CLF-C02 Cloud Concepts Practice Question
A financial institution has regulatory requirements to store sensitive customer data on-premises in its own data center. However, it wants to use AWS for compute-intensive analytics that need to access this data. The company plans to establish a dedicated, encrypted network connection between its data center and AWS. Which cloud deployment model does this scenario describe?
⚠ Common exam trap
Watch out — candidates often confuse 'hybrid cloud' with 'multi-cloud' or 'private cloud,' but hybrid cloud specifically requires a mix of on-premises and public cloud resources connected via a private network, not just any combination of cloud providers or exclusive use of a single cloud.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
This scenario describes a hybrid cloud deployment model because it combines on-premises infrastructure (the financial institution's own data center for storing sensitive customer data) with AWS public cloud resources (for compute-intensive analytics). The dedicated, encrypted network connection (such as AWS Direct Connect with IPSec or a VPN) securely bridges the two environments, allowing data to be accessed from AWS without being stored there, which meets regulatory requirements. Hybrid cloud is defined as a mixed computing environment where on-premises and public cloud resources are orchestrated together, often via a private network link.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
A pure public cloud deployment would run the entire workload—including data storage—on shared AWS infrastructure with no on-premises component. Here, the firm keeps sensitive data on-premises to meet regulatory requirements and only extends compute capacity to AWS via a dedicated encrypted link. That split between local data and cloud compute is the defining characteristic of hybrid cloud, not a purely public cloud model.
When this WOULD be correct
A company uses only AWS services (e.g., EC2, S3) with no on-premises infrastructure, and all data and applications reside in AWS. The question would ask: 'Which cloud deployment model uses resources owned and operated by a third-party provider and accessed over the internet?'
- ✗
Private cloud
Why it's wrong here
Incorrect. A private cloud is a cloud environment dedicated to a single organization, typically hosted on-premises or in a colocation facility. This scenario uses AWS, a public cloud provider, making it hybrid, not purely private.
When this WOULD be correct
A company wants to run all its workloads on AWS but needs to ensure that the infrastructure is not shared with other organizations due to compliance requirements. The correct answer would be 'Private cloud' if the question described using AWS Outposts or a dedicated VPC with no public internet access.
- ✓
Hybrid cloud
Why this is correct
Correct. Hybrid cloud is the integration of on-premises infrastructure (private cloud) with public cloud services. The company keeps sensitive data on-premises and extends compute capabilities to AWS, connected via a dedicated encrypted link, which is a classic hybrid cloud architecture.
- ✗
Multi-cloud
Why it's wrong here
Multi-cloud means deliberately using multiple public cloud providers (e.g., AWS, Azure, GCP) to avoid vendor lock-in or increase resilience. In this scenario, the firm uses only AWS as its public provider; the other half of the architecture is on-premises infrastructure, not a second public cloud. Because a dedicated encrypted link connects on-premises systems to a single public cloud, the deployment fits hybrid cloud, not multi-cloud.
When this WOULD be correct
A company uses AWS for compute and Azure for storage, with no on-premises data center. The question asks which model uses multiple public cloud providers.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
Correct. Hybrid cloud is the integration of on-premises infrastructure (private cloud) with public cloud services. The company keeps sensitive data on-premises and extends compute capabilities to AWS, connected via a dedicated encrypted link, which is a classic hybrid cloud architecture.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
The scenario involves a dedicated, encrypted connection between an on-premises data center and AWS, which is a hybrid cloud setup. Public cloud alone does not include on-premises infrastructure.
★ When this WOULD be the correct answer
A company uses only AWS services (e.g., EC2, S3) with no on-premises infrastructure, and all data and applications reside in AWS. The question would ask: 'Which cloud deployment model uses resources owned and operated by a third-party provider and accessed over the internet?'
Why candidates choose this
Candidates may think that because AWS is a public cloud provider, any use of AWS is public cloud, ignoring the hybrid aspect of connecting on-premises infrastructure.
✗Private cloudWrong answer — click to see why▾
Why this is wrong here
The scenario involves a hybrid setup where on-premises infrastructure is combined with AWS cloud services, not a private cloud that would be entirely dedicated to a single organization and typically hosted on-premises or in a provider's data center without public cloud integration.
★ When this WOULD be the correct answer
A company wants to run all its workloads on AWS but needs to ensure that the infrastructure is not shared with other organizations due to compliance requirements. The correct answer would be 'Private cloud' if the question described using AWS Outposts or a dedicated VPC with no public internet access.
Why candidates choose this
Candidates may confuse 'private cloud' with on-premises infrastructure or think that a dedicated encrypted connection implies a private cloud, not realizing that hybrid cloud specifically describes the combination of on-premises and public cloud resources.
✗Multi-cloudWrong answer — click to see why▾
Why this is wrong here
The scenario describes a hybrid cloud because it combines on-premises infrastructure with AWS cloud services. Multi-cloud involves using multiple public cloud providers, not a mix of on-premises and cloud.
★ When this WOULD be the correct answer
A company uses AWS for compute and Azure for storage, with no on-premises data center. The question asks which model uses multiple public cloud providers.
Why candidates choose this
Candidates may confuse hybrid cloud (on-premises + cloud) with multi-cloud (multiple public clouds), especially when the scenario involves a dedicated connection to AWS.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.