Acedify
CLF-C02, certifications
Back to all posts

Exam page

Practice CLF-C02

AWS Certified Cloud Practitioner (CLF-C02)

clf-c02awscertificationsguides

AWS Certified Cloud Practitioner (CLF-C02): 5 Must-Know Concepts

Acedify

Acedify Team

17 Jan 202613 min read

The AWS Certified Cloud Practitioner exam (CLF-C02) validates foundational knowledge of AWS Cloud concepts, services, and terminology. These five concepts show up across domains — learn them before diving into service trivia.

1. Cloud Concepts and Value Proposition#

Cloud concepts account for 24% of CLF-C02 — get this domain solid before memorizing service names.

Tip

Think of AWS like a utility: you use shared infrastructure and pay for what you consume — CapEx shifts to OpEx.

Benefits of Cloud Computing#

  • Trade upfront expense for variable expense — Pay only for what you consume
  • Benefit from massive economies of scale — Lower costs due to aggregated usage
  • Stop guessing capacity — Scale up or down based on actual demand
  • Increase speed and agility — Deploy resources in minutes, not months
  • Stop spending money on data centers — Focus on your business, not infrastructure
  • Go global in minutes — Deploy worldwide with a few clicks

Cloud Computing Models#

ModelDescriptionExample
IaaSInfrastructure as a Service — virtual machines, storage, networkingAmazon EC2, Amazon EBS
PaaSPlatform as a Service — managed platforms for applicationsAWS Elastic Beanstalk
SaaSSoftware as a Service — fully managed applicationsAmazon WorkSpaces

Cloud Deployment Models#

ModelDescriptionUse Case
Public CloudEntirely on AWS, accessed over the internetStartups, web applications
Private CloudOn-premises using cloud technologiesRegulated industries
Hybrid CloudCombination of public and privateData residency requirements

Note

AWS offers 200+ services across Regions worldwide. It launched the public cloud market in 2006 — exam questions still reference that history in business-value scenarios.

Test Your Understanding#

Cloud Concepts Check

A company wants to avoid guessing infrastructure capacity. Which cloud benefit addresses this?

2. AWS Global Infrastructure#

Understanding how AWS is organized geographically is crucial for designing resilient applications:

Geographic Components#

ComponentDescriptionKey Facts
RegionsGeographic areas with multiple data centers30+ Regions worldwide, choose based on latency, compliance, and cost
Availability Zones (AZs)Isolated data centers within a RegionEach Region has 3+ AZs, connected via low-latency links
Edge LocationsPoints of presence for content delivery400+ Edge Locations for CloudFront and Route 53
Local ZonesAWS infrastructure closer to end usersFor latency-sensitive applications

Tip

When choosing a Region, consider: data residency requirements, proximity to users (latency), service availability, and pricing (costs vary by Region).

High Availability Design#

Region: us-east-1 (N. Virginia)
    ├── Availability Zone: us-east-1a
    │       └── Your Application Instance
    ├── Availability Zone: us-east-1b
    │       └── Your Application Instance (replica)
    └── Availability Zone: us-east-1c
            └── Your Application Instance (replica)
  • Single AZ — No protection against data center failures
  • Multi-AZ — Survives single data center failures
  • Multi-Region — Survives entire Region failures (disaster recovery)

Note

Availability Zones are physically separated by meaningful distance (many kilometers), but close enough for low-latency synchronous replication.

Global Infrastructure Quiz

What is the minimum number of Availability Zones in an AWS Region?

3. Core AWS Services#

The exam covers a wide range of services — here are the essential ones organized by category:

Compute Services#

ServiceDescriptionUse Case
Amazon EC2Virtual servers in the cloudWeb servers, application hosting
AWS LambdaServerless compute, runs code in response to eventsEvent-driven processing, APIs
Amazon ECS/EKSContainer orchestration (Docker/Kubernetes)Microservices architectures
AWS Elastic BeanstalkPaaS for deploying applicationsSimplified app deployment

Tip

Lambda is serverless — you don't manage any servers! You pay only for compute time consumed, making it ideal for variable or unpredictable workloads.

Storage Services#

ServiceTypeBest For
Amazon S3Object storageFiles, backups, static websites, data lakes
Amazon EBSBlock storageEC2 instance storage, databases
Amazon EFSFile storageShared file systems across EC2 instances
Amazon S3 GlacierArchive storageLong-term backup, compliance archives

S3 Storage Classes#

ClassAccess PatternDurability
S3 StandardFrequent access99.999999999% (11 9's)
S3 Intelligent-TieringVariable accessAutomatic cost optimization
S3 Standard-IAInfrequent accessLower cost, retrieval fee
S3 GlacierArchive (minutes to hours retrieval)Lowest cost for archives

Database Services#

ServiceTypeUse Case
Amazon RDSManaged relational DBMySQL, PostgreSQL, SQL Server, Oracle
Amazon DynamoDBManaged NoSQLKey-value, high-performance, serverless
Amazon RedshiftData warehouseAnalytics, business intelligence
Amazon ElastiCacheIn-memory cachingSession storage, real-time analytics

Networking Services#

  • Amazon VPC — Your own isolated network in AWS
  • Elastic Load Balancing (ELB) — Distribute traffic across instances
  • Amazon Route 53 — DNS service with health checking
  • Amazon CloudFront — Content delivery network (CDN)
  • AWS Direct Connect — Dedicated network connection to AWS
Core Services Quiz

Which storage service is best for storing objects like images and videos with high durability?

