Based on the CLF-C02 exam guideReport an error
Today we solve problems the way the real exam does, mixing all four domains together. The goal is to build a sense of pace: choosing an answer within about a minute per question. Practice the habit of just flagging questions you don't know, moving on, and coming back later. There are eight questions today, more than usual.
| Situation | Action |
|---|---|
| Answer is immediately obvious | Select it right away and move on |
| Uncertain | Eliminate the two clearly wrong options first |
| No idea at all | Flag it, move on, and return if time remains |
| "Most appropriate / most cost-effective" questions | Narrow it down to a single core keyword |
CLF-C02 requires answering 65 questions in 90 minutes, which is an average of about 1 minute 23 seconds per question. Handling easy questions quickly to bank time for the hard ones is the key to a passing pace.
If you misread an average of 1 minute 23 seconds as "I must spend 1 minute 23 seconds on every question", your pace will actually fall apart. A real exam is not evenly difficult.
| Question type | Target time | Explanation |
|---|---|---|
| Quick-recall (term definitions, service name matching) | 20-40 seconds | Short answers such as "What is a CDN?". This is where you must earn time |
| Standard (short situation + choose a service) | About 1 minute | Most questions belong here |
| Scenario (long passage, several conditions) | 2-3 minutes | The more conditions there are, the more the answer actually narrows down |
| Multiple response (choose 2 or more) | About 2 minutes | You must judge every option as true or false |
The key is to give the time saved on quick-recall questions to the scenario questions. If you finish quick-recall questions in 40 seconds, you have about 40 seconds left over per question, and that surplus adds up to rescue a few hard questions.
A marathon runner does not sprint the first kilometer. If you spend all your energy early, you end up walking in the second half. The exam is the same. If you spend 5 minutes on question 1 until you are "perfectly certain", those 5 minutes come straight out of three or four later questions. Think of the early part as a stretch where you pass through quickly and leave flags.
If you read an exam question from the beginning in order, you get dragged around by the passage. Reading in the following order is much faster.
[4-step reading]
Question sentence → Qualifiers → Passage signal words → Eliminate options
↑ │
└────── If the answer doesn't narrow down, go back up ────┘
⚠️ Pitfall: People get questions wrong not because they don't know the material but because they read the question backwards. In a negative question such as "Which of the following is NOT AWS's responsibility?", you can read the passage closely, miss the final "NOT", and pick a wrong answer instead of the right one. When you see a negative or superlative word, build the habit of reading it once more aloud in your head.
CLF-C02 options are usually made up of the following four kinds.
| Option nature | Characteristic | Response |
|---|---|---|
| Correct answer | Matches the passage's signal words exactly | Select |
| Tempting wrong answer | Another service in the same category (e.g., Shield in WAF's place) | Recheck the signal words |
| Wrong answer from a different category | The question asks about storage but a DNS service shows up | Eliminate immediately |
| Nonexistent or nonsensical option | Absolute expressions such as "unlimited free" or "never fails" | Eliminate immediately |
In other words, 2 of the 4 can usually be crossed out as soon as you read them. Among the remaining 2, you can settle it with a single signal word.
Here are quick rules you can use for elimination.
The items below are not for "reading and understanding". They are for answering out loud first and then checking. If an answer does not come within 3 seconds, that item is what you should review today.
Domain 1 (Cloud Concepts, 24%)
Domain 2 (Security and Compliance, 30%)
Domain 3 (Cloud Technology and Services, 34%)
Domain 4 (Billing, Pricing, and Support, 12%)
Retrieval practice holds memory far longer than "rereading". Reading the textbook one more time strengthens the feeling that you know it, but it adds little to your ability to pull the answer out in the real exam room. Conversely, if you close the book, recall first, and then check, that item sticks much better. In the last few days before the exam, spend your time on "closing and recalling" rather than reading.
In CLF-C02 scenario questions, in the end one or two words in the sentence decide the answer direction. Below are typical scenario phrases and the direction that should light up in your head at that moment.
