AWS Cloud Practitioner Practice Exam
The AWS Certified Cloud Practitioner Exam has been developed to assess the fundamental understanding of AWS Cloud concepts, services, and terminology.
Who should take the AWS Cloud Practitioner Exam?
The AWS Certified Cloud Practitioner Exam is a good way to begin in non-technical roles with no prior IT or cloud experience or for those with on-premises IT experience looking for basic AWS Cloud fluency. The AWS Certified Cloud Practitioner Exam is suitable for -
- Candidates from a non-IT background and exploring a career in the AWS Cloud
- Candidates working in sales/marketing/business analyst roles looking to communicate more effectively with stakeholders and customers about the AWS Cloud
- Candidates working in on-premises IT or cloud roles, but new to AWS Cloud, and need a primer before diving into role-based AWS Certification(s)
Knowledge Acquired
The AWS Certified Cloud Practitioner imparts the following knowledge -
- Fundamental understanding of IT services and their uses on AWS Cloud
- Core Knowledge of AWS services and use cases, billing and pricing models, security concepts, and how cloud impacts your business
Recommended AWS knowledge
The candidate planning to take the AWS Cloud Practitioner exam should be acquainted with the following concepts -
- AWS Cloud concepts
- Security and compliance within the AWS Cloud
- Understanding of the core AWS services
- Understanding of the economics of the AWS Cloud
Exam Details
- Exam Name: AWS Cloud Practitioner
- Exam Code: CLF-C02
- Exam Duration: 90 minutes
- Exam Language: English
- Type of Questions: Multiple Choice and Multiple Responses
- Passing Score: 700
Course Outline
The AWS Certified Cloud Practitioner Exam covers the following topics -
Domain 1: Understanding Cloud Concepts
1.1. Learn and define the benefits of the AWS Cloud.
The topic covers the value proposition of the AWS Cloud
- Understanding the economies of scale (for example, cost savings)
- Describe the benefits of global infrastructure (for example, speed of deployment, global reach)
- Understanding the benefits of high availability, elasticity, and agility
1.2. Learn to Identify design principles of the AWS Cloud.
The module covers the concept of AWS Well-Architected Framework
- Understanding the pillars of the Well-Architected Framework (for example, operational excellence, security, reliability, performance efficiency, cost optimization, sustainability)
- Describe the concept of identifying differences between the pillars of the Well-Architected Framework
1.3. Learn the benefits of and strategies for migration to the AWS Cloud.
The topic covers cloud adoption strategies and resources to support the cloud migration journey
- Explain the benefits of the AWS Cloud Adoption Framework (AWS CAF)
- Explain and identify suitable migration strategies (like, database replication, use of AWS Snowball)
1.4. Understand concepts of cloud economics.
The module covers the aspects of cloud economics, and cost savings of moving to the cloud
- Explain the role of fixed costs compared with variable costs
- Explain costs that are associated with on-premises environments
- Understanding the differences between licensing strategies (including, Bring Your Own License [BYOL] model compared with included licenses)
- Understanding the concept of rightsizing
- Explain and identify benefits of automation (including, provisioning and configuration management with AWS CloudFormation)
- Explain and identify managed AWS services (including, Amazon RDS, Amazon Elastic Container Service [Amazon ECS], Amazon Elastic Kubernetes Service [Amazon EKS], Amazon DynamoDB)
Domain 2: Understanding Security and Compliance
2.1. Learn about the AWS shared responsibility model.
The topic covers concepts of AWS shared responsibility model
- Explain and recognize the components of the AWS shared responsibility model
- Understanding the customer’s responsibilities on AWS
- Explain AWS responsibilities
- Understanding responsibilities that the customer and AWS share
- Explain how AWS responsibilities and customer responsibilities can shift, depending on the service used (for example, Amazon RDS, AWS Lambda, Amazon EC2)
2.2. Learn AWS Cloud security, governance, and compliance concepts.
The module covers the topics including AWS compliance and governance concepts, advantages of cloud security (for example, encryption) and capture and locate logs that are associated with cloud security
- Explain and identify AWS compliance information (including, AWS Artifact)
- Understanding compliance needs among geographic locations or industries (for example, AWS Compliance)
- Explain how customers secure resources on AWS (for example, Amazon Inspector, AWS Security Hub, Amazon GuardDuty, AWS Shield)
- Understanding different encryption options (including, encryption in transit, encryption at rest)
- Explain and identify services that aid in governance and compliance (including, monitoring with Amazon CloudWatch; auditing with AWS CloudTrail, AWS Audit Manager, and AWS Config; reporting with access reports)
