CLF-C02 Cloud Concepts Practice Question
A hospital is evaluating a move of its patient records system to the AWS Cloud. The hospital's compliance officer is concerned that the underlying physical servers in the cloud are shared with other customers, which could potentially expose sensitive patient data. The hospital wants a clear explanation of how AWS prevents one customer from accessing another customer's data even though they reside on the same physical hardware. Which essential characteristic of cloud computing best describes the mechanism that achieves this isolation?
⚠ Common exam trap
Test-takers frequently confuse 'resource pooling' with security vulnerabilities, thinking shared hardware implies shared data, when in fact resource pooling is the very characteristic that enables secure multi-tenancy through hypervisor isolation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Resource pooling
Resource pooling is the correct answer because it describes how AWS multi-tenancy works: physical resources like servers and storage are pooled to serve multiple customers, but strict logical isolation is enforced through hypervisor-level virtualization. The hypervisor (e.g., Xen or Nitro) ensures each customer's virtual machines operate in separate memory spaces and cannot access another customer's data, even on the same physical host. This isolation is a fundamental design of cloud computing, not a security flaw.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
On-demand self-service
Why it's wrong here
On-demand self-service means a user can provision cloud services through a console, CLI, or API without waiting for a human administrator or contract negotiation. This is primarily an operational convenience that enables rapid development and reduces administrative overhead, but it does not create any data isolation boundary between customers. Because the self-service portal merely triggers infrastructure creation, it is unrelated to whether a cloud tenant can read another tenant's data on the same physical server.
When this WOULD be correct
A question asking which cloud characteristic allows a user to automatically provision and manage compute resources via a web portal without contacting the provider would have on-demand self-service as the correct answer.
- ✓
Resource pooling
Why this is correct
Resource pooling is the cloud characteristic where the provider's computing resources are pooled to serve multiple customers using a multi-tenant model. Virtualization provides strong logical isolation between customers, preventing data access across tenants. This directly addresses the compliance officer's concern about data security on shared hardware.
- ✗
Rapid elasticity
Why it's wrong here
Rapid elasticity is the cloud characteristic of automatically scaling resources up or down, often within minutes, to match current demand. While this ensures that a workload can get more CPU, memory, or storage when needed and release it when idle, it says nothing about how one customer's data is kept separate from another's. The compliance officer's worry about patient records on shared hardware is resolved by the hypervisor's logical isolation between virtual machines, not by the speed or flexibility with which those resources are allocated.
When this WOULD be correct
A question asks which cloud characteristic allows a company to automatically increase its compute capacity during a flash sale and decrease it afterward without manual intervention.
- ✗
Measured service
Why it's wrong here
Measured service refers to the metering and reporting of resource usage, typically by billing metrics like vCPU-hours, gigabytes stored, or network transfer, enabling pay-as-you-go billing and optimization. Although this gives customers visibility into their consumption and helps cloud providers enforce fair use, it does not affect the logical security boundaries protecting data in multi-tenant environments. A compliance officer's concern about tenant isolation on shared hardware is therefore not addressed by usage metering, which occurs at the account/billing level rather than at the compute/memory isolation level.
When this WOULD be correct
A company wants to understand how AWS charges for its services based on usage, such as per-hour or per-GB metrics. The correct answer would be measured service because it describes the pay-per-use billing model and resource monitoring capabilities.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓Resource poolingCorrect answer▾
Why this is correct
Resource pooling is the cloud characteristic where the provider's computing resources are pooled to serve multiple customers using a multi-tenant model. Virtualization provides strong logical isolation between customers, preventing data access across tenants. This directly addresses the compliance officer's concern about data security on shared hardware.
✗On-demand self-serviceWrong answer — click to see why▾
Why this is wrong here
On-demand self-service refers to the ability to provision computing resources without human interaction, not to the isolation of customer data on shared physical hardware.
★ When this WOULD be the correct answer
A question asking which cloud characteristic allows a user to automatically provision and manage compute resources via a web portal without contacting the provider would have on-demand self-service as the correct answer.
Why candidates choose this
Candidates may confuse the idea of 'self-service' with the notion that each customer has their own isolated environment, misunderstanding the term's actual meaning.
✗Rapid elasticityWrong answer — click to see why▾
Why this is wrong here
Rapid elasticity refers to the ability to quickly scale resources up or down based on demand, not to the isolation of customer data on shared physical hardware.
★ When this WOULD be the correct answer
A question asks which cloud characteristic allows a company to automatically increase its compute capacity during a flash sale and decrease it afterward without manual intervention.
Why candidates choose this
Candidates may confuse the concept of rapid scaling with the idea of isolating resources, thinking that fast provisioning somehow separates data, but elasticity is about speed of scaling, not security isolation.
✗Measured serviceWrong answer — click to see why▾
Why this is wrong here
Measured service refers to the metering and billing of cloud resource usage, not to the isolation of customer data on shared physical hardware. The question asks about preventing data exposure due to shared servers, which is addressed by resource pooling's multi-tenancy and isolation mechanisms.
★ When this WOULD be the correct answer
A company wants to understand how AWS charges for its services based on usage, such as per-hour or per-GB metrics. The correct answer would be measured service because it describes the pay-per-use billing model and resource monitoring capabilities.
Why candidates choose this
Candidates may confuse 'measured service' with security monitoring or assume that measurement implies control over data access, but it actually pertains to usage tracking and billing.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on CLF-C02
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A cloud provider uses shared physical infrastructure to serve many customers. Each customer's compute and storage resources are logically isolated and secure, but the underlying hardware is pooled across all customers. Which essential characteristic of cloud computing does this scenario BEST describe?
medium- A.On-demand self-service
- ✓ B.Resource pooling
- C.Broad network access
- D.Rapid elasticity
Why B: Resource pooling is the correct characteristic because the scenario describes a multi-tenant model where physical and virtual resources are dynamically assigned and reassigned according to consumer demand. The cloud provider's shared infrastructure (compute, storage, network) is pooled to serve multiple customers, with logical isolation ensuring each customer's data remains secure despite the shared underlying hardware. This directly matches the NIST SP 800-145 definition of resource pooling.
Variation 2. A company moves its infrastructure to AWS. The company's IT team notices that they have no control over which specific physical server their virtual machines run on, and they are unaware of the exact hardware location except at the regional level. The underlying physical resources are shared across multiple AWS customers. Which essential characteristic of cloud computing does this scenario BEST describe?
medium- A.On-demand self-service
- B.Broad network access
- ✓ C.Resource pooling
- D.Rapid elasticity
Why C: Resource pooling is the cloud characteristic where the provider's computing resources are pooled to serve multiple customers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to customer demand. The scenario describes the customer having no control over the exact physical server or hardware location beyond the regional level, which is the essence of resource pooling. This allows AWS to achieve economies of scale while abstracting the underlying hardware from the customer.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.