CLF-C02 Cloud Concepts Practice Question
A financial services company is required by regulation to keep all customer transaction data on-premises. However, they want to use AWS to run analytics workloads on this data using Amazon EMR and Amazon S3 for temporary storage of intermediate results. They need a solution that connects their on-premises network to AWS securely and allows them to extend their on-premises environment into the AWS Cloud. Which cloud computing deployment model does this scenario BEST describe?
⚠ Common exam trap
Many candidates confuse 'hybrid cloud' with 'public cloud' because the company uses AWS services, but the key differentiator is the integration with on-premises infrastructure to meet regulatory data residency requirements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
The scenario describes a hybrid cloud deployment model, where the company maintains on-premises infrastructure for regulatory compliance (keeping customer transaction data on-premises) while leveraging AWS public cloud services (Amazon EMR and Amazon S3) for analytics workloads. The requirement to connect the on-premises network to AWS securely and extend the on-premises environment into the AWS Cloud is a defining characteristic of hybrid cloud, often implemented using AWS Direct Connect or VPN connections to create a unified network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
A public cloud deployment means all infrastructure is hosted by a third-party provider (like AWS) and accessible over the internet. In this scenario, the company retains data on-premises, so it is not a purely public cloud model.
When this WOULD be correct
A startup wants to run a web application entirely on AWS without any on-premises infrastructure, using services like EC2 and RDS, and has no regulatory data residency requirements. This describes a public cloud deployment.
- ✗
Private cloud
Why it's wrong here
A private cloud deployment dedicates the entire infrastructure stack to a single organization, typically hosted on-premises or in a separate, isolated environment, offering maximum control and compliance. In this scenario, the company uses AWS's public cloud platform for analytics, which means the infrastructure is not exclusively private. Since the workload is split between on-premises storage and AWS services, the environment is a hybrid model rather than a purely private cloud.
- ✓
Hybrid cloud
Why this is correct
A hybrid cloud deployment integrates on-premises infrastructure (acting as a private cloud) with public cloud services like AWS, using secure connections such as VPN or AWS Direct Connect. Here, the company keeps sensitive data on-premises to meet regulatory requirements while leveraging AWS's scalable analytics capabilities, which aligns perfectly with the definition. This model allows data and applications to be shared between environments, giving the company flexibility and compliance simultaneously.
- ✗
Community cloud
Why it's wrong here
A community cloud is shared by several organizations with similar compliance or security concerns, often managed by a third party. This scenario involves only one company using a mix of on-premises and public cloud, not a shared community infrastructure.
When this WOULD be correct
A question where multiple financial institutions must jointly meet the same regulatory requirements and share a cloud infrastructure for analytics, while keeping sensitive data on-premises, would best describe a community cloud.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
A hybrid cloud deployment integrates on-premises infrastructure (acting as a private cloud) with public cloud services like AWS, using secure connections such as VPN or AWS Direct Connect. Here, the company keeps sensitive data on-premises to meet regulatory requirements while leveraging AWS's scalable analytics capabilities, which aligns perfectly with the definition. This model allows data and applications to be shared between environments, giving the company flexibility and compliance simultaneously.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
The scenario requires keeping data on-premises while using AWS for analytics, which is a hybrid mix of on-premises and cloud. A public cloud would mean all resources are hosted by a third-party provider over the internet, not extending an on-premises environment.
★ When this WOULD be the correct answer
A startup wants to run a web application entirely on AWS without any on-premises infrastructure, using services like EC2 and RDS, and has no regulatory data residency requirements. This describes a public cloud deployment.
Why candidates choose this
Candidates may think that using AWS automatically means public cloud, overlooking the hybrid requirement of keeping sensitive data on-premises while leveraging cloud for analytics.
✗Community cloudWrong answer — click to see why▾
Why this is wrong here
A community cloud is shared by several organizations with common concerns (e.g., compliance), but this scenario involves a single company connecting its on-premises environment to AWS, which is a hybrid cloud, not a multi-organization shared infrastructure.
★ When this WOULD be the correct answer
A question where multiple financial institutions must jointly meet the same regulatory requirements and share a cloud infrastructure for analytics, while keeping sensitive data on-premises, would best describe a community cloud.
Why candidates choose this
Candidates may confuse 'community' with 'compliance' or think that regulatory requirements imply a community cloud, but the key is that only one company is involved, not a group of organizations.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
One of 988 original CLF-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.