CLF-C02 · Hands-on practice

CLF-C02 Hands-on Labs — practise in a simulated AWS Management Console

Learn it. Practise it. Make it stick.

36 practical tasks + 3 troubleshooting challenges. Familiar administration workflows, gradual hints and explanations. Independent simulation — no real tenant, device or cloud resources.

First five tasks are free, repeatable and have no expiry · No credit card required.

Access options

One-time payments, no automatic renewal. The first five tasks stay free either way.

CLF-C02 Hands-on Labs

€14.99

All labs for this course. 30 days from payment confirmation.

One-time payment · No automatic renewal.

Purchases are temporarily unavailable. Enjoy your 5 open tasks.

Best value

CLF-C02 Practice Exam + Hands-on Labs

€29.99

Save €3.99. Exam and all labs each get 60 days.

One-time payment · No automatic renewal.

Purchases are temporarily unavailable. Enjoy your 5 open tasks.

Certificate of Completion

Finish the course. Prove it.

Complete all 36 labs and you can download a certificate of completion with your name, the skills you practised and a unique ID. Challenges are optional. Anyone can check it on a public verification page — and add it to LinkedIn in one click.

  • Not self-declared. Before issuing, our server re-runs the grader on every lab you saved, so a checkbox in your browser is not enough.
  • Verifiable. Every certificate has its own page at examitlab.com/verify/<ID>.
  • Honest. It certifies that you completed this course. It is independent training, not an official certification.

Sample certificate — name and ID are fictional.

Your learning path

Work through the tasks in order — each one builds on the last.

LAB 01 · FREE

Tour the console and create your first S3 bucket

S3 · 6–8 min

Open lab →

LAB 02 · FREE

Name the benefit: six Fabrikam situations

Cloud benefits · 6–8 min

Open lab →

LAB 03 · FREE

Decide who is responsible: EC2, RDS and Lambda

Shared responsibility · 6–8 min

Open lab →

LAB 04 · FREE

Place the workload: Regions, AZs, edge, Local Zones, Wavelength

Global infrastructure · 8–10 min

Open lab →

LAB 05 · FREE

Build a VPC with public and private subnets

VPC · 12–15 min

Open lab →

LAB 06 · LOCKED

Match the Well-Architected pillar

Well-Architected · 6–8 min

Included with full CLF-C02 lab access

LAB 07 · LOCKED

Plan the migration: strategy and tool for each workload

Migration Hub · 8–10 min

Included with full CLF-C02 lab access

LAB 08 · LOCKED

Read the bill: fixed vs variable cost, rightsizing

Cost Explorer · 8–10 min

Included with full CLF-C02 lab access

LAB 09 · LOCKED

Create an IAM user, group and least-privilege policy, enable MFA

IAM · 12–15 min

Included with full CLF-C02 lab access

LAB 10 · LOCKED

Protect the root user

IAM · Account · 8–10 min

Included with full CLF-C02 lab access

LAB 11 · LOCKED

Encrypt at rest and in transit: KMS key and S3 default encryption

KMS · 10–12 min

Included with full CLF-C02 lab access

LAB 12 · LOCKED

Federate and share: IAM Identity Center, cross-account role, Secrets Manager

IAM Identity Center · 10–12 min

Included with full CLF-C02 lab access

LAB 13 · LOCKED

Pick the security service for the job

Security services · 8–10 min

Included with full CLF-C02 lab access

LAB 14 · LOCKED

Protect data and identities: Macie, Detective, Network Firewall, Firewall Manager, Cognito, CloudHSM, RAM and Directory Service