| If the passage contains this expression | Think in this direction |
|---|---|
| "I don't want to manage servers", "minimal operational overhead" | Serverless / managed services |
| "most cost-effectively" | Commitment discounts / cheaper storage tiers / interruptible workloads |
| "the service must keep running even if one machine dies" | Spread across multiple Availability Zones (AZs) |
| "must recover even if an entire region goes down" | Multiple Regions |
| "fast for users around the world" | Edge locations / CDN |
| "need to check later who did what" | Audit logs |
| "keep checking that configuration follows the rules" | Configuration tracking |
| "alert when a threshold is exceeded" | Metric monitoring + alarms |
| "without putting credentials in code" | IAM roles |
| "certification reports to submit to auditors" | Compliance report portal |
| "millisecond responses", "key-value" | NoSQL |
| "collect years of data for complex analysis" | Data warehouse |
| "rarely retrieved but cannot be discarded" | Archive storage tier |
| "a stable dedicated connection to on-premises" | Dedicated line |
Here is a situation: "To prepare for an accounting audit, the company must check which employees changed which resources over the past year." The words that should light up here are "who" and "check". It is not a performance metric and not compliance with configuration rules. It asks for "the actor and the time", so it points to audit logs. Conversely, if the same sentence changes to "The company must continuously verify that every S3 bucket maintains its encryption setting", this time it is not "who" but "does the state follow the rules", so the answer moves to configuration tracking. The key point is that the one changed word, not the whole sentence, changes the answer.
CLF-C02 mixes in multiple response questions of the form "Select TWO". This type is easy to slip on.
⚠️ Pitfall: Choosing "the two most plausible" in a multiple response question is likely to go wrong. Question writers usually place two or three plausible wrong answers from the same category together. For example, a question asking you to choose two security services will show four security services. In that case, you must fit each option one by one to the conditions the passage explicitly requires, not to "plausibility".
Mistakes follow patterns. You need to look at "why you get it wrong" as well in the list below to avoid getting it wrong next time.
| Pitfall | Why you get it wrong | Correction |
|---|---|---|
| Choosing "multiple Regions" for a high availability question | Regions look more powerful | If the problem is surviving a failure within one Region, multiple AZs is the answer |
| Choosing "multiple AZs" for a disaster recovery question | The AZ answer feels familiar | For protection against a failure of an entire area, it is multiple Regions |
| Choosing monitoring when audit logs were asked | Both look like "records" | "Who did what" is audit; "how much is being used" is monitoring |
| Swapping the pre-estimate tool and the post-analysis tool | Both names relate to cost | Calculating what you haven't used yet is estimation; looking at what you already used is analysis |
| Choosing Spot as "always the cheapest, so correct" | Looking only at the cost keyword | Spot suits only workloads that can be interrupted |
| Choosing EC2 Auto Scaling for a serverless question | Because of the word "automatic" | Auto Scaling still runs servers (EC2) in the end |
| Choosing OS patching as the customer's responsibility for a managed service | Memorized only "OS patching = customer" | In cases such as managed databases, AWS handles the underlying OS |
| Choosing "unlimited" or "always free" options | They sound attractive | Absolute expressions are a wrong-answer signal |
| Knowing the service name but confusing its category | Memorized only the name | Always memorize "what it is for" next to the name |
These are arranged one sentence at a time so you can skim them right before the exam. Look at the front of the card (left) and check whether the back (right) comes to mind.
Sorting out why you got questions wrong raises your score more than solving questions does. After scoring, divide the missed questions into the following four categories.
| Category | Symptom | Prescription |
|---|---|---|
| 1. Didn't know | You are seeing the service itself for the first time | Memorize only a one-line summary of that concept |
| 2. Confused | You picked wrong between two services | Build a comparison table and separate the signal words |
| 3. Misread | You missed a negation or qualifier | A reading-habit problem, so apply the 4-step reading |
| 4. Ran out of time | You guessed in a rush at the end | A pace problem, so raise your speed in the early part |
Categories 3 and 4 are habit problems, not knowledge problems. If the exam is only a few days away, fixing these two gives a bigger score gain than memorizing new concepts.
A wrong-answer notebook is not "rewriting the missed question" but writing down why you missed it. Don't spend time copying the question; just leave one line such as "missed the negation" or "confused AZ and Region". A few days later, when you look at that list, you will see your pattern of mistakes narrow to two or three.
Click a choice to reveal the answer and explanation.
Question 1
What is the cloud characteristic called that automatically adds EC2 instances when traffic spikes and removes them when it drops?
Question 2
Which service should you use to protect a web application from SQL injection and cross-site scripting (XSS) attacks?
Question 3
Which is most appropriate as a serverless NoSQL database that needs fast, single-digit-millisecond responses?
Question 4
Which service should you use to cache content at edge locations to deliver videos and images to users worldwide with low latency?
Question 5
What should you use to combine the billing of multiple AWS accounts into one and share volume discount benefits?
Question 6
Which PaaS-style service automatically handles capacity provisioning, load balancing, and scaling when you upload your code?
Question 7
Which service do you use to directly download the compliance reports (SOC, PCI DSS, etc.) that AWS provides?
Question 8
For a stable, continuously running workload, which EC2 pricing model is most appropriate if you want the maximum discount in exchange for a 1–3 year commitment?