4. Security and Compliance#

Security, Compliance, and Support is a large CLF-C02 domain (~30%). Shared responsibility and IAM basics show up constantly.

The Shared Responsibility Model#

This is critical for the exam! Understanding who is responsible for what:

AWS Responsibility ("Security OF the Cloud")Customer Responsibility ("Security IN the Cloud")
Physical data center securityCustomer data and encryption
Hardware and infrastructureIdentity and access management (IAM)
Network infrastructureOperating system configuration (for EC2)
Virtualization layerNetwork and firewall configuration
Managed service platformsApplication security

Warning

The line shifts based on service type: With EC2 (IaaS), you manage the OS. With Lambda (serverless), AWS manages everything except your code and data.

AWS Identity and Access Management (IAM)#

IAM is the foundation of AWS security:

  • Users — Individual identities for people
  • Groups — Collections of users with shared permissions
  • Roles — Temporary credentials for services and applications
  • Policies — JSON documents defining permissions

Tip

IAM Best Practices:

  • Never use the root account for daily tasks
  • Enable MFA on all accounts, especially root
  • Follow the principle of least privilege
  • Use roles for applications, not access keys

Key Security Services#

ServicePurpose
AWS IAMIdentity and access management
AWS OrganizationsCentrally manage multiple AWS accounts
AWS ShieldDDoS protection (Standard is free!)
AWS WAFWeb application firewall
Amazon InspectorAutomated vulnerability assessments
AWS KMSEncryption key management
Amazon GuardDutyIntelligent threat detection
AWS CloudTrailAPI call logging and auditing

Compliance Programs#

AWS maintains certifications and attestations including:

  • SOC 1, 2, 3 — Service Organization Controls
  • PCI DSS — Payment Card Industry
  • HIPAA — Healthcare (requires BAA)
  • GDPR — European data protection
  • FedRAMP — US Government
Security Quiz

According to the Shared Responsibility Model, who is responsible for patching the guest OS on EC2 instances?

5. Billing, Pricing, and Support#

Understanding AWS pricing (12% of the exam) helps you optimize costs and choose the right support:

AWS Free Tier#

AWS offers three types of free offerings:

TypeDescriptionExamples
Always FreeNever expires, within limitsLambda (1M requests/month), DynamoDB (25GB)
12 Months FreeFree for 12 months after signupEC2 (750 hours/month), S3 (5GB)
TrialsShort-term free trialsAmazon SageMaker, Amazon Redshift

EC2 Pricing Models#

ModelDescriptionSavingsBest For
On-DemandPay by the hour/second, no commitmentBaselineVariable, unpredictable workloads
Savings PlansCommit to $/hour for 1-3 yearsUp to 72%Flexible, steady usage
Reserved InstancesCommit to specific instance typeUp to 72%Predictable, steady workloads
Spot InstancesBid on unused capacityUp to 90%Fault-tolerant, flexible workloads
Dedicated HostsPhysical server dedicated to youVariesLicensing, compliance requirements

Tip

Spot Instances offer the deepest discounts (up to 90%!) but can be interrupted with 2 minutes notice. Great for batch processing, CI/CD, and stateless applications.

Cost Management Tools#

ToolPurpose
AWS Cost ExplorerVisualize and analyze costs over time
AWS BudgetsSet custom budgets and alerts
AWS Pricing CalculatorEstimate costs before deployment
AWS Cost and Usage ReportDetailed cost and usage data
AWS Trusted AdvisorRecommendations for cost, security, performance

AWS Support Plans#

PlanPriceKey Features
BasicFreeDocumentation, forums, AWS Trusted Advisor (core checks)
Developer$29/monthBusiness hours email support, 12-hour response
Business$100/month+24/7 phone, chat, email; 1-hour response for production down
Enterprise On-Ramp$5,500/monthTAM pool, 30-minute response for business-critical
Enterprise$15,000/monthDedicated TAM, 15-minute response, infrastructure event management

Note

AWS Trusted Advisor provides real-time recommendations across five categories: cost optimization, performance, security, fault tolerance, and service limits.

Billing and Support Quiz

A company has steady EC2 usage and can commit to 3 years. Which option offers the best savings?


Know your range before test day#

You've checked the core CLF-C02 concepts. Sit a short diagnostic, then practice free or move to a timed sitting when the range is useful.

  • Timed diagnostic with domain-level breakdown
  • Clear signal on what to drill next
  • Practice free; timed sittings and readiness range on Pro

Take the free Cloud Practitioner assessment →


Next step: Start practicing free on the CLF-C02 hub, or sit a short diagnostic first.

Ready to practice CLF-C02?

Go to the Cloud Practitioner page for the diagnostic, study plan, and practice.

Practice CLF-C02