- Explain and identify compliance requirements that vary among AWS services
2.3. Learn and identify AWS access management capabilities.
The topic covers identitying and accessing management, importance of protecting the AWS root user account, principle of least privilege and AWS IAM Identity Center (AWS Single Sign-On)
- Explain access keys, password policies, and credential storage (including, AWS Secrets Manager, AWS Systems Manager)
- Explain and identify authentication methods in AWS (including, multi-factor authentication [MFA], IAM Identity Center, cross-account IAM roles)
- Learn about groups, users, custom policies, and managed policies in compliance with the principle of least privilege
- Learn and identify tasks that only the account root user can perform
- Learn and identify methods can achieve root user protection
- Learn the types of identity management (for example, federated)
2.4. Identify components and resources for security.
The topic covers concepts including security capabilities that AWS provides, and security-related documentation that AWS provides
- Learn the AWS security features and services (including, security groups, network ACLs, AWS WAF)]
- Learn third-party security products are available from AWS Marketplace
- Learn to identify availability of AWS security information (including, AWS Knowledge Center, AWS Security Center, AWS Security Blog)
- Learn the use of AWS services for identifying security issues (including, AWS Trusted Advisor)
Domain 3: Understanding Cloud Technology and Services
3.1. Learn methods of deploying and operating in the AWS Cloud.
The topic covers different ways of provisioning and operating in the AWS Cloud and different ways to access AWS services, types of cloud deployment models and connectivity options
- Explain to decide between options such as programmatic access (including, APIs, SDKs, CLI), the AWS Management Console, and infrastructure as code (IaC)
- Explain and evaluate requirements to determine whether to use one-time operations or repeatable processes
- Explain and identify different deployment models (including, cloud, hybrid, onpremises)
- Explain and identify connectivity options (including, AWS VPN, AWS Direct Connect, public internet)
3.2. Learn and define the AWS global infrastructure.
The topic covers AWS Regions, Availability Zones, and edge locations, high availability and use of multiple Regions and AWS Wavelength Zones and AWS Local Zones
- Understanding relationships among Regions, Availability Zones, and edge locations
- Explain how to achieve high availability by using multiple Availability Zones
- Explain that Availability Zones do not share single points of failure
- Understanding when to use multiple Regions (including, disaster recovery, business continuity, low latency for end users, data sovereignty)
- Explain at a high level the benefits of edge locations (including, Amazon CloudFront, AWS Global Accelerator)
3.3. Learn and identify AWS compute services.
The topic covers concept of AWS compute services
- Explain and identify the appropriate use of different EC2 instance types (including, compute optimized, storage optimized)
- Explain and identify the appropriate use of different container options (including , Amazon ECS, Amazon EKS)
- Explain and identify the appropriate use of different serverless compute options (including, AWS Fargate, Lambda)
- Explain and identify that auto scaling provides elasticity
- Explain and identify the purposes of load balancers
3.4. Learn and Identify AWS database services.
The topic includes AWS database services, and Database migration
- Explain when to use EC2 hosted databases or AWS managed databases
- Explain and identify relational databases (including, Amazon RDS, Amazon Aurora)
- Explain and identify NoSQL databases (including, DynamoDB)
- Explain and identify memory-based databases
- Explain and identify database migration tools (including AWS Database Migration Service [AWS DMS], AWS Schema Conversion Tool [AWS SCT])
3.5. Learn and identify AWS network services.
The topic covers AWS network services
- Explain and identify the components of a VPC (including, subnets, gateways)
- Understanding security in a VPC (for example, network ACLs, security groups)
- Explain the purpose of Amazon Route 53
- Explain and identify edge services (including, CloudFront, Global Accelerator)
- Explain and identify network connectivity options to AWS (including AWS VPN, Direct Connect)
3.6. Learn to identify AWS storage services.
The topic covers AWS storage services
- Explain and identify the uses for object storage
- Understanding the differences in Amazon S3 storage classes
- Explain block storage solutions (including, Amazon Elastic Block Store [Amazon EBS], instance store)
- Understanding file services (for example, Amazon Elastic File System [Amazon EFS], Amazon FSx)
- Explain cached file systems (for example, AWS Storage Gateway)
