CLF-C02 · Hands-on practice

CLF-C02 Hands-on Labs — practise in a simulated AWS Management Console

Learn it. Practise it. Make it stick.

32 practical tasks + 3 troubleshooting challenges. Familiar administration workflows, gradual hints and explanations. Independent simulation — no real tenant, device or cloud resources.

First five tasks are free, repeatable and have no expiry · No credit card required.

Access options

One-time payments, no automatic renewal. The first five tasks stay free either way.

CLF-C02 Hands-on Labs

€14.99

All labs for this course. 30 days from payment confirmation.

One-time payment · No automatic renewal.

Purchases are temporarily unavailable. Enjoy your 5 open tasks.

Best value

CLF-C02 Practice Exam + Hands-on Labs

€29.99

Save €3.99. Exam and all labs each get 60 days.

One-time payment · No automatic renewal.

Purchases are temporarily unavailable. Enjoy your 5 open tasks.

Your learning path

Work through the tasks in order — each one builds on the last.

LAB 01 · FREE

Tour the console and create your first S3 bucket

S3 · 6–8 min

Open lab →

LAB 02 · FREE

Name the benefit: six Fabrikam situations

Cloud benefits · 6–8 min

Open lab →

LAB 03 · FREE

Decide who is responsible: EC2, RDS and Lambda

Shared responsibility · 6–8 min

Open lab →

LAB 04 · FREE

Place the workload: Regions, AZs, edge, Local Zones, Wavelength

Global infrastructure · 8–10 min

Open lab →

LAB 05 · FREE

Build a VPC with public and private subnets

VPC · 12–15 min

Open lab →

LAB 06 · LOCKED

Match the Well-Architected pillar

Well-Architected · 6–8 min

Included with full CLF-C02 lab access

LAB 07 · LOCKED

Plan the migration: strategy and tool for each workload

Migration Hub · 8–10 min

Included with full CLF-C02 lab access

LAB 08 · LOCKED

Read the bill: fixed vs variable cost, rightsizing

Cost Explorer · 8–10 min

Included with full CLF-C02 lab access

LAB 09 · LOCKED

Create an IAM user, group and least-privilege policy, enable MFA

IAM · 12–15 min

Included with full CLF-C02 lab access

LAB 10 · LOCKED

Protect the root user

IAM · Account · 8–10 min

Included with full CLF-C02 lab access

LAB 11 · LOCKED

Encrypt at rest and in transit: KMS key and S3 default encryption

KMS · 10–12 min

Included with full CLF-C02 lab access

LAB 12 · LOCKED

Federate and share: IAM Identity Center, cross-account role, Secrets Manager

IAM Identity Center · 10–12 min

Included with full CLF-C02 lab access

LAB 13 · LOCKED

Pick the security service for the job

Security services · 8–10 min

Included with full CLF-C02 lab access

LAB 14 · LOCKED

Find the evidence: CloudTrail, Config, Artifact

CloudTrail · 10–12 min

Included with full CLF-C02 lab access

LAB 15 · LOCKED

Read Trusted Advisor and act on the security checks

Trusted Advisor · 8–10 min

Included with full CLF-C02 lab access

LAB 16 · LOCKED

Allow HTTPS only: security group and network ACL

VPC · Security groups · 10–12 min

Included with full CLF-C02 lab access

LAB 17 · LOCKED

Launch a small EC2 instance in the private subnet

EC2 · 12–15 min

Included with full CLF-C02 lab access

LAB 18 · LOCKED

Scale out with an Auto Scaling group behind a load balancer

EC2 · Auto Scaling · 12–15 min

Included with full CLF-C02 lab access

LAB 19 · LOCKED

Launch a managed database: RDS Multi-AZ with backups

RDS · 12–15 min

Included with full CLF-C02 lab access

LAB 20 · LOCKED

Choose compute: EC2 type, ECS/EKS, Fargate, Lambda, ASG, ELB

Compute chooser · 8–10 min

Included with full CLF-C02 lab access

LAB 21 · LOCKED

Choose the database and the migration tool

Database chooser · 8–10 min

Included with full CLF-C02 lab access

LAB 22 · LOCKED

Choose storage: S3 classes, EBS, EFS, FSx, Storage Gateway, Backup

