CLF-C02 — AWS Certified Cloud Practitioner Quick Review

Quick Review purpose

This Quick Review is for candidates preparing for the AWS Certified Cloud Practitioner (CLF-C02) exam from AWS. It is designed to help you refresh the most testable ideas before moving into IT Mastery practice, topic drills, mock exams, and detailed explanations.

The CLF-C02 exam is broad. It usually rewards recognition, comparison, and decision-making more than deep configuration skill. Focus on:

• What a service is mainly used for.
• Which service is managed by AWS versus managed by the customer.
• Security and compliance responsibility boundaries.
• Basic architectural tradeoffs: cost, availability, scalability, performance, and operations.
• Pricing, billing, account management, and support concepts.
• Common AWS terminology that appears in scenario-based questions.

This page is IT Mastery exam-prep support and is not affiliated with AWS.

High-yield exam mindset

What CLF-C02 tends to test

Practical review rule

If a question asks “Which AWS service should…”, first identify the workload category:

Cloud concepts and AWS value proposition

Core cloud advantages

Elasticity vs scalability

A common trap is selecting scalability when the scenario emphasizes automatic response to changing demand. That is usually elasticity.

AWS global infrastructure

Key infrastructure terms

Region selection decision points

Choose a Region based on:

1. Compliance or data residency requirements.
2. Latency to users or systems.
3. Service availability in that Region.
4. Cost differences.
5. Resilience strategy, such as multi-Region disaster recovery.

Do not assume every AWS service is available in every Region.

Shared Responsibility Model

The Shared Responsibility Model is one of the most important CLF-C02 concepts.

Responsibility split

Service model changes the customer responsibility

Common shared responsibility traps

• “AWS secures the cloud; the customer secures what they put in the cloud.”
• AWS does not automatically classify your data for business sensitivity.
• AWS does not automatically grant least-privilege IAM permissions.
• AWS does not patch your EC2 guest operating system by default.
• For managed services, AWS manages more infrastructure, but the customer still controls access, data, and configuration choices.

IAM and access control

IAM essentials

IAM role vs IAM user

Policy evaluation basics

For CLF-C02, remember:

• Permissions are denied by default.
• An explicit allow can grant access.
• An explicit deny overrides an allow.
• Use least privilege.
• Avoid embedding long-term credentials in applications.

AWS Organizations and account governance

Important distinction: SCPs do not grant permissions by themselves. They define permission boundaries at the account or OU level. IAM policies are still needed to allow actions.

Security, compliance, and governance services

Security service recognition table

CloudTrail vs CloudWatch vs Config

This is one of the most common question-bank trap areas. Use topic drills until you can choose among these quickly.

Encryption basics

Know the difference:

• Encryption at rest protects stored data.
• Encryption in transit protects data moving across networks, usually with TLS.
• KMS manages cryptographic keys; it is not a general secret storage service.
• Secrets Manager stores secrets such as database credentials and can support rotation.

Compute services

Compute comparison

EC2 purchasing options

Trap: Spot Instances are attractive for cost, but not for workloads that cannot tolerate interruption.

Load balancers

At CLF-C02 level, the most common distinction is ALB for web application routing and NLB for high-performance network traffic.

Storage services

Storage service selection

S3 essentials

S3 storage classes

Trap: S3 One Zone-IA stores data in one Availability Zone. It is not the default choice for critical multi-AZ resilience.

EBS vs EFS vs S3

Database services

Database selection table

RDS vs DynamoDB

Cache vs database

If the question asks for faster repeated reads or reduced database load, think Amazon ElastiCache. If it asks for durable primary data storage, choose a database or storage service instead.

Networking and content delivery

VPC basics

Security group vs network ACL

This is a high-frequency CLF-C02 trap. If the scenario says stateless or subnet-level, think network ACL.

Connectivity services

Route 53 routing policy recognition

Architecture and the AWS Well-Architected Framework

Six Well-Architected pillars

Architecture decision rules

High availability vs fault tolerance vs disaster recovery

A question asking for resilience against an Availability Zone failure usually points to multi-AZ. A question asking for resilience against a Regional outage points to multi-Region.

