Vulnerability Management and Threat Intelligence
Identify AWS Access Management Capabilities
- Credential Auditing and Access Analysis
- IAM Users, Groups, Roles, and Password Policies
- IAM Roles and Trust Policies
- Cross-Account Role Access
- STS and Just-in-Time Access
- Organizations, OUs, SCPs, and Service-Linked Roles
Identify Components and Resources for Security
- Client-Side and in-Transit Encryption
- Server-Side Encryption for AWS Services
- Data Protection Techniques
- KMS Customer Keys and BYOK
- KMS and CloudHSM Fundamentals
- Policy Enforcement and Secrets Management
Cloud Technology and Services34% practice balance
Explore Cloud Technology and Services
Define Methods of Deploying and Operating in the AWS Cloud
- AWS Deployment Models
- AWS CLI, SDK, and Management Console Features
- Infrastructure as Code with CDK
- AWS CloudFormation and Elastic Beanstalk
- AWS Edge Infrastructure and Local Zones
Define the AWS Global Infrastructure
- AWS Global Infrastructure Overview
- Data Centers and Edge Caching
- Fault Tolerance and High Availability
- Data Sovereignty and Compliance
- Latency Optimization and Global Connectivity
Identify AWS Compute Services
- Lambda Fundamentals and Serverless Benefits
- Container Management with AWS Fargate
- AWS Step Functions and Event-Driven Architectures
- Hybrid Cloud Solutions with AWS Outposts
Identify AWS Database Services
- AWS Database Migration and Schema Tools
- Graph and Document Database Services
- DynamoDB and Global Table Features
- Data Warehousing with Redshift
- Relational Database Services Overview
Identify AWS Network Services
- AWS Direct Connect and VPN Solutions
- Content Delivery with Amazon CloudFront
- DNS Management with Route 53
- Load Balancing and Target Groups
- PrivateLink and Secure Access
- VPC Networking Fundamentals
Identify AWS Storage Services
- AWS DataSync and Storage Gateway Overview
- Amazon S3 and Glacier Storage Options
- S3 Storage Classes and Versioning
- Amazon Elastic Block Store Features
- Amazon Elastic File System and FSx
- Data Resiliency and Disaster Recovery Techniques
Identify AWS Artificial Intelligence and Machine Learning (AI/ML) Services and Analytics Services
- AWS AI Services Overview
- AWS ML Services Overview
- Natural Language Processing with AWS
- Computer Vision and Analytics
- Streaming Data and AI Integration
- Business Intelligence with AWS
Identify Services from Other in-Scope AWS Service Categories
- Asynchronous Messaging Patterns
- Notification and Queue Services
- Message Broker Solutions
- Event-Driven Architecture with EventBridge
- Fan-Out Messaging Techniques
Billing, Pricing, and Support12% practice balance
Explore Billing, Pricing, and Support
Compare AWS Pricing Models
- AWS Pricing Models Overview
- Free Tier and Trial Pricing
- Cost Management and Optimization Techniques
- Service-Specific Pricing Insights
- Monitoring and Alerts for Cost Management
Understand Resources for Billing, Budget, and Cost Management
- Cost Management and Optimization Strategies
- AWS Budgets and Cost Tracking
- Resource Optimization and Rightsizing
- Consolidated Billing and Governance
Identify AWS Technical Resources and AWS Support Options
- AWS Health Dashboard and Support Center
- Case Management and Severity Levels
- AWS Support Plans Overview
- Access to AWS Experts
Percentages show ExamNova’s practice balance. Consult the official guide for the vendor’s current exam outline.
Try focused practice
Explore a topic with sample questions and explanations.
Try a question before you start.
Read the scenario. Consider your answer, then reveal the reasoning.
Use wrong answers to learn the boundaries between similar services. A clear distinction is more useful than a longer list of names.
A migration business case compares AWS usage charges with data center hardware, facilities, power, staffing, and refresh cycles. What kind of analysis is this?
- DNS failover analysis only
- Total cost of ownership analysis
- Password policy analysis
- Image recognition analysis
Show answer and explanations
DNS failover analysis only — DNS failover analysis is much narrower and does not compare full infrastructure economics.
Total cost of ownership analysis — TCO analysis compares the full cost of ownership across current and future operating models.
Password policy analysis — Password policy analysis concerns identity security, not migration economics.
Image recognition analysis — Image recognition analysis is an AI use case, not a cost comparison framework.
A clearer way to prepare.
One place to practise, understand your results and plan the next session.
Practise with purpose
Start with your free exam. Explore Exam, Endless and Custom practice modes as you build your study routine.
Understand the answer
Review the reasoning behind your answers and return to the decisions that need another look.
Find your next focus
Use domain-level performance and readiness to see strengths, gaps and areas you have yet to assess.
Put it into practice.
Explore hands-on tasks connected to CLF-C02. These are real Labs from the catalogue.
Lab
Close the vendor's role to everyone else
Repair trust-policy.json so only Beacon Cloud can assume the role, and only when presenting the external ID they issued. Beacon's account is arn:aws:iam::444455556666:root and the external ID they generate for this account is Beacon-9f2ab1c4-7e30-4d55-8a61-2b0c9d7e4413. Keep the policy version at 2012-10-17 and permit only sts:AssumeRole.
medium · About 12 min
LabClose the web tier without a deny rule
Leave the web tier's inbound rules permitting only what the review approved: the internet to the site on TCP 443, and the company VPN range 10.50.0.0/24 to the administrative port on TCP 22. Keep the public site working and keep a way in for administrators.
easy · About 10 min
Make CLF-C02 your next step.
Create your free account. Start practising.
Start Free