Storage chooser · 8–10 min

Included with full CLF-C02 lab access

LAB 23 · LOCKED

Set an S3 lifecycle rule and read the storage classes

S3 · Lifecycle · 8–10 min

Included with full CLF-C02 lab access

LAB 24 · LOCKED

Point the domain at the app: Route 53 record and CloudFront distribution

Route 53 · 10–12 min

Included with full CLF-C02 lab access

LAB 25 · LOCKED

Alarm and notify: CloudWatch alarm to an SNS topic

CloudWatch · 10–12 min

Included with full CLF-C02 lab access

LAB 26 · LOCKED

Connect and access: VPN, Direct Connect, console, CLI, SDK, IaC

Access & connectivity · 8–10 min

Included with full CLF-C02 lab access

LAB 27 · LOCKED

Deploy the same bucket three ways: console, CloudShell (CLI), CloudFormation

CloudShell · 12–15 min

Included with full CLF-C02 lab access

LAB 28 · LOCKED

Pick the AI/ML, analytics, integration and other services

Service chooser · 10–12 min

Included with full CLF-C02 lab access

LAB 29 · LOCKED

Compare purchasing options for three workloads

EC2 pricing · 8–10 min

Included with full CLF-C02 lab access

LAB 30 · LOCKED

Estimate and commit: Pricing Calculator, Reserved Instance flexibility, RI sharing in Organizations

Pricing Calculator · 10–12 min

Included with full CLF-C02 lab access

LAB 31 · LOCKED

Create a budget, tag for cost allocation, read consolidated billing

Billing · Budgets · 12–15 min

Included with full CLF-C02 lab access

LAB 32 · LOCKED

Choose the Support plan and the right AWS resource

Support Center · 6–8 min

Included with full CLF-C02 lab access

Troubleshooting challenges

Inspect evidence, identify the cause, make a safe fix and verify it. 3 separate exercises, included with full CLF-C02 lab access.

The root user signed in last night

6–8 min

Locked · Full lab access required

An S3 bucket is public

6–8 min

Locked · Full lab access required

The bill tripled: Spot, On-Demand or forgotten?

6–8 min

Locked · Full lab access required

CLF-C02 hands-on labs — questions

Does CLF-C02 have labs, and can I practise them without a tenant?
Yes. ExamIT Lab gives you 32 guided CLF-C02 labs in a simulated AWS Management Console. Nothing is deployed to a real Microsoft tenant, subscription or device, so there is nothing to set up, nothing to pay Microsoft for, and nothing you can break.
Are the CLF-C02 labs free?
The first 5 labs in the learning order are free, repeatable and never expire — no credit card and no sign-up required to start. The full course of 32 labs plus 3 troubleshooting challenges is a one-time purchase with no subscription.
What does a CLF-C02 lab look like?
Each lab opens a realistic simulation of the AWS Management Console — S3, IAM, VPC, EC2, RDS, CloudWatch, Billing and Cost Management, plus cloud-concept decision and evidence tasks. You get a task brief, a guided or independent mode, progressive hints and a "Check configuration" button that grades the actual end state you left behind — not just the buttons you clicked.
Do the labs cover the current CLF-C02 exam outline?
The labs are mapped to the objectives in Microsoft's current CLF-C02 study guide, and we re-audit the mapping when Microsoft updates the skills measured. Combine them with the CLF-C02 practice test on ExamIT Lab for full coverage.
How is this different from a Microsoft Learn sandbox or a trial tenant?
A trial tenant gives you a blank environment and no feedback. These labs give you a pre-built scenario with fictional users, devices and policies, a clear goal, and automatic checking of your result — so you practise the exact administration workflows the CLF-C02 exam expects, in minutes, not hours of setup.

Access is per course. Sign in for account progress. After paid access expires, your saved progress is retained and the first five tasks remain free.