AWS Cloud Practitioner (CLF-C02) Complete Guide: Exam Domains, Difficulty, Study Hours, and a Pass Roadmap

AWS Certified Cloud Practitioner (CLF-C02) is the entry-level, foundational tier of the AWS certification program. It is the one AWS exam designed so that non-engineers can pass it too — sales, pre-sales, planning, procurement, and project managers all sit it — and it is the most common first step for engineers who are new to AWS. The exam is 65 questions in 90 minutes, and you need 700 out of 1,000 to pass.

This article covers the published exam specifications, what each of the four domains actually asks about, and — using the measured difficulty distribution of the 400 practice questions NicheeLab authored for CLF-C02 — where the exam is genuinely easy and where it is not. We also answer the perennial question of whether you should skip Cloud Practitioner and go straight to SAA, and explain how the three-year validity period and renewal rules work in practice.

The short answer

CLF-C02 is the AWS exam that tests whether you can talk about AWS, not whether you can build on it. It is the easiest of the three AWS exams we cover — hard questions make up only 7% of our bank — and 50-80 hours is enough for most people with some IT background.

• Who it's for: people without hands-on AWS experience, non-engineering roles, and engineers just starting with AWS. It does not ask you to make technical design decisions.
• What it tests: cloud concepts, the shared responsibility model, what the major services do, and the pricing and support model. In short, whether you know which service does what.
• The typical failure mode: memorizing terms only loosely and walking in with fuzzy boundaries between similar services — S3 versus EBS, CloudTrail versus CloudWatch, and so on.
• What comes next: SAA-C03 (Solutions Architect - Associate). Passing it also renews your CLF certification.

Exam specifications

Three details in this table matter more than they look. First, 15 of the 65 questions are unscored anchor items used for statistical calibration, and there is no way to tell which they are — so a question that feels bizarrely hard may simply not count. Do not let it rattle you. Second, the score is scaled, and there is no per-domain cutoff: a weak domain can be offset by strength elsewhere, so it is fine to accept some unevenness in your preparation. Third, there is no penalty for guessing. An unanswered question is scored as wrong, so always pick something, even when you have no idea.

One more thing to be clear about: the only question formats are multiple choice (one correct answer) and multiple response (two or more correct answers). Other vendors' certifications include ordering, matching, and case-study formats, but the AWS exam guide describes none of those. If you have seen a study site claim otherwise, it is confusing AWS with another program. Whether the fee of JPY 15,000 includes tax is not stated explicitly in the official material, so confirm the final total at checkout. Yen prices are updated annually in April.

Exam domains and their weights

CLF-C02 is divided into four domains, and the official exam guide assigns them the following weights.

Cloud Technology and Services (34%) is the largest block and the closest thing this exam has to a core. It asks what each major service is for: compute (EC2, Lambda, ECS), storage (S3, EBS, EFS, Glacier), networking (VPC, Route 53, CloudFront), databases (RDS, DynamoDB, Aurora), plus the basics of how you interact with AWS — Management Console, CLI, SDK, and Infrastructure as Code. You are not asked to configure anything. What you are asked is whether you can pick the right service for a stated requirement. The trap is service pairs that sound similar, and the fix is to write out a one-line difference for each pair rather than memorizing definitions in isolation.

Security and Compliance (30%) is where the single most important concept on the exam lives: the shared responsibility model. AWS is responsible for security of the cloud; the customer is responsible for security in the cloud. Questions repeatedly ask which side of that line a given item falls on — physical data center security, hypervisor patching, guest OS patching, IAM user management, data encryption, security group rules. The rest of the domain covers IAM fundamentals (users, groups, roles, policies, MFA, why you should not use the root account for daily work), plus the names and purposes of services like Shield, WAF, GuardDuty, Inspector, KMS, Artifact, and CloudTrail. That is a lot of proper nouns for 30% of the exam, which is exactly why this domain rewards deliberate study.