Serverless and application integration

Serverless pattern recognition

SQS vs SNS vs EventBridge

Trap: SQS queues work items; SNS broadcasts notifications.

Monitoring, logging, and operations

Operational service recognition

CloudFormation vs Elastic Beanstalk

Billing, pricing, and cost management

Pricing fundamentals

AWS pricing commonly varies by:

• Compute usage and purchase model.
• Storage amount, class, and retrieval.
• Data transfer.
• Requests and API calls.
• Managed service features.
• Region.
• Support plan and optional services.

Do not assume the cheapest option is always correct. The exam often balances cost with availability, performance, or operational effort.

Cost tool selection

Common billing traps

• Pricing Calculator estimates before deployment; it does not analyze your real past usage.
• Cost Explorer analyzes actual cost and usage trends; it is not primarily an alerting tool.
• AWS Budgets is for thresholds and notifications.
• Trusted Advisor gives recommendations across categories, including cost optimization.
• Consolidated billing helps manage multiple accounts centrally.
• Tags help organize and allocate costs, but only if used consistently.

Support concepts

Know that AWS offers multiple support options with different levels of technical support, response expectations, and advisory features. For exam purposes, focus on the general idea:

Avoid memorizing unofficial support-plan details from outdated sources. Use the current AWS exam guide and AWS support documentation for plan-specific features.

Migration, hybrid, and data transfer

Migration service recognition

Snow Family quick distinction

For CLF-C02, you usually only need to recognize that Snow Family helps when network transfer is impractical or when edge locations need rugged local processing.

Analytics, AI/ML, and developer services

Analytics services

AI/ML service recognition

For CLF-C02, these are usually recognition questions. Do not over-study model training unless your practice results show a weakness.

Developer and deployment services

Fast service-selection workflow

Use this quick mental workflow when a scenario lists several AWS services:

    flowchart TD
	    A[Read the scenario outcome] --> B{What category is needed?}
	    B -->|Compute| C{Server control needed?}
	    C -->|Yes| C1[Amazon EC2]
	    C -->|No, code only| C2[AWS Lambda]
	    C -->|Containers| C3[ECS/EKS or Fargate]
	    B -->|Storage| D{Object, block, or file?}
	    D -->|Object| D1[Amazon S3]
	    D -->|Block for EC2| D2[Amazon EBS]
	    D -->|Shared file| D3[Amazon EFS or FSx]
	    B -->|Database| E{Relational?}
	    E -->|Yes| E1[RDS or Aurora]
	    E -->|NoSQL key-value| E2[DynamoDB]
	    E -->|Warehouse| E3[Redshift]
	    B -->|Security or audit| F{Need logs, config, or identity?}
	    F -->|API activity| F1[CloudTrail]
	    F -->|Metrics and alarms| F2[CloudWatch]
	    F -->|Resource compliance| F3[Config]
	    F -->|Permissions| F4[IAM]

Common CLF-C02 traps to practice

Trap list

1. CloudTrail vs CloudWatch

   • CloudTrail: API activity and audit.
   • CloudWatch: metrics, logs, alarms.

2. Security group vs network ACL

   • Security group: stateful, resource level.
   • Network ACL: stateless, subnet level.

3. IAM role vs access key

   • Roles with temporary credentials are usually preferred for AWS service access.

4. S3 vs EBS vs EFS

   • S3: object storage.
   • EBS: block volume for EC2.
   • EFS: shared file storage.

5. RDS vs DynamoDB

   • RDS/Aurora: relational SQL.
   • DynamoDB: managed NoSQL key-value/document.

6. Pricing Calculator vs Cost Explorer vs Budgets

   • Calculator: estimate.
   • Cost Explorer: analyze actual costs.
   • Budgets: alert on thresholds.

7. Multi-AZ vs multi-Region

   • Multi-AZ: resilience inside a Region.
   • Multi-Region: geographic disaster recovery or global strategy.

8. AWS responsibility vs customer responsibility

   • AWS manages infrastructure.
   • Customer manages data, identity, access, and configuration choices.

