AWS Cloud Practitioner: Where the 65 Questions Actually Come From

A foundational exam with a uniform distribution would be simple. This one is not uniform, and the shape of that distribution tells you exactly what the exam is testing: can you recognise AWS services in context, and can you reason about who is responsible for security.

The four domains and what each one asks

Domain 3 is a service-recognition test, not a config test

This is where most candidates lose confidence and most of that confidence is misplaced. You are not being asked how to configure anything. You are being asked to recognise which service does what, from a scenario described in business language.

The distinction matters because people who have never run AWS in production often score better than people who have, purely because they have not learned to over-think the questions. A typical Domain 3 item describes a scenario and offers four services. The right answer is usually the one whose stated purpose matches the requirement literally.

Watch the difference between the application integration services, which appear often: SQS and SNS for messaging, API Gateway for exposing an API, and EventBridge for event routing. And within management and governance, the distinction between CloudWatch (monitoring), CloudTrail (audit) and Trusted Advisor (recommendations).

Domain 2 is where the shared responsibility model decides the answer

Thirty per cent of the exam, and the shared responsibility model is the single most tested concept in it. The failure mode is consistent: a candidate attributes a responsibility to the wrong party.

The clean version to hold in your head: AWS secures the infrastructure, you secure what you put in it. That covers the classic IAM-versus-S3-versus-EC2 questions. Once you can place the boundary in a scenario, most of Domain 2 resolves itself.

Domain 4 is worth less than you think

Twelve per cent. It covers pricing models — On-Demand, Reserved, Savings Plans, Spot — plus Cost Explorer, Budgets and Consolidated Billing, then the support plan tiers and the Free Tier.

It is also the domain where being well-read is most tempting and least rewarded, because the items test which model applies to which workload shape, not the price list. If you spend a weekend memorising current AWS pricing you will have spent a weekend on 12% of the exam.

How to use the remaining time

Weight your revision by the table above

If you are spending three hours on pricing and one on the shared responsibility model, your hours are backwards. A 64/24/12 split is roughly the right ratio for Domain 3, Domain 1 and Domain 2 combined versus the rest.

Read the scenario, then the options

Multiple response questions on this exam commonly ask for two or three answers. Reading the options before the scenario is the fastest way to get them wrong.

Practise under the real clock

Ninety minutes for 65 questions is about 83 seconds per question, and that includes reading a scenario. If you are averaging over two minutes per question in practice, your time budget is the problem, not your knowledge.

Two things worth checking before you book

Language. The exam is offered in thirteen languages, but the Italian and German versions retire after 31 December 2026. If you meant to sit in one of those, the clock is different.

Cost. USD 100 at list, delivered at a Pearson VUE testing centre or online proctored. Prices vary by country, so check the local exam pricing rather than assuming 100 everywhere.

The AWS Cloud Practitioner certification page has the official blueprint with the topic lists, and the CLF-C02 question bank with explanations is weighted to the same domains. The difficulty breakdown for CLF-C02 shows which topics are hardest in practice, which is not always the heaviest domain.