Cloud Concepts (24%) is the most abstract domain and the one non-engineers often find easiest. It covers the benefits of cloud computing (agility, elasticity, no capex, global reach), the economics of moving from capital expenditure to operating expenditure, the six pillars of the AWS Well-Architected Framework, cloud migration strategies, and the global infrastructure hierarchy: Regions, Availability Zones, and edge locations. The distinction between a Region and an AZ is fundamental and shows up throughout the rest of the exam, so nail it early — an AZ is one or more discrete data centers within a Region, and designing across multiple AZs is the standard answer to availability requirements.

Billing, Pricing, and Support (12%) is the smallest domain but also the highest-yield one, because its scope is narrow and concrete. It covers EC2 pricing models (On-Demand, Reserved Instances, Savings Plans, Spot), the cost tools (Cost Explorer, AWS Budgets, Cost and Usage Report, Pricing Calculator), consolidated billing under AWS Organizations, and the four support plans (Basic, Developer, Business, Enterprise) — which one gives you a Technical Account Manager, which one gives 24/7 phone support, and so on. These are memorizable facts with clean boundaries. If you are short on time, this is the domain to lock down last, because a small amount of study converts almost directly into points.

Difficulty: measured across our own 400 questions

AWS does not publish pass rates, so any article claiming "the pass rate is about XX%" is showing you a guess. Rather than repeat a number nobody can source, we will show you something we can actually measure: the difficulty distribution of the 400 practice questions we authored for each of the three AWS exams, tagged to a single consistent standard.

The numbers line up with intuition, but the size of the gap is worth noticing. CLF-C02 has 149 easy questions — roughly 37% of the bank — while SAP-C02 has only 31. Conversely, hard questions run 7% for CLF and 31% for SAP, a difference of more than four times. Practically, this means that on CLF-C02 the majority of your work is knowing things, whereas on SAP-C02 it is choosing between plausible options under trade-off pressure. Those are different skills, and they need different preparation.

Where does CLF's 7% of hard questions actually sit? Overwhelmingly in two places. One is the fine-grained boundaries of the shared responsibility model — cases like managed-service patching, where the line moves depending on the service. The other is service pairs that are easy to confuse: S3 versus EBS versus EFS, CloudWatch versus CloudTrail versus Config, Security Group versus network ACL, Shield versus WAF, Savings Plans versus Reserved Instances. If you are systematically wrong on those, no amount of extra hours will help until you fix the underlying confusion. We break the mechanics down further in our AWS certification difficulty ranking.

How much study time you need

Study time for CLF-C02 varies by a factor of five depending on where you start. The table below reflects how the required work actually changes with background. Note that these are ranges for reaching a comfortable pass, not the bare minimum for scraping over 700.

The hour count matters far less than the shape of the practice. A candidate who does 40 hours of question drilling with a written explanation for every miss will beat a candidate who does 100 hours of passive video watching. The check we recommend is simple: pick any service name in the exam scope and try to say, out loud, in one sentence, what problem it solves and which service it is most often confused with. If you can do that for the top thirty or so services, you are ready. For a broader comparison across all three AWS exams, see how long AWS certifications take to study for.

A study roadmap

Here is a four-phase roadmap based on the most common case: someone with IT experience but little AWS exposure, working within the 50-80 hour range.

• Phase 1: Draw the map (10-15 hours) - the Region / AZ / edge location hierarchy, the shared responsibility model, the Well-Architected pillars, and the roles of the five core services (EC2, S3, VPC, IAM, RDS). Build the skeleton here; details can wait.
• Phase 2: Get hands-on (10-20 hours) - open a free-tier account, launch and stop a single EC2 instance, put a file in an S3 bucket, create one IAM user and turn on MFA. CLF is not a hands-on exam, but touching the console once anchors the vocabulary and roughly halves how much you have to memorize.
• Phase 3: Drill questions (20-35 hours) - the longest and most productive phase. Do sets of ten, and for every miss write one sentence explaining why the right answer is right and what your choice got wrong. Treat a lucky correct answer you cannot justify as a miss.
• Phase 4: Finish (10 hours) - run full timed mock exams and identify weak domains. Ninety minutes for 65 questions is about 83 seconds each, but CLF stems are short and most people finish early — running out of review time is a bigger risk than running out of clock. This is also when to lock down billing, pricing, and support plan memorization.