- Explain use cases for lifecycle policies
- Explain use cases for AWS Backup
3.7. Learn to identify AWS artificial intelligence and machine learning (AI/ML) services and analytics services.
The topic covered in the exam including AWS AI/ML services and AWS analytics services
- Explain the different AI/ML services and the tasks that they accomplish (including, Amazon SageMaker, Amazon Lex, Amazon Kendra)
- Explain the services for data analytics (for example, Amazon Athena, Amazon Kinesis, AWS Glue, Amazon QuickSight)
3.8. Learn the services from other in-scope AWS service categories.
- Explain Application integration services of Amazon EventBridge, Amazon Simple Notification Service (Amazon SNS), and Amazon Simple Queue Service (Amazon SQS)
- Explain Business application services of Amazon Connect and Amazon Simple Email Service (Amazon SES)
- Understanding Customer engagement services of AWS Activate for Startups, AWS IQ, AWS Managed Services (AMS), and AWS Support
- Understanding Developer tool services and capabilities of AWS AppConfig, AWS Cloud9, AWS CloudShell, AWS CodeArtifact, AWS CodeBuild, AWS CodeCommit, AWS CodeDeploy, AWS CodePipeline, AWS CodeStar, and AWS X-Ray
- Explain End-user computing services of Amazon AppStream 2.0, Amazon WorkSpaces, and Amazon WorkSpaces Web
- Explain Frontend web and mobile services of AWS Amplify and AWS AppSync
- Explain IoT services of AWS IoT Core and AWS IoT Greengrass
- Explain selecting the suitable service to deliver messages and to send alerts and notifications
- Explain selecting the suitable service to meet business application needs
- Explain selecting the suitable service for AWS customer support
- Explain selecting the suitable option for business support assistance
- Explain the tools to develop, deploy, and troubleshoot applications
- Explain the services that can present the output of virtual machines (VMs) on end-user machines
- Explain the services that can create and deploy frontend and mobile services
- Explain the services that manage IoT devices
Domain 4: Understanding Billing, Pricing, and Support
4.1. Learn to compare AWS pricing models.
- Explain compute purchasing options (including, On-Demand Instances, Reserved Instances, Spot Instances, Savings Plans, Dedicated Hosts, Dedicated Instances, Capacity Reservations)
- Explain Data transfer charges
- Explain Storage options and tiers
- Explain to identify and comparing when to use various compute purchasing options
- Explain Reserved Instance flexibility
- Understanding Reserved Instance behavior in AWS Organizations
- Explain incoming data transfer costs and outgoing data transfer costs (including, from one Region to another Region, within the same Region)
- Understanding different pricing options for various storage options and tiers
4.2. Learn about resources for billing, budget, and cost management.
- Explain Billing support and information
- Explain Pricing information for AWS services
- Explain AWS Organizations
- Explain AWS cost allocation tags
- Explain suitable uses and capabilities of AWS Budgets, AWS Cost Explorer, and AWS Billing Conductor
- Explain suitable uses and capabilities of AWS Pricing Calculator
- Explain AWS Organizations consolidated billing and allocation of costs
- Explain various types of cost allocation tags and their relation to billing reports (for example, AWS Cost and Usage Report)
4.3: Learn to identify AWS technical resources and AWS Support options.
- Understanding the resources and documentation available on official AWS websites
- Explaining AWS Support plans
- Understanding the role of the AWS Partner Network, including independent software vendors and system integrators
- Explaining AWS Support Center
- Understanding Locating AWS whitepapers, blogs, and documentation on official AWS websites
- Explain to identify and locate AWS technical resources (for example AWS
- Explain about prescriptive Guidance, AWS Knowledge Center, AWS re:Post)
- Understanding Identifying AWS Support options for AWS customers (including, customer service and communities, AWS Developer Support, AWS Business Support, AWS Enterprise On-Ramp Support, AWS Enterprise Support)
- Explain to identify the role of Trusted Advisor, AWS Health Dashboard, and the AWS Health API to help manage and monitor environments for cost optimization
- Explain to identify the role of the AWS Trust and Safety team to report abuse of AWS resources
- Explain the role of AWS Partners (for example AWS Marketplace, independent software vendors, system integrators)
- Explain to identify the benefits of being an AWS Partner (including, partner training and certification, partner events, partner volume discounts)
- Explain to identify the key services that AWS Marketplace offers (including, cost management, governance and entitlement)
- Explain to identify technical assistance options available at AWS (including, AWS Professional Services, AWS Solutions Architects)