CLF-C02 Cloud Concepts Practice Question
A financial services company must keep customer financial records on-premises to comply with data residency regulations. The company wants to use AWS services such as Amazon SageMaker and Amazon Athena to run analytics on anonymized subsets of the data. The company establishes a dedicated AWS Direct Connect connection between its on-premises data center and its VPC, and uses AWS Storage Gateway to cache frequently accessed data locally while storing all data in Amazon S3. Which cloud deployment model does this architecture represent?
⚠ Common exam trap
A common mix-up: candidates confuse 'hybrid cloud' with 'private cloud' because the on-premises component is dedicated to one organization, but the use of AWS public cloud services (SageMaker, Athena, S3) over Direct Connect makes it a hybrid model, not a private cloud.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Hybrid cloud
This architecture combines on-premises infrastructure (customer data center with AWS Storage Gateway caching) with AWS cloud services (SageMaker, Athena, S3) connected via AWS Direct Connect, which is the defining characteristic of a hybrid cloud deployment. A hybrid cloud model integrates private on-premises resources with public cloud services, allowing data to remain on-premises for compliance while leveraging cloud analytics.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public cloud
Why it's wrong here
A public cloud deployment runs all workloads on resources owned and operated by a third-party cloud provider (like AWS) and accessed over the internet. In this scenario, the company still maintains on-premises infrastructure for data residency, so it is not purely public cloud.
When this WOULD be correct
A company runs all workloads on AWS without any on-premises infrastructure, using only AWS services for compute, storage, and analytics, with no dedicated connection to a local data center.
- ✗
Private cloud
Why it's wrong here
A private cloud deployment dedicates cloud resources exclusively to a single organization, either on-premises or hosted. While the on-premises portion could be considered a private cloud, the use of AWS services (which are multitenant) means the architecture is not entirely private cloud.
When this WOULD be correct
A company runs all its workloads on AWS using a VPC with no internet access, and all data remains within that VPC. The company does not have any on-premises infrastructure or connectivity to it. This would be a private cloud deployment on AWS.
- ✓
Hybrid cloud
Why this is correct
Hybrid cloud is the correct model. It uses a mix of on-premises private cloud resources and public cloud services (AWS) connected via networking (like Direct Connect). This allows the company to keep sensitive data on-premises while taking advantage of AWS analytics services.
- ✗
Community cloud
Why it's wrong here
A community cloud is shared by several organizations with common concerns (e.g., regulatory compliance, security). This scenario involves only one company using a combination of its own on-premises data center and AWS, not a community of organizations sharing infrastructure.
When this WOULD be correct
A question where multiple organizations with similar compliance needs (e.g., healthcare providers sharing patient data under HIPAA) jointly use a shared cloud infrastructure managed by a third party, with data residency and security requirements.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓Hybrid cloudCorrect answer▾
Why this is correct
Hybrid cloud is the correct model. It uses a mix of on-premises private cloud resources and public cloud services (AWS) connected via networking (like Direct Connect). This allows the company to keep sensitive data on-premises while taking advantage of AWS analytics services.
✗Public cloudWrong answer — click to see why▾
Why this is wrong here
The architecture uses both on-premises infrastructure and AWS services (SageMaker, Athena, S3) via Direct Connect and Storage Gateway, which is a hybrid cloud model, not purely public cloud.
★ When this WOULD be the correct answer
A company runs all workloads on AWS without any on-premises infrastructure, using only AWS services for compute, storage, and analytics, with no dedicated connection to a local data center.
Why candidates choose this
Candidates may mistakenly think that using AWS services like SageMaker and Athena implies a public cloud deployment, overlooking the on-premises component and the hybrid integration.
✗Private cloudWrong answer — click to see why▾
Why this is wrong here
A private cloud is dedicated to a single organization and typically hosted on-premises or in a provider's data center. In this scenario, the company uses AWS services (SageMaker, Athena) and stores data in S3, which are public cloud services, combined with on-premises resources via Direct Connect and Storage Gateway, making it a hybrid cloud, not a private cloud.
★ When this WOULD be the correct answer
A company runs all its workloads on AWS using a VPC with no internet access, and all data remains within that VPC. The company does not have any on-premises infrastructure or connectivity to it. This would be a private cloud deployment on AWS.
Why candidates choose this
Candidates may mistakenly think that using a dedicated connection (Direct Connect) and local caching (Storage Gateway) implies a private cloud, because these components create a private network link. However, the use of shared AWS services and S3 makes it hybrid, not private.
✗Community cloudWrong answer — click to see why▾
Why this is wrong here
Community cloud involves multiple organizations sharing infrastructure for a common purpose, but this scenario uses a single company's on-premises and AWS resources, not a shared multi-tenant environment.
★ When this WOULD be the correct answer
A question where multiple organizations with similar compliance needs (e.g., healthcare providers sharing patient data under HIPAA) jointly use a shared cloud infrastructure managed by a third party, with data residency and security requirements.
Why candidates choose this
Candidates may confuse 'community' with 'compliance' or think that data residency regulations imply a community of regulated entities, but the architecture is purely a single organization's hybrid setup.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.