9. SNS vs SQS

   • SNS broadcasts.
   • SQS queues.

10. Managed service does not mean no customer responsibility

• You still configure access, encryption choices, networking, and data handling.

Quick review checklist

Before starting mock exams, make sure you can answer these without notes:

Cloud and architecture

• Explain elasticity, scalability, high availability, and fault tolerance.
• Identify why a company might choose cloud over on-premises infrastructure.
• Choose between Region, Availability Zone, edge location, Local Zone, Wavelength, and Outposts.
• Recognize the six AWS Well-Architected pillars.
• Distinguish multi-AZ from multi-Region.

Security

• Apply the Shared Responsibility Model to EC2, RDS, S3, and Lambda.
• Choose IAM roles instead of long-term credentials for AWS service access.
• Explain least privilege, MFA, root user protection, and policy basics.
• Choose between CloudTrail, CloudWatch, and Config.
• Recognize GuardDuty, Inspector, Macie, Shield, WAF, KMS, Secrets Manager, ACM, and Artifact.

Technology and services

• Choose EC2, Lambda, ECS/EKS, Fargate, Elastic Beanstalk, or Lightsail from scenario clues.
• Choose S3, EBS, EFS, FSx, Storage Gateway, Backup, or Snow Family.
• Choose RDS, Aurora, DynamoDB, Redshift, ElastiCache, Neptune, or DocumentDB.
• Identify VPC components and security group vs network ACL differences.
• Recognize Route 53, CloudFront, Direct Connect, VPN, Transit Gateway, and Global Accelerator.
• Recognize SQS, SNS, EventBridge, Step Functions, and API Gateway.

Billing and support

• Choose Pricing Calculator, Cost Explorer, Budgets, Cost and Usage Report, or Trusted Advisor.
• Explain consolidated billing and AWS Organizations at a high level.
• Understand cost allocation tags.
• Recognize common pricing factors: compute, storage, requests, data transfer, Region, and support.
• Know that support options vary and should be checked against current AWS documentation.

How to use question-bank practice after this review

A good practice sequence for AWS Certified Cloud Practitioner (CLF-C02) is:

1. Start with topic drills

   • Drill IAM, shared responsibility, S3/EBS/EFS, EC2/Lambda, CloudTrail/CloudWatch/Config, and billing tools separately.

2. Read detailed explanations

   • Do not only mark right/wrong. For every missed question, identify the service clue that should have led to the answer.

3. Build a confusion list

   • Keep a short list of pairs you confuse, such as SNS/SQS, RDS/DynamoDB, or Cost Explorer/Budgets.

4. Move to mixed question-bank sets

   • Mixed original practice questions help you practice recognition under realistic conditions.

5. Use mock exams last

   • Mock exams are best for timing, endurance, and identifying remaining weak areas.

6. Review missed questions by decision rule

   • Convert every miss into a rule: “If the question says API audit, choose CloudTrail,” or “If the question says stateless subnet firewall, choose network ACL.”

Final rapid reminders

• Prefer managed services when the scenario values reduced operational burden.
• Prefer IAM roles over embedded long-term credentials.
• Prefer Multi-AZ for Availability Zone resilience.
• Prefer CloudFront for global content delivery.
• Prefer S3 for object storage and static assets.
• Prefer RDS/Aurora for relational databases.
• Prefer DynamoDB for serverless NoSQL key-value/document workloads.
• Prefer CloudTrail for audit trails.
• Prefer CloudWatch for metrics, logs, alarms, and dashboards.
• Prefer AWS Budgets for alerts and Cost Explorer for cost analysis.
• Always check whether the question asks for security, cost, availability, performance, or operational simplicity.

Your next practical step: use this Quick Review as a checklist, then work through CLF-C02 topic drills and original practice questions with detailed explanations until the service-selection traps feel automatic.

Continue in IT Mastery

Use this Quick Review as a final concept map, then move into IT Mastery for focused topic drills, mixed practice sets, timed mock exams, and detailed explanations. The practice questions are original IT Mastery practice items; they are not official AWS questions, copied live-exam content, or exam dumps.