Security services · 10–12 min

Included with full CLF-C02 lab access

LAB 15 · LOCKED

Find the evidence: CloudTrail, Config, Artifact

CloudTrail · 10–12 min

Included with full CLF-C02 lab access

LAB 16 · LOCKED

Read Trusted Advisor and act on the security checks

Trusted Advisor · 8–10 min

Included with full CLF-C02 lab access

LAB 17 · LOCKED

Allow HTTPS only: security group and network ACL

VPC · Security groups · 10–12 min

Included with full CLF-C02 lab access

LAB 18 · LOCKED

Launch a small EC2 instance in the private subnet

EC2 · 12–15 min

Included with full CLF-C02 lab access

LAB 19 · LOCKED

Scale out with an Auto Scaling group behind a load balancer

EC2 · Auto Scaling · 12–15 min

Included with full CLF-C02 lab access

LAB 20 · LOCKED

Launch a managed database: RDS Multi-AZ with backups

RDS · 12–15 min

Included with full CLF-C02 lab access

LAB 21 · LOCKED

Choose compute: EC2 type, ECS/EKS, Fargate, Lambda, ASG, ELB

Compute chooser · 8–10 min

Included with full CLF-C02 lab access

LAB 22 · LOCKED

Choose the database and the migration tool

Database chooser · 8–10 min

Included with full CLF-C02 lab access

LAB 23 · LOCKED

Choose storage: S3 classes, EBS, EFS, FSx, Storage Gateway, Backup

Storage chooser · 8–10 min

Included with full CLF-C02 lab access

LAB 24 · LOCKED

Set an S3 lifecycle rule and read the storage classes

S3 · Lifecycle · 8–10 min

Included with full CLF-C02 lab access

LAB 25 · LOCKED

Point the domain at the app: Route 53 record and CloudFront distribution

Route 53 · 10–12 min

Included with full CLF-C02 lab access

LAB 26 · LOCKED

Alarm and notify: CloudWatch alarm to an SNS topic

CloudWatch · 10–12 min

Included with full CLF-C02 lab access

LAB 27 · LOCKED

Connect and access: VPN, Direct Connect, console, CLI, SDK, IaC

Access & connectivity · 8–10 min

Included with full CLF-C02 lab access

LAB 28 · LOCKED

Deploy the same bucket three ways: console, CloudShell (CLI), CloudFormation

CloudShell · 12–15 min

Included with full CLF-C02 lab access

LAB 29 · LOCKED

Pick the AI/ML, analytics, integration and other services

Service chooser · 10–12 min

Included with full CLF-C02 lab access

LAB 30 · LOCKED

Match the AI/ML and analytics service to the task: Rekognition, Polly, Textract, Transcribe, Translate, Comprehend, EMR, MSK, OpenSearch, Redshift, Data Exchange

Service chooser · 10–12 min

Included with full CLF-C02 lab access

LAB 31 · LOCKED

Govern and operate at scale: Control Tower, Service Catalog, Systems Manager, Compute Optimizer, License Manager, Tag Editor

Management and governance · 10–12 min

Included with full CLF-C02 lab access

LAB 32 · LOCKED

Compare purchasing options for three workloads

EC2 pricing · 8–10 min

Included with full CLF-C02 lab access

LAB 33 · LOCKED

Estimate and commit: Pricing Calculator, Reserved Instance flexibility, RI sharing in Organizations

Pricing Calculator · 10–12 min

Included with full CLF-C02 lab access

LAB 34 · LOCKED

Create a budget, tag for cost allocation, read consolidated billing

Billing · Budgets · 12–15 min

Included with full CLF-C02 lab access

LAB 35 · LOCKED

Choose the Support plan and the right AWS resource

Support Center · 6–8 min

Included with full CLF-C02 lab access

LAB 36 · LOCKED

Stay informed and get help: Health Dashboard, abuse reports, Professional Services and Partners

AWS Health Dashboard · 10–12 min

Included with full CLF-C02 lab access

Troubleshooting challenges

Inspect evidence, identify the cause, make a safe fix and verify it. 3 separate exercises, included with full CLF-C02 lab access.

The root user signed in last night

6–8 min

Locked · Full lab access required

An S3 bucket is public

6–8 min

Locked · Full lab access required

The bill tripled: Spot, On-Demand or forgotten?

6–8 min

Locked · Full lab access required

CLF-C02 hands-on labs — questions

Can I practise CLF-C02 without an AWS account?
Yes. All 36 labs run in a simulated AWS Management Console. You can practise with the supplied resources without creating an AWS account or incurring AWS charges.
Are the CLF-C02 labs free?
The first 5 labs in the learning order are free, repeatable and never expire — no credit card and no sign-up required to start. The full course of 36 labs plus 3 troubleshooting challenges is a one-time purchase with no subscription.
What does a CLF-C02 lab look like?
Each lab opens a realistic simulation of the AWS Management Console — S3, IAM, VPC, EC2, RDS, CloudWatch, Billing and Cost Management, plus cloud-concept decision and evidence tasks. You get a task brief, a guided or independent mode, progressive hints and a "Check configuration" button that grades the actual end state you left behind — not just the buttons you clicked.
Do the labs cover the current CLF-C02 exam outline?
The labs practise cloud concepts, security and compliance, cloud technology and services, and billing, pricing and support. Use the official AWS CLF-C02 exam guide to review the objectives in each domain.
Is there a certificate at the end?
Yes. When all 36 labs are complete you can issue a certificate of completion in your account: a PDF with your name and a unique ID, an Add to LinkedIn link and a public verification page. Before issuing, the server re-runs the course grader on every lab you saved, so it reflects work you really did. It certifies completion of this course; it is independent training, not an official certification.
How does this compare with an AWS training account?
Each browser exercise supplies fictional resources, evidence and a repeatable starting state with automatic result checks. It supports the described operations; it cannot create AWS resources, execute arbitrary CLI commands or policy documents, change a real account or prove deployment. Use an AWS training account for operations outside the supported simulation.

Access is per course. Sign in for account progress. After paid access expires, your saved progress is retained and the first five tasks remain free.