On official material: AWS offers a free Official Practice Question Set of 20 questions and a paid Official Practice Exam through the AWS Skill Builder individual subscription (from USD 29/month; we could not confirm a yen price). Twenty free questions are not enough volume on their own, so pair them with a larger bank. NicheeLab provides 400 practice questions and a separate mock-exam pool for CLF-C02 — you can try them from the AWS exam prep page.

Should you skip CLF and start with SAA?

This is the most common question we get about CLF, and the honest answer is that there is no universally right choice — but there is a clear decision rule. First, the structural facts: AWS certifications have no prerequisites. Holding CLF is not required to sit SAA-C03, and it is not required to sit SAP-C02 either. Nothing stops you from starting anywhere.

One more consideration on the money side. Taking CLF then SAA costs JPY 15,000 + JPY 20,000 = JPY 35,000, versus JPY 20,000 for SAA alone. But if you sit SAA underprepared and fail, you pay JPY 20,000 again and wait 14 days, which lands you at JPY 40,000 — more than the two-exam route, and later. So the decision is not really "is CLF worth JPY 15,000?" but "how confident am I of passing SAA on the first attempt?" If the answer is shaky, CLF is cheap insurance that also produces a credential. Our SAA difficulty breakdown is a good way to calibrate that confidence before you decide.

If you decide to go straight to SAA, the study approach changes shape entirely: SAA rewards scenario practice over vocabulary drilling. Our guides on how to study for AWS SAA and choosing an SAA question bank cover that path. If you are eyeing the top of the ladder, the AWS Solutions Architect - Professional (SAP-C02) guide shows what the ceiling looks like.

Three-year validity and how renewal works

AWS certifications are valid for three years. What trips people up is that renewal does not necessarily mean retaking the same exam. Under AWS's recertification policy, passing a higher-tier exam also renews the lower-tier certification. For CLF-C02, passing any Associate or Professional exam extends your Cloud Practitioner validity too.

In practice, this means most people never actively renew CLF. If your plan is CLF this year and SAA within three years, the renewal takes care of itself. The one group that needs to track the date is people who stop at CLF — typically non-engineering roles who took it for organizational reasons. In that case, put a calendar reminder at the 2.5-year mark and re-sit the current version. As of this writing, CLF-C02 is the current version with no announced retirement date, and neither SAA-C03 nor SAP-C02 has a successor scheduled either.

Is CLF actually worth taking?

Cloud Practitioner attracts more "is this pointless?" commentary than any other AWS certification, and the criticism is not entirely unfair: CLF alone rarely moves a hiring decision for an engineering role. If you are an engineer, treat it as a waypoint rather than a destination. Where it does pay off is different. For non-engineering staff at companies adopting AWS, being able to read a bill and know which support plan you are on has direct operational value; for engineering teams, a shared vocabulary makes design discussions measurably faster. We take that argument apart in are AWS certifications worth it?.

Our recommendation: do not let CLF be the end of the line. Treat it as the first of two exams and start your SAA plan while the CLF material is still fresh — the overlap in IAM, VPC, S3, and the shared responsibility model is larger than most people expect. You can start on both banks from the AWS exam prep page.

Frequently Asked Questions

Exam specifications in this article are based on the official CLF-C02 exam guide, the AWS Certified Cloud Practitioner page, the before-testing policies, the AWS Certification FAQ, and recertification and certification prep pages. Difficulty distributions are measured from NicheeLab's own question bank, not from AWS. AWS does not publish pass rates. This article is not an official AWS product and has no partnership or sponsorship relationship with Amazon Web Services. AWS and Amazon Web Services are trademarks of Amazon.com, Inc. or its affiliates. Information reflects official material as of August 7, 2026; always confirm the latest